S_ID={0x8}}]}, 0x3c}}, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r4, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x5, 0x2, 0x10000, 0x1a}}}}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4c084) 15:35:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x0, 0x0, 0x1a}}}}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4c084) 15:35:24 executing program 3: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x7cb382, 0x0) 15:35:24 executing program 0: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r0, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x2, 0x10000, 0x1a}}}}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4c084) 15:35:24 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x66701, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r0, 0x80044dfd, &(0x7f00000000c0)) ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f0000000100)) 15:35:24 executing program 2: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x66701, 0x0) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x4800) 15:35:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4c084) 15:35:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x2, 0x10000, 0x1a}}}}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4c084) 15:35:24 executing program 1: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x66701, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x40002, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x80044dfb, &(0x7f0000000100)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r3, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0xd0, r3, 0x2c, 0x70bd2b, 0x25cfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x66}, {0x8, 0x13, 0x6d53}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x400}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0x9}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffffc}, {0x6, 0x11, 0xfffe}, {0x8, 0x13, 0x3f}, {0x5}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000240)) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/168, 0xa8}, {&(0x7f0000000180)=""/55, 0x37}], 0x2, &(0x7f00000000c0)=""/138, 0x8a}, 0x10040) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r4) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r5, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x5, 0x2, 0x10000, 0x1a}}}}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4c084) 15:35:24 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x66701, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r0, 0x80044dfd, &(0x7f00000000c0)) ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f0000000100)) 15:35:24 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x66701, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d00, &(0x7f0000000040)=0x7) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\f?', @ANYRES16=r1, @ANYBLOB="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"], 0x18c}, 0x1, 0x0, 0x0, 0x4004014}, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x40002, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1c}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x40080d1) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x40002, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r3, 0x80044dfb, &(0x7f0000000100)) ioctl$SOUND_MIXER_READ_STEREODEVS(r3, 0x80044dfb, &(0x7f0000000140)) ioctl$SOUND_MIXER_READ_VOLUME(r2, 0x80044d0f, &(0x7f0000000000)) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_ax25_SIOCDELRT(r4, 0x890c, &(0x7f0000000a80)={@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default]}) ioctl$SIOCAX25OPTRT(r4, 0x89e7, &(0x7f0000000080)={@null, @bcast, 0x2, 0x20}) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f00000005c0), 0x121100, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r5, 0x80304d65, &(0x7f0000000600)) 15:35:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x4c084) 15:35:24 executing program 2: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x66701, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x40002, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x80044dfb, &(0x7f0000000100)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r3, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x3c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x5, 0x2, 0x10000, 0x1a}}}}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4c084) 15:35:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x2, 0x10000, 0x1a}}}}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4c084) 15:35:24 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x66701, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r0, 0x80044dfd, &(0x7f00000000c0)) 15:35:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x2, 0x10000, 0x1a}}}}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4c084) 15:35:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x4c084) 15:35:24 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x66701, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(0xffffffffffffffff, 0x80044dfd, &(0x7f00000000c0)) 15:35:24 executing program 2: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x66701, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x40002, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x80044dfb, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r2, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x5, 0x2, 0x10000, 0x1a}}}}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4c084) 15:35:24 executing program 4: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x66701, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x40002, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x80044dfb, &(0x7f0000000100)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r3, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x3c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r5, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x5, 0x2, 0x10000, 0x1a}}}}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4c084) 15:35:24 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r0, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x2, 0x10000, 0x1a}}}}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4c084) 15:35:24 executing program 3: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x66701, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x4, 0x8001, 0x2, 0xa9f0, 0x2, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x5}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x14, 0x38, 0x2, 0x8, 0x6e2, r0, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x40) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x92843, 0x0) ioctl$mixer_OSS_GETVERSION(r1, 0x80044d76, &(0x7f0000000080)) 15:35:24 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x66701, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(0xffffffffffffffff, 0x80044dfd, &(0x7f00000000c0)) 15:35:24 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000180)='6\x00', 0x2) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x9, 0x0, "1f183aa781a598e2738633a78fa702c06bd48031ff186cbbd3da51c0f6c94af8"}) 15:35:24 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r0, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x2, 0x10000, 0x1a}}}}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4c084) 15:35:24 executing program 2: syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, "311d8306"}, 0x0, 0x1, @planes=0x0}) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000180)='6\x00', 0x2) 15:35:24 executing program 4: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x66701, 0xd00000000000000) 15:35:24 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x66701, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(0xffffffffffffffff, 0x80044dfd, &(0x7f00000000c0)) 15:35:24 executing program 3: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x66701, 0x0) socket$kcm(0x29, 0x5, 0x0) 15:35:24 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r0, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x2, 0x10000, 0x1a}}}}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4c084) 15:35:25 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r0, 0x80044dfd, &(0x7f00000000c0)) 15:35:25 executing program 4: ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x66701, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(0xffffffffffffffff, 0x80044dfd, &(0x7f00000000c0)) 15:35:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, 0x0, 0x4c084) 15:35:25 executing program 3: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)={0x6, 0xd86, 0x0, {0x7, @vbi={0x10000, 0x6, 0x5, 0x32525942, [0xdb84, 0x1000], [0x6, 0x31], 0x1}}, 0xfffffffa}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x66701, 0x0) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x392, 0x2, 0x4, 0x2, 0xfffffff7, {0x0, 0xea60}, {0x4, 0x8, 0x1, 0x7, 0x6e, 0x0, "a4a588c2"}, 0x3ff, 0x0, @planes=&(0x7f0000000100)={0x1ff, 0x1, @userptr=0x59b, 0x481}, 0x2}) 15:35:25 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r0, 0x80044dfd, &(0x7f00000000c0)) 15:35:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, 0x0, 0x4c084) 15:35:25 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r0, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x2, 0x10000, 0x1a}}}}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4c084) 15:35:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, 0x0, 0x4c084) 15:35:25 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r0, 0x80044dfd, &(0x7f00000000c0)) 15:35:25 executing program 3: openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x66701, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000240)=@mangle={'mangle\x00', 0x1f, 0x6, 0x498, 0x0, 0xd0, 0x330, 0x330, 0x198, 0x400, 0x400, 0x400, 0x400, 0x400, 0x6, &(0x7f0000000000), {[{{@ip={@remote, @private=0xa010102, 0xffffffff, 0xff000000, 'veth1_to_team\x00', 'bridge_slave_0\x00', {0xff}, {}, 0x84, 0x2, 0x46}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@remote, [0xff000000, 0xff000000, 0xff, 0xffffffff], 0x4e22, 0x4e23, 0x4e24, 0x4e22, 0x800, 0x2, 0xffffff80, 0x7, 0x1}}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0x100, 0x129, 0x1}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0x7}}}, {{@ip={@loopback, @private=0xa010100, 0xff0000ff, 0x0, 'veth0_to_batadv\x00', 'batadv0\x00', {}, {}, 0x5e, 0x2, 0x48}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x12}}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x6, 0x0, 0x4, 0x6, 0x0, 0x1], 0x2, 0x4}}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x8f}}}, {{@ip={@multicast1, @loopback, 0xffffff00, 0x0, 'ipvlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x62, 0x0, 0xa}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x1, 0x2, 0x0, 0x4, 0x1, 0x5], 0x1, 0x4}, {0xffffffffffffffff, [0x2, 0x5, 0x1, 0x3, 0x2, 0x5], 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f8) 15:35:25 executing program 2: syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, "311d8306"}, 0x0, 0x1, @planes=0x0}) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000180)='6\x00', 0x2) [ 1731.204814] ieee802154 phy0 wpan0: encryption failed: -22 [ 1731.210443] ieee802154 phy1 wpan1: encryption failed: -22 15:35:25 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r0, 0x80044dfd, &(0x7f00000000c0)) 15:35:25 executing program 1: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x66701, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x4, 0x8001, 0x2, 0xa9f0, 0x2, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x5}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x14, 0x38, 0x2, 0x8, 0x6e2, r0, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x40) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x92843, 0x0) ioctl$mixer_OSS_GETVERSION(r1, 0x80044d76, &(0x7f0000000080)) 15:35:25 executing program 4: syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00'}) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000a00000008000300", @ANYRES32=r1], 0x28}}, 0x0) 15:35:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, 0x0, 0x4c084) 15:35:25 executing program 3: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x66701, 0x0) r0 = socket(0x23, 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={r1}) 15:35:25 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r0, 0x80044dfd, &(0x7f00000000c0)) 15:35:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x4c084) 15:35:25 executing program 4: openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x66701, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000240)=@mangle={'mangle\x00', 0x1f, 0x6, 0x498, 0x0, 0xd0, 0x330, 0x330, 0x198, 0x400, 0x400, 0x400, 0x400, 0x400, 0x6, &(0x7f0000000000), {[{{@ip={@remote, @private=0xa010102, 0xffffffff, 0xff000000, 'veth1_to_team\x00', 'bridge_slave_0\x00', {0xff}, {}, 0x84, 0x2, 0x46}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@remote, [0xff000000, 0xff000000, 0xff, 0xffffffff], 0x4e22, 0x4e23, 0x4e24, 0x4e22, 0x800, 0x2, 0xffffff80, 0x7, 0x1}}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0x100, 0x129, 0x1}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0x7}}}, {{@ip={@loopback, @private=0xa010100, 0xff0000ff, 0x0, 'veth0_to_batadv\x00', 'batadv0\x00', {}, {}, 0x5e, 0x2, 0x48}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x12}}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x6, 0x0, 0x4, 0x6, 0x0, 0x1], 0x2, 0x4}}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x8f}}}, {{@ip={@multicast1, @loopback, 0xffffff00, 0x0, 'ipvlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x62, 0x0, 0xa}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x1, 0x2, 0x0, 0x4, 0x1, 0x5], 0x1, 0x4}, {0xffffffffffffffff, [0x2, 0x5, 0x1, 0x3, 0x2, 0x5], 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f8) 15:35:25 executing program 1: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 15:35:25 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r0, 0x80044dfd, &(0x7f00000000c0)) 15:35:25 executing program 3: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x66701, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000040)={'exec ', '/dev/adsp1\x00'}, 0x10) 15:35:25 executing program 2: syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00'}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000a00000008000300", @ANYRES32=r1], 0x28}}, 0x0) 15:35:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x4c084) 15:35:25 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, "311d8306"}, 0x0, 0x1, @planes=0x0}) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) write$sysctl(r2, &(0x7f0000000180)='6\x00', 0x2) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x9, 0x0, "1f183aa781a598e2738633a78fa702c06bd48031ff186cbbd3da51c0f6c94af8"}) 15:35:25 executing program 1: syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, "311d8306"}, 0x0, 0x1, @planes=0x0}) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000180)='6\x00', 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f00000000c0)={0x0, @bt={0x2, 0x10000, 0x0, 0x1, 0x3ff, 0x0, 0x4cbc0693, 0x5fa5, 0x20, 0x7, 0x2, 0x50c, 0xffffa60d, 0x4, 0x4, 0x10, {0x1, 0x6}, 0x6, 0x57}}) 15:35:25 executing program 5: openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(0xffffffffffffffff, 0x80044dfd, &(0x7f00000000c0)) 15:35:25 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x66701, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r1, 0xc0044dff, &(0x7f0000000040)=0xe8de) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x40002, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r2, 0x80044dfb, &(0x7f0000000100)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0x2040, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x40002, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r3, 0x80044dfb, &(0x7f0000000100)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="d800000003142000280700000000000000020073797a300000000008004100727865001400330076657468305f746f5f626174616476000900020073797a3200000000080041007369770014003300726f736530e6000000000000000000000009329100020073797a310000000008004100727865001400330076657468315f746f5f627269646765000900020073797a3200000000080041007369770014003300726f73653000000000000000000000000900020073797a31000000000800410072786500140033007663616e300000000000e95cd6cbf347589bf504000000"], 0xd8}, 0x1, 0x0, 0x0, 0x20800}, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000000180)) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000000240)) 15:35:26 executing program 5: openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(0xffffffffffffffff, 0x80044dfd, &(0x7f00000000c0)) 15:35:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x4c084) 15:35:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x4c084) 15:35:26 executing program 5: openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(0xffffffffffffffff, 0x80044dfd, &(0x7f00000000c0)) 15:35:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x4c084) 15:35:26 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r0, 0x80044dfd, 0x0) 15:35:26 executing program 2: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x66701, 0x700000000000000) 15:35:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x4c084) 15:35:26 executing program 4: syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00'}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000a00000008000300", @ANYRES32], 0x28}}, 0x0) 15:35:26 executing program 1: syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, "311d8306"}, 0x0, 0x1, @planes=0x0}) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000180)='6\x00', 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f00000000c0)={0x0, @bt={0x2, 0x10000, 0x0, 0x1, 0x3ff, 0x0, 0x4cbc0693, 0x5fa5, 0x20, 0x7, 0x2, 0x50c, 0xffffa60d, 0x4, 0x4, 0x10, {0x1, 0x6}, 0x6, 0x57}}) 15:35:26 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r0, 0x80044dfd, 0x0) 15:35:26 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x66701, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f0000000080)=0x10, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r0, 0x80304d65, &(0x7f0000000000)) 15:35:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x4c084) 15:35:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x4c084) [ 1732.445566] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 15:35:26 executing program 2: syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00'}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000a00000008000300", @ANYRES32], 0x28}}, 0x0) 15:35:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x2, 0x10000, 0x1a}}}}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4c084) 15:35:26 executing program 3: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x6aefc3, 0x0) 15:35:26 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r0, 0x80044dfd, 0x0) 15:35:26 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) 15:35:26 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) 15:35:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x2, 0x10000, 0x1a}}}}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4c084) [ 1732.617612] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 15:35:27 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x101, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x50000000, 0x7f, 0x8001, 0x0, 0x80}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000040)) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x9, 0x0, "1f183aa781a598e2738633a78fa702c06bd48031ff186cbbd3da51c0f6c94af8"}) 15:35:27 executing program 5: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x66705, 0x0) 15:35:27 executing program 2: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x66702, 0x0) 15:35:27 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9f99}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xfa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5ff}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20004000) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042abd7000fddbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="1400020077673100000000000000000000000000080007000700000808000700d7000000"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x66701, 0x0) 15:35:27 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) 15:35:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x2, 0x10000, 0x1a}}}}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4c084) 15:35:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x0, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x2, 0x10000, 0x1a}}}}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4c084) 15:35:27 executing program 4: ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) 15:35:27 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x101, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x50000000, 0x7f, 0x8001, 0x0, 0x80}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000040)) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x9, 0x0, "1f183aa781a598e2738633a78fa702c06bd48031ff186cbbd3da51c0f6c94af8"}) 15:35:27 executing program 5: r0 = syz_open_dev$video(&(0x7f00000000c0), 0x81, 0x0) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000000)) ioctl$VIDIOC_S_JPEGCOMP(r0, 0x408c563e, &(0x7f0000000180)={0xfffffffd, 0xe, 0x16, "ed9d0dfd9d8f05fd85a38fe8ca453f7fc72343fac83dfe6848884e8d972003c8b7b39bc00f032799d2a810b4367269e9d5606f91cb9024dfa9cd0526", 0x32, "2dc789e587062ba6a2b66136e0e53e16caf291818ae416c90029096823ba740720297c2c7c1ca9de36b81291d698b51946f1eaf0fa96b2d06d03f5df", 0x20}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000100)={0x8, 0x5, 0x4, 0x40, 0x10000, {r1, r2/1000+10000}, {0x3, 0x8, 0xff, 0x1, 0x4, 0x0, 'C_u^'}, 0x574e, 0x4, @offset=0x40, 0x9a, 0x0, 0xffffffffffffffff}) r4 = gettid() socket$kcm(0x29, 0x2, 0x0) r5 = syz_open_dev$dri(&(0x7f00000003c0), 0x8, 0x400000) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000400)={0x81, 0x5, {r4}, {}, 0x7fffffff, 0x1}) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f0000000440)={0x7f, 0xa7020, {r6}, {}, 0xff, 0xd339}) syz_open_procfs$namespace(r4, 0x0) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)={0xffffffff, 0xb, 0x4, 0x20, 0x1, {0x77359400}, {0x2, 0x8, 0x8, 0xf7, 0x9, 0x0, "ae5c561a"}, 0x7, 0x20f136737372157e, @fd, 0xffff, 0x0, r3}) r11 = syz_open_dev$video(&(0x7f0000000480), 0x5, 0x600000) ioctl$VIDIOC_TRY_FMT(r11, 0xc0d05640, &(0x7f00000004c0)={0x0, @pix={0x60e, 0x1, 0x7167081e, 0x2, 0x1, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x1, 0x1}}) ioctl$vim2m_VIDIOC_QUERYBUF(r7, 0xc0585609, &(0x7f0000000340)={0x100, 0x3, 0x4, 0x20, 0x2, {r8, r9/1000+10000}, {0x4, 0x8, 0x9, 0x9, 0xe8, 0x9, "7bf26867"}, 0xff, 0x1, @fd, 0x9, 0x0, r10}) sched_rr_get_interval(r4, &(0x7f0000000080)) 15:35:27 executing program 3: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x20a400, 0x0) 15:35:27 executing program 4: ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) 15:35:27 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x101, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x50000000, 0x7f, 0x8001, 0x0, 0x80}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000040)) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x9, 0x0, "1f183aa781a598e2738633a78fa702c06bd48031ff186cbbd3da51c0f6c94af8"}) 15:35:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x0, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x2, 0x10000, 0x1a}}}}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4c084) 15:35:27 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9f99}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xfa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5ff}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20004000) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042abd7000fddbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="1400020077673100000000000000000000000000080007000700000808000700d7000000"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x66701, 0x0) 15:35:27 executing program 3: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x448100, 0x0) 15:35:27 executing program 5: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0xfff, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}, 0x3}) 15:35:27 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x101, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x50000000, 0x7f, 0x8001, 0x0, 0x80}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000040)) 15:35:27 executing program 4: ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) 15:35:27 executing program 2: r0 = syz_open_dev$video(&(0x7f00000000c0), 0x4d, 0x0) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000000)) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000100)={0xfff, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}, 0x3}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)={0x2, 0xa, 0x4, 0x0, 0x3, {0x77359400}, {0x5, 0x2, 0xad, 0x5, 0x3, 0x6, "855d918a"}, 0x7fffffff, 0x2, @planes=&(0x7f0000000080)={0x1, 0x1000, @fd, 0x3}, 0x9}) 15:35:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x0, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x2, 0x10000, 0x1a}}}}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4c084) 15:35:27 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x101, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x50000000, 0x7f, 0x8001, 0x0, 0x80}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) 15:35:27 executing program 3: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_crypto(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=@get={0x100, 0x13, 0x200, 0x70bd26, 0x25dfdbfc, {{'drbg_pr_hmac_sha1\x00'}, '\x00', '\x00', 0x0, 0x2000}, [{0x8, 0x1, 0x80000001}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x8}, {0x8, 0x1, 0x3}]}, 0x100}}, 0x4000000) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x66701, 0x0) 15:35:27 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0xa, @sdr}}) 15:35:27 executing program 2: r0 = syz_open_dev$video(&(0x7f00000000c0), 0x4d, 0x0) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000000)) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000100)={0xfff, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}, 0x3}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)={0x2, 0xa, 0x4, 0x0, 0x3, {0x77359400}, {0x5, 0x2, 0xad, 0x5, 0x3, 0x6, "855d918a"}, 0x7fffffff, 0x2, @planes=&(0x7f0000000080)={0x1, 0x1000, @fd, 0x3}, 0x9}) 15:35:27 executing program 4: r0 = syz_open_dev$video(0x0, 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) 15:35:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x0, 0x10000, 0x1a}}}}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4c084) 15:35:27 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x101, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x50000000, 0x7f, 0x8001, 0x0, 0x80}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) 15:35:27 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0xa, @sdr}}) 15:35:27 executing program 2: r0 = syz_open_dev$video(&(0x7f00000000c0), 0x4d, 0x0) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000000)) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000100)={0xfff, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}, 0x3}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)={0x2, 0xa, 0x4, 0x0, 0x3, {0x77359400}, {0x5, 0x2, 0xad, 0x5, 0x3, 0x6, "855d918a"}, 0x7fffffff, 0x2, @planes=&(0x7f0000000080)={0x1, 0x1000, @fd, 0x3}, 0x9}) 15:35:27 executing program 4: r0 = syz_open_dev$video(0x0, 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) 15:35:27 executing program 3: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000500)={0x2, 0xb, 0x4, 0x8, 0x4, {0x77359400}, {0x1, 0xc, 0x1, 0x1, 0xff, 0x6, "0b9a5cad"}, 0xfff, 0x2, @planes=&(0x7f00000004c0)={0x3, 0x3f, @userptr=0xfb}, 0xfffeffff}) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000040)) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)={0x2, 0x0, 0x4, 0x4, 0x0, {r3, r4/1000+10000}, {0x1, 0x5, 0x81, 0x7, 0x2f, 0x4, "c6f495ea"}, 0x9, 0x1, @fd, 0x5, 0x0, r1}) r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_S_AUDOUT(r6, 0x40345632, &(0x7f00000001c0)={0x159bf49f, "b5c6a03999c40e71d44fb5ba5b718fd76eebb078d1f763e1f64319dad2eb2f24", 0x3, 0x1}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000240)) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r8, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xcc, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1bd}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0xffff0000}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xffe1}, {0x8, 0x13, 0x4}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x691}, {0x6}, {0x8, 0x13, 0x100}, {0x5, 0x14, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40040001}, 0x1) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000140)={0x1, 0x2, 0x4, 0x100000, 0xffffffff, {}, {0x1, 0x8, 0x2, 0x7d, 0x8, 0x5, "35208402"}, 0x9, 0x1, @userptr=0x1, 0x7b9, 0x0, r5}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x64240, 0x0) ioctl$VIDIOC_ENUMINPUT(r6, 0xc050561a, &(0x7f0000000280)={0x8, "c2889c4011bd093de03e2c6df2553a35c5deecad70aa6e3359d4ef67686a8297", 0x3, 0x2, 0x1, 0xff0000, 0x2000000, 0x8}) 15:35:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x0, 0x0, 0x1a}}}}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4c084) 15:35:27 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x101, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x50000000, 0x7f, 0x8001, 0x0, 0x80}) 15:35:27 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0xa, @sdr}}) 15:35:27 executing program 2: r0 = syz_open_dev$video(&(0x7f00000000c0), 0x4d, 0x0) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000000)) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000100)={0xfff, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}, 0x3}) 15:35:27 executing program 1: ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x101, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x50000000, 0x7f, 0x8001, 0x0, 0x80}) 15:35:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4c084) 15:35:27 executing program 4: r0 = syz_open_dev$video(0x0, 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) 15:35:27 executing program 3: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x52483, 0x0) 15:35:27 executing program 2: r0 = syz_open_dev$video(&(0x7f00000000c0), 0x4d, 0x0) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000000)) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000100)={0xfff, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}, 0x3}) 15:35:27 executing program 5: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0xa, @sdr}}) 15:35:28 executing program 4: syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) 15:35:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x4c084) 15:35:28 executing program 1: ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x101, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x50000000, 0x7f, 0x8001, 0x0, 0x80}) 15:35:28 executing program 3: ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f00000000c0)) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x66701, 0x0) r0 = syz_open_dev$video(&(0x7f0000000000), 0xfffffffffffffffe, 0x1833c2) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0x3, 0x8, '\x00', &(0x7f0000000040)=0x1f}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000180)) pkey_alloc(0x0, 0x1) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r4, @ANYBLOB="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"], 0xb4}, 0x1, 0x0, 0x0, 0x20000800}, 0x4800) 15:35:28 executing program 5: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0xa, @sdr}}) 15:35:28 executing program 2: r0 = syz_open_dev$video(&(0x7f00000000c0), 0x4d, 0x0) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000000)) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000100)={0xfff, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}, 0x3}) 15:35:28 executing program 4: syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) 15:35:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:28 executing program 1: ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x101, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x50000000, 0x7f, 0x8001, 0x0, 0x80}) 15:35:28 executing program 5: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0xa, @sdr}}) 15:35:28 executing program 2: r0 = syz_open_dev$video(&(0x7f00000000c0), 0x4d, 0x0) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000000)) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000100)={0xfff, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}, 0x3}) 15:35:28 executing program 3: ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f00000000c0)) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x66701, 0x0) r0 = syz_open_dev$video(&(0x7f0000000000), 0xfffffffffffffffe, 0x1833c2) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0x3, 0x8, '\x00', &(0x7f0000000040)=0x1f}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000180)) pkey_alloc(0x0, 0x1) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r4, @ANYBLOB="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"], 0xb4}, 0x1, 0x0, 0x0, 0x20000800}, 0x4800) 15:35:28 executing program 4: syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) 15:35:28 executing program 1: r0 = syz_open_dev$video(0x0, 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x101, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x50000000, 0x7f, 0x8001, 0x0, 0x80}) 15:35:28 executing program 0: ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f00000000c0)) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x66701, 0x0) r0 = syz_open_dev$video(&(0x7f0000000000), 0xfffffffffffffffe, 0x1833c2) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0x3, 0x8, '\x00', &(0x7f0000000040)=0x1f}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000180)) pkey_alloc(0x0, 0x1) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r4, @ANYBLOB="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"], 0xb4}, 0x1, 0x0, 0x0, 0x20000800}, 0x4800) 15:35:28 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0xa, @sdr}}) 15:35:28 executing program 2: syz_open_dev$video(&(0x7f00000000c0), 0x4d, 0x0) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0xfff, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}, 0x3}) 15:35:28 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) 15:35:28 executing program 3: ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f00000000c0)) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x66701, 0x0) r0 = syz_open_dev$video(&(0x7f0000000000), 0xfffffffffffffffe, 0x1833c2) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0x3, 0x8, '\x00', &(0x7f0000000040)=0x1f}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000180)) pkey_alloc(0x0, 0x1) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r4, @ANYBLOB="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"], 0xb4}, 0x1, 0x0, 0x0, 0x20000800}, 0x4800) 15:35:28 executing program 1: r0 = syz_open_dev$video(0x0, 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x101, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x50000000, 0x7f, 0x8001, 0x0, 0x80}) 15:35:28 executing program 0: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000500)={0x2, 0xb, 0x4, 0x8, 0x4, {0x77359400}, {0x1, 0xc, 0x1, 0x1, 0xff, 0x6, "0b9a5cad"}, 0xfff, 0x2, @planes=&(0x7f00000004c0)={0x3, 0x3f, @userptr=0xfb}, 0xfffeffff}) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000040)) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)={0x2, 0x0, 0x4, 0x4, 0x0, {r3, r4/1000+10000}, {0x1, 0x5, 0x81, 0x7, 0x2f, 0x4, "c6f495ea"}, 0x9, 0x1, @fd, 0x5, 0x0, r1}) r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_S_AUDOUT(r6, 0x40345632, &(0x7f00000001c0)={0x159bf49f, "b5c6a03999c40e71d44fb5ba5b718fd76eebb078d1f763e1f64319dad2eb2f24", 0x3, 0x1}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000240)) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r8, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xcc, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1bd}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0xffff0000}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xffe1}, {0x8, 0x13, 0x4}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x691}, {0x6}, {0x8, 0x13, 0x100}, {0x5, 0x14, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40040001}, 0x1) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000140)={0x1, 0x2, 0x4, 0x100000, 0xffffffff, {}, {0x1, 0x8, 0x2, 0x7d, 0x8, 0x5, "35208402"}, 0x9, 0x1, @userptr=0x1, 0x7b9, 0x0, r5}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x64240, 0x0) ioctl$VIDIOC_ENUMINPUT(r6, 0xc050561a, &(0x7f0000000280)={0x8, "c2889c4011bd093de03e2c6df2553a35c5deecad70aa6e3359d4ef67686a8297", 0x3, 0x2, 0x1, 0xff0000, 0x2000000, 0x8}) 15:35:28 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0xa, @sdr}}) 15:35:28 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0xfff, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}, 0x3}) 15:35:28 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) 15:35:28 executing program 3: ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f00000000c0)) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x66701, 0x0) r0 = syz_open_dev$video(&(0x7f0000000000), 0xfffffffffffffffe, 0x1833c2) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0x3, 0x8, '\x00', &(0x7f0000000040)=0x1f}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000180)) pkey_alloc(0x0, 0x1) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r4, @ANYBLOB="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"], 0xb4}, 0x1, 0x0, 0x0, 0x20000800}, 0x4800) 15:35:28 executing program 1: r0 = syz_open_dev$video(0x0, 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x101, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x50000000, 0x7f, 0x8001, 0x0, 0x80}) 15:35:28 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0xa, @sdr}}) 15:35:28 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0xa, @sdr}}) 15:35:28 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0xfff, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}, 0x3}) 15:35:28 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) 15:35:28 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x101, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x50000000, 0x7f, 0x8001, 0x0, 0x80}) 15:35:28 executing program 3 (fault-call:2 fault-nth:0): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:28 executing program 5: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0xa, @sdr}}) 15:35:28 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x0, 0x1, 0x4}) 15:35:28 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0xfff, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}, 0x3}) 15:35:28 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0xa, @sdr}}) 15:35:28 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x101, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x50000000, 0x7f, 0x8001, 0x0, 0x80}) [ 1734.759862] FAULT_INJECTION: forcing a failure. [ 1734.759862] name failslab, interval 1, probability 0, space 0, times 0 15:35:29 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x0, 0x1, 0x4}) 15:35:29 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x101, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x50000000, 0x7f, 0x8001, 0x0, 0x80}) [ 1734.841048] CPU: 0 PID: 8546 Comm: syz-executor.3 Not tainted 4.19.195-syzkaller #0 [ 1734.848880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1734.858335] Call Trace: [ 1734.861290] dump_stack+0x1fc/0x2ef [ 1734.864942] should_fail.cold+0xa/0xf [ 1734.868852] ? setup_fault_attr+0x200/0x200 [ 1734.873377] ? lock_acquire+0x170/0x3c0 [ 1734.878238] __should_failslab+0x115/0x180 [ 1734.883522] should_failslab+0x5/0x10 15:35:29 executing program 5: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0xa, @sdr}}) [ 1734.888073] kmem_cache_alloc_node+0x245/0x3b0 [ 1734.893209] __alloc_skb+0x71/0x560 [ 1734.896865] netlink_sendmsg+0x9ee/0xc40 [ 1734.901223] ? aa_af_perm+0x230/0x230 [ 1734.905123] ? nlmsg_notify+0x1a0/0x1a0 [ 1734.909118] ? kernel_recvmsg+0x220/0x220 [ 1734.913282] ? nlmsg_notify+0x1a0/0x1a0 [ 1734.917450] sock_sendmsg+0xc3/0x120 [ 1734.921180] ___sys_sendmsg+0x7bb/0x8e0 [ 1734.925173] ? check_preemption_disabled+0x41/0x280 [ 1734.930298] ? copy_msghdr_from_user+0x440/0x440 [ 1734.935600] ? __fget+0x32f/0x510 15:35:29 executing program 1: syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x101, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x50000000, 0x7f, 0x8001, 0x0, 0x80}) [ 1734.939074] ? lock_downgrade+0x720/0x720 [ 1734.943240] ? check_preemption_disabled+0x41/0x280 [ 1734.948300] ? check_preemption_disabled+0x41/0x280 [ 1734.953633] ? __fget+0x356/0x510 [ 1734.957381] ? do_dup2+0x450/0x450 [ 1734.960943] ? lock_downgrade+0x720/0x720 [ 1734.965388] ? vfs_write+0x3d7/0x540 [ 1734.969121] ? __fdget+0x1d0/0x230 [ 1734.972694] __x64_sys_sendmsg+0x132/0x220 [ 1734.976939] ? __sys_sendmsg+0x1b0/0x1b0 [ 1734.981180] ? vfs_write+0x393/0x540 [ 1734.984976] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe 15:35:29 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0xa, @sdr}}) [ 1734.990360] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1734.995587] ? do_syscall_64+0x21/0x620 [ 1734.999587] do_syscall_64+0xf9/0x620 [ 1735.003406] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1735.008954] RIP: 0033:0x4665d9 [ 1735.012601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 15:35:29 executing program 5: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0xa, @sdr}}) [ 1735.034611] RSP: 002b:00007fd6d720b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1735.043615] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1735.052710] RDX: 0000000000000000 RSI: 0000000020000640 RDI: 0000000000000003 [ 1735.061520] RBP: 00007fd6d720b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1735.069060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1735.076565] R13: 00007ffdee98f80f R14: 00007fd6d720b300 R15: 0000000000022000 15:35:29 executing program 3 (fault-call:2 fault-nth:1): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:29 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x0, 0x1, 0x4}) 15:35:29 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0xfff, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}, 0x3}) 15:35:29 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, 0x0) 15:35:29 executing program 1: syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x101, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x50000000, 0x7f, 0x8001, 0x0, 0x80}) 15:35:29 executing program 0: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0xa, @sdr}}) 15:35:29 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x0, 0x4}) [ 1735.256162] FAULT_INJECTION: forcing a failure. [ 1735.256162] name failslab, interval 1, probability 0, space 0, times 0 15:35:29 executing program 1: syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x101, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x50000000, 0x7f, 0x8001, 0x0, 0x80}) [ 1735.311897] CPU: 0 PID: 8586 Comm: syz-executor.3 Not tainted 4.19.195-syzkaller #0 [ 1735.320173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1735.329983] Call Trace: [ 1735.332703] dump_stack+0x1fc/0x2ef [ 1735.336447] should_fail.cold+0xa/0xf [ 1735.340489] ? setup_fault_attr+0x200/0x200 [ 1735.344856] ? lock_acquire+0x170/0x3c0 [ 1735.348859] __should_failslab+0x115/0x180 [ 1735.353305] should_failslab+0x5/0x10 [ 1735.357215] kmem_cache_alloc_node_trace+0x244/0x3b0 15:35:29 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, 0x0) 15:35:29 executing program 0: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0xa, @sdr}}) [ 1735.362344] __kmalloc_node_track_caller+0x38/0x70 [ 1735.367299] __alloc_skb+0xae/0x560 [ 1735.371038] netlink_sendmsg+0x9ee/0xc40 [ 1735.375123] ? aa_af_perm+0x230/0x230 [ 1735.378940] ? nlmsg_notify+0x1a0/0x1a0 [ 1735.383192] ? kernel_recvmsg+0x220/0x220 [ 1735.387801] ? nlmsg_notify+0x1a0/0x1a0 [ 1735.392120] sock_sendmsg+0xc3/0x120 [ 1735.396111] ___sys_sendmsg+0x7bb/0x8e0 [ 1735.400112] ? check_preemption_disabled+0x41/0x280 [ 1735.405374] ? copy_msghdr_from_user+0x440/0x440 [ 1735.410168] ? __fget+0x32f/0x510 [ 1735.413647] ? lock_downgrade+0x720/0x720 [ 1735.417813] ? check_preemption_disabled+0x41/0x280 [ 1735.422952] ? check_preemption_disabled+0x41/0x280 [ 1735.428162] ? __fget+0x356/0x510 [ 1735.431858] ? do_dup2+0x450/0x450 [ 1735.435952] ? lock_downgrade+0x720/0x720 [ 1735.440121] ? vfs_write+0x3d7/0x540 [ 1735.443991] ? __fdget+0x1d0/0x230 [ 1735.447638] __x64_sys_sendmsg+0x132/0x220 [ 1735.451895] ? __sys_sendmsg+0x1b0/0x1b0 [ 1735.455985] ? vfs_write+0x393/0x540 15:35:29 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, 0x0) 15:35:29 executing program 0: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0xa, @sdr}}) [ 1735.459807] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1735.465183] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1735.470211] ? do_syscall_64+0x21/0x620 [ 1735.474219] do_syscall_64+0xf9/0x620 [ 1735.479106] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1735.484574] RIP: 0033:0x4665d9 [ 1735.487825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1735.508215] RSP: 002b:00007fd6d720b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1735.515943] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1735.523569] RDX: 0000000000000000 RSI: 0000000020000640 RDI: 0000000000000003 [ 1735.530851] RBP: 00007fd6d720b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1735.539175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1735.546638] R13: 00007ffdee98f80f R14: 00007fd6d720b300 R15: 0000000000022000 15:35:29 executing program 3 (fault-call:2 fault-nth:2): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:29 executing program 2: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000100)={0xfff, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}, 0x3}) 15:35:29 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x0, 0x4}) 15:35:29 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:29 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) 15:35:29 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0xa, @sdr}}) 15:35:29 executing program 2: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000100)={0xfff, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}, 0x3}) [ 1735.676588] FAULT_INJECTION: forcing a failure. [ 1735.676588] name failslab, interval 1, probability 0, space 0, times 0 [ 1735.727107] CPU: 1 PID: 8619 Comm: syz-executor.3 Not tainted 4.19.195-syzkaller #0 [ 1735.734946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1735.744398] Call Trace: [ 1735.747010] dump_stack+0x1fc/0x2ef [ 1735.750986] should_fail.cold+0xa/0xf [ 1735.754823] ? setup_fault_attr+0x200/0x200 [ 1735.759256] ? lock_downgrade+0x720/0x720 [ 1735.763561] ? check_preemption_disabled+0x41/0x280 [ 1735.768692] __should_failslab+0x115/0x180 [ 1735.772952] should_failslab+0x5/0x10 [ 1735.776770] kmem_cache_alloc+0x3f/0x370 [ 1735.780903] skb_clone+0x151/0x3d0 [ 1735.784467] netlink_deliver_tap+0x955/0xb00 [ 1735.788896] netlink_unicast+0x545/0x690 [ 1735.792978] ? netlink_sendskb+0x110/0x110 [ 1735.797445] ? _copy_from_iter_full+0x229/0x7c0 [ 1735.802220] ? __phys_addr_symbol+0x2c/0x70 [ 1735.806562] ? __check_object_size+0x17b/0x3e0 [ 1735.811169] netlink_sendmsg+0x6bb/0xc40 [ 1735.815549] ? aa_af_perm+0x230/0x230 [ 1735.819456] ? nlmsg_notify+0x1a0/0x1a0 [ 1735.823634] ? kernel_recvmsg+0x220/0x220 [ 1735.828395] ? nlmsg_notify+0x1a0/0x1a0 [ 1735.832406] sock_sendmsg+0xc3/0x120 [ 1735.836254] ___sys_sendmsg+0x7bb/0x8e0 [ 1735.840287] ? check_preemption_disabled+0x41/0x280 [ 1735.845320] ? copy_msghdr_from_user+0x440/0x440 [ 1735.850190] ? __fget+0x32f/0x510 [ 1735.853679] ? lock_downgrade+0x720/0x720 [ 1735.857855] ? check_preemption_disabled+0x41/0x280 [ 1735.862942] ? check_preemption_disabled+0x41/0x280 [ 1735.868873] ? __fget+0x356/0x510 [ 1735.872433] ? do_dup2+0x450/0x450 [ 1735.876160] ? lock_downgrade+0x720/0x720 [ 1735.880412] ? vfs_write+0x3d7/0x540 [ 1735.884189] ? __fdget+0x1d0/0x230 [ 1735.887862] __x64_sys_sendmsg+0x132/0x220 [ 1735.892290] ? __sys_sendmsg+0x1b0/0x1b0 [ 1735.896474] ? vfs_write+0x393/0x540 [ 1735.900515] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1735.905925] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1735.911080] ? do_syscall_64+0x21/0x620 [ 1735.915171] do_syscall_64+0xf9/0x620 [ 1735.919167] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1735.924473] RIP: 0033:0x4665d9 [ 1735.927768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1735.946935] RSP: 002b:00007fd6d720b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1735.954856] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1735.962755] RDX: 0000000000000000 RSI: 0000000020000640 RDI: 0000000000000003 [ 1735.970301] RBP: 00007fd6d720b1d0 R08: 0000000000000000 R09: 0000000000000000 15:35:29 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x0, 0x4}) 15:35:29 executing program 2: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000100)={0xfff, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}, 0x3}) 15:35:30 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1}) 15:35:30 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 15:35:30 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1}) [ 1735.977669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1735.985782] R13: 00007ffdee98f80f R14: 00007fd6d720b300 R15: 0000000000022000 15:35:30 executing program 3 (fault-call:2 fault-nth:3): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:30 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 15:35:30 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1}) 15:35:30 executing program 5: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 15:35:30 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0xa, @sdr}}) 15:35:30 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) 15:35:30 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 15:35:30 executing program 4 (fault-call:1 fault-nth:0): r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) 15:35:30 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0xa, @sdr}}) 15:35:30 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) [ 1736.122248] FAULT_INJECTION: forcing a failure. [ 1736.122248] name failslab, interval 1, probability 0, space 0, times 0 15:35:30 executing program 5 (fault-call:1 fault-nth:0): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) [ 1736.206527] CPU: 1 PID: 8659 Comm: syz-executor.3 Not tainted 4.19.195-syzkaller #0 [ 1736.214356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1736.224847] Call Trace: [ 1736.227486] dump_stack+0x1fc/0x2ef [ 1736.231130] should_fail.cold+0xa/0xf [ 1736.234962] ? setup_fault_attr+0x200/0x200 [ 1736.239302] ? lock_acquire+0x170/0x3c0 [ 1736.243295] __should_failslab+0x115/0x180 [ 1736.247547] should_failslab+0x5/0x10 [ 1736.251363] kmem_cache_alloc_node+0x245/0x3b0 [ 1736.255965] __alloc_skb+0x71/0x560 [ 1736.259608] tipc_nl_compat_dumpit+0x159/0x7f0 [ 1736.264203] tipc_nl_compat_recv+0x57e/0xb40 [ 1736.268626] ? tipc_nl_compat_dumpit+0x7f0/0x7f0 [ 1736.273398] ? tipc_nl_compat_name_table_dump+0x880/0x880 [ 1736.279222] ? tipc_nametbl_stop+0x990/0x990 [ 1736.283835] ? __tipc_nl_compat_publ_dump+0x2a0/0x2a0 [ 1736.289387] ? debug_check_no_obj_freed+0x201/0x490 [ 1736.294527] ? check_preemption_disabled+0x41/0x280 [ 1736.299576] ? lock_acquire+0x170/0x3c0 [ 1736.303567] ? genl_rcv_msg+0x12f/0x160 [ 1736.307561] genl_family_rcv_msg+0x642/0xc40 [ 1736.311991] ? genl_rcv+0x40/0x40 [ 1736.315458] ? genl_rcv_msg+0x12f/0x160 [ 1736.319451] ? mutex_trylock+0x1a0/0x1a0 [ 1736.323539] ? __radix_tree_lookup+0x216/0x370 [ 1736.328134] genl_rcv_msg+0xbf/0x160 [ 1736.331859] netlink_rcv_skb+0x160/0x440 [ 1736.335941] ? genl_family_rcv_msg+0xc40/0xc40 [ 1736.340564] ? netlink_ack+0xae0/0xae0 [ 1736.344461] ? genl_rcv+0x15/0x40 [ 1736.347928] genl_rcv+0x24/0x40 [ 1736.351390] netlink_unicast+0x4d5/0x690 [ 1736.355468] ? netlink_sendskb+0x110/0x110 [ 1736.359798] ? _copy_from_iter_full+0x229/0x7c0 [ 1736.364482] ? __phys_addr_symbol+0x2c/0x70 [ 1736.368816] ? __check_object_size+0x17b/0x3e0 [ 1736.373530] netlink_sendmsg+0x6bb/0xc40 [ 1736.377602] ? aa_af_perm+0x230/0x230 [ 1736.381398] ? nlmsg_notify+0x1a0/0x1a0 [ 1736.385355] ? kernel_recvmsg+0x220/0x220 [ 1736.389490] ? nlmsg_notify+0x1a0/0x1a0 [ 1736.393452] sock_sendmsg+0xc3/0x120 [ 1736.397239] ___sys_sendmsg+0x7bb/0x8e0 [ 1736.401238] ? check_preemption_disabled+0x41/0x280 [ 1736.406261] ? copy_msghdr_from_user+0x440/0x440 [ 1736.411101] ? __fget+0x32f/0x510 [ 1736.414551] ? lock_downgrade+0x720/0x720 [ 1736.418808] ? check_preemption_disabled+0x41/0x280 [ 1736.424290] ? check_preemption_disabled+0x41/0x280 [ 1736.429304] ? __fget+0x356/0x510 [ 1736.432748] ? do_dup2+0x450/0x450 [ 1736.436333] ? lock_downgrade+0x720/0x720 [ 1736.440474] ? vfs_write+0x3d7/0x540 [ 1736.444282] ? __fdget+0x1d0/0x230 [ 1736.447821] __x64_sys_sendmsg+0x132/0x220 [ 1736.452061] ? __sys_sendmsg+0x1b0/0x1b0 [ 1736.456126] ? vfs_write+0x393/0x540 [ 1736.459942] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1736.465306] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1736.470378] ? do_syscall_64+0x21/0x620 [ 1736.474451] do_syscall_64+0xf9/0x620 [ 1736.478344] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1736.483539] RIP: 0033:0x4665d9 [ 1736.486756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 15:35:30 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}, 0x3}) [ 1736.505670] RSP: 002b:00007fd6d720b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1736.513386] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1736.520641] RDX: 0000000000000000 RSI: 0000000020000640 RDI: 0000000000000003 [ 1736.527913] RBP: 00007fd6d720b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1736.535781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1736.543037] R13: 00007ffdee98f80f R14: 00007fd6d720b300 R15: 0000000000022000 15:35:30 executing program 3 (fault-call:2 fault-nth:4): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:30 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) 15:35:30 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:30 executing program 0: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0xa, @sdr}}) 15:35:30 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x0, 0x101, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x50000000, 0x7f, 0x8001, 0x0, 0x80}) 15:35:30 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x0, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}, 0x3}) [ 1736.622751] FAULT_INJECTION: forcing a failure. [ 1736.622751] name failslab, interval 1, probability 0, space 0, times 0 [ 1736.671306] CPU: 1 PID: 8685 Comm: syz-executor.3 Not tainted 4.19.195-syzkaller #0 [ 1736.679137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1736.688844] Call Trace: [ 1736.691455] dump_stack+0x1fc/0x2ef [ 1736.696166] should_fail.cold+0xa/0xf [ 1736.700250] ? setup_fault_attr+0x200/0x200 [ 1736.704698] ? lock_acquire+0x170/0x3c0 [ 1736.708806] __should_failslab+0x115/0x180 [ 1736.713072] should_failslab+0x5/0x10 [ 1736.716900] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 1736.722260] __kmalloc_node_track_caller+0x38/0x70 [ 1736.727294] __alloc_skb+0xae/0x560 [ 1736.730988] tipc_nl_compat_dumpit+0x159/0x7f0 [ 1736.735871] tipc_nl_compat_recv+0x57e/0xb40 [ 1736.740297] ? tipc_nl_compat_dumpit+0x7f0/0x7f0 [ 1736.745068] ? tipc_nl_compat_name_table_dump+0x880/0x880 [ 1736.750786] ? tipc_nametbl_stop+0x990/0x990 [ 1736.755213] ? __tipc_nl_compat_publ_dump+0x2a0/0x2a0 [ 1736.760416] ? debug_check_no_obj_freed+0x201/0x490 [ 1736.765535] ? check_preemption_disabled+0x41/0x280 [ 1736.770570] ? lock_acquire+0x170/0x3c0 [ 1736.774678] ? genl_rcv_msg+0x12f/0x160 [ 1736.778672] genl_family_rcv_msg+0x642/0xc40 [ 1736.783112] ? genl_rcv+0x40/0x40 [ 1736.787098] ? genl_rcv_msg+0x12f/0x160 [ 1736.791086] ? mutex_trylock+0x1a0/0x1a0 [ 1736.795181] ? __radix_tree_lookup+0x216/0x370 [ 1736.799792] genl_rcv_msg+0xbf/0x160 [ 1736.803518] netlink_rcv_skb+0x160/0x440 [ 1736.807623] ? genl_family_rcv_msg+0xc40/0xc40 [ 1736.812224] ? netlink_ack+0xae0/0xae0 [ 1736.816299] ? genl_rcv+0x15/0x40 [ 1736.819787] genl_rcv+0x24/0x40 [ 1736.823070] netlink_unicast+0x4d5/0x690 [ 1736.827142] ? netlink_sendskb+0x110/0x110 [ 1736.831413] ? _copy_from_iter_full+0x229/0x7c0 [ 1736.836093] ? __phys_addr_symbol+0x2c/0x70 [ 1736.840772] ? __check_object_size+0x17b/0x3e0 [ 1736.845407] netlink_sendmsg+0x6bb/0xc40 [ 1736.849476] ? aa_af_perm+0x230/0x230 [ 1736.853280] ? nlmsg_notify+0x1a0/0x1a0 [ 1736.857372] ? kernel_recvmsg+0x220/0x220 [ 1736.861559] ? nlmsg_notify+0x1a0/0x1a0 [ 1736.865547] sock_sendmsg+0xc3/0x120 [ 1736.869273] ___sys_sendmsg+0x7bb/0x8e0 [ 1736.873264] ? check_preemption_disabled+0x41/0x280 [ 1736.878298] ? copy_msghdr_from_user+0x440/0x440 [ 1736.883187] ? __fget+0x32f/0x510 [ 1736.886652] ? lock_downgrade+0x720/0x720 [ 1736.890899] ? check_preemption_disabled+0x41/0x280 [ 1736.895937] ? check_preemption_disabled+0x41/0x280 [ 1736.900971] ? __fget+0x356/0x510 [ 1736.904558] ? do_dup2+0x450/0x450 [ 1736.908112] ? lock_downgrade+0x720/0x720 [ 1736.912283] ? vfs_write+0x3d7/0x540 [ 1736.916143] ? __fdget+0x1d0/0x230 [ 1736.919700] __x64_sys_sendmsg+0x132/0x220 [ 1736.923945] ? __sys_sendmsg+0x1b0/0x1b0 [ 1736.928016] ? vfs_write+0x393/0x540 [ 1736.931760] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1736.937145] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1736.942164] ? do_syscall_64+0x21/0x620 [ 1736.946139] do_syscall_64+0xf9/0x620 [ 1736.949938] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1736.955207] RIP: 0033:0x4665d9 15:35:31 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x2, 0x803) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x200, 0x0, 0x2}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f00000001c0)={0x6, 0x9, 0x3}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000000c0)={0x94b1, 0x1, 0x4003, 0x400, 0x6, 0x19, 0x4}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000000040)}) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x105800, 0x0) ioctl$mixer_OSS_GETVERSION(r1, 0x80044d76, &(0x7f0000000180)) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000040)={0x4, 0x5, 0x0, 0x7, 0xffffffc0, 0x5, 0x4e}) 15:35:31 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x2, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:31 executing program 0: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0xa, @sdr}}) 15:35:31 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x0, 0x101, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x50000000, 0x7f, 0x8001, 0x0, 0x80}) 15:35:31 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x0, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}, 0x3}) [ 1736.958417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1736.977918] RSP: 002b:00007fd6d720b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1736.985784] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1736.993384] RDX: 0000000000000000 RSI: 0000000020000640 RDI: 0000000000000003 [ 1737.000633] RBP: 00007fd6d720b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1737.007972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1737.015228] R13: 00007ffdee98f80f R14: 00007fd6d720b300 R15: 0000000000022000 15:35:31 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x5421, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:31 executing program 3 (fault-call:2 fault-nth:5): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:31 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x5450, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:31 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x0, 0x101, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x50000000, 0x7f, 0x8001, 0x0, 0x80}) 15:35:31 executing program 0: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0xa, @sdr}}) 15:35:31 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x0, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}, 0x3}) 15:35:31 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000280)={0x1, 0x1, 0x3, {0xb, @win={{0x3, 0x8, 0x3f, 0x1b}, 0x9, 0x3ff80000, &(0x7f0000000080)={{0x9, 0x0, 0x1, 0xffffff01}, &(0x7f0000000040)={{0x80000000, 0x8, 0x0, 0x8}}}, 0xffffffc0, &(0x7f00000000c0)="e209aaab6df8ff454a7e0901f55091a4af59e81f3949bcedbe60371661d9fcdc96925094cddafc1d91beb46a5b9744f59c71e41ce04bb046d1e5e69fafa7d17f1c914fedfc30a5b6ec934d26bac9e394fd10e0b7de6d432d4e981e141e272d2cec711caedfc68612292ed55462dae0588a9b6e41d557dcc39dbafc899a1dfd4f6ac59f2766077002ac7930c91a5674ec4473a00732ca68037e190eaea31d2ea07e5588fdad1cf6c6c910f980d725f3ed13be3f21d1c8c36f2217cc4892c583eaf5fe", 0x2}}, 0x8}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) 15:35:31 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, 0x0) 15:35:31 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x5451, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:31 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x50000000, 0x7f, 0x8001, 0x0, 0x80}) [ 1737.274647] FAULT_INJECTION: forcing a failure. [ 1737.274647] name failslab, interval 1, probability 0, space 0, times 0 [ 1737.339593] CPU: 1 PID: 8739 Comm: syz-executor.3 Not tainted 4.19.195-syzkaller #0 [ 1737.347419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1737.356865] Call Trace: [ 1737.359481] dump_stack+0x1fc/0x2ef [ 1737.363129] should_fail.cold+0xa/0xf [ 1737.366954] ? setup_fault_attr+0x200/0x200 [ 1737.371385] ? lock_acquire+0x170/0x3c0 [ 1737.375382] __should_failslab+0x115/0x180 [ 1737.379631] should_failslab+0x5/0x10 [ 1737.383438] kmem_cache_alloc_node+0x245/0x3b0 [ 1737.388037] __alloc_skb+0x71/0x560 [ 1737.391675] ? tipc_nl_compat_name_table_dump+0x880/0x880 [ 1737.397229] tipc_nl_compat_dumpit+0x28e/0x7f0 [ 1737.401832] tipc_nl_compat_recv+0x57e/0xb40 [ 1737.406258] ? tipc_nl_compat_dumpit+0x7f0/0x7f0 [ 1737.411031] ? tipc_nl_compat_name_table_dump+0x880/0x880 [ 1737.416580] ? tipc_nametbl_stop+0x990/0x990 [ 1737.421006] ? __tipc_nl_compat_publ_dump+0x2a0/0x2a0 [ 1737.426214] ? debug_check_no_obj_freed+0x201/0x490 [ 1737.436204] ? check_preemption_disabled+0x41/0x280 [ 1737.441252] ? lock_acquire+0x170/0x3c0 [ 1737.445242] ? genl_rcv_msg+0x12f/0x160 [ 1737.449353] genl_family_rcv_msg+0x642/0xc40 [ 1737.453786] ? genl_rcv+0x40/0x40 [ 1737.457256] ? genl_rcv_msg+0x12f/0x160 [ 1737.461247] ? mutex_trylock+0x1a0/0x1a0 [ 1737.465336] ? __radix_tree_lookup+0x216/0x370 [ 1737.469949] genl_rcv_msg+0xbf/0x160 [ 1737.473685] netlink_rcv_skb+0x160/0x440 [ 1737.477771] ? genl_family_rcv_msg+0xc40/0xc40 [ 1737.482978] ? netlink_ack+0xae0/0xae0 [ 1737.486877] ? genl_rcv+0x15/0x40 [ 1737.490437] genl_rcv+0x24/0x40 [ 1737.493727] netlink_unicast+0x4d5/0x690 [ 1737.497805] ? netlink_sendskb+0x110/0x110 [ 1737.502051] ? _copy_from_iter_full+0x229/0x7c0 [ 1737.506737] ? __phys_addr_symbol+0x2c/0x70 [ 1737.511074] ? __check_object_size+0x17b/0x3e0 [ 1737.515670] netlink_sendmsg+0x6bb/0xc40 [ 1737.519753] ? aa_af_perm+0x230/0x230 [ 1737.523911] ? nlmsg_notify+0x1a0/0x1a0 [ 1737.527897] ? kernel_recvmsg+0x220/0x220 [ 1737.532065] ? nlmsg_notify+0x1a0/0x1a0 [ 1737.536058] sock_sendmsg+0xc3/0x120 [ 1737.539821] ___sys_sendmsg+0x7bb/0x8e0 [ 1737.543904] ? check_preemption_disabled+0x41/0x280 [ 1737.549040] ? copy_msghdr_from_user+0x440/0x440 [ 1737.553814] ? __fget+0x32f/0x510 [ 1737.557296] ? lock_downgrade+0x720/0x720 [ 1737.561473] ? check_preemption_disabled+0x41/0x280 [ 1737.566507] ? check_preemption_disabled+0x41/0x280 [ 1737.571638] ? __fget+0x356/0x510 [ 1737.575226] ? do_dup2+0x450/0x450 [ 1737.578781] ? lock_downgrade+0x720/0x720 [ 1737.582946] ? vfs_write+0x3d7/0x540 [ 1737.586711] ? __fdget+0x1d0/0x230 15:35:31 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x0, 0x7f, 0x8001, 0x0, 0x80}) 15:35:31 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, 0x0) 15:35:31 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x0, 0x0, 0x8001, 0x0, 0x80}) [ 1737.590268] __x64_sys_sendmsg+0x132/0x220 [ 1737.594656] ? __sys_sendmsg+0x1b0/0x1b0 [ 1737.598725] ? vfs_write+0x393/0x540 [ 1737.602461] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1737.607845] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1737.612874] ? do_syscall_64+0x21/0x620 [ 1737.616961] do_syscall_64+0xf9/0x620 [ 1737.620779] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1737.625975] RIP: 0033:0x4665d9 [ 1737.629178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1737.648175] RSP: 002b:00007fd6d720b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1737.655918] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1737.663409] RDX: 0000000000000000 RSI: 0000000020000640 RDI: 0000000000000003 [ 1737.670668] RBP: 00007fd6d720b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1737.677947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1737.685205] R13: 00007ffdee98f80f R14: 00007fd6d720b300 R15: 0000000000022000 15:35:31 executing program 3 (fault-call:2 fault-nth:6): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:31 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, 0x0) 15:35:31 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x0, 0x0, 0x0, 0x0, 0x80}) 15:35:31 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x5452, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:31 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x0, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}, 0x3}) 15:35:31 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000040)={0x3, 0x3ff, 0x1}) 15:35:32 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) 15:35:32 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:32 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x0, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}, 0x3}) [ 1737.835516] FAULT_INJECTION: forcing a failure. [ 1737.835516] name failslab, interval 1, probability 0, space 0, times 0 15:35:32 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x5460, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) [ 1737.918772] CPU: 0 PID: 8788 Comm: syz-executor.3 Not tainted 4.19.195-syzkaller #0 [ 1737.926724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1737.936257] Call Trace: [ 1737.938858] dump_stack+0x1fc/0x2ef [ 1737.942544] should_fail.cold+0xa/0xf [ 1737.946449] ? setup_fault_attr+0x200/0x200 [ 1737.950872] ? lock_acquire+0x170/0x3c0 [ 1737.954910] __should_failslab+0x115/0x180 [ 1737.959251] should_failslab+0x5/0x10 [ 1737.963074] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 1737.968281] __kmalloc_node_track_caller+0x38/0x70 [ 1737.973316] __alloc_skb+0xae/0x560 [ 1737.976959] ? tipc_nl_compat_name_table_dump+0x880/0x880 [ 1737.982515] tipc_nl_compat_dumpit+0x28e/0x7f0 [ 1737.987206] tipc_nl_compat_recv+0x57e/0xb40 [ 1737.991641] ? tipc_nl_compat_dumpit+0x7f0/0x7f0 [ 1737.996417] ? tipc_nl_compat_name_table_dump+0x880/0x880 [ 1738.001976] ? tipc_nametbl_stop+0x990/0x990 [ 1738.006403] ? __tipc_nl_compat_publ_dump+0x2a0/0x2a0 [ 1738.011612] ? debug_check_no_obj_freed+0x201/0x490 [ 1738.016734] ? check_preemption_disabled+0x41/0x280 [ 1738.021780] ? lock_acquire+0x170/0x3c0 [ 1738.025776] ? genl_rcv_msg+0x12f/0x160 [ 1738.029861] genl_family_rcv_msg+0x642/0xc40 [ 1738.034288] ? genl_rcv+0x40/0x40 [ 1738.037752] ? genl_rcv_msg+0x12f/0x160 [ 1738.041738] ? mutex_trylock+0x1a0/0x1a0 [ 1738.045823] ? __radix_tree_lookup+0x216/0x370 [ 1738.050455] genl_rcv_msg+0xbf/0x160 [ 1738.054185] netlink_rcv_skb+0x160/0x440 [ 1738.058258] ? genl_family_rcv_msg+0xc40/0xc40 [ 1738.062849] ? netlink_ack+0xae0/0xae0 [ 1738.066746] ? genl_rcv+0x15/0x40 [ 1738.070232] genl_rcv+0x24/0x40 [ 1738.073518] netlink_unicast+0x4d5/0x690 [ 1738.077677] ? netlink_sendskb+0x110/0x110 [ 1738.081923] ? _copy_from_iter_full+0x229/0x7c0 [ 1738.086598] ? __phys_addr_symbol+0x2c/0x70 [ 1738.090934] ? __check_object_size+0x17b/0x3e0 [ 1738.095526] netlink_sendmsg+0x6bb/0xc40 [ 1738.099602] ? aa_af_perm+0x230/0x230 [ 1738.103423] ? nlmsg_notify+0x1a0/0x1a0 [ 1738.107407] ? kernel_recvmsg+0x220/0x220 [ 1738.111576] ? nlmsg_notify+0x1a0/0x1a0 [ 1738.115824] sock_sendmsg+0xc3/0x120 15:35:32 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:32 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045613, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) [ 1738.119550] ___sys_sendmsg+0x7bb/0x8e0 [ 1738.123820] ? check_preemption_disabled+0x41/0x280 [ 1738.129025] ? copy_msghdr_from_user+0x440/0x440 [ 1738.133804] ? __fget+0x32f/0x510 [ 1738.137271] ? lock_downgrade+0x720/0x720 [ 1738.141429] ? check_preemption_disabled+0x41/0x280 [ 1738.146461] ? check_preemption_disabled+0x41/0x280 [ 1738.151753] ? __fget+0x356/0x510 [ 1738.156180] ? do_dup2+0x450/0x450 [ 1738.159735] ? lock_downgrade+0x720/0x720 [ 1738.163946] ? vfs_write+0x3d7/0x540 [ 1738.167673] ? __fdget+0x1d0/0x230 [ 1738.171227] __x64_sys_sendmsg+0x132/0x220 [ 1738.175472] ? __sys_sendmsg+0x1b0/0x1b0 [ 1738.179738] ? vfs_write+0x393/0x540 [ 1738.183468] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1738.188929] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1738.193941] ? do_syscall_64+0x21/0x620 [ 1738.197905] do_syscall_64+0xf9/0x620 [ 1738.201702] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1738.207070] RIP: 0033:0x4665d9 [ 1738.210261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1738.229848] RSP: 002b:00007fd6d720b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1738.237874] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1738.245243] RDX: 0000000000000000 RSI: 0000000020000640 RDI: 0000000000000003 [ 1738.252631] RBP: 00007fd6d720b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1738.260013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1738.267473] R13: 00007ffdee98f80f R14: 00007fd6d720b300 R15: 0000000000022000 15:35:32 executing program 3 (fault-call:2 fault-nth:7): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:32 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40049409, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:32 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x0, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}, 0x3}) 15:35:32 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000040)) 15:35:32 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x50000000, 0x7f, 0x8001, 0x0, 0x80}) 15:35:32 executing program 0 (fault-call:1 fault-nth:0): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:32 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:32 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x2, 0x4}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$video(&(0x7f00000000c0), 0xfffffffffffffffb, 0x2000) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000100)={0x7, 0x6, 0x4, 0x2000, 0x2, {}, {0x2, 0x0, 0xfe, 0x20, 0x6, 0x8, "f24391f5"}, 0x0, 0x2, @userptr=0x7, 0xe31, 0x0, r2}) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000040)={0x40000000, "27935121c830d7d6c36ad54e7a73fde2f330f8dc0ba709c38c69d7f8de31ce5f", 0x2, 0xb26, 0x5, 0x7, 0x8}) 15:35:32 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x4020940d, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) [ 1738.398929] FAULT_INJECTION: forcing a failure. [ 1738.398929] name failslab, interval 1, probability 0, space 0, times 0 15:35:32 executing program 1 (fault-call:1 fault-nth:0): r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) [ 1738.464639] CPU: 0 PID: 8828 Comm: syz-executor.3 Not tainted 4.19.195-syzkaller #0 [ 1738.472913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1738.482800] Call Trace: [ 1738.485588] dump_stack+0x1fc/0x2ef [ 1738.489255] should_fail.cold+0xa/0xf [ 1738.493093] ? setup_fault_attr+0x200/0x200 [ 1738.497440] ? lock_acquire+0x170/0x3c0 [ 1738.501450] __should_failslab+0x115/0x180 [ 1738.505747] should_failslab+0x5/0x10 [ 1738.509564] kmem_cache_alloc_node+0x245/0x3b0 [ 1738.514169] __alloc_skb+0x71/0x560 [ 1738.517819] __tipc_nl_compat_dumpit+0xdf/0x8b0 [ 1738.522531] ? lock_acquire+0x170/0x3c0 [ 1738.526708] ? check_preemption_disabled+0x41/0x280 [ 1738.531745] ? tipc_nl_compat_net_set+0x340/0x340 [ 1738.537751] ? __kmalloc_node_track_caller+0x38/0x70 [ 1738.543212] ? skb_put+0x140/0x190 [ 1738.546860] ? memset+0x20/0x40 [ 1738.550374] ? __nlmsg_put+0x155/0x1c0 [ 1738.554631] tipc_nl_compat_dumpit+0x45e/0x7f0 [ 1738.559332] tipc_nl_compat_recv+0x57e/0xb40 [ 1738.563763] ? tipc_nl_compat_dumpit+0x7f0/0x7f0 [ 1738.568542] ? tipc_nl_compat_name_table_dump+0x880/0x880 [ 1738.574097] ? tipc_nametbl_stop+0x990/0x990 [ 1738.578614] ? __tipc_nl_compat_publ_dump+0x2a0/0x2a0 [ 1738.583947] ? debug_check_no_obj_freed+0x201/0x490 [ 1738.589381] ? check_preemption_disabled+0x41/0x280 [ 1738.594717] ? lock_acquire+0x170/0x3c0 [ 1738.598702] ? genl_rcv_msg+0x12f/0x160 [ 1738.602707] genl_family_rcv_msg+0x642/0xc40 [ 1738.607436] ? genl_rcv+0x40/0x40 [ 1738.610907] ? genl_rcv_msg+0x12f/0x160 [ 1738.614898] ? mutex_trylock+0x1a0/0x1a0 [ 1738.619164] ? __radix_tree_lookup+0x216/0x370 [ 1738.623794] genl_rcv_msg+0xbf/0x160 [ 1738.627538] netlink_rcv_skb+0x160/0x440 [ 1738.631811] ? genl_family_rcv_msg+0xc40/0xc40 [ 1738.636680] ? netlink_ack+0xae0/0xae0 [ 1738.640788] ? genl_rcv+0x15/0x40 [ 1738.644268] genl_rcv+0x24/0x40 [ 1738.647565] netlink_unicast+0x4d5/0x690 [ 1738.651662] ? netlink_sendskb+0x110/0x110 [ 1738.655912] ? _copy_from_iter_full+0x229/0x7c0 [ 1738.660601] ? __phys_addr_symbol+0x2c/0x70 15:35:32 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) 15:35:32 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0045878, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) [ 1738.664937] ? __check_object_size+0x17b/0x3e0 [ 1738.669538] netlink_sendmsg+0x6bb/0xc40 [ 1738.673618] ? aa_af_perm+0x230/0x230 [ 1738.677435] ? nlmsg_notify+0x1a0/0x1a0 [ 1738.681862] ? kernel_recvmsg+0x220/0x220 [ 1738.686036] ? nlmsg_notify+0x1a0/0x1a0 [ 1738.690027] sock_sendmsg+0xc3/0x120 [ 1738.693875] ___sys_sendmsg+0x7bb/0x8e0 [ 1738.698130] ? check_preemption_disabled+0x41/0x280 [ 1738.703194] ? copy_msghdr_from_user+0x440/0x440 [ 1738.707970] ? __fget+0x32f/0x510 [ 1738.711440] ? lock_downgrade+0x720/0x720 [ 1738.715606] ? check_preemption_disabled+0x41/0x280 [ 1738.720645] ? check_preemption_disabled+0x41/0x280 [ 1738.725770] ? __fget+0x356/0x510 [ 1738.729285] ? do_dup2+0x450/0x450 [ 1738.732834] ? lock_downgrade+0x720/0x720 [ 1738.736999] ? vfs_write+0x3d7/0x540 [ 1738.740762] ? __fdget+0x1d0/0x230 [ 1738.744590] __x64_sys_sendmsg+0x132/0x220 [ 1738.748837] ? __sys_sendmsg+0x1b0/0x1b0 [ 1738.752999] ? vfs_write+0x393/0x540 [ 1738.756771] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1738.762265] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1738.767471] ? do_syscall_64+0x21/0x620 [ 1738.771896] do_syscall_64+0xf9/0x620 [ 1738.775807] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1738.781046] RIP: 0033:0x4665d9 [ 1738.784245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1738.803411] RSP: 002b:00007fd6d720b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 15:35:33 executing program 3 (fault-call:2 fault-nth:8): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:33 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0045878, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:33 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x2, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:33 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000080)={0x3, @sdr={0xb5315241, 0xa6d}}) 15:35:33 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0x2, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) 15:35:33 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x0, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}, 0x3}) [ 1738.811120] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1738.818538] RDX: 0000000000000000 RSI: 0000000020000640 RDI: 0000000000000003 [ 1738.826001] RBP: 00007fd6d720b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1738.833529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1738.840799] R13: 00007ffdee98f80f R14: 00007fd6d720b300 R15: 0000000000022000 15:35:33 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x5421, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) [ 1738.960162] FAULT_INJECTION: forcing a failure. [ 1738.960162] name failslab, interval 1, probability 0, space 0, times 0 15:35:33 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x0, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}, 0x3}) 15:35:33 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0x5421, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) 15:35:33 executing program 4: syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x3f, 0x5, 0x4}) r1 = syz_open_dev$video(&(0x7f0000000140), 0x13f1, 0x20000) ioctl$VIDIOC_S_JPEGCOMP(r1, 0x408c563e, &(0x7f0000000040)={0x6, 0xf, 0xe, "39b5305442e8c34c05cebb88bbe5f5ffc8c6b711c72ca1458a95f3e15ee66a70aefefc4571da8412a0ed9a3b675a5e5675b6a19a6be95c006373febc", 0x4, "1ad6e50f4d7450776a58613db2ca256ac5a7414a9409817bb8525a0886d63e98d44e1c773aedf25e02406d0863c95dadebf41e46cc03325fe67d1b38", 0xd8}) [ 1739.036614] CPU: 0 PID: 8865 Comm: syz-executor.3 Not tainted 4.19.195-syzkaller #0 [ 1739.044532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1739.053895] Call Trace: [ 1739.056504] dump_stack+0x1fc/0x2ef [ 1739.060147] should_fail.cold+0xa/0xf [ 1739.063968] ? setup_fault_attr+0x200/0x200 [ 1739.068342] ? lock_acquire+0x170/0x3c0 [ 1739.072349] __should_failslab+0x115/0x180 [ 1739.076786] should_failslab+0x5/0x10 [ 1739.080694] kmem_cache_alloc_node_trace+0x244/0x3b0 15:35:33 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0x5450, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) [ 1739.086212] __kmalloc_node_track_caller+0x38/0x70 [ 1739.091341] __alloc_skb+0xae/0x560 [ 1739.095081] __tipc_nl_compat_dumpit+0xdf/0x8b0 [ 1739.099771] ? lock_acquire+0x170/0x3c0 [ 1739.103791] ? check_preemption_disabled+0x41/0x280 [ 1739.108825] ? tipc_nl_compat_net_set+0x340/0x340 [ 1739.114125] ? __kmalloc_node_track_caller+0x38/0x70 [ 1739.119259] ? skb_put+0x140/0x190 [ 1739.122823] ? memset+0x20/0x40 [ 1739.126293] ? __nlmsg_put+0x155/0x1c0 [ 1739.130205] tipc_nl_compat_dumpit+0x45e/0x7f0 15:35:33 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0x5451, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) [ 1739.134822] tipc_nl_compat_recv+0x57e/0xb40 [ 1739.139270] ? tipc_nl_compat_dumpit+0x7f0/0x7f0 [ 1739.144045] ? tipc_nl_compat_name_table_dump+0x880/0x880 [ 1739.149852] ? tipc_nametbl_stop+0x990/0x990 [ 1739.154278] ? __tipc_nl_compat_publ_dump+0x2a0/0x2a0 [ 1739.159496] ? debug_check_no_obj_freed+0x201/0x490 [ 1739.164535] ? check_preemption_disabled+0x41/0x280 [ 1739.169581] ? lock_acquire+0x170/0x3c0 [ 1739.173613] ? genl_rcv_msg+0x12f/0x160 [ 1739.177635] genl_family_rcv_msg+0x642/0xc40 [ 1739.182074] ? genl_rcv+0x40/0x40 [ 1739.185540] ? genl_rcv_msg+0x12f/0x160 [ 1739.189534] ? mutex_trylock+0x1a0/0x1a0 [ 1739.193630] ? __radix_tree_lookup+0x216/0x370 [ 1739.198347] genl_rcv_msg+0xbf/0x160 [ 1739.202074] netlink_rcv_skb+0x160/0x440 [ 1739.206145] ? genl_family_rcv_msg+0xc40/0xc40 [ 1739.210833] ? netlink_ack+0xae0/0xae0 [ 1739.214747] ? genl_rcv+0x15/0x40 [ 1739.218217] genl_rcv+0x24/0x40 [ 1739.221512] netlink_unicast+0x4d5/0x690 [ 1739.225598] ? netlink_sendskb+0x110/0x110 [ 1739.229844] ? _copy_from_iter_full+0x229/0x7c0 [ 1739.234613] ? __phys_addr_symbol+0x2c/0x70 [ 1739.238955] ? __check_object_size+0x17b/0x3e0 [ 1739.243736] netlink_sendmsg+0x6bb/0xc40 [ 1739.247818] ? aa_af_perm+0x230/0x230 [ 1739.251666] ? nlmsg_notify+0x1a0/0x1a0 [ 1739.255663] ? kernel_recvmsg+0x220/0x220 [ 1739.259827] ? nlmsg_notify+0x1a0/0x1a0 [ 1739.264160] sock_sendmsg+0xc3/0x120 [ 1739.267885] ___sys_sendmsg+0x7bb/0x8e0 [ 1739.271871] ? check_preemption_disabled+0x41/0x280 [ 1739.277857] ? copy_msghdr_from_user+0x440/0x440 [ 1739.282711] ? __fget+0x32f/0x510 [ 1739.286171] ? lock_downgrade+0x720/0x720 [ 1739.290326] ? check_preemption_disabled+0x41/0x280 [ 1739.295372] ? check_preemption_disabled+0x41/0x280 [ 1739.300591] ? __fget+0x356/0x510 [ 1739.304062] ? do_dup2+0x450/0x450 [ 1739.307699] ? lock_downgrade+0x720/0x720 [ 1739.311856] ? vfs_write+0x3d7/0x540 [ 1739.315638] ? __fdget+0x1d0/0x230 [ 1739.319403] __x64_sys_sendmsg+0x132/0x220 [ 1739.323656] ? __sys_sendmsg+0x1b0/0x1b0 [ 1739.327742] ? vfs_write+0x393/0x540 [ 1739.331651] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1739.337035] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1739.343026] ? do_syscall_64+0x21/0x620 [ 1739.347117] do_syscall_64+0xf9/0x620 [ 1739.351120] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1739.356589] RIP: 0033:0x4665d9 [ 1739.359882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1739.379321] RSP: 002b:00007fd6d720b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1739.387244] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1739.394526] RDX: 0000000000000000 RSI: 0000000020000640 RDI: 0000000000000003 [ 1739.401807] RBP: 00007fd6d720b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1739.409271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1739.416560] R13: 00007ffdee98f80f R14: 00007fd6d720b300 R15: 0000000000022000 15:35:33 executing program 3 (fault-call:2 fault-nth:9): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:33 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x5450, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:33 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x400, 0x10000) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) 15:35:33 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:33 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0x5452, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) 15:35:33 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x0, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}, 0x3}) 15:35:33 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0x5460, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) 15:35:33 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0189436, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:33 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x5451, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) [ 1739.592090] FAULT_INJECTION: forcing a failure. [ 1739.592090] name failslab, interval 1, probability 0, space 0, times 0 15:35:33 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) [ 1739.651591] CPU: 0 PID: 8914 Comm: syz-executor.3 Not tainted 4.19.195-syzkaller #0 [ 1739.659693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1739.669238] Call Trace: [ 1739.671847] dump_stack+0x1fc/0x2ef [ 1739.675498] should_fail.cold+0xa/0xf [ 1739.679495] ? setup_fault_attr+0x200/0x200 [ 1739.683844] ? lock_acquire+0x170/0x3c0 [ 1739.687844] __should_failslab+0x115/0x180 [ 1739.692227] should_failslab+0x5/0x10 [ 1739.696043] kmem_cache_alloc_trace+0x284/0x380 [ 1739.700735] __tipc_dump_start+0x22c/0x3a0 [ 1739.705084] __tipc_nl_compat_dumpit+0x17a/0x8b0 [ 1739.709924] ? check_preemption_disabled+0x41/0x280 [ 1739.714957] ? tipc_nl_compat_net_set+0x340/0x340 [ 1739.720003] ? __kmalloc_node_track_caller+0x38/0x70 [ 1739.725256] ? skb_put+0x140/0x190 [ 1739.728908] ? memset+0x20/0x40 [ 1739.732208] ? __nlmsg_put+0x155/0x1c0 [ 1739.736112] tipc_nl_compat_dumpit+0x45e/0x7f0 [ 1739.740727] tipc_nl_compat_recv+0x57e/0xb40 [ 1739.745160] ? tipc_nl_compat_dumpit+0x7f0/0x7f0 [ 1739.749942] ? tipc_nl_compat_name_table_dump+0x880/0x880 [ 1739.755636] ? tipc_nametbl_stop+0x990/0x990 [ 1739.760931] ? __tipc_nl_compat_publ_dump+0x2a0/0x2a0 [ 1739.766143] ? debug_check_no_obj_freed+0x201/0x490 [ 1739.771184] ? check_preemption_disabled+0x41/0x280 [ 1739.777304] ? lock_acquire+0x170/0x3c0 [ 1739.781339] ? genl_rcv_msg+0x12f/0x160 [ 1739.785341] genl_family_rcv_msg+0x642/0xc40 [ 1739.789782] ? genl_rcv+0x40/0x40 [ 1739.793423] ? genl_rcv_msg+0x12f/0x160 [ 1739.797610] ? mutex_trylock+0x1a0/0x1a0 [ 1739.801705] ? __radix_tree_lookup+0x216/0x370 [ 1739.806313] genl_rcv_msg+0xbf/0x160 [ 1739.810521] netlink_rcv_skb+0x160/0x440 [ 1739.814627] ? genl_family_rcv_msg+0xc40/0xc40 [ 1739.819233] ? netlink_ack+0xae0/0xae0 [ 1739.823137] ? genl_rcv+0x15/0x40 [ 1739.826626] genl_rcv+0x24/0x40 [ 1739.829920] netlink_unicast+0x4d5/0x690 [ 1739.834003] ? netlink_sendskb+0x110/0x110 [ 1739.838773] ? _copy_from_iter_full+0x229/0x7c0 [ 1739.843458] ? __phys_addr_symbol+0x2c/0x70 [ 1739.847804] ? __check_object_size+0x17b/0x3e0 [ 1739.852586] netlink_sendmsg+0x6bb/0xc40 [ 1739.856756] ? aa_af_perm+0x230/0x230 [ 1739.860584] ? nlmsg_notify+0x1a0/0x1a0 [ 1739.864746] ? kernel_recvmsg+0x220/0x220 [ 1739.869016] ? nlmsg_notify+0x1a0/0x1a0 [ 1739.873024] sock_sendmsg+0xc3/0x120 [ 1739.876847] ___sys_sendmsg+0x7bb/0x8e0 [ 1739.880925] ? check_preemption_disabled+0x41/0x280 [ 1739.886046] ? copy_msghdr_from_user+0x440/0x440 [ 1739.890823] ? __fget+0x32f/0x510 [ 1739.894295] ? lock_downgrade+0x720/0x720 [ 1739.898457] ? check_preemption_disabled+0x41/0x280 [ 1739.903494] ? check_preemption_disabled+0x41/0x280 [ 1739.908529] ? __fget+0x356/0x510 [ 1739.912003] ? do_dup2+0x450/0x450 [ 1739.915540] ? lock_downgrade+0x720/0x720 [ 1739.919688] ? vfs_write+0x3d7/0x540 [ 1739.923410] ? __fdget+0x1d0/0x230 [ 1739.926960] __x64_sys_sendmsg+0x132/0x220 [ 1739.931303] ? __sys_sendmsg+0x1b0/0x1b0 [ 1739.935486] ? vfs_write+0x393/0x540 [ 1739.939193] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1739.944546] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1739.949549] ? do_syscall_64+0x21/0x620 [ 1739.953524] do_syscall_64+0xf9/0x620 [ 1739.957321] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1739.962507] RIP: 0033:0x4665d9 [ 1739.965700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1739.985210] RSP: 002b:00007fd6d720b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1739.993009] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 15:35:34 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r2, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fffffff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffff7}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44049) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, 0x0, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x24, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x3}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4015}, 0x2000c054) 15:35:34 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x5452, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) [ 1740.000273] RDX: 0000000000000000 RSI: 0000000020000640 RDI: 0000000000000003 [ 1740.007617] RBP: 00007fd6d720b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1740.014878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1740.022148] R13: 00007ffdee98f80f R14: 00007fd6d720b300 R15: 0000000000022000 15:35:34 executing program 3 (fault-call:2 fault-nth:10): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:34 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0205647, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:34 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0x40049409, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) 15:35:34 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0189436, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:34 executing program 4: sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00f4c000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000140)={0x7ff, 0xb, 0x4, 0x2000, 0xffffbff9, {}, {0x6, 0x8, 0xff, 0x1, 0x3f, 0x2, "940340c9"}, 0x9, 0x4, @userptr=0x3, 0xbef}) 15:35:34 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x5460, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:34 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0x4020940d, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) [ 1740.187699] FAULT_INJECTION: forcing a failure. [ 1740.187699] name failslab, interval 1, probability 0, space 0, times 0 15:35:34 executing program 2 (fault-call:1 fault-nth:0): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:34 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0205649, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) [ 1740.262069] CPU: 1 PID: 8949 Comm: syz-executor.3 Not tainted 4.19.195-syzkaller #0 [ 1740.269904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1740.279275] Call Trace: [ 1740.281879] dump_stack+0x1fc/0x2ef [ 1740.285527] should_fail.cold+0xa/0xf [ 1740.289347] ? tipc_nl_compat_recv+0x57e/0xb40 [ 1740.293950] ? setup_fault_attr+0x200/0x200 [ 1740.298287] ? genl_rcv+0x24/0x40 [ 1740.301841] ? netlink_unicast+0x4d5/0x690 [ 1740.306212] ? netlink_sendmsg+0x6bb/0xc40 [ 1740.310550] ? sock_sendmsg+0xc3/0x120 [ 1740.314975] ? ___sys_sendmsg+0x7bb/0x8e0 [ 1740.319142] ? __x64_sys_sendmsg+0x132/0x220 [ 1740.323576] ? do_syscall_64+0xf9/0x620 [ 1740.327575] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1740.332958] __should_failslab+0x115/0x180 [ 1740.337211] should_failslab+0x5/0x10 [ 1740.341027] kmem_cache_alloc_node_trace+0x57/0x3b0 [ 1740.346059] __kmalloc_node_track_caller+0x38/0x70 [ 1740.351007] pskb_expand_head+0x159/0xf20 [ 1740.355174] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1740.360291] ? debug_check_no_obj_freed+0x201/0x490 [ 1740.365324] ? check_preemption_disabled+0x41/0x280 [ 1740.370358] netlink_trim+0x200/0x250 [ 1740.374229] netlink_unicast+0xb9/0x690 [ 1740.378402] ? kmem_cache_free+0x226/0x260 [ 1740.382657] ? netlink_sendskb+0x110/0x110 [ 1740.386988] ? kfree_skb+0x127/0x3d0 [ 1740.390810] ? tipc_nl_compat_dumpit+0x4e1/0x7f0 [ 1740.395607] tipc_nl_compat_recv+0x388/0xb40 [ 1740.400293] ? tipc_nl_compat_dumpit+0x7f0/0x7f0 [ 1740.405068] ? tipc_nl_compat_name_table_dump+0x880/0x880 [ 1740.410622] ? tipc_nametbl_stop+0x990/0x990 [ 1740.415044] ? __tipc_nl_compat_publ_dump+0x2a0/0x2a0 [ 1740.420247] ? debug_check_no_obj_freed+0x201/0x490 [ 1740.425455] ? check_preemption_disabled+0x41/0x280 [ 1740.430492] ? lock_acquire+0x170/0x3c0 [ 1740.434478] ? genl_rcv_msg+0x12f/0x160 [ 1740.438647] genl_family_rcv_msg+0x642/0xc40 [ 1740.443078] ? genl_rcv+0x40/0x40 [ 1740.446547] ? genl_rcv_msg+0x12f/0x160 [ 1740.450538] ? mutex_trylock+0x1a0/0x1a0 [ 1740.451354] FAULT_INJECTION: forcing a failure. [ 1740.451354] name failslab, interval 1, probability 0, space 0, times 0 [ 1740.454615] ? __radix_tree_lookup+0x216/0x370 [ 1740.454636] genl_rcv_msg+0xbf/0x160 [ 1740.454653] netlink_rcv_skb+0x160/0x440 [ 1740.454673] ? genl_family_rcv_msg+0xc40/0xc40 [ 1740.483158] ? netlink_ack+0xae0/0xae0 [ 1740.487157] ? genl_rcv+0x15/0x40 [ 1740.490754] genl_rcv+0x24/0x40 [ 1740.494042] netlink_unicast+0x4d5/0x690 [ 1740.498115] ? netlink_sendskb+0x110/0x110 [ 1740.502554] ? _copy_from_iter_full+0x229/0x7c0 [ 1740.507351] ? __phys_addr_symbol+0x2c/0x70 [ 1740.511858] ? __check_object_size+0x17b/0x3e0 [ 1740.516463] netlink_sendmsg+0x6bb/0xc40 [ 1740.520538] ? aa_af_perm+0x230/0x230 [ 1740.524462] ? nlmsg_notify+0x1a0/0x1a0 [ 1740.528731] ? kernel_recvmsg+0x220/0x220 [ 1740.533392] ? nlmsg_notify+0x1a0/0x1a0 [ 1740.537471] sock_sendmsg+0xc3/0x120 [ 1740.541202] ___sys_sendmsg+0x7bb/0x8e0 [ 1740.545198] ? check_preemption_disabled+0x41/0x280 [ 1740.550232] ? copy_msghdr_from_user+0x440/0x440 [ 1740.555002] ? __fget+0x32f/0x510 [ 1740.558477] ? lock_downgrade+0x720/0x720 [ 1740.562727] ? check_preemption_disabled+0x41/0x280 [ 1740.568045] ? check_preemption_disabled+0x41/0x280 [ 1740.573187] ? __fget+0x356/0x510 [ 1740.576832] ? do_dup2+0x450/0x450 [ 1740.580388] ? lock_downgrade+0x720/0x720 [ 1740.584891] ? vfs_write+0x3d7/0x540 [ 1740.588700] ? __fdget+0x1d0/0x230 [ 1740.592249] __x64_sys_sendmsg+0x132/0x220 [ 1740.596666] ? __sys_sendmsg+0x1b0/0x1b0 [ 1740.600720] ? vfs_write+0x393/0x540 [ 1740.604613] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1740.610145] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1740.615282] ? do_syscall_64+0x21/0x620 [ 1740.619271] do_syscall_64+0xf9/0x620 [ 1740.624267] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1740.630060] RIP: 0033:0x4665d9 [ 1740.633774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1740.653206] RSP: 002b:00007fd6d720b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 15:35:34 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) r1 = socket(0x23, 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x4) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000040)={0xffffffffffffffff, 0x8}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) 15:35:34 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0045878, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) 15:35:34 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc020660b, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) [ 1740.661141] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1740.668496] RDX: 0000000000000000 RSI: 0000000020000640 RDI: 0000000000000003 [ 1740.675845] RBP: 00007fd6d720b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1740.683148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1740.690583] R13: 00007ffdee98f80f R14: 00007fd6d720b300 R15: 0000000000022000 [ 1740.697863] CPU: 0 PID: 8971 Comm: syz-executor.2 Not tainted 4.19.195-syzkaller #0 [ 1740.705761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1740.715121] Call Trace: [ 1740.717817] dump_stack+0x1fc/0x2ef [ 1740.721470] should_fail.cold+0xa/0xf [ 1740.725287] ? setup_fault_attr+0x200/0x200 [ 1740.729725] ? lock_acquire+0x170/0x3c0 [ 1740.733805] __should_failslab+0x115/0x180 [ 1740.738050] should_failslab+0x5/0x10 [ 1740.741949] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 1740.747162] __kmalloc_node+0x38/0x70 [ 1740.751012] kvmalloc_node+0x61/0xf0 [ 1740.754752] ? v4l_querycap+0x340/0x340 [ 1740.758742] video_usercopy+0x3c7/0xfa0 [ 1740.762751] ? v4l_enumstd+0x60/0x60 [ 1740.766549] ? get_pid_task+0xf4/0x190 [ 1740.770468] ? mark_held_locks+0xf0/0xf0 [ 1740.774572] ? proc_fail_nth_write+0x95/0x1d0 [ 1740.779136] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 1740.784070] ? video_usercopy+0xfa0/0xfa0 [ 1740.788207] v4l2_ioctl+0x147/0x1a0 [ 1740.791996] ? video_devdata+0xa0/0xa0 [ 1740.796053] do_vfs_ioctl+0xcdb/0x12e0 [ 1740.800118] ? lock_downgrade+0x720/0x720 [ 1740.804404] ? check_preemption_disabled+0x41/0x280 [ 1740.809532] ? ioctl_preallocate+0x200/0x200 [ 1740.813942] ? __fget+0x356/0x510 [ 1740.817393] ? do_dup2+0x450/0x450 [ 1740.821006] ? vfs_write+0x393/0x540 [ 1740.824711] ? fput+0x2b/0x190 [ 1740.827898] ksys_ioctl+0x9b/0xc0 [ 1740.831461] __x64_sys_ioctl+0x6f/0xb0 [ 1740.835343] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1740.839931] do_syscall_64+0xf9/0x620 [ 1740.843817] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1740.849335] RIP: 0033:0x4665d9 [ 1740.852547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1740.872555] RSP: 002b:00007f4325cea188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1740.880872] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1740.889274] RDX: 0000000020000100 RSI: 00000000c100565c RDI: 0000000000000003 [ 1740.896629] RBP: 00007f4325cea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1740.903895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 15:35:35 executing program 3 (fault-call:2 fault-nth:11): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:35 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0045878, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) 15:35:35 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0285628, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:35 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045613, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) [ 1740.911152] R13: 00007fffd67cf40f R14: 00007f4325cea300 R15: 0000000000022000 15:35:35 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES16=r1, @ANYBLOB="000400000000000000001d0000000c0006000000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4080}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, r1, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x70}, 0x1, 0x0, 0x0, 0x4044}, 0x4008045) r4 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) 15:35:35 executing program 2 (fault-call:1 fault-nth:1): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:35 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0189436, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) 15:35:35 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045667, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:35 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0285629, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) [ 1741.052690] FAULT_INJECTION: forcing a failure. [ 1741.052690] name failslab, interval 1, probability 0, space 0, times 0 [ 1741.109705] FAULT_INJECTION: forcing a failure. [ 1741.109705] name failslab, interval 1, probability 0, space 0, times 0 [ 1741.132025] CPU: 0 PID: 8989 Comm: syz-executor.3 Not tainted 4.19.195-syzkaller #0 [ 1741.139957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1741.149410] Call Trace: [ 1741.152021] dump_stack+0x1fc/0x2ef [ 1741.155770] should_fail.cold+0xa/0xf [ 1741.159588] ? setup_fault_attr+0x200/0x200 [ 1741.164011] ? sk_filter_trim_cap+0x497/0x7d0 [ 1741.168530] __should_failslab+0x115/0x180 [ 1741.172874] should_failslab+0x5/0x10 [ 1741.176688] kmem_cache_alloc+0x3f/0x370 [ 1741.180866] skb_clone+0x151/0x3d0 [ 1741.184420] netlink_deliver_tap+0x955/0xb00 [ 1741.188862] netlink_sendskb+0x6c/0x110 [ 1741.192859] netlink_unicast+0x5b3/0x690 [ 1741.196977] ? netlink_sendskb+0x110/0x110 [ 1741.201235] ? tipc_nl_compat_dumpit+0x4e1/0x7f0 [ 1741.206031] tipc_nl_compat_recv+0x388/0xb40 [ 1741.210545] ? tipc_nl_compat_dumpit+0x7f0/0x7f0 [ 1741.215344] ? tipc_nl_compat_name_table_dump+0x880/0x880 [ 1741.220895] ? tipc_nametbl_stop+0x990/0x990 [ 1741.225326] ? __tipc_nl_compat_publ_dump+0x2a0/0x2a0 [ 1741.230617] ? debug_check_no_obj_freed+0x201/0x490 [ 1741.235912] ? check_preemption_disabled+0x41/0x280 [ 1741.241126] ? lock_acquire+0x170/0x3c0 [ 1741.245112] ? genl_rcv_msg+0x12f/0x160 [ 1741.249121] genl_family_rcv_msg+0x642/0xc40 [ 1741.253536] ? genl_rcv+0x40/0x40 [ 1741.256994] ? genl_rcv_msg+0x12f/0x160 [ 1741.260992] ? mutex_trylock+0x1a0/0x1a0 [ 1741.265076] ? __radix_tree_lookup+0x216/0x370 [ 1741.269936] genl_rcv_msg+0xbf/0x160 [ 1741.273666] netlink_rcv_skb+0x160/0x440 [ 1741.277744] ? genl_family_rcv_msg+0xc40/0xc40 [ 1741.282332] ? netlink_ack+0xae0/0xae0 [ 1741.286572] ? genl_rcv+0x15/0x40 [ 1741.290123] genl_rcv+0x24/0x40 [ 1741.293499] netlink_unicast+0x4d5/0x690 [ 1741.297750] ? netlink_sendskb+0x110/0x110 [ 1741.302024] ? _copy_from_iter_full+0x229/0x7c0 [ 1741.306785] ? __phys_addr_symbol+0x2c/0x70 [ 1741.311119] ? __check_object_size+0x17b/0x3e0 [ 1741.315768] netlink_sendmsg+0x6bb/0xc40 [ 1741.319859] ? aa_af_perm+0x230/0x230 [ 1741.323767] ? nlmsg_notify+0x1a0/0x1a0 [ 1741.327756] ? kernel_recvmsg+0x220/0x220 [ 1741.331922] ? nlmsg_notify+0x1a0/0x1a0 [ 1741.336267] sock_sendmsg+0xc3/0x120 [ 1741.340080] ___sys_sendmsg+0x7bb/0x8e0 [ 1741.344189] ? check_preemption_disabled+0x41/0x280 [ 1741.349395] ? copy_msghdr_from_user+0x440/0x440 [ 1741.354237] ? __fget+0x32f/0x510 [ 1741.357686] ? lock_downgrade+0x720/0x720 [ 1741.361952] ? check_preemption_disabled+0x41/0x280 [ 1741.366970] ? check_preemption_disabled+0x41/0x280 [ 1741.372086] ? __fget+0x356/0x510 [ 1741.375648] ? do_dup2+0x450/0x450 [ 1741.379233] ? lock_downgrade+0x720/0x720 [ 1741.383860] ? vfs_write+0x3d7/0x540 [ 1741.388141] ? __fdget+0x1d0/0x230 [ 1741.391900] __x64_sys_sendmsg+0x132/0x220 [ 1741.396149] ? __sys_sendmsg+0x1b0/0x1b0 [ 1741.400213] ? vfs_write+0x393/0x540 [ 1741.406556] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1741.411949] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1741.417064] ? do_syscall_64+0x21/0x620 [ 1741.421125] do_syscall_64+0xf9/0x620 [ 1741.425044] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1741.430231] RIP: 0033:0x4665d9 [ 1741.433416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1741.452833] RSP: 002b:00007fd6d720b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1741.460623] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1741.468075] RDX: 0000000000000000 RSI: 0000000020000640 RDI: 0000000000000003 [ 1741.475517] RBP: 00007fd6d720b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1741.483252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1741.490868] R13: 00007ffdee98f80f R14: 00007fd6d720b300 R15: 0000000000022000 [ 1741.498179] CPU: 1 PID: 8994 Comm: syz-executor.2 Not tainted 4.19.195-syzkaller #0 [ 1741.506257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1741.515716] Call Trace: [ 1741.518344] dump_stack+0x1fc/0x2ef [ 1741.521994] should_fail.cold+0xa/0xf [ 1741.525905] ? setup_fault_attr+0x200/0x200 [ 1741.530245] ? lock_acquire+0x170/0x3c0 [ 1741.534250] __should_failslab+0x115/0x180 [ 1741.538507] should_failslab+0x5/0x10 [ 1741.542322] __kmalloc+0x2ab/0x3c0 [ 1741.545886] ? __vb2_queue_alloc+0xe2/0xe60 [ 1741.550668] __vb2_queue_alloc+0xe2/0xe60 [ 1741.555032] vb2_core_create_bufs+0x273/0x7e0 [ 1741.559630] ? __vb2_queue_free+0x870/0x870 [ 1741.564024] ? mutex_trylock+0x1a0/0x1a0 [ 1741.568205] vb2_create_bufs+0x332/0x620 [ 1741.572295] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1741.577423] ? __video_do_ioctl+0x632/0xcd0 [ 1741.581763] ? mutex_trylock+0x1a0/0x1a0 [ 1741.585842] ? mark_held_locks+0xf0/0xf0 [ 1741.589921] ? __lock_acquire+0x6de/0x3ff0 [ 1741.594525] vb2_ioctl_create_bufs+0x20d/0x360 [ 1741.599218] ? memset+0x20/0x40 [ 1741.602633] v4l_create_bufs+0xb2/0x160 [ 1741.606808] __video_do_ioctl+0x49a/0xcd0 [ 1741.610976] ? v4l_querycap+0x340/0x340 [ 1741.614978] ? __might_fault+0x192/0x1d0 [ 1741.619230] ? v4l_querycap+0x340/0x340 [ 1741.623305] video_usercopy+0x13f/0xfa0 [ 1741.627311] ? v4l_enumstd+0x60/0x60 [ 1741.631526] ? get_pid_task+0xf4/0x190 [ 1741.635437] ? mark_held_locks+0xf0/0xf0 [ 1741.639691] ? proc_fail_nth_write+0x95/0x1d0 [ 1741.644259] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 1741.649484] ? video_usercopy+0xfa0/0xfa0 [ 1741.653648] v4l2_ioctl+0x147/0x1a0 [ 1741.657305] ? video_devdata+0xa0/0xa0 15:35:35 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0205647, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) 15:35:35 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40049409, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:35 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405667, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) [ 1741.661209] do_vfs_ioctl+0xcdb/0x12e0 [ 1741.665139] ? lock_downgrade+0x720/0x720 [ 1741.669308] ? check_preemption_disabled+0x41/0x280 [ 1741.674355] ? ioctl_preallocate+0x200/0x200 [ 1741.678789] ? __fget+0x356/0x510 [ 1741.682362] ? do_dup2+0x450/0x450 [ 1741.686044] ? vfs_write+0x393/0x540 [ 1741.689779] ? fput+0x2b/0x190 [ 1741.692988] ksys_ioctl+0x9b/0xc0 [ 1741.696455] __x64_sys_ioctl+0x6f/0xb0 [ 1741.700354] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1741.705050] do_syscall_64+0xf9/0x620 [ 1741.708920] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1741.714550] RIP: 0033:0x4665d9 [ 1741.717743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1741.736922] RSP: 002b:00007f4325cea188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1741.744819] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1741.752093] RDX: 0000000020000100 RSI: 00000000c100565c RDI: 0000000000000003 15:35:36 executing program 3 (fault-call:2 fault-nth:12): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:36 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x4020940d, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:36 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0205649, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) 15:35:36 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) [ 1741.759360] RBP: 00007f4325cea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1741.767278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1741.774828] R13: 00007fffd67cf40f R14: 00007f4325cea300 R15: 0000000000022000 15:35:36 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000040)={0x80, 0x2, 0x8}) 15:35:36 executing program 2 (fault-call:1 fault-nth:2): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:36 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0045878, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:36 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc020660b, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) 15:35:36 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc058560f, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r1, 0x908, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) [ 1741.978642] FAULT_INJECTION: forcing a failure. [ 1741.978642] name failslab, interval 1, probability 0, space 0, times 0 15:35:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) [ 1742.048500] CPU: 0 PID: 9040 Comm: syz-executor.2 Not tainted 4.19.195-syzkaller #0 [ 1742.056510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1742.066056] Call Trace: [ 1742.068749] dump_stack+0x1fc/0x2ef [ 1742.072397] should_fail.cold+0xa/0xf [ 1742.076242] ? setup_fault_attr+0x200/0x200 [ 1742.080592] ? lock_acquire+0x170/0x3c0 [ 1742.084680] __should_failslab+0x115/0x180 [ 1742.089115] should_failslab+0x5/0x10 [ 1742.092950] __kmalloc+0x2ab/0x3c0 [ 1742.097228] ? __vb2_queue_alloc+0xe2/0xe60 [ 1742.101560] __vb2_queue_alloc+0xe2/0xe60 [ 1742.106124] vb2_core_create_bufs+0x273/0x7e0 [ 1742.110917] ? __vb2_queue_free+0x870/0x870 [ 1742.115267] ? mutex_trylock+0x1a0/0x1a0 [ 1742.119353] vb2_create_bufs+0x332/0x620 [ 1742.123441] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1742.128644] ? __video_do_ioctl+0x632/0xcd0 [ 1742.132991] ? mutex_trylock+0x1a0/0x1a0 [ 1742.137181] ? mark_held_locks+0xf0/0xf0 [ 1742.141530] ? __lock_acquire+0x6de/0x3ff0 15:35:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x2, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) [ 1742.145977] vb2_ioctl_create_bufs+0x20d/0x360 [ 1742.150688] ? memset+0x20/0x40 [ 1742.153988] v4l_create_bufs+0xb2/0x160 [ 1742.158025] __video_do_ioctl+0x49a/0xcd0 [ 1742.162309] ? v4l_querycap+0x340/0x340 [ 1742.166386] ? __might_fault+0x192/0x1d0 [ 1742.170462] ? v4l_querycap+0x340/0x340 [ 1742.174455] video_usercopy+0x13f/0xfa0 [ 1742.178465] ? v4l_enumstd+0x60/0x60 [ 1742.182378] ? get_pid_task+0xf4/0x190 [ 1742.186454] ? mark_held_locks+0xf0/0xf0 [ 1742.190539] ? proc_fail_nth_write+0x95/0x1d0 [ 1742.195072] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 1742.200118] ? video_usercopy+0xfa0/0xfa0 [ 1742.204282] v4l2_ioctl+0x147/0x1a0 [ 1742.208011] ? video_devdata+0xa0/0xa0 [ 1742.211920] do_vfs_ioctl+0xcdb/0x12e0 [ 1742.215911] ? lock_downgrade+0x720/0x720 [ 1742.220085] ? check_preemption_disabled+0x41/0x280 [ 1742.225162] ? ioctl_preallocate+0x200/0x200 [ 1742.229599] ? __fget+0x356/0x510 [ 1742.233069] ? do_dup2+0x450/0x450 [ 1742.236799] ? vfs_write+0x393/0x540 [ 1742.240791] ? fput+0x2b/0x190 [ 1742.243998] ksys_ioctl+0x9b/0xc0 15:35:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x3, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) [ 1742.247464] __x64_sys_ioctl+0x6f/0xb0 [ 1742.251365] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1742.255999] do_syscall_64+0xf9/0x620 [ 1742.259834] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1742.265035] RIP: 0033:0x4665d9 [ 1742.268268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1742.287310] RSP: 002b:00007f4325cea188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 15:35:36 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0585611, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:36 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0045878, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:36 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0285628, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) [ 1742.295071] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1742.302356] RDX: 0000000020000100 RSI: 00000000c100565c RDI: 0000000000000003 [ 1742.309637] RBP: 00007f4325cea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1742.316916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1742.324199] R13: 00007fffd67cf40f R14: 00007f4325cea300 R15: 0000000000022000 15:35:36 executing program 2 (fault-call:1 fault-nth:3): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:36 executing program 4: r0 = syz_open_dev$dri(0xfffffffffffffffc, 0x0, 0x600100) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000240)) r1 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x200, 0x1, 0x4}) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xfc, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x240480b0}, 0x20000841) 15:35:36 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0285629, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) 15:35:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x4, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:36 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:36 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) [ 1742.519777] FAULT_INJECTION: forcing a failure. [ 1742.519777] name failslab, interval 1, probability 0, space 0, times 0 [ 1742.569854] CPU: 1 PID: 9086 Comm: syz-executor.2 Not tainted 4.19.195-syzkaller #0 [ 1742.577873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1742.587534] Call Trace: [ 1742.590138] dump_stack+0x1fc/0x2ef [ 1742.593793] should_fail.cold+0xa/0xf [ 1742.597704] ? setup_fault_attr+0x200/0x200 [ 1742.602236] ? lock_acquire+0x170/0x3c0 [ 1742.606243] __should_failslab+0x115/0x180 [ 1742.610504] should_failslab+0x5/0x10 [ 1742.614497] __kmalloc+0x2ab/0x3c0 [ 1742.618571] ? __vb2_queue_alloc+0xe2/0xe60 [ 1742.622909] __vb2_queue_alloc+0xe2/0xe60 [ 1742.627081] vb2_core_create_bufs+0x273/0x7e0 [ 1742.631719] ? __vb2_queue_free+0x870/0x870 [ 1742.636173] ? mutex_trylock+0x1a0/0x1a0 [ 1742.640291] vb2_create_bufs+0x332/0x620 [ 1742.644542] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1742.649742] ? __video_do_ioctl+0x632/0xcd0 [ 1742.654608] ? mutex_trylock+0x1a0/0x1a0 [ 1742.658928] ? mark_held_locks+0xf0/0xf0 [ 1742.663007] ? __lock_acquire+0x6de/0x3ff0 [ 1742.667261] vb2_ioctl_create_bufs+0x20d/0x360 [ 1742.672039] ? memset+0x20/0x40 [ 1742.675477] v4l_create_bufs+0xb2/0x160 [ 1742.679497] __video_do_ioctl+0x49a/0xcd0 [ 1742.683660] ? v4l_querycap+0x340/0x340 [ 1742.687650] ? __might_fault+0x192/0x1d0 [ 1742.691727] ? v4l_querycap+0x340/0x340 [ 1742.695804] video_usercopy+0x13f/0xfa0 [ 1742.699890] ? v4l_enumstd+0x60/0x60 [ 1742.703613] ? get_pid_task+0xf4/0x190 [ 1742.707642] ? mark_held_locks+0xf0/0xf0 [ 1742.711760] ? proc_fail_nth_write+0x95/0x1d0 [ 1742.716275] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 1742.721235] ? video_usercopy+0xfa0/0xfa0 [ 1742.725403] v4l2_ioctl+0x147/0x1a0 [ 1742.729048] ? video_devdata+0xa0/0xa0 [ 1742.733125] do_vfs_ioctl+0xcdb/0x12e0 [ 1742.737027] ? lock_downgrade+0x720/0x720 [ 1742.741190] ? check_preemption_disabled+0x41/0x280 [ 1742.746259] ? ioctl_preallocate+0x200/0x200 [ 1742.750692] ? __fget+0x356/0x510 [ 1742.754170] ? do_dup2+0x450/0x450 [ 1742.757749] ? vfs_write+0x393/0x540 [ 1742.761474] ? fput+0x2b/0x190 [ 1742.764686] ksys_ioctl+0x9b/0xc0 [ 1742.768150] __x64_sys_ioctl+0x6f/0xb0 [ 1742.772049] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1742.776647] do_syscall_64+0xf9/0x620 [ 1742.780474] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1742.785680] RIP: 0033:0x4665d9 [ 1742.788974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1742.807971] RSP: 002b:00007f4325cea188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 15:35:36 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0189436, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:36 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445667, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) 15:35:36 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0xfffffffa, 0x1, 0x4}) 15:35:36 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0205647, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:36 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0585609, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) 15:35:36 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000240)={0x200, 0xb, 0x4}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000040)={0x7, 0x102, "2b8bb5313d8c4d68b43b09b635e949d86b9166455dccb12ad6df958ad0d1ba95", 0x0, 0x5, 0x1, 0x20}) [ 1742.815698] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1742.822981] RDX: 0000000020000100 RSI: 00000000c100565c RDI: 0000000000000003 [ 1742.830357] RBP: 00007f4325cea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1742.837817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1742.845268] R13: 00007fffd67cf40f R14: 00007f4325cea300 R15: 0000000000022000 15:35:37 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc058560f, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) 15:35:37 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x1f, 0xc, 0x4, 0x40, 0xa1, {0x0, 0xea60}, {0x4, 0x2, 0x3, 0xff, 0x6, 0x1f, "bcfe8427"}, 0x0, 0x2, @userptr=0x4, 0x20, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x8, 0x3, 0x4, 0x2000, 0x400, {0x0, 0x2710}, {0x1, 0x1, 0x7f, 0x75, 0xc9, 0x8, "8d3ca14f"}, 0x0, 0x4, @fd, 0xffff0, 0x0, r1}) 15:35:37 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0205649, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:37 executing program 2 (fault-call:1 fault-nth:4): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x5, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:37 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) [ 1742.987960] FAULT_INJECTION: forcing a failure. [ 1742.987960] name failslab, interval 1, probability 0, space 0, times 0 15:35:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x6, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:37 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc020660b, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) [ 1743.058316] CPU: 1 PID: 9125 Comm: syz-executor.2 Not tainted 4.19.195-syzkaller #0 [ 1743.066318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1743.075854] Call Trace: [ 1743.078458] dump_stack+0x1fc/0x2ef [ 1743.082113] should_fail.cold+0xa/0xf [ 1743.085936] ? setup_fault_attr+0x200/0x200 [ 1743.090272] ? lock_acquire+0x170/0x3c0 [ 1743.094297] __should_failslab+0x115/0x180 [ 1743.098544] should_failslab+0x5/0x10 [ 1743.102527] __kmalloc+0x2ab/0x3c0 [ 1743.106079] ? __vb2_queue_alloc+0xe2/0xe60 [ 1743.110415] __vb2_queue_alloc+0xe2/0xe60 [ 1743.114591] vb2_core_create_bufs+0x273/0x7e0 [ 1743.119102] ? __vb2_queue_free+0x870/0x870 [ 1743.123442] ? mutex_trylock+0x1a0/0x1a0 [ 1743.127522] vb2_create_bufs+0x332/0x620 [ 1743.131603] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1743.136723] ? __video_do_ioctl+0x632/0xcd0 [ 1743.141091] ? mutex_trylock+0x1a0/0x1a0 [ 1743.145181] ? mark_held_locks+0xf0/0xf0 [ 1743.149266] ? __lock_acquire+0x6de/0x3ff0 [ 1743.153517] vb2_ioctl_create_bufs+0x20d/0x360 [ 1743.158111] ? memset+0x20/0x40 [ 1743.161498] v4l_create_bufs+0xb2/0x160 [ 1743.165584] __video_do_ioctl+0x49a/0xcd0 [ 1743.169752] ? v4l_querycap+0x340/0x340 [ 1743.173807] ? __might_fault+0x192/0x1d0 [ 1743.177881] ? v4l_querycap+0x340/0x340 [ 1743.182040] video_usercopy+0x13f/0xfa0 [ 1743.186308] ? v4l_enumstd+0x60/0x60 [ 1743.190026] ? get_pid_task+0xf4/0x190 [ 1743.193924] ? mark_held_locks+0xf0/0xf0 [ 1743.198080] ? proc_fail_nth_write+0x95/0x1d0 [ 1743.202585] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 1743.207539] ? video_usercopy+0xfa0/0xfa0 [ 1743.211699] v4l2_ioctl+0x147/0x1a0 [ 1743.215334] ? video_devdata+0xa0/0xa0 [ 1743.219240] do_vfs_ioctl+0xcdb/0x12e0 [ 1743.223239] ? lock_downgrade+0x720/0x720 [ 1743.227412] ? check_preemption_disabled+0x41/0x280 [ 1743.232444] ? ioctl_preallocate+0x200/0x200 [ 1743.236875] ? __fget+0x356/0x510 [ 1743.240340] ? do_dup2+0x450/0x450 [ 1743.243975] ? vfs_write+0x393/0x540 [ 1743.247707] ? fput+0x2b/0x190 [ 1743.250919] ksys_ioctl+0x9b/0xc0 [ 1743.254392] __x64_sys_ioctl+0x6f/0xb0 [ 1743.258290] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1743.262882] do_syscall_64+0xf9/0x620 [ 1743.266697] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1743.271894] RIP: 0033:0x4665d9 [ 1743.275093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1743.294004] RSP: 002b:00007f4325cea188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1743.301722] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 15:35:37 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0585611, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) 15:35:37 executing program 4: ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) 15:35:37 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc058565d, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) 15:35:37 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000040)={0x80, 0x2, 0x0, 0x1, 0x1000, 0x2, 0xe8}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xa32c, 0xffff, 0x2, {0x3, @raw_data="2b400a17351dc6a23fc6fc1d79d1a56b4bc849b06a4265d5cbc6a6ba55ad714b0755a238b3f1a1862067388f93d6d3d4e823442ef86a4abd621493600a7d88c78b188b99073fe75fd225b4f6dcbd57e55fa553880be319d8b0d8a88e213ce89181ffd00dcdd96e3ea88dfe479262a2a20403471c2ba1ff672186386372451de8839f8eda0e8eed88e23bc611b33290691e0b41a30586cc576cf1c190069c195daa803163ea776acba211a0c5f16b9741bfc92f12ad56943fd480a00718183499598c2e6f9308926d"}}) [ 1743.309015] RDX: 0000000020000100 RSI: 00000000c100565c RDI: 0000000000000003 [ 1743.316296] RBP: 00007f4325cea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1743.323574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1743.330853] R13: 00007fffd67cf40f R14: 00007f4325cea300 R15: 0000000000022000 15:35:37 executing program 2 (fault-call:1 fault-nth:5): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:37 executing program 1: r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000880), 0x80800) getrusage(0xffffffffffffffff, &(0x7f0000000140)) sendmsg$nl_crypto(r0, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)=@get={0xe8, 0x13, 0x800, 0x70bd2b, 0x25dfdbfd, {{'drbg_nopr_sha512\x00'}, '\x00', '\x00', 0x0, 0x2000}, [{0x8, 0x1, 0x6}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4040880}, 0x4004000) r1 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, &(0x7f0000000080)={0x1, 0x0, 0x1, 0x0, {0x6, 0x8c7e, 0xfffffe01}}) 15:35:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x7, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:37 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:37 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0285628, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:37 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) r1 = syz_open_dev$video(&(0x7f0000000040), 0x6, 0x44080) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000080)={0x7fff, 0xd4e3, @name="71e040d774fc0f29716ac046b71579180f983ba34c1a61ce20ef2fb7001e1bf9"}) 15:35:37 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0xc, 0x0, 0x0, {0x0, @sdr}}) 15:35:37 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0285629, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x8, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) [ 1743.502330] FAULT_INJECTION: forcing a failure. [ 1743.502330] name failslab, interval 1, probability 0, space 0, times 0 15:35:37 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(0xffffffffffffffff, 0x80044dff, &(0x7f0000000040)) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) [ 1743.597289] CPU: 0 PID: 9177 Comm: syz-executor.2 Not tainted 4.19.195-syzkaller #0 [ 1743.605122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1743.614481] Call Trace: [ 1743.617083] dump_stack+0x1fc/0x2ef [ 1743.620733] should_fail.cold+0xa/0xf [ 1743.624680] ? setup_fault_attr+0x200/0x200 [ 1743.629019] ? lock_acquire+0x170/0x3c0 [ 1743.633056] __should_failslab+0x115/0x180 [ 1743.637302] should_failslab+0x5/0x10 [ 1743.641110] __kmalloc+0x2ab/0x3c0 [ 1743.644662] ? __vb2_queue_alloc+0xe2/0xe60 [ 1743.648995] __vb2_queue_alloc+0xe2/0xe60 [ 1743.653170] vb2_core_create_bufs+0x273/0x7e0 [ 1743.657929] ? __vb2_queue_free+0x870/0x870 [ 1743.662270] ? mutex_trylock+0x1a0/0x1a0 [ 1743.666348] vb2_create_bufs+0x332/0x620 [ 1743.670428] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1743.675547] ? __video_do_ioctl+0x632/0xcd0 [ 1743.679886] ? mutex_trylock+0x1a0/0x1a0 [ 1743.683964] ? mark_held_locks+0xf0/0xf0 [ 1743.688051] ? __lock_acquire+0x6de/0x3ff0 [ 1743.692304] vb2_ioctl_create_bufs+0x20d/0x360 [ 1743.696895] ? memset+0x20/0x40 [ 1743.700187] v4l_create_bufs+0xb2/0x160 [ 1743.704178] __video_do_ioctl+0x49a/0xcd0 [ 1743.708347] ? v4l_querycap+0x340/0x340 [ 1743.712336] ? __might_fault+0x192/0x1d0 [ 1743.716407] ? v4l_querycap+0x340/0x340 [ 1743.720393] video_usercopy+0x13f/0xfa0 [ 1743.724385] ? v4l_enumstd+0x60/0x60 [ 1743.728113] ? get_pid_task+0xf4/0x190 [ 1743.732047] ? mark_held_locks+0xf0/0xf0 [ 1743.736295] ? proc_fail_nth_write+0x95/0x1d0 [ 1743.740802] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 1743.745760] ? video_usercopy+0xfa0/0xfa0 [ 1743.749933] v4l2_ioctl+0x147/0x1a0 [ 1743.753854] ? video_devdata+0xa0/0xa0 [ 1743.757756] do_vfs_ioctl+0xcdb/0x12e0 [ 1743.761676] ? lock_downgrade+0x720/0x720 [ 1743.766219] ? check_preemption_disabled+0x41/0x280 [ 1743.771507] ? ioctl_preallocate+0x200/0x200 [ 1743.776039] ? __fget+0x356/0x510 [ 1743.779935] ? do_dup2+0x450/0x450 [ 1743.783478] ? vfs_write+0x393/0x540 [ 1743.787259] ? fput+0x2b/0x190 [ 1743.790455] ksys_ioctl+0x9b/0xc0 [ 1743.793918] __x64_sys_ioctl+0x6f/0xb0 [ 1743.797848] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1743.802417] do_syscall_64+0xf9/0x620 [ 1743.806209] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1743.811392] RIP: 0033:0x4665d9 [ 1743.814684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1743.833590] RSP: 002b:00007f4325cea188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1743.841322] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 15:35:38 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:38 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x0, 0xfffffffd}) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000140)={0x0, @bt={0xf1, 0x1, 0x0, 0x1, 0x5dc, 0xf212, 0xffffffe0, 0x8, 0x4, 0x1, 0x7f, 0x400, 0xb12e, 0x9, 0x10, 0x2, {0x48, 0x7}, 0x1, 0xc6}}) [ 1743.848605] RDX: 0000000020000100 RSI: 00000000c100565c RDI: 0000000000000003 [ 1743.855877] RBP: 00007f4325cea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1743.863154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1743.870501] R13: 00007fffd67cf40f R14: 00007f4325cea300 R15: 0000000000022000 15:35:38 executing program 2 (fault-call:1 fault-nth:6): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:38 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0xc00, 0x0, 0x0, {0x0, @sdr}}) 15:35:38 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040), 0xff, 0x400000) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000080)={0x9, "a37e812af0f119dabec6d6cb13e2937748e40c23aea50f6226786d3057352961", 0x3, 0x2, 0x1, 0x2000000, 0x10, 0x4}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) 15:35:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0xe, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:38 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x88, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000054}, 0x4) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) 15:35:38 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0xf, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:38 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x1000000, 0x0, 0x0, {0x0, @sdr}}) [ 1744.051000] FAULT_INJECTION: forcing a failure. [ 1744.051000] name failslab, interval 1, probability 0, space 0, times 0 15:35:38 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000100)={0x7, 0xa, 0x1, "d93f5981dddda8e68a2cd687b2d19923bcc237a1b38a6695465526abfdd40b6c", 0x31303553}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000040)={0x0, @reserved}) [ 1744.135227] CPU: 0 PID: 9225 Comm: syz-executor.2 Not tainted 4.19.195-syzkaller #0 [ 1744.143064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1744.152861] Call Trace: [ 1744.155461] dump_stack+0x1fc/0x2ef [ 1744.159106] should_fail.cold+0xa/0xf [ 1744.162997] ? setup_fault_attr+0x200/0x200 [ 1744.167439] ? lock_acquire+0x170/0x3c0 [ 1744.171443] __should_failslab+0x115/0x180 [ 1744.176126] should_failslab+0x5/0x10 [ 1744.180207] __kmalloc+0x2ab/0x3c0 15:35:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x60, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) [ 1744.183928] ? __vb2_queue_alloc+0xe2/0xe60 [ 1744.188350] __vb2_queue_alloc+0xe2/0xe60 [ 1744.192609] vb2_core_create_bufs+0x273/0x7e0 [ 1744.197112] ? __vb2_queue_free+0x870/0x870 [ 1744.201442] ? mutex_trylock+0x1a0/0x1a0 [ 1744.205603] vb2_create_bufs+0x332/0x620 [ 1744.209675] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1744.214785] ? __video_do_ioctl+0x632/0xcd0 [ 1744.219123] ? mutex_trylock+0x1a0/0x1a0 [ 1744.223191] ? mark_held_locks+0xf0/0xf0 [ 1744.227261] ? __lock_acquire+0x6de/0x3ff0 [ 1744.231504] vb2_ioctl_create_bufs+0x20d/0x360 [ 1744.236095] ? memset+0x20/0x40 [ 1744.239394] v4l_create_bufs+0xb2/0x160 [ 1744.243383] __video_do_ioctl+0x49a/0xcd0 [ 1744.247543] ? v4l_querycap+0x340/0x340 [ 1744.251530] ? __might_fault+0x192/0x1d0 [ 1744.255611] ? v4l_querycap+0x340/0x340 [ 1744.259597] video_usercopy+0x13f/0xfa0 [ 1744.263850] ? v4l_enumstd+0x60/0x60 [ 1744.267571] ? get_pid_task+0xf4/0x190 [ 1744.271466] ? mark_held_locks+0xf0/0xf0 [ 1744.275531] ? proc_fail_nth_write+0x95/0x1d0 [ 1744.280068] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 1744.285024] ? video_usercopy+0xfa0/0xfa0 [ 1744.289181] v4l2_ioctl+0x147/0x1a0 [ 1744.292831] ? video_devdata+0xa0/0xa0 [ 1744.296904] do_vfs_ioctl+0xcdb/0x12e0 [ 1744.300799] ? lock_downgrade+0x720/0x720 [ 1744.304948] ? check_preemption_disabled+0x41/0x280 [ 1744.309988] ? ioctl_preallocate+0x200/0x200 [ 1744.314453] ? __fget+0x356/0x510 [ 1744.317922] ? do_dup2+0x450/0x450 [ 1744.321564] ? vfs_write+0x393/0x540 [ 1744.325294] ? fput+0x2b/0x190 [ 1744.328600] ksys_ioctl+0x9b/0xc0 [ 1744.332071] __x64_sys_ioctl+0x6f/0xb0 [ 1744.335972] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1744.340562] do_syscall_64+0xf9/0x620 [ 1744.344533] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1744.350003] RIP: 0033:0x4665d9 [ 1744.353203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1744.372197] RSP: 002b:00007f4325cea188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 15:35:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0xf0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:38 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0xb0000) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000140)={0x1, 0x31364d4e, 0x4, 0x200, 0x1, @stepwise={{0x8000, 0x1f}, {0x3ff, 0x7}, {0xffffffc0, 0x3a}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) syz_open_dev$video(&(0x7f0000000040), 0x6, 0x42100) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000080)={0x0, 0x0, {0x8, 0x6, 0x9, 0x1f}}) [ 1744.379912] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1744.387190] RDX: 0000000020000100 RSI: 00000000c100565c RDI: 0000000000000003 [ 1744.394472] RBP: 00007f4325cea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1744.401750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1744.409029] R13: 00007fffd67cf40f R14: 00007f4325cea300 R15: 0000000000022000 15:35:38 executing program 2 (fault-call:1 fault-nth:7): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:38 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc058560f, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:38 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0xc000000, 0x0, 0x0, {0x0, @sdr}}) 15:35:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:38 executing program 1: write$apparmor_current(0xffffffffffffffff, &(0x7f00000001c0)=@profile={'changeprofile ', ')%>[\x00'}, 0x13) r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000040)={0x3, "4366e768d92e20805d4946f8e391a90b8771eecde7cb9b339fba30b1cb662454", 0x3, 0x20, 0x5, 0x8ea4a5577ec01c1e, 0x0, 0x8}) ioctl$VIDIOC_S_JPEGCOMP(r0, 0x408c563e, &(0x7f0000000200)={0xffffff3d, 0x0, 0x2b, "6ce2a9db1bed5612cd41546483fd99c080b84f81e625b8dcd8a5652d6781b2e2729ab2ae525f7cb6f3b591cfadbacb114da1eee9c3eb0ea3c5fd259e", 0x37, "3f534c192be868120ad219e400a16ed2bc2fc81abb81cbfd7081270a0f177de6dffb161e006a9d42e8c09636bdf74acc0d1ad7ebc3ca11627f1ff9cb", 0x40}) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000140)={0x0, 0x0, {0x6, 0x0, 0x4, 0x1000}}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x20, 0x80, {0x77359400}, {0x6, 0x0, 0x0, 0x6, 0x3f, 0x5, "2713005a"}, 0x1, 0x2, @fd=0xffffffffffffffff, 0x8}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000340)={0x8, 0x5, 0x4, 0xe000, 0x1000, {0x77359400}, {0x3, 0xc, 0x6, 0x0, 0x80, 0xfd, "04c8644c"}, 0x80000000, 0x3, @fd, 0x0, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000003c0)={0x7fffffff, 0x6, 0x4, 0x100, 0x4, {}, {0x4, 0x8, 0x1, 0x61, 0x1, 0xf8, "4b5381ec"}, 0x1f, 0x1, @fd=r2, 0x2, 0x0, r3}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x5, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) 15:35:38 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x16, 0x7, 0x4, 0x8, 0x580, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x4, 0x8, 0x1000, 0x51, r0, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1}, 0x40) syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1, 0x8, [@local, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0x25}, @multicast2]}, 0x30) [ 1744.584231] FAULT_INJECTION: forcing a failure. [ 1744.584231] name failslab, interval 1, probability 0, space 0, times 0 15:35:38 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0585611, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) [ 1744.649922] CPU: 1 PID: 9265 Comm: syz-executor.2 Not tainted 4.19.195-syzkaller #0 [ 1744.657841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1744.667206] Call Trace: [ 1744.669812] dump_stack+0x1fc/0x2ef [ 1744.673462] should_fail.cold+0xa/0xf [ 1744.677279] ? setup_fault_attr+0x200/0x200 [ 1744.681704] ? lock_acquire+0x170/0x3c0 [ 1744.685742] __should_failslab+0x115/0x180 [ 1744.690000] should_failslab+0x5/0x10 [ 1744.693814] __kmalloc+0x2ab/0x3c0 [ 1744.697365] ? __vb2_queue_alloc+0xe2/0xe60 [ 1744.701713] __vb2_queue_alloc+0xe2/0xe60 [ 1744.705890] vb2_core_create_bufs+0x273/0x7e0 [ 1744.710403] ? __vb2_queue_free+0x870/0x870 [ 1744.714739] ? mutex_trylock+0x1a0/0x1a0 [ 1744.718828] vb2_create_bufs+0x332/0x620 [ 1744.722907] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1744.728031] ? __video_do_ioctl+0x632/0xcd0 [ 1744.732486] ? mutex_trylock+0x1a0/0x1a0 [ 1744.736852] ? mark_held_locks+0xf0/0xf0 [ 1744.740928] ? __lock_acquire+0x6de/0x3ff0 [ 1744.745180] vb2_ioctl_create_bufs+0x20d/0x360 [ 1744.749773] ? memset+0x20/0x40 [ 1744.753069] v4l_create_bufs+0xb2/0x160 [ 1744.757144] __video_do_ioctl+0x49a/0xcd0 [ 1744.761310] ? v4l_querycap+0x340/0x340 [ 1744.765325] ? __might_fault+0x192/0x1d0 [ 1744.769483] ? v4l_querycap+0x340/0x340 [ 1744.773616] video_usercopy+0x13f/0xfa0 [ 1744.777731] ? v4l_enumstd+0x60/0x60 [ 1744.781656] ? get_pid_task+0xf4/0x190 [ 1744.785565] ? mark_held_locks+0xf0/0xf0 [ 1744.789643] ? proc_fail_nth_write+0x95/0x1d0 [ 1744.794334] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 1744.799524] ? video_usercopy+0xfa0/0xfa0 [ 1744.803794] v4l2_ioctl+0x147/0x1a0 [ 1744.807441] ? video_devdata+0xa0/0xa0 [ 1744.811351] do_vfs_ioctl+0xcdb/0x12e0 [ 1744.815306] ? lock_downgrade+0x720/0x720 [ 1744.819572] ? check_preemption_disabled+0x41/0x280 [ 1744.824887] ? ioctl_preallocate+0x200/0x200 [ 1744.829401] ? __fget+0x356/0x510 [ 1744.832870] ? do_dup2+0x450/0x450 [ 1744.836418] ? vfs_write+0x393/0x540 [ 1744.840148] ? fput+0x2b/0x190 [ 1744.843358] ksys_ioctl+0x9b/0xc0 [ 1744.846823] __x64_sys_ioctl+0x6f/0xb0 [ 1744.850722] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1744.855401] do_syscall_64+0xf9/0x620 [ 1744.859221] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1744.864508] RIP: 0033:0x4665d9 [ 1744.867710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1744.887861] RSP: 002b:00007f4325cea188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 15:35:38 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:38 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:39 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x8, 0x3, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x5, 0x7, 0x7, 0x2, 0x4}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x1}], &(0x7f0000000240)='GPL\x00', 0x1b0c, 0x5c, &(0x7f0000000280)=""/92, 0x40f00, 0x6, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x10, 0x2, 0xffffffff}, 0x10, 0xffffffffffffffff}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1b, 0x7, &(0x7f0000000040)=@raw=[@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000080)='syzkaller\x00', 0x5, 0x24, &(0x7f0000000140)=""/36, 0x41100, 0x5, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x2, 0xfffffff9, 0x1}, 0x10, 0xffffffffffffffff, r0}, 0x78) r1 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) 15:35:39 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0xc, 0x0, {0x0, @sdr}}) 15:35:39 executing program 1: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000140)={0x239f, 0x101, "f2b9ae1e9b8c19f760ef1b221b3fafb6440f114d84287210b5ad0e2556afec93", 0x7, 0x8, 0x4, 0x1}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x100, 0x10000000, {}, {0x3, 0x1, 0x0, 0x2, 0x0, 0x8, "311d8306"}, 0x0, 0x0, @offset=0x5, 0x7f}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x2, 0x7, 0x4, 0x4000, 0x9, {0x77359400}, {0x5, 0xc, 0x20, 0x8, 0x0, 0x0, "5c53a373"}, 0x8, 0x3, @userptr, 0x1}) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000040)) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f00000000c0)={0x7f7fffff, 0x3, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) socket$inet(0x2, 0x1, 0x9) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000080)={0x9b0000, 0x1, 0x4, r1, 0x0, &(0x7f0000000000)={0xa2093d, 0xffffffe0, '\x00', @value64=0x800}}) [ 1744.895666] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1744.902954] RDX: 0000000020000100 RSI: 00000000c100565c RDI: 0000000000000003 [ 1744.910316] RBP: 00007f4325cea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1744.917595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1744.924963] R13: 00007fffd67cf40f R14: 00007f4325cea300 R15: 0000000000022000 15:35:39 executing program 2 (fault-call:1 fault-nth:8): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x500, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:39 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x1030c2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0xf000000, 0x100, 0x6, r0, 0x0, &(0x7f0000000080)={0x990a7b, 0x81, '\x00', @p_u16=&(0x7f0000000040)=0x65}}) 15:35:39 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0xc00, 0x0, {0x0, @sdr}}) 15:35:39 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:39 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) [ 1745.130149] FAULT_INJECTION: forcing a failure. [ 1745.130149] name failslab, interval 1, probability 0, space 0, times 0 [ 1745.169650] CPU: 1 PID: 9324 Comm: syz-executor.2 Not tainted 4.19.195-syzkaller #0 [ 1745.177486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1745.187031] Call Trace: [ 1745.189635] dump_stack+0x1fc/0x2ef [ 1745.193283] should_fail.cold+0xa/0xf [ 1745.197109] ? setup_fault_attr+0x200/0x200 [ 1745.201448] ? lock_acquire+0x170/0x3c0 [ 1745.205530] __should_failslab+0x115/0x180 [ 1745.209785] should_failslab+0x5/0x10 [ 1745.213737] __kmalloc+0x2ab/0x3c0 [ 1745.217370] ? __vb2_queue_alloc+0xe2/0xe60 [ 1745.221707] __vb2_queue_alloc+0xe2/0xe60 15:35:39 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x1000000, 0x0, {0x0, @sdr}}) 15:35:39 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0xc000000, 0x0, {0x0, @sdr}}) [ 1745.225883] vb2_core_create_bufs+0x273/0x7e0 [ 1745.231091] ? __vb2_queue_free+0x870/0x870 [ 1745.235431] ? mutex_trylock+0x1a0/0x1a0 [ 1745.239774] vb2_create_bufs+0x332/0x620 [ 1745.243864] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1745.248975] ? __video_do_ioctl+0x632/0xcd0 [ 1745.253314] ? mutex_trylock+0x1a0/0x1a0 [ 1745.257480] ? mark_held_locks+0xf0/0xf0 [ 1745.261659] ? __lock_acquire+0x6de/0x3ff0 [ 1745.265913] vb2_ioctl_create_bufs+0x20d/0x360 [ 1745.270608] ? memset+0x20/0x40 [ 1745.274007] v4l_create_bufs+0xb2/0x160 15:35:39 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) [ 1745.278084] __video_do_ioctl+0x49a/0xcd0 [ 1745.282344] ? v4l_querycap+0x340/0x340 [ 1745.286339] ? __might_fault+0x192/0x1d0 [ 1745.290427] ? v4l_querycap+0x340/0x340 [ 1745.294427] video_usercopy+0x13f/0xfa0 [ 1745.298421] ? v4l_enumstd+0x60/0x60 [ 1745.302151] ? get_pid_task+0xf4/0x190 [ 1745.306230] ? mark_held_locks+0xf0/0xf0 [ 1745.310306] ? proc_fail_nth_write+0x95/0x1d0 [ 1745.315182] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 1745.320150] ? video_usercopy+0xfa0/0xfa0 [ 1745.324485] v4l2_ioctl+0x147/0x1a0 15:35:39 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0xc, 0x0, 0x0, {0x0, @sdr}}) 15:35:39 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0xc, {0x0, @sdr}}) [ 1745.328121] ? video_devdata+0xa0/0xa0 [ 1745.332018] do_vfs_ioctl+0xcdb/0x12e0 [ 1745.335915] ? lock_downgrade+0x720/0x720 [ 1745.340161] ? check_preemption_disabled+0x41/0x280 [ 1745.345368] ? ioctl_preallocate+0x200/0x200 [ 1745.349804] ? __fget+0x356/0x510 [ 1745.353281] ? do_dup2+0x450/0x450 [ 1745.357015] ? vfs_write+0x393/0x540 [ 1745.360748] ? fput+0x2b/0x190 [ 1745.364046] ksys_ioctl+0x9b/0xc0 [ 1745.367518] __x64_sys_ioctl+0x6f/0xb0 [ 1745.371423] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1745.376979] do_syscall_64+0xf9/0x620 [ 1745.380854] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1745.386055] RIP: 0033:0x4665d9 [ 1745.389265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1745.408346] RSP: 002b:00007f4325cea188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1745.416068] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1745.423344] RDX: 0000000020000100 RSI: 00000000c100565c RDI: 0000000000000003 15:35:39 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0xc00, {0x0, @sdr}}) [ 1745.430617] RBP: 00007f4325cea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1745.437880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1745.445249] R13: 00007fffd67cf40f R14: 00007f4325cea300 R15: 0000000000022000 15:35:39 executing program 2 (fault-call:1 fault-nth:9): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x600, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:39 executing program 4: syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000180)) r1 = syz_open_dev$video(&(0x7f0000000040), 0x1, 0x101800) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000080)={0x0, @bt={0x6, 0xfffe, 0x0, 0x3, 0x2, 0xc6, 0x0, 0x7, 0x1f, 0xfffffffd, 0x7, 0x0, 0x29a5, 0x7, 0x0, 0x2, {0x2, 0x1870}, 0x3e, 0x1}}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_G_INPUT(r2, 0x80045626, &(0x7f0000000140)) 15:35:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, 0x0, 0x44080) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), r2) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7b}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) r3 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) 15:35:39 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x1000000, {0x0, @sdr}}) 15:35:39 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0xc00, 0x0, 0x0, {0x0, @sdr}}) 15:35:39 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x2, 0x100) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) r1 = gettid() sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x84, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x804}, 0x8040) 15:35:39 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0xc000000, {0x0, @sdr}}) [ 1745.628130] FAULT_INJECTION: forcing a failure. [ 1745.628130] name failslab, interval 1, probability 0, space 0, times 0 15:35:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x700, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:39 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x1000000, 0x0, 0x0, {0x0, @sdr}}) 15:35:39 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4e, 0x2300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x101, 0x3, 0x3}) syz_open_dev$video(&(0x7f0000000080), 0x6, 0x18000) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x9, 0x40, 0x7, 0x0, 0x800, 0x1, 0xfffffeff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x100}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x1}, @map={0x18, 0x4, 0x1, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_val={0x18, 0x2, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, @jmp={0x5, 0x1, 0x3, 0x1, 0x3, 0xfffffffffffffff8, 0xfffffffffffffff0}, @jmp={0x5, 0x0, 0x2, 0x8, 0x2, 0x30, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8ba7}, @btf_id={0x18, 0xd, 0x3, 0x0, 0x4}]}, &(0x7f0000000240)='syzkaller\x00', 0x10000, 0xd3, &(0x7f0000000280)=""/211, 0x51a2c56301b129e4, 0x0, '\x00', r2, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x5, 0x7, 0xf23fbf2c}, 0x10}, 0x78) [ 1745.738849] CPU: 0 PID: 9370 Comm: syz-executor.2 Not tainted 4.19.195-syzkaller #0 [ 1745.746683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1745.756358] Call Trace: [ 1745.758964] dump_stack+0x1fc/0x2ef [ 1745.762612] should_fail.cold+0xa/0xf [ 1745.766433] ? setup_fault_attr+0x200/0x200 [ 1745.770775] ? lock_acquire+0x170/0x3c0 [ 1745.774775] __should_failslab+0x115/0x180 [ 1745.779290] should_failslab+0x5/0x10 [ 1745.783107] __kmalloc+0x2ab/0x3c0 [ 1745.786662] ? __vb2_queue_alloc+0xe2/0xe60 [ 1745.791005] __vb2_queue_alloc+0xe2/0xe60 [ 1745.795184] vb2_core_create_bufs+0x273/0x7e0 [ 1745.799702] ? __vb2_queue_free+0x870/0x870 [ 1745.804050] ? mutex_trylock+0x1a0/0x1a0 [ 1745.808138] vb2_create_bufs+0x332/0x620 [ 1745.813091] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1745.818217] ? __video_do_ioctl+0x632/0xcd0 [ 1745.822566] ? mutex_trylock+0x1a0/0x1a0 [ 1745.826648] ? mark_held_locks+0xf0/0xf0 [ 1745.830730] ? __lock_acquire+0x6de/0x3ff0 [ 1745.834990] vb2_ioctl_create_bufs+0x20d/0x360 [ 1745.839788] ? memset+0x20/0x40 [ 1745.843089] v4l_create_bufs+0xb2/0x160 [ 1745.847175] __video_do_ioctl+0x49a/0xcd0 [ 1745.851535] ? v4l_querycap+0x340/0x340 [ 1745.855541] ? __might_fault+0x192/0x1d0 [ 1745.859623] ? v4l_querycap+0x340/0x340 [ 1745.863793] video_usercopy+0x13f/0xfa0 [ 1745.867795] ? v4l_enumstd+0x60/0x60 [ 1745.871587] ? get_pid_task+0xf4/0x190 [ 1745.871606] ? mark_held_locks+0xf0/0xf0 [ 1745.871620] ? proc_fail_nth_write+0x95/0x1d0 [ 1745.871633] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 1745.871660] ? video_usercopy+0xfa0/0xfa0 [ 1745.871671] v4l2_ioctl+0x147/0x1a0 [ 1745.871683] ? video_devdata+0xa0/0xa0 [ 1745.871698] do_vfs_ioctl+0xcdb/0x12e0 [ 1745.871716] ? lock_downgrade+0x720/0x720 [ 1745.909384] ? check_preemption_disabled+0x41/0x280 [ 1745.914519] ? ioctl_preallocate+0x200/0x200 [ 1745.918953] ? __fget+0x356/0x510 [ 1745.922466] ? do_dup2+0x450/0x450 [ 1745.926021] ? vfs_write+0x393/0x540 [ 1745.929751] ? fput+0x2b/0x190 [ 1745.932972] ksys_ioctl+0x9b/0xc0 [ 1745.936444] __x64_sys_ioctl+0x6f/0xb0 [ 1745.940350] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1745.944979] do_syscall_64+0xf9/0x620 [ 1745.948801] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1745.954003] RIP: 0033:0x4665d9 [ 1745.957207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1745.976204] RSP: 002b:00007f4325cea188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 15:35:40 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f0000000040)) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x0, 0x8, 0x4}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000140)={0x0, @reserved}) [ 1745.984049] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1745.991330] RDX: 0000000020000100 RSI: 00000000c100565c RDI: 0000000000000003 [ 1745.998719] RBP: 00007f4325cea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1746.005998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1746.013277] R13: 00007fffd67cf40f R14: 00007f4325cea300 R15: 0000000000022000 15:35:40 executing program 2 (fault-call:1 fault-nth:10): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0xe00, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:40 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0xc000000, 0x0, 0x0, {0x0, @sdr}}) 15:35:40 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:40 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000040)={0x3, 0x101, "02ff000000000000004c09f8f09ba276cfd757aefea8014400", 0x9, 0x0, 0x7, 0xc38, 0x1f8}) 15:35:40 executing program 1: ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000140)="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", 0x1000}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001380)={'wg2\x00'}) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000001200)={&(0x7f0000001140), 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x38, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x502f}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x1) r2 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x30000000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3fae}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000001280), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x24, r3, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40048055}, 0x20000000) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000013c0), 0x2, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r4, 0xc0485630, &(0x7f0000001400)={0x9, "5f370f6c4b2942c86227177548e8c72c5d03fa4c9189496bd673c49e645ff1a3", 0x3, 0x2, 0x5, 0x400, 0x4}) 15:35:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0xf00, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:40 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) [ 1746.159658] FAULT_INJECTION: forcing a failure. [ 1746.159658] name failslab, interval 1, probability 0, space 0, times 0 [ 1746.216359] CPU: 1 PID: 9420 Comm: syz-executor.2 Not tainted 4.19.195-syzkaller #0 [ 1746.224213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1746.233708] Call Trace: [ 1746.236317] dump_stack+0x1fc/0x2ef [ 1746.239967] should_fail.cold+0xa/0xf [ 1746.243785] ? setup_fault_attr+0x200/0x200 [ 1746.248130] ? lock_acquire+0x170/0x3c0 [ 1746.252126] __should_failslab+0x115/0x180 [ 1746.256816] should_failslab+0x5/0x10 [ 1746.260630] __kmalloc+0x2ab/0x3c0 [ 1746.264181] ? __vb2_queue_alloc+0xe2/0xe60 [ 1746.268606] __vb2_queue_alloc+0xe2/0xe60 [ 1746.272781] vb2_core_create_bufs+0x273/0x7e0 [ 1746.277380] ? __vb2_queue_free+0x870/0x870 [ 1746.281735] ? mutex_trylock+0x1a0/0x1a0 [ 1746.285906] vb2_create_bufs+0x332/0x620 [ 1746.289988] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1746.295191] ? __video_do_ioctl+0x632/0xcd0 [ 1746.299532] ? mutex_trylock+0x1a0/0x1a0 [ 1746.303611] ? mark_held_locks+0xf0/0xf0 [ 1746.307691] ? __lock_acquire+0x6de/0x3ff0 [ 1746.311947] vb2_ioctl_create_bufs+0x20d/0x360 15:35:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x4aa5, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) [ 1746.316628] ? memset+0x20/0x40 [ 1746.319924] v4l_create_bufs+0xb2/0x160 [ 1746.323920] __video_do_ioctl+0x49a/0xcd0 [ 1746.328093] ? v4l_querycap+0x340/0x340 [ 1746.332188] ? __might_fault+0x192/0x1d0 [ 1746.336265] ? v4l_querycap+0x340/0x340 [ 1746.340252] video_usercopy+0x13f/0xfa0 [ 1746.344245] ? v4l_enumstd+0x60/0x60 [ 1746.347969] ? get_pid_task+0xf4/0x190 [ 1746.351865] ? mark_held_locks+0xf0/0xf0 [ 1746.355930] ? proc_fail_nth_write+0x95/0x1d0 [ 1746.360435] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 1746.365394] ? video_usercopy+0xfa0/0xfa0 [ 1746.369687] v4l2_ioctl+0x147/0x1a0 [ 1746.373348] ? video_devdata+0xa0/0xa0 [ 1746.377234] do_vfs_ioctl+0xcdb/0x12e0 [ 1746.381107] ? lock_downgrade+0x720/0x720 [ 1746.385247] ? check_preemption_disabled+0x41/0x280 [ 1746.390420] ? ioctl_preallocate+0x200/0x200 [ 1746.394832] ? __fget+0x356/0x510 [ 1746.398287] ? do_dup2+0x450/0x450 [ 1746.401834] ? vfs_write+0x393/0x540 [ 1746.405532] ? fput+0x2b/0x190 [ 1746.408734] ksys_ioctl+0x9b/0xc0 [ 1746.412178] __x64_sys_ioctl+0x6f/0xb0 [ 1746.416051] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1746.420620] do_syscall_64+0xf9/0x620 [ 1746.424595] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1746.429775] RIP: 0033:0x4665d9 [ 1746.432962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1746.451878] RSP: 002b:00007f4325cea188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1746.459577] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 15:35:40 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0xc, @sdr}}) 15:35:40 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0xc, 0x0, {0x0, @sdr}}) [ 1746.466942] RDX: 0000000020000100 RSI: 00000000c100565c RDI: 0000000000000003 [ 1746.474198] RBP: 00007f4325cea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1746.481540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1746.488793] R13: 00007fffd67cf40f R14: 00007f4325cea300 R15: 0000000000022000 15:35:40 executing program 1: r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x2) socket(0x2a, 0x3, 0x5) pkey_free(r0) r2 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) pkey_free(r1) 15:35:40 executing program 2 (fault-call:1 fault-nth:11): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:40 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0xc00, @sdr}}) 15:35:40 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0xc00, 0x0, {0x0, @sdr}}) 15:35:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x6000, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:40 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000040)={0x1, 0x3, "691c05553cf497532d8237768b2a4f2cbaaad9db551ff47f4a4c4cb039720d82", 0x80000000, 0x2, 0x8001, 0xfffffffc}) 15:35:40 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000040)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000180)={0x10000, 0x31424752, 0x100, 0xfff, 0x1, @discrete={0x9}}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000e80)={0x10001, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x5, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x4020565b, &(0x7f0000000080)={0x4, 0x0, 0x2}) 15:35:40 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x1000000, 0x0, {0x0, @sdr}}) [ 1746.778820] FAULT_INJECTION: forcing a failure. [ 1746.778820] name failslab, interval 1, probability 0, space 0, times 0 [ 1746.814815] CPU: 0 PID: 9491 Comm: syz-executor.2 Not tainted 4.19.195-syzkaller #0 [ 1746.822643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1746.832003] Call Trace: [ 1746.834698] dump_stack+0x1fc/0x2ef [ 1746.838357] should_fail.cold+0xa/0xf [ 1746.842174] ? setup_fault_attr+0x200/0x200 [ 1746.846527] ? lock_acquire+0x170/0x3c0 [ 1746.850522] __should_failslab+0x115/0x180 [ 1746.854777] should_failslab+0x5/0x10 [ 1746.858588] __kmalloc+0x2ab/0x3c0 [ 1746.862230] ? __vb2_queue_alloc+0xe2/0xe60 [ 1746.866567] __vb2_queue_alloc+0xe2/0xe60 [ 1746.870796] vb2_core_create_bufs+0x273/0x7e0 15:35:41 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x1000000, @sdr}}) 15:35:41 executing program 4: clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x4, &(0x7f0000000300)) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000080)={0x5, 0x1, 0x4, 0x2, 0x8, {r0, r1/1000+10000}, {0x3, 0x4, 0x4, 0x1f, 0x40, 0xe9, "2ffad6c6"}, 0x3f, 0x3, @fd=0xffffffffffffffff, 0x9, 0x0, 0xffffffffffffffff}) r4 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000001c0)={0x3, 0x3, 0x4, 0x10000, 0x3, {r8, r9/1000+60000}, {0x4, 0x0, 0x4, 0x4, 0x6d, 0x1, "b9b8acc7"}, 0xb081, 0x1, @offset=0x6, 0x8, 0x0, r3}) ioctl$VIDIOC_QUERYBUF(r5, 0xc0585609, &(0x7f0000000280)={0x7, 0x8, 0x4, 0x4000, 0x1, {r6, r7/1000+60000}, {0x2, 0x0, 0x80, 0x4, 0x3, 0x80, "e7eedb3e"}, 0x4, 0x1, @fd=r2, 0x15883c4c, 0x0, r10}) 15:35:41 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0xc000000, @sdr}}) [ 1746.875306] ? __vb2_queue_free+0x870/0x870 [ 1746.879641] ? mutex_trylock+0x1a0/0x1a0 [ 1746.883794] vb2_create_bufs+0x332/0x620 [ 1746.888045] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1746.893288] ? __video_do_ioctl+0x632/0xcd0 [ 1746.897632] ? mutex_trylock+0x1a0/0x1a0 [ 1746.901710] ? mark_held_locks+0xf0/0xf0 [ 1746.905786] ? __lock_acquire+0x6de/0x3ff0 [ 1746.910036] vb2_ioctl_create_bufs+0x20d/0x360 [ 1746.914630] ? memset+0x20/0x40 [ 1746.917924] v4l_create_bufs+0xb2/0x160 [ 1746.921918] __video_do_ioctl+0x49a/0xcd0 [ 1746.926081] ? v4l_querycap+0x340/0x340 [ 1746.930081] ? __might_fault+0x192/0x1d0 [ 1746.934153] ? v4l_querycap+0x340/0x340 [ 1746.938137] video_usercopy+0x13f/0xfa0 [ 1746.942132] ? v4l_enumstd+0x60/0x60 [ 1746.945858] ? get_pid_task+0xf4/0x190 [ 1746.949772] ? mark_held_locks+0xf0/0xf0 [ 1746.953850] ? proc_fail_nth_write+0x95/0x1d0 [ 1746.958373] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 1746.963357] ? video_usercopy+0xfa0/0xfa0 [ 1746.967521] v4l2_ioctl+0x147/0x1a0 [ 1746.971280] ? video_devdata+0xa0/0xa0 [ 1746.975178] do_vfs_ioctl+0xcdb/0x12e0 [ 1746.979090] ? lock_downgrade+0x720/0x720 [ 1746.983255] ? check_preemption_disabled+0x41/0x280 [ 1746.988386] ? ioctl_preallocate+0x200/0x200 [ 1746.992980] ? __fget+0x356/0x510 [ 1746.996543] ? do_dup2+0x450/0x450 [ 1747.000204] ? vfs_write+0x393/0x540 [ 1747.003940] ? fput+0x2b/0x190 [ 1747.007151] ksys_ioctl+0x9b/0xc0 [ 1747.010634] __x64_sys_ioctl+0x6f/0xb0 [ 1747.014536] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1747.019132] do_syscall_64+0xf9/0x620 [ 1747.023039] entry_SYSCALL_64_after_hwframe+0x49/0xbe 15:35:41 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0xc000000, 0x0, {0x0, @sdr}}) 15:35:41 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) [ 1747.028356] RIP: 0033:0x4665d9 [ 1747.031573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1747.050920] RSP: 002b:00007f4325cea188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1747.058810] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1747.066088] RDX: 0000000020000100 RSI: 00000000c100565c RDI: 0000000000000003 [ 1747.073366] RBP: 00007f4325cea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1747.080643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1747.088025] R13: 00007fffd67cf40f R14: 00007f4325cea300 R15: 0000000000022000 15:35:41 executing program 2 (fault-call:1 fault-nth:12): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0xa54a, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:41 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:41 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000200)) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, &(0x7f0000000040)={0x10001, "e386ada92da01466d52ad23570e81d1161099c96bf12a2a178d2721f51847ddb", 0x1, 0x4, 0x462e, 0x1000, 0x8}) r1 = syz_open_dev$video(&(0x7f0000000240), 0x7fffffff, 0x84000) ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000280)={0x0, @reserved}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @userptr=0x20}) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000140)={0x0, @reserved}) 15:35:41 executing program 4: ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x201, 0x1, 0x2}) 15:35:41 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr={0xc}}}) 15:35:41 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0xc, {0x0, @sdr}}) [ 1747.253148] FAULT_INJECTION: forcing a failure. [ 1747.253148] name failslab, interval 1, probability 0, space 0, times 0 15:35:41 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_G_INPUT(0xffffffffffffffff, 0x80045626, &(0x7f0000000040)) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0xfffffffc, 0x4, 0x2}) 15:35:41 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr={0xc00}}}) [ 1747.303865] CPU: 0 PID: 9529 Comm: syz-executor.2 Not tainted 4.19.195-syzkaller #0 [ 1747.311694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1747.321061] Call Trace: [ 1747.323678] dump_stack+0x1fc/0x2ef [ 1747.327328] should_fail.cold+0xa/0xf [ 1747.331159] ? setup_fault_attr+0x200/0x200 [ 1747.335493] ? lock_acquire+0x170/0x3c0 [ 1747.339492] __should_failslab+0x115/0x180 [ 1747.343746] should_failslab+0x5/0x10 [ 1747.347908] __kmalloc+0x2ab/0x3c0 [ 1747.351633] ? __vb2_queue_alloc+0xe2/0xe60 [ 1747.355971] __vb2_queue_alloc+0xe2/0xe60 [ 1747.360255] vb2_core_create_bufs+0x273/0x7e0 [ 1747.364766] ? __vb2_queue_free+0x870/0x870 [ 1747.369191] ? mutex_trylock+0x1a0/0x1a0 [ 1747.373282] vb2_create_bufs+0x332/0x620 [ 1747.377453] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1747.382830] ? __video_do_ioctl+0x632/0xcd0 [ 1747.387426] ? mutex_trylock+0x1a0/0x1a0 [ 1747.391531] ? mark_held_locks+0xf0/0xf0 [ 1747.395606] ? __lock_acquire+0x6de/0x3ff0 [ 1747.399952] vb2_ioctl_create_bufs+0x20d/0x360 [ 1747.404550] ? memset+0x20/0x40 [ 1747.407844] v4l_create_bufs+0xb2/0x160 [ 1747.411919] __video_do_ioctl+0x49a/0xcd0 [ 1747.416080] ? v4l_querycap+0x340/0x340 [ 1747.420071] ? __might_fault+0x192/0x1d0 [ 1747.424151] ? v4l_querycap+0x340/0x340 [ 1747.428133] video_usercopy+0x13f/0xfa0 [ 1747.432123] ? v4l_enumstd+0x60/0x60 [ 1747.435854] ? get_pid_task+0xf4/0x190 [ 1747.439758] ? mark_held_locks+0xf0/0xf0 [ 1747.443926] ? proc_fail_nth_write+0x95/0x1d0 [ 1747.448434] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 1747.453423] ? video_usercopy+0xfa0/0xfa0 [ 1747.457677] v4l2_ioctl+0x147/0x1a0 [ 1747.461367] ? video_devdata+0xa0/0xa0 [ 1747.465267] do_vfs_ioctl+0xcdb/0x12e0 [ 1747.469169] ? lock_downgrade+0x720/0x720 [ 1747.473679] ? check_preemption_disabled+0x41/0x280 [ 1747.478708] ? ioctl_preallocate+0x200/0x200 [ 1747.483138] ? __fget+0x356/0x510 [ 1747.486654] ? do_dup2+0x450/0x450 [ 1747.490239] ? vfs_write+0x393/0x540 [ 1747.493970] ? fput+0x2b/0x190 [ 1747.497181] ksys_ioctl+0x9b/0xc0 [ 1747.500653] __x64_sys_ioctl+0x6f/0xb0 15:35:41 executing program 4: ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000040)={0x8, 0x1, 0xc, {0x200, 0x6, 0x4, 0x7fff}}) r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, 0x0, 0x0) r2 = accept4(0xffffffffffffffff, &(0x7f00000003c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000440)=0x80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r2) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in=@broadcast, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000200)=0xe8) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, r3, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) [ 1747.504637] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1747.509405] do_syscall_64+0xf9/0x620 [ 1747.513222] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1747.518605] RIP: 0033:0x4665d9 [ 1747.521901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1747.541167] RSP: 002b:00007f4325cea188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 15:35:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0xf000, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:41 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0xc00, {0x0, @sdr}}) [ 1747.548879] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1747.556156] RDX: 0000000020000100 RSI: 00000000c100565c RDI: 0000000000000003 [ 1747.563436] RBP: 00007f4325cea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1747.570808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1747.578087] R13: 00007fffd67cf40f R14: 00007f4325cea300 R15: 0000000000022000 15:35:41 executing program 2 (fault-call:1 fault-nth:13): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:41 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr={0x1000000}}}) 15:35:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x30000, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:41 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, "311d8306"}, 0x0, 0x0, @fd, 0x1}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000240)={0x6, 0x2, 0x4, 0xe000, 0x3, {}, {0x1, 0x1, 0x7, 0x1, 0x4, 0x1, "1e5b6a5e"}, 0x5, 0x1, @fd=0xffffffffffffffff, 0xffffffff}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000002c0)={0x2, 0x4, 0x4, 0x2, 0x7, {r2, r3/1000+60000}, {0x5, 0x8, 0x8, 0x20, 0x3f, 0x0, "9aa862b3"}, 0x4, 0x1, @fd=r4, 0x20}) 15:35:41 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000140)={0xf5affff, 0x5, 0x3, r0, 0x0, &(0x7f0000000100)={0x9e0905, 0x200, '\x00', @p_u16=&(0x7f00000000c0)=0x13a}}) r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'stack ', '/dev/video#\x00'}, 0x12) 15:35:41 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x1000000, {0x0, @sdr}}) 15:35:42 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr={0xc000000}}}) [ 1747.786834] FAULT_INJECTION: forcing a failure. [ 1747.786834] name failslab, interval 1, probability 0, space 0, times 0 15:35:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x34000, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) [ 1747.858224] CPU: 0 PID: 9582 Comm: syz-executor.2 Not tainted 4.19.195-syzkaller #0 [ 1747.866077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1747.875435] Call Trace: [ 1747.878049] dump_stack+0x1fc/0x2ef [ 1747.881694] should_fail.cold+0xa/0xf [ 1747.885510] ? setup_fault_attr+0x200/0x200 [ 1747.889846] ? lock_acquire+0x170/0x3c0 [ 1747.893836] __should_failslab+0x115/0x180 [ 1747.898085] should_failslab+0x5/0x10 [ 1747.901904] __kmalloc+0x2ab/0x3c0 [ 1747.905449] ? __vb2_queue_alloc+0xe2/0xe60 [ 1747.909916] __vb2_queue_alloc+0xe2/0xe60 [ 1747.914089] vb2_core_create_bufs+0x273/0x7e0 [ 1747.918604] ? __vb2_queue_free+0x870/0x870 [ 1747.922942] ? mutex_trylock+0x1a0/0x1a0 [ 1747.927021] vb2_create_bufs+0x332/0x620 [ 1747.931097] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1747.936215] ? __video_do_ioctl+0x632/0xcd0 [ 1747.940546] ? mutex_trylock+0x1a0/0x1a0 [ 1747.944614] ? mark_held_locks+0xf0/0xf0 [ 1747.948687] ? __lock_acquire+0x6de/0x3ff0 [ 1747.952934] vb2_ioctl_create_bufs+0x20d/0x360 [ 1747.957524] ? memset+0x20/0x40 [ 1747.960838] v4l_create_bufs+0xb2/0x160 [ 1747.964915] __video_do_ioctl+0x49a/0xcd0 [ 1747.969079] ? v4l_querycap+0x340/0x340 [ 1747.973085] ? __might_fault+0x192/0x1d0 [ 1747.977167] ? v4l_querycap+0x340/0x340 [ 1747.981151] video_usercopy+0x13f/0xfa0 [ 1747.985147] ? v4l_enumstd+0x60/0x60 [ 1747.988961] ? get_pid_task+0xf4/0x190 [ 1747.992861] ? mark_held_locks+0xf0/0xf0 [ 1747.996938] ? proc_fail_nth_write+0x95/0x1d0 [ 1748.001446] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 1748.006400] ? video_usercopy+0xfa0/0xfa0 [ 1748.010569] v4l2_ioctl+0x147/0x1a0 [ 1748.014290] ? video_devdata+0xa0/0xa0 [ 1748.018364] do_vfs_ioctl+0xcdb/0x12e0 [ 1748.022616] ? lock_downgrade+0x720/0x720 [ 1748.027046] ? check_preemption_disabled+0x41/0x280 [ 1748.032168] ? ioctl_preallocate+0x200/0x200 [ 1748.036851] ? __fget+0x356/0x510 [ 1748.040415] ? do_dup2+0x450/0x450 [ 1748.044051] ? vfs_write+0x393/0x540 [ 1748.048071] ? fput+0x2b/0x190 [ 1748.051406] ksys_ioctl+0x9b/0xc0 [ 1748.054883] __x64_sys_ioctl+0x6f/0xb0 15:35:42 executing program 4: syz_open_dev$video(&(0x7f0000000000), 0xb, 0x74200) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000080)=0x10, 0x0) accept4$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, &(0x7f0000000100)=0x10, 0x80800) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000140)={0x200, 0x1, 0x4}) 15:35:42 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:42 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr={0x0, 0xc}}}) [ 1748.058787] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1748.063408] do_syscall_64+0xf9/0x620 [ 1748.067243] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1748.072443] RIP: 0033:0x4665d9 [ 1748.075645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1748.094859] RSP: 002b:00007f4325cea188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 15:35:42 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0xc000000, {0x0, @sdr}}) [ 1748.103110] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1748.110477] RDX: 0000000020000100 RSI: 00000000c100565c RDI: 0000000000000003 [ 1748.117757] RBP: 00007f4325cea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1748.125296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1748.132757] R13: 00007fffd67cf40f R14: 00007f4325cea300 R15: 0000000000022000 15:35:42 executing program 2 (fault-call:1 fault-nth:14): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x400300, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:42 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr={0x0, 0xc00}}}) 15:35:42 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000140)={0xb, @sdr={0x32314247, 0x5}}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000040)={0x7fffdfff, 0x8, "8e65f20d2607839aec1ecd7fb17be2c75160f2b79f9211fdf767000000000002", 0x20, 0x7fff, 0x0, 0x2}) 15:35:42 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000180)={0x1, 0xc, 0x2}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x100, 0x3, 0x4, {0x3, @pix_mp={0x0, 0x1, 0x3032344d, 0x0, 0x5, [{0xa0000000, 0xe4e}, {0xffff, 0x9}, {0x0, 0x101}, {0x10000, 0x5}, {0x1, 0x8}, {0x59e0, 0xfe4}, {0x2b, 0x8}, {0x7fffffff, 0x4}], 0x2, 0x9, 0x7, 0x0, 0x5}}, 0x40}) 15:35:42 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:42 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r1) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) [ 1748.313369] FAULT_INJECTION: forcing a failure. [ 1748.313369] name failslab, interval 1, probability 0, space 0, times 0 [ 1748.368832] CPU: 0 PID: 9625 Comm: syz-executor.2 Not tainted 4.19.195-syzkaller #0 [ 1748.376836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1748.386318] Call Trace: [ 1748.388921] dump_stack+0x1fc/0x2ef [ 1748.392566] should_fail.cold+0xa/0xf [ 1748.396465] ? setup_fault_attr+0x200/0x200 [ 1748.400800] ? lock_acquire+0x170/0x3c0 [ 1748.404799] __should_failslab+0x115/0x180 [ 1748.409239] should_failslab+0x5/0x10 [ 1748.413056] __kmalloc+0x2ab/0x3c0 [ 1748.416607] ? __vb2_queue_alloc+0xe2/0xe60 [ 1748.421378] __vb2_queue_alloc+0xe2/0xe60 [ 1748.425594] vb2_core_create_bufs+0x273/0x7e0 [ 1748.430107] ? __vb2_queue_free+0x870/0x870 [ 1748.434444] ? mutex_trylock+0x1a0/0x1a0 [ 1748.438529] vb2_create_bufs+0x332/0x620 [ 1748.442606] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1748.447805] ? __video_do_ioctl+0x632/0xcd0 [ 1748.452138] ? mutex_trylock+0x1a0/0x1a0 [ 1748.456229] ? mark_held_locks+0xf0/0xf0 [ 1748.460312] ? __lock_acquire+0x6de/0x3ff0 [ 1748.464652] vb2_ioctl_create_bufs+0x20d/0x360 [ 1748.469248] ? memset+0x20/0x40 [ 1748.472548] v4l_create_bufs+0xb2/0x160 [ 1748.476542] __video_do_ioctl+0x49a/0xcd0 [ 1748.480706] ? v4l_querycap+0x340/0x340 [ 1748.484698] ? __might_fault+0x192/0x1d0 [ 1748.488776] ? v4l_querycap+0x340/0x340 [ 1748.492940] video_usercopy+0x13f/0xfa0 [ 1748.496936] ? v4l_enumstd+0x60/0x60 [ 1748.500725] ? get_pid_task+0xf4/0x190 [ 1748.504624] ? mark_held_locks+0xf0/0xf0 [ 1748.508691] ? proc_fail_nth_write+0x95/0x1d0 [ 1748.513197] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 1748.518146] ? video_usercopy+0xfa0/0xfa0 [ 1748.522311] v4l2_ioctl+0x147/0x1a0 [ 1748.525967] ? video_devdata+0xa0/0xa0 [ 1748.529863] do_vfs_ioctl+0xcdb/0x12e0 [ 1748.533758] ? lock_downgrade+0x720/0x720 [ 1748.538101] ? check_preemption_disabled+0x41/0x280 [ 1748.543231] ? ioctl_preallocate+0x200/0x200 [ 1748.547640] ? __fget+0x356/0x510 [ 1748.551185] ? do_dup2+0x450/0x450 [ 1748.555028] ? vfs_write+0x393/0x540 [ 1748.558729] ? fput+0x2b/0x190 [ 1748.561924] ksys_ioctl+0x9b/0xc0 [ 1748.565373] __x64_sys_ioctl+0x6f/0xb0 [ 1748.569450] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1748.574083] do_syscall_64+0xf9/0x620 [ 1748.577873] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1748.583247] RIP: 0033:0x4665d9 [ 1748.586520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1748.605492] RSP: 002b:00007f4325cea188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 15:35:42 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000140)={0x101, 0x2, 0x4, 0x4, 0x81, {0x77359400}, {0x1, 0x2, 0x83, 0x40, 0x7, 0x0, "a3e81100"}, 0x4, 0x2, @offset=0x1, 0x35}) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x40002, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r1, 0x80044dfb, &(0x7f0000000100)) ioctl$mixer_OSS_ALSAEMULVER(r1, 0x80044df9, &(0x7f0000000040)) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) 15:35:42 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0xc, @sdr}}) 15:35:42 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr={0x0, 0x1000000}}}) 15:35:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0xf0ffff, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) [ 1748.613278] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1748.620537] RDX: 0000000020000100 RSI: 00000000c100565c RDI: 0000000000000003 [ 1748.627887] RBP: 00007f4325cea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1748.635443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1748.642947] R13: 00007fffd67cf40f R14: 00007f4325cea300 R15: 0000000000022000 15:35:42 executing program 2 (fault-call:1 fault-nth:15): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:42 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x9a583) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) r1 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000080)) r2 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000140)={0xa00000, 0x8, 0x2, r2, 0x0, &(0x7f0000000000)={0x990906, 0x5, '\x00', @value=0xcad7}}) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_G_DV_TIMINGS(r3, 0xc0845658, &(0x7f0000000180)={0x0, @reserved}) [ 1748.786200] FAULT_INJECTION: forcing a failure. [ 1748.786200] name failslab, interval 1, probability 0, space 0, times 0 [ 1748.839457] CPU: 1 PID: 9663 Comm: syz-executor.2 Not tainted 4.19.195-syzkaller #0 [ 1748.847291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1748.856692] Call Trace: [ 1748.859295] dump_stack+0x1fc/0x2ef [ 1748.862940] should_fail.cold+0xa/0xf [ 1748.866760] ? setup_fault_attr+0x200/0x200 [ 1748.871103] ? lock_acquire+0x170/0x3c0 [ 1748.875100] __should_failslab+0x115/0x180 [ 1748.879355] should_failslab+0x5/0x10 [ 1748.883179] __kmalloc+0x2ab/0x3c0 15:35:43 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x900) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000001c0)={0x7fffffff, 0x0, "d3483c76d57cab5d79cd7fc67be2c75960f2b79f92c8adc3def46911fdf76700"}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$video(&(0x7f0000000140), 0x7, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000180)) [ 1748.886812] ? __vb2_queue_alloc+0xe2/0xe60 [ 1748.891237] __vb2_queue_alloc+0xe2/0xe60 [ 1748.895408] vb2_core_create_bufs+0x273/0x7e0 [ 1748.900064] ? __vb2_queue_free+0x870/0x870 [ 1748.904408] ? mutex_trylock+0x1a0/0x1a0 [ 1748.908489] vb2_create_bufs+0x332/0x620 [ 1748.912581] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1748.917696] ? __video_do_ioctl+0x632/0xcd0 [ 1748.922035] ? mutex_trylock+0x1a0/0x1a0 [ 1748.926109] ? mark_held_locks+0xf0/0xf0 [ 1748.930186] ? __lock_acquire+0x6de/0x3ff0 [ 1748.934436] vb2_ioctl_create_bufs+0x20d/0x360 [ 1748.939038] ? memset+0x20/0x40 [ 1748.942434] v4l_create_bufs+0xb2/0x160 [ 1748.946769] __video_do_ioctl+0x49a/0xcd0 [ 1748.950945] ? v4l_querycap+0x340/0x340 [ 1748.954938] ? __might_fault+0x192/0x1d0 [ 1748.959012] ? v4l_querycap+0x340/0x340 [ 1748.963080] video_usercopy+0x13f/0xfa0 [ 1748.967141] ? v4l_enumstd+0x60/0x60 [ 1748.970841] ? get_pid_task+0xf4/0x190 [ 1748.974889] ? mark_held_locks+0xf0/0xf0 [ 1748.978943] ? proc_fail_nth_write+0x95/0x1d0 [ 1748.983538] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 1748.988604] ? video_usercopy+0xfa0/0xfa0 [ 1748.992856] v4l2_ioctl+0x147/0x1a0 [ 1748.996661] ? video_devdata+0xa0/0xa0 [ 1749.000582] do_vfs_ioctl+0xcdb/0x12e0 [ 1749.004825] ? lock_downgrade+0x720/0x720 [ 1749.008974] ? check_preemption_disabled+0x41/0x280 [ 1749.014361] ? ioctl_preallocate+0x200/0x200 [ 1749.018758] ? __fget+0x356/0x510 [ 1749.022211] ? do_dup2+0x450/0x450 [ 1749.025874] ? vfs_write+0x393/0x540 [ 1749.029582] ? fput+0x2b/0x190 [ 1749.032769] ksys_ioctl+0x9b/0xc0 [ 1749.036209] __x64_sys_ioctl+0x6f/0xb0 [ 1749.040294] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1749.044952] do_syscall_64+0xf9/0x620 [ 1749.048750] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1749.053925] RIP: 0033:0x4665d9 [ 1749.057108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1749.076104] RSP: 002b:00007f4325cea188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 15:35:43 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0xc00, @sdr}}) 15:35:43 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x1000000, @sdr}}) 15:35:43 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr={0x0, 0xc000000}}}) 15:35:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x1000000, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) [ 1749.083819] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1749.091089] RDX: 0000000020000100 RSI: 00000000c100565c RDI: 0000000000000003 [ 1749.098437] RBP: 00007f4325cea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1749.105703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1749.113070] R13: 00007fffd67cf40f R14: 00007f4325cea300 R15: 0000000000022000 15:35:43 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000180)={0x1ff, 0x1, 0x4, 0x8, 0xb5e, {0x0, 0xea60}, {0x3, 0x8, 0x73, 0x7f, 0x3, 0x5, "b155d790"}, 0x7, 0x2, @offset=0x4, 0xe69, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000002c0)={0x21ac6745, 0x6, 0x3}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000280)={0xfffffffb, 0x5, 0x0, 0x0, 0x637d, 0x5, 0x9}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000200)={0xbf3a, 0x8, 0x4, 0x100000, 0x8001, {}, {0x5, 0x8, 0x1, 0x2, 0x1, 0xdd, "e254b7ac"}, 0x3, 0x1, @offset=0xfffffffc, 0x80000000, 0x0, r2}) getpeername$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @empty}, &(0x7f0000000140)=0x10) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000040)={0xcde, 0x2, 0xa6e, 0x4, 0x24fe, 0x0, 0x401}) 15:35:43 executing program 2 (fault-call:1 fault-nth:16): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:43 executing program 4: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0xffff, 0x4, 0x7, "eadb6ff9cfd1440b8689b48fb01654fc95601d7003935b549d8f5ee5689b8ddb", 0x2e58415a}) r1 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x20002) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) 15:35:43 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0xc000000, @sdr}}) 15:35:43 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x2000000, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:43 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) [ 1749.308774] FAULT_INJECTION: forcing a failure. [ 1749.308774] name failslab, interval 1, probability 0, space 0, times 0 15:35:43 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x800, 0x80000001, 0x3, {0x9, @pix_mp={0xffffffff, 0x8, 0x20323159, 0x3, 0x4, [{0xac, 0xfffff801}, {0x43a4877, 0xffff}, {0x5, 0x3}, {0xf3, 0x8001}, {0x101, 0x8}, {0xdca, 0x9}, {0x4, 0x4}, {0x4, 0x8}], 0x1, 0x9, 0x0, 0x1, 0x2}}, 0x446}) [ 1749.391477] CPU: 0 PID: 9710 Comm: syz-executor.2 Not tainted 4.19.195-syzkaller #0 [ 1749.399319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1749.408690] Call Trace: [ 1749.411681] dump_stack+0x1fc/0x2ef [ 1749.415331] should_fail.cold+0xa/0xf [ 1749.419168] ? setup_fault_attr+0x200/0x200 [ 1749.423769] ? lock_acquire+0x170/0x3c0 [ 1749.427779] __should_failslab+0x115/0x180 [ 1749.432036] should_failslab+0x5/0x10 [ 1749.435953] __kmalloc+0x2ab/0x3c0 [ 1749.439507] ? __vb2_queue_alloc+0xe2/0xe60 [ 1749.443933] __vb2_queue_alloc+0xe2/0xe60 [ 1749.448123] vb2_core_create_bufs+0x273/0x7e0 [ 1749.452744] ? __vb2_queue_free+0x870/0x870 [ 1749.457091] ? mutex_trylock+0x1a0/0x1a0 [ 1749.461184] vb2_create_bufs+0x332/0x620 [ 1749.465524] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1749.470943] ? __video_do_ioctl+0x632/0xcd0 [ 1749.475368] ? mutex_trylock+0x1a0/0x1a0 [ 1749.479446] ? mark_held_locks+0xf0/0xf0 [ 1749.483790] ? __lock_acquire+0x6de/0x3ff0 15:35:43 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr={0xc}}}) [ 1749.488115] vb2_ioctl_create_bufs+0x20d/0x360 [ 1749.492845] ? memset+0x20/0x40 [ 1749.496252] v4l_create_bufs+0xb2/0x160 [ 1749.500423] __video_do_ioctl+0x49a/0xcd0 [ 1749.504614] ? v4l_querycap+0x340/0x340 [ 1749.508866] ? __might_fault+0x192/0x1d0 [ 1749.513085] ? v4l_querycap+0x340/0x340 [ 1749.517070] video_usercopy+0x13f/0xfa0 [ 1749.521068] ? v4l_enumstd+0x60/0x60 [ 1749.524797] ? get_pid_task+0xf4/0x190 [ 1749.528785] ? mark_held_locks+0xf0/0xf0 [ 1749.532871] ? proc_fail_nth_write+0x95/0x1d0 15:35:43 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr={0xc00}}}) [ 1749.537559] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 1749.542606] ? video_usercopy+0xfa0/0xfa0 [ 1749.546761] v4l2_ioctl+0x147/0x1a0 [ 1749.550468] ? video_devdata+0xa0/0xa0 [ 1749.554364] do_vfs_ioctl+0xcdb/0x12e0 [ 1749.558314] ? lock_downgrade+0x720/0x720 [ 1749.562502] ? check_preemption_disabled+0x41/0x280 [ 1749.567720] ? ioctl_preallocate+0x200/0x200 [ 1749.572154] ? __fget+0x356/0x510 [ 1749.575617] ? do_dup2+0x450/0x450 [ 1749.579164] ? vfs_write+0x393/0x540 [ 1749.582886] ? fput+0x2b/0x190 [ 1749.586096] ksys_ioctl+0x9b/0xc0 [ 1749.589647] __x64_sys_ioctl+0x6f/0xb0 [ 1749.593546] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1749.598173] do_syscall_64+0xf9/0x620 [ 1749.601994] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1749.607217] RIP: 0033:0x4665d9 [ 1749.610419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1749.629504] RSP: 002b:00007f4325cea188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 15:35:43 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr={0x1000000}}}) 15:35:43 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}, 0xc}) 15:35:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x3000000, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) [ 1749.637493] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1749.644863] RDX: 0000000020000100 RSI: 00000000c100565c RDI: 0000000000000003 [ 1749.652195] RBP: 00007f4325cea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1749.659612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1749.667264] R13: 00007fffd67cf40f R14: 00007f4325cea300 R15: 0000000000022000 15:35:44 executing program 2 (fault-call:1 fault-nth:17): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:44 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr={0xc000000}}}) 15:35:44 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040), 0x9, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) 15:35:44 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}, 0xc00}) 15:35:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x4000000, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:44 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}, 0x1000000}) [ 1749.960667] FAULT_INJECTION: forcing a failure. [ 1749.960667] name failslab, interval 1, probability 0, space 0, times 0 15:35:44 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000140)={0x2, @pix_mp={0x1f, 0x4, 0x32314d54, 0x2, 0x15, [{0x0, 0x1}, {0xd2, 0x2}, {0x5, 0x4}, {0x9, 0x7}, {0x3, 0xffffffff}, {0x7ff, 0x483}, {0x41c, 0x3}, {0x0, 0x4}], 0x1, 0x7, 0x8, 0x2, 0x5}}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) 15:35:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x5000000, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:44 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) [ 1750.060955] CPU: 0 PID: 9775 Comm: syz-executor.2 Not tainted 4.19.195-syzkaller #0 [ 1750.068865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1750.078224] Call Trace: [ 1750.080825] dump_stack+0x1fc/0x2ef [ 1750.084559] should_fail.cold+0xa/0xf [ 1750.088457] ? setup_fault_attr+0x200/0x200 [ 1750.092873] ? lock_acquire+0x170/0x3c0 [ 1750.096863] __should_failslab+0x115/0x180 [ 1750.101118] should_failslab+0x5/0x10 [ 1750.104926] __kmalloc+0x2ab/0x3c0 15:35:44 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr={0x0, 0xc}}}) [ 1750.108469] ? __vb2_queue_alloc+0xe2/0xe60 [ 1750.112802] __vb2_queue_alloc+0xe2/0xe60 [ 1750.116978] vb2_core_create_bufs+0x273/0x7e0 [ 1750.121575] ? __vb2_queue_free+0x870/0x870 [ 1750.125912] ? mutex_trylock+0x1a0/0x1a0 [ 1750.129986] vb2_create_bufs+0x332/0x620 [ 1750.134166] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1750.139279] ? __video_do_ioctl+0x632/0xcd0 [ 1750.143616] ? mutex_trylock+0x1a0/0x1a0 [ 1750.147784] ? mark_held_locks+0xf0/0xf0 [ 1750.151858] ? __lock_acquire+0x6de/0x3ff0 [ 1750.156192] vb2_ioctl_create_bufs+0x20d/0x360 15:35:44 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr={0x0, 0xc00}}}) [ 1750.160789] ? memset+0x20/0x40 [ 1750.164079] v4l_create_bufs+0xb2/0x160 [ 1750.168067] __video_do_ioctl+0x49a/0xcd0 [ 1750.172246] ? v4l_querycap+0x340/0x340 [ 1750.176313] ? __might_fault+0x192/0x1d0 [ 1750.180386] ? v4l_querycap+0x340/0x340 [ 1750.184370] video_usercopy+0x13f/0xfa0 [ 1750.188357] ? v4l_enumstd+0x60/0x60 [ 1750.192081] ? get_pid_task+0xf4/0x190 [ 1750.195975] ? mark_held_locks+0xf0/0xf0 [ 1750.200043] ? proc_fail_nth_write+0x95/0x1d0 [ 1750.204590] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 1750.209624] ? video_usercopy+0xfa0/0xfa0 [ 1750.213784] v4l2_ioctl+0x147/0x1a0 [ 1750.217443] ? video_devdata+0xa0/0xa0 [ 1750.221343] do_vfs_ioctl+0xcdb/0x12e0 [ 1750.225359] ? lock_downgrade+0x720/0x720 [ 1750.229713] ? check_preemption_disabled+0x41/0x280 [ 1750.234917] ? ioctl_preallocate+0x200/0x200 [ 1750.239340] ? __fget+0x356/0x510 [ 1750.242811] ? do_dup2+0x450/0x450 [ 1750.246358] ? vfs_write+0x393/0x540 [ 1750.250082] ? fput+0x2b/0x190 [ 1750.253287] ksys_ioctl+0x9b/0xc0 [ 1750.256749] __x64_sys_ioctl+0x6f/0xb0 [ 1750.260648] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1750.265238] do_syscall_64+0xf9/0x620 [ 1750.269056] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1750.274261] RIP: 0033:0x4665d9 [ 1750.277485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1750.296503] RSP: 002b:00007f4325cea188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1750.304310] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 15:35:44 executing program 4: ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000300)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000340)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000380)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000440)={&(0x7f0000000400)=[0x0, 0x0, r2, r3, 0x0, r4, r5, 0x0, 0x0], 0x9}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000200)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x101, 0x6, 0x3, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f00000002c0)={&(0x7f0000000080)=[0x0, 0x0], &(0x7f0000000280)=[r1, r6, 0x0, 0x0, 0x0, r0], 0x2}) r7 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) [ 1750.311683] RDX: 0000000020000100 RSI: 00000000c100565c RDI: 0000000000000003 [ 1750.319057] RBP: 00007f4325cea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1750.326429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1750.333730] R13: 00007fffd67cf40f R14: 00007f4325cea300 R15: 0000000000022000 15:35:44 executing program 2 (fault-call:1 fault-nth:18): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:44 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}, 0xc000000}) 15:35:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x6000000, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:44 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x1, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x0, 0x10000, 0x0, 0x0, 0xe6}) 15:35:44 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr={0x0, 0x1000000}}}) 15:35:44 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000140)={0x0, @bt={0x31, 0x10001, 0x1, 0x1, 0x4, 0x4, 0x6, 0x50000, 0x8, 0x2, 0xe74e, 0x2, 0x101, 0x1, 0x5, 0x38, {0xba8, 0x4}, 0x0, 0x4}}) [ 1750.473254] FAULT_INJECTION: forcing a failure. [ 1750.473254] name failslab, interval 1, probability 0, space 0, times 0 [ 1750.513142] CPU: 0 PID: 9823 Comm: syz-executor.2 Not tainted 4.19.195-syzkaller #0 15:35:44 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000180)={0x7, 0xa, 0x0, "40f662dd5e026fe2eddfeb2682cea032dbb3d1d1c2f6f16fcd11568bf4a7d362", 0x34343459}) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000140)={0x0, 0x0, 0x2, '\x00', &(0x7f0000000100)=0x9}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000280)={0x1, 0x9, 0x4, 0x8, 0x8, {0x77359400}, {0x5, 0xc, 0x81, 0x5, 0x1, 0x5, "68281f30"}, 0xf4ca, 0x3, @offset=0x8, 0x1f, 0x0, r2}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000080)={0x68b23ea0, 0x5, 0x4, 0x100, 0x0, {r3, r4/1000+10000}, {0x6, 0xc, 0x1, 0x2, 0x5, 0x20, "5dd81f51"}, 0xec90, 0x2, @offset=0x8000, 0x9849}) [ 1750.520990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1750.530352] Call Trace: [ 1750.532954] dump_stack+0x1fc/0x2ef [ 1750.536685] should_fail.cold+0xa/0xf [ 1750.540500] ? setup_fault_attr+0x200/0x200 [ 1750.544835] ? lock_acquire+0x170/0x3c0 [ 1750.548829] __should_failslab+0x115/0x180 [ 1750.553082] should_failslab+0x5/0x10 [ 1750.556890] __kmalloc+0x2ab/0x3c0 [ 1750.560437] ? __vb2_queue_alloc+0xe2/0xe60 [ 1750.564808] __vb2_queue_alloc+0xe2/0xe60 [ 1750.569010] vb2_core_create_bufs+0x273/0x7e0 15:35:44 executing program 5: bpf$MAP_CREATE(0x7, &(0x7f0000000100), 0x40) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}, 0x3}) [ 1750.573516] ? __vb2_queue_free+0x870/0x870 [ 1750.577858] ? mutex_trylock+0x1a0/0x1a0 [ 1750.581939] vb2_create_bufs+0x332/0x620 [ 1750.586015] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1750.591132] ? __video_do_ioctl+0x632/0xcd0 [ 1750.595466] ? mutex_trylock+0x1a0/0x1a0 [ 1750.599542] ? mark_held_locks+0xf0/0xf0 [ 1750.603621] ? __lock_acquire+0x6de/0x3ff0 [ 1750.607894] vb2_ioctl_create_bufs+0x20d/0x360 [ 1750.612674] ? memset+0x20/0x40 [ 1750.616097] v4l_create_bufs+0xb2/0x160 [ 1750.620185] __video_do_ioctl+0x49a/0xcd0 [ 1750.624620] ? v4l_querycap+0x340/0x340 [ 1750.628702] ? __might_fault+0x192/0x1d0 [ 1750.632784] ? v4l_querycap+0x340/0x340 [ 1750.636780] video_usercopy+0x13f/0xfa0 [ 1750.640791] ? v4l_enumstd+0x60/0x60 [ 1750.644526] ? get_pid_task+0xf4/0x190 [ 1750.648429] ? mark_held_locks+0xf0/0xf0 [ 1750.652888] ? proc_fail_nth_write+0x95/0x1d0 [ 1750.657662] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 1750.662615] ? video_usercopy+0xfa0/0xfa0 [ 1750.666858] v4l2_ioctl+0x147/0x1a0 15:35:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x7000000, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) [ 1750.670501] ? video_devdata+0xa0/0xa0 [ 1750.674409] do_vfs_ioctl+0xcdb/0x12e0 [ 1750.678312] ? lock_downgrade+0x720/0x720 [ 1750.682476] ? check_preemption_disabled+0x41/0x280 [ 1750.687507] ? ioctl_preallocate+0x200/0x200 [ 1750.692025] ? __fget+0x356/0x510 [ 1750.695497] ? do_dup2+0x450/0x450 [ 1750.699059] ? vfs_write+0x393/0x540 [ 1750.702876] ? fput+0x2b/0x190 [ 1750.706346] ksys_ioctl+0x9b/0xc0 [ 1750.709814] __x64_sys_ioctl+0x6f/0xb0 [ 1750.713707] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1750.718299] do_syscall_64+0xf9/0x620 [ 1750.722117] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1750.727402] RIP: 0033:0x4665d9 [ 1750.730604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1750.749509] RSP: 002b:00007f4325cea188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1750.757226] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1750.764594] RDX: 0000000020000100 RSI: 00000000c100565c RDI: 0000000000000003 15:35:44 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr={0x0, 0xc000000}}}) [ 1750.771871] RBP: 00007f4325cea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1750.779261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1750.786549] R13: 00007fffd67cf40f R14: 00007f4325cea300 R15: 0000000000022000 15:35:45 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x1000, 0x0, {0x0, @sdr}}) 15:35:45 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0xf000000, 0xb4d, 0x80000000, r0, 0x0, &(0x7f0000000040)={0x9909d6, 0x80, '\x00', @value64}}) 15:35:45 executing program 2 (fault-call:1 fault-nth:19): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x8000000, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:45 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000001c0)={0x7, @pix_mp={0xfff, 0x3, 0x30314142, 0x5, 0x7, [{0x487, 0x5}, {0x3, 0x1}, {0x10000, 0x1}, {0x400, 0x7}, {0x1}, {0x6, 0x80000000}, {0x101, 0x4}, {0x5, 0x10000}], 0xe1, 0x6, 0x8, 0x1, 0x4}}) 15:35:45 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000040)={0x8, "4ee7db58ec2c0a6a17cb55ed89bde6c74c4ec50c480ae6f8fdd7fe2c3d126f7d", 0x1, 0x1}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) 15:35:45 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) [ 1750.993889] FAULT_INJECTION: forcing a failure. [ 1750.993889] name failslab, interval 1, probability 0, space 0, times 0 [ 1751.039955] CPU: 1 PID: 9876 Comm: syz-executor.2 Not tainted 4.19.195-syzkaller #0 [ 1751.047958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1751.057344] Call Trace: [ 1751.059953] dump_stack+0x1fc/0x2ef [ 1751.063631] should_fail.cold+0xa/0xf [ 1751.067446] ? setup_fault_attr+0x200/0x200 [ 1751.071782] ? lock_acquire+0x170/0x3c0 [ 1751.075773] __should_failslab+0x115/0x180 [ 1751.080025] should_failslab+0x5/0x10 [ 1751.083845] __kmalloc+0x2ab/0x3c0 [ 1751.087485] ? __vb2_queue_alloc+0xe2/0xe60 [ 1751.091822] __vb2_queue_alloc+0xe2/0xe60 [ 1751.096001] vb2_core_create_bufs+0x273/0x7e0 [ 1751.100521] ? __vb2_queue_free+0x870/0x870 [ 1751.104947] ? mutex_trylock+0x1a0/0x1a0 [ 1751.109025] vb2_create_bufs+0x332/0x620 [ 1751.113115] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1751.118227] ? __video_do_ioctl+0x632/0xcd0 [ 1751.122560] ? mutex_trylock+0x1a0/0x1a0 [ 1751.126632] ? mark_held_locks+0xf0/0xf0 [ 1751.130704] ? __lock_acquire+0x6de/0x3ff0 [ 1751.135040] vb2_ioctl_create_bufs+0x20d/0x360 15:35:45 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000040)={0x20, 0x1, 0x0, 0x4de, 0x3, 0x2, 0x5}) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f00000001c0)) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000200)={0xf3a0000, 0x7, 0xffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x9a090a, 0xfe9a, '\x00', @value64=0x6}}) 15:35:45 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040), 0x8001, 0x8900) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f00000001c0)={0x0, @reserved}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f0000000000)={0x1ff, 0x5}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0xfffffffd, 0xff67, 0x0, {0x7, @sdr}}) [ 1751.139630] ? memset+0x20/0x40 [ 1751.142917] v4l_create_bufs+0xb2/0x160 [ 1751.146905] __video_do_ioctl+0x49a/0xcd0 [ 1751.151075] ? v4l_querycap+0x340/0x340 [ 1751.155067] ? __might_fault+0x192/0x1d0 [ 1751.159141] ? v4l_querycap+0x340/0x340 [ 1751.163313] video_usercopy+0x13f/0xfa0 [ 1751.167312] ? v4l_enumstd+0x60/0x60 [ 1751.171041] ? get_pid_task+0xf4/0x190 [ 1751.174971] ? mark_held_locks+0xf0/0xf0 [ 1751.179045] ? proc_fail_nth_write+0x95/0x1d0 [ 1751.183553] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 1751.188777] ? video_usercopy+0xfa0/0xfa0 [ 1751.192942] v4l2_ioctl+0x147/0x1a0 [ 1751.196577] ? video_devdata+0xa0/0xa0 [ 1751.200451] do_vfs_ioctl+0xcdb/0x12e0 [ 1751.204430] ? lock_downgrade+0x720/0x720 [ 1751.208563] ? check_preemption_disabled+0x41/0x280 [ 1751.213564] ? ioctl_preallocate+0x200/0x200 [ 1751.218343] ? __fget+0x356/0x510 [ 1751.221794] ? do_dup2+0x450/0x450 [ 1751.225340] ? vfs_write+0x393/0x540 [ 1751.229174] ? fput+0x2b/0x190 [ 1751.232561] ksys_ioctl+0x9b/0xc0 [ 1751.236019] __x64_sys_ioctl+0x6f/0xb0 [ 1751.239921] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1751.244495] do_syscall_64+0xf9/0x620 [ 1751.248306] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1751.253490] RIP: 0033:0x4665d9 [ 1751.256666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1751.275577] RSP: 002b:00007f4325cea188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1751.283327] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 15:35:45 executing program 1: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000140)={0x9, 0x1, 0x4, 0x4, 0x7fff, {0x0, 0x2710}, {0x2, 0xc, 0x4, 0xfa, 0x20, 0x2, "2bbe85c2"}, 0x4, 0x4, @planes=&(0x7f0000000040)={0x1, 0x7, @fd, 0x4}, 0xfffffffa}) syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r0, &(0x7f00000001c0), 0xfffffffffffffe7c) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000200)={0x80000001, 0xff06ff, "a525c9badcaee05d45e16478112901502dc96b19c272c119", {0x2, 0x40}, 0x8}) 15:35:45 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x200, 0x1, 0x4}) 15:35:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0xe000000, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:45 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}, 0xc}) [ 1751.290581] RDX: 0000000020000100 RSI: 00000000c100565c RDI: 0000000000000003 [ 1751.298357] RBP: 00007f4325cea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1751.305611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1751.312876] R13: 00007fffd67cf40f R14: 00007f4325cea300 R15: 0000000000022000 15:35:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0xf000000, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:45 executing program 2 (fault-call:1 fault-nth:20): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:45 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}, 0xc00}) 15:35:45 executing program 4: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x52, "311d8306"}, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000000)={0x8, 0x1, 0x4, 0xe000, 0x9, {0x0, 0x2710}, {0x4, 0x8, 0xca, 0x58, 0x5, 0x5, "32c8d517"}, 0x7, 0x3, @offset=0x8, 0x7fff, 0x0, r1}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0xb, 0x1}) 15:35:45 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000080)={0x1, 0xf3}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x1, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x400000, 0x0, 0x10001}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000000040)={0xf, 0x0, 0x2, {0x8ed, 0x3bf2, 0x6, 0x1ff}}) 15:35:45 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000001c0)={0x0, 0x0, 0x1, {0x0, @sliced={0x4, [0x1, 0x5, 0x3b3e, 0x0, 0x400, 0xc07, 0x101, 0x2000, 0xd5f3, 0xaac4, 0x2, 0x8001, 0x9, 0x0, 0xff, 0x7, 0x2, 0x101, 0x5, 0xc1, 0x5, 0xea, 0x5, 0x1c, 0xee, 0x401, 0x2, 0xffe1, 0x0, 0x80, 0xffc1, 0x5, 0x390, 0x8000, 0xffff, 0x1ff, 0x3ff, 0x20, 0x1f, 0x16, 0xd499, 0x9, 0xe7e7, 0x7, 0x5, 0x101, 0x8, 0x401], 0x401}}, 0x2}) 15:35:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x60000000, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) [ 1751.610686] FAULT_INJECTION: forcing a failure. [ 1751.610686] name failslab, interval 1, probability 0, space 0, times 0 15:35:45 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}, 0x1000000}) [ 1751.672556] CPU: 1 PID: 9944 Comm: syz-executor.2 Not tainted 4.19.195-syzkaller #0 [ 1751.680377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1751.689777] Call Trace: [ 1751.692381] dump_stack+0x1fc/0x2ef [ 1751.696024] should_fail.cold+0xa/0xf [ 1751.699847] ? setup_fault_attr+0x200/0x200 [ 1751.704181] ? lock_acquire+0x170/0x3c0 [ 1751.708173] __should_failslab+0x115/0x180 [ 1751.712417] should_failslab+0x5/0x10 [ 1751.716225] __kmalloc+0x2ab/0x3c0 15:35:45 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000002c0)={0x3ad, 0xe0000000, 0x4, {0x7, @win={{0x8, 0x9, 0x0, 0x80000001}, 0x9, 0x3, &(0x7f0000000640)={{0x6, 0x4, 0x401, 0x7}, &(0x7f0000000600)={{0x6, 0xfffffffe, 0x3, 0x8}}}, 0x9, &(0x7f0000000680)="840af272b812822a8b6ee1dd362c0ba9bb71369a208178cc2648dc98d36aceeb8b82c18c07cf472a6b50d78c0dad8781571159acd7bdf4d3e21468f032db263de8d5eca780b9564adbdb099c3adf2269207ed05d00352c86d739ff9955a12a2630b10eff9b51596d2048a9ba5cd4a00e04f134d944c36a01378b571bdc4d7b9b800e89af2488e6616e87b3011f3207198259342d67dffd245e9f5cf834bddc576a8f67f4f60588c93da5f834e95cd67b263d29f8766d41ec2e1e434c837f2c37a2864c2ea04348669cbfd4be59fdc7cc199183", 0x1}}, 0x10000}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000580)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={r4, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000440)={0xf64ffff, 0x5, 0xfffffffc, r0, 0x0, &(0x7f0000000400)={0x990a77, 0x3, '\x00', @p_u8=&(0x7f00000003c0)=0x3}}) r7 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_TRY_FMT(r7, 0xc0d05640, &(0x7f0000000480)={0x3, @pix_mp={0x8001, 0x21f0, 0x34325842, 0x5, 0x1, [{0x0, 0x5}, {0x1, 0x7}, {0x7fffffff, 0xffffffff}, {0x7, 0x1}, {0x8, 0x3}, {0x7, 0xdc95}, {0x9c}, {0x1ff}], 0x0, 0x7, 0x0, 0x2, 0x7}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000240)={0x5, 0x9, 0x4, 0x8, 0x3, {r5, r6/1000+10000}, {0x5, 0x1, 0x1f, 0x0, 0xbc, 0x81, "707df344"}, 0xff18, 0x4, @planes=&(0x7f0000000200)={0x15, 0x0, @fd, 0x1}, 0xff, 0x0, r2}) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, &(0x7f0000000000)) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc0405610, &(0x7f00000000c0)={0xfffffae0, 0x0, 0x4, {0x3, @pix_mp={0xe48, 0x101, 0x31364d59, 0x9, 0x2, [{0xffffffff, 0xfffffc00}, {0x200, 0x8}, {0x800, 0x9}, {0x4}, {0x3, 0x8}, {0x5, 0x919a}, {0x800, 0x9}, {0x1, 0xffffffff}], 0x2, 0x8, 0x8, 0x2}}, 0x8}) [ 1751.719768] ? __vb2_queue_alloc+0xe2/0xe60 [ 1751.724111] __vb2_queue_alloc+0xe2/0xe60 [ 1751.728304] vb2_core_create_bufs+0x273/0x7e0 [ 1751.732825] ? __vb2_queue_free+0x870/0x870 [ 1751.737179] ? mutex_trylock+0x1a0/0x1a0 [ 1751.741342] vb2_create_bufs+0x332/0x620 [ 1751.745415] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1751.750547] ? __video_do_ioctl+0x632/0xcd0 [ 1751.755247] ? mutex_trylock+0x1a0/0x1a0 [ 1751.759322] ? mark_held_locks+0xf0/0xf0 [ 1751.763398] ? __lock_acquire+0x6de/0x3ff0 [ 1751.767747] vb2_ioctl_create_bufs+0x20d/0x360 15:35:45 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}, 0xc000000}) [ 1751.772406] ? memset+0x20/0x40 [ 1751.775767] v4l_create_bufs+0xb2/0x160 [ 1751.779932] __video_do_ioctl+0x49a/0xcd0 [ 1751.784102] ? v4l_querycap+0x340/0x340 [ 1751.788174] ? __might_fault+0x192/0x1d0 [ 1751.792258] ? v4l_querycap+0x340/0x340 [ 1751.796250] video_usercopy+0x13f/0xfa0 [ 1751.800239] ? v4l_enumstd+0x60/0x60 [ 1751.803971] ? get_pid_task+0xf4/0x190 [ 1751.807870] ? mark_held_locks+0xf0/0xf0 [ 1751.812031] ? proc_fail_nth_write+0x95/0x1d0 [ 1751.816546] ? proc_tgid_io_accounting+0x7f0/0x7f0 15:35:46 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)={0x1, 0x8, 0x4, 0x1, 0x1ff, {0x0, 0x2710}, {0x4, 0x2, 0xff, 0x5, 0x40, 0x1, ') 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1751.908765] RSP: 002b:00007f4325cea188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1751.916484] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 15:35:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x9effffff, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) [ 1751.923849] RDX: 0000000020000100 RSI: 00000000c100565c RDI: 0000000000000003 [ 1751.931388] RBP: 00007f4325cea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1751.938838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1751.946299] R13: 00007fffd67cf40f R14: 00007f4325cea300 R15: 0000000000022000 15:35:46 executing program 2 (fault-call:1 fault-nth:21): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:46 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x70000, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x2) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0x40045612, &(0x7f00000001c0)={0xfffffffe, 0x6ec, 0x2, {0x0, @pix={0x6, 0x9, 0x34324d59, 0x2, 0xfff, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2}}}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f00000000c0)={0x1, 0x0, {0x2, 0x1, 0x81, 0xffff}}) 15:35:46 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:46 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) r1 = socket$inet(0x2, 0xa, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) accept4$inet(r1, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x0) 15:35:46 executing program 4: ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) r0 = syz_open_dev$video(&(0x7f0000000000), 0x2a22, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000040)={0x4, 0x4, "8267a82f9dc21f053034790cf6f3afbeee50f1266f1808ff01000021393f7f25", 0xfff, 0x7, 0x8, 0x4000, 0x283}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000000c0)={0x5782, 0x2478aa0c9eb7264d, 0x4, 0x4, 0x7, {0x0, 0x2710}, {0x3, 0x8, 0xc1, 0x6, 0x1f, 0x2, "a58b5a38"}, 0x9, 0x3, @offset=0x5, 0x3, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000140)={0x5, 0x1, 0x4, 0x40, 0x6, {0x77359400}, {0x2, 0x1, 0x0, 0x1, 0x3, 0xde, "b5978f4b"}, 0xeb, 0x2, @userptr=0x3, 0x6, 0x0, r2}) 15:35:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0xa1ffffff, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:46 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) syz_open_dev$video(&(0x7f0000000240), 0x6d8b, 0x141000) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) getrusage(0xffffffffffffffff, &(0x7f00000003c0)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, &(0x7f0000000340)={0x1, 0x101, "1f370ecf9a8767c46e18b67cad2faf3543b5a0c42a34dcb8684bcca214a74f3b", 0x80ec, 0x2, 0x1000, 0x7fffffff, 0x82}) ioctl$VIDIOC_S_JPEGCOMP(r1, 0x408c563e, &(0x7f0000000180)={0xffff, 0x1, 0x19, "c976ad67eff46c661a808768e9ae0de30d4133d606099a576b29a81e8747054caeee8aa619d524db52bd3280f10bd820b96cadb93c6e2882ad3b55f0", 0x2c, "df66e162121e7dbe6fcbdf4a89b22042c0bbdc070ef770f03668cc7884c92619e06eec7bb4b31e1acfd5fdcb5a8268da0f1a56119e7234a1b7f64d20", 0x20}) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x80, 0x0, @offset=0x95, 0x8000000}) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_G_OUTPUT(r5, 0x8004562e, &(0x7f0000000040)) ioctl$VIDIOC_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000280)={0x0, @reserved}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000004c0)={0xbd, 0x0, 0x4, 0x400, 0x3f, {0x77359400}, {0x4, 0x2, 0xf8, 0x81, 0x5, 0x20, "d91d97ce"}, 0x400, 0x6, @planes=&(0x7f0000000480)={0x1000, 0x8, @fd, 0x1f}, 0xffffffc1, 0x0, r3}) ioctl$VIDIOC_QUERYSTD(r4, 0x8008563f, &(0x7f0000000080)) 15:35:46 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000001c0)={0xfffffffe, 0x0, 0x4, {0x0, @sdr={0x33363248, 0xffffffff}}}) syz_open_dev$video(&(0x7f0000000000), 0xae82, 0x800) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) [ 1752.156744] FAULT_INJECTION: forcing a failure. [ 1752.156744] name failslab, interval 1, probability 0, space 0, times 0 [ 1752.197624] CPU: 1 PID: 9997 Comm: syz-executor.2 Not tainted 4.19.195-syzkaller #0 [ 1752.205548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1752.215452] Call Trace: [ 1752.218236] dump_stack+0x1fc/0x2ef [ 1752.221881] should_fail.cold+0xa/0xf [ 1752.225714] ? setup_fault_attr+0x200/0x200 [ 1752.230255] ? lock_acquire+0x170/0x3c0 [ 1752.234250] __should_failslab+0x115/0x180 [ 1752.238588] should_failslab+0x5/0x10 [ 1752.242405] __kmalloc+0x2ab/0x3c0 [ 1752.246142] ? __vb2_queue_alloc+0xe2/0xe60 [ 1752.251269] __vb2_queue_alloc+0xe2/0xe60 [ 1752.255485] vb2_core_create_bufs+0x273/0x7e0 [ 1752.260638] ? __vb2_queue_free+0x870/0x870 [ 1752.264979] ? mutex_trylock+0x1a0/0x1a0 [ 1752.269168] vb2_create_bufs+0x332/0x620 [ 1752.273513] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1752.278630] ? __video_do_ioctl+0x632/0xcd0 [ 1752.283090] ? mutex_trylock+0x1a0/0x1a0 [ 1752.287258] ? mark_held_locks+0xf0/0xf0 [ 1752.291352] ? __lock_acquire+0x6de/0x3ff0 15:35:46 executing program 5: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x7, @sliced={0x7, [0x7, 0x4, 0x434, 0xff, 0x41, 0x1070, 0x2, 0x400, 0x3, 0x2, 0x9, 0x7b09, 0x8, 0x70d, 0x3, 0x6, 0x3, 0xf38, 0x8001, 0x7420, 0x5ef, 0x4, 0x5, 0x5, 0x5, 0xffff, 0x800, 0x2, 0x1, 0x3, 0x6, 0x4, 0x0, 0x0, 0xd7, 0x7fff, 0x5, 0x1000, 0x400, 0x14d, 0x7f, 0xfffa, 0x0, 0xfff9, 0x2, 0x9, 0x2, 0xec], 0x7ff}}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f0000000040)={0x8001, 0x5, 0xffff}) [ 1752.295802] vb2_ioctl_create_bufs+0x20d/0x360 [ 1752.300629] ? memset+0x20/0x40 [ 1752.303951] v4l_create_bufs+0xb2/0x160 [ 1752.307957] __video_do_ioctl+0x49a/0xcd0 [ 1752.312203] ? v4l_querycap+0x340/0x340 [ 1752.316390] ? __might_fault+0x192/0x1d0 [ 1752.320476] ? v4l_querycap+0x340/0x340 [ 1752.324752] video_usercopy+0x13f/0xfa0 [ 1752.328941] ? v4l_enumstd+0x60/0x60 [ 1752.332937] ? get_pid_task+0xf4/0x190 [ 1752.337016] ? mark_held_locks+0xf0/0xf0 [ 1752.341355] ? proc_fail_nth_write+0x95/0x1d0 [ 1752.345888] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 1752.351022] ? video_usercopy+0xfa0/0xfa0 [ 1752.355272] v4l2_ioctl+0x147/0x1a0 [ 1752.359536] ? video_devdata+0xa0/0xa0 [ 1752.363704] do_vfs_ioctl+0xcdb/0x12e0 [ 1752.367810] ? lock_downgrade+0x720/0x720 [ 1752.372056] ? check_preemption_disabled+0x41/0x280 [ 1752.377090] ? ioctl_preallocate+0x200/0x200 [ 1752.381557] ? __fget+0x356/0x510 [ 1752.385121] ? do_dup2+0x450/0x450 [ 1752.388739] ? vfs_write+0x393/0x540 [ 1752.392677] ? fput+0x2b/0x190 [ 1752.395880] ksys_ioctl+0x9b/0xc0 [ 1752.399502] __x64_sys_ioctl+0x6f/0xb0 [ 1752.403386] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1752.407967] do_syscall_64+0xf9/0x620 [ 1752.411780] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1752.416997] RIP: 0033:0x4665d9 [ 1752.420193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1752.439391] RSP: 002b:00007f4325cea188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 15:35:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0xa54a0000, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) [ 1752.447096] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1752.454780] RDX: 0000000020000100 RSI: 00000000c100565c RDI: 0000000000000003 [ 1752.462188] RBP: 00007f4325cea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1752.469560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1752.476863] R13: 00007fffd67cf40f R14: 00007f4325cea300 R15: 0000000000022000 15:35:46 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000080)={0xffffffff, "c0bd5531efaf803fb5a2a4306fc7de42a2578ca6758446a6841d018ff5321653", 0x2, 0xb77, 0x8, 0x20000, 0x2}) 15:35:46 executing program 2 (fault-call:1 fault-nth:22): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000580)={0x7, 0xa, 0x4, 0x0, 0x3, {0x0, 0x2710}, {0x1, 0xc, 0x6, 0x1d, 0x3, 0x9f, 'AUpt'}, 0x1c2, 0x1, @planes=&(0x7f0000000540)={0x7fffffff, 0x59b, @fd=r0, 0x80000001}, 0xfffffff8}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x20}, 0x3, 0x4, @planes=&(0x7f0000000340)={0x2, 0x87, @fd, 0x3f}}) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r2, @ANYRES16=r1, @ANYBLOB="1fffffff00000000000005"], 0x3c}}, 0x0) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x22, 0x5, 0x6) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7a}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8001}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4884}, 0x4) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r4) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc0405610, &(0x7f00000001c0)={0x0, 0x2, 0x0, {0x0, @sdr}}) 15:35:46 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000200)={0x40000, 0xffff038c, 0x9, r1, 0x0, &(0x7f0000000240)={0x9b090e, 0x1f, '\x00', @p_u16=&(0x7f0000000040)=0xc32}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x6, @sdr}, 0xe8}) 15:35:46 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000040)) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000140)={0x0, @reserved}) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x0) [ 1752.608209] FAULT_INJECTION: forcing a failure. [ 1752.608209] name failslab, interval 1, probability 0, space 0, times 0 [ 1752.669052] CPU: 1 PID: 10035 Comm: syz-executor.2 Not tainted 4.19.195-syzkaller #0 [ 1752.677842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1752.687202] Call Trace: [ 1752.690241] dump_stack+0x1fc/0x2ef [ 1752.693897] should_fail.cold+0xa/0xf [ 1752.697717] ? setup_fault_attr+0x200/0x200 [ 1752.702153] ? lock_acquire+0x170/0x3c0 [ 1752.706232] __should_failslab+0x115/0x180 [ 1752.710657] should_failslab+0x5/0x10 [ 1752.714477] __kmalloc+0x2ab/0x3c0 [ 1752.718134] ? __vb2_queue_alloc+0xe2/0xe60 [ 1752.722551] __vb2_queue_alloc+0xe2/0xe60 [ 1752.726816] vb2_core_create_bufs+0x273/0x7e0 [ 1752.731363] ? __vb2_queue_free+0x870/0x870 [ 1752.735885] ? mutex_trylock+0x1a0/0x1a0 [ 1752.739983] vb2_create_bufs+0x332/0x620 [ 1752.744061] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1752.749207] ? __video_do_ioctl+0x632/0xcd0 [ 1752.753628] ? mutex_trylock+0x1a0/0x1a0 [ 1752.757883] ? mark_held_locks+0xf0/0xf0 [ 1752.761959] ? __lock_acquire+0x6de/0x3ff0 [ 1752.766208] vb2_ioctl_create_bufs+0x20d/0x360 [ 1752.770976] ? memset+0x20/0x40 [ 1752.774447] v4l_create_bufs+0xb2/0x160 [ 1752.778629] __video_do_ioctl+0x49a/0xcd0 [ 1752.782803] ? v4l_querycap+0x340/0x340 [ 1752.786978] ? __might_fault+0x192/0x1d0 [ 1752.791057] ? v4l_querycap+0x340/0x340 [ 1752.795043] video_usercopy+0x13f/0xfa0 [ 1752.799038] ? v4l_enumstd+0x60/0x60 [ 1752.802768] ? get_pid_task+0xf4/0x190 [ 1752.806669] ? mark_held_locks+0xf0/0xf0 [ 1752.810738] ? proc_fail_nth_write+0x95/0x1d0 [ 1752.815248] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 1752.820206] ? video_usercopy+0xfa0/0xfa0 [ 1752.824464] v4l2_ioctl+0x147/0x1a0 [ 1752.828456] ? video_devdata+0xa0/0xa0 [ 1752.832359] do_vfs_ioctl+0xcdb/0x12e0 [ 1752.836404] ? lock_downgrade+0x720/0x720 [ 1752.840652] ? check_preemption_disabled+0x41/0x280 [ 1752.845857] ? ioctl_preallocate+0x200/0x200 [ 1752.850285] ? __fget+0x356/0x510 [ 1752.853756] ? do_dup2+0x450/0x450 [ 1752.857310] ? vfs_write+0x393/0x540 [ 1752.861141] ? fput+0x2b/0x190 [ 1752.864354] ksys_ioctl+0x9b/0xc0 [ 1752.867912] __x64_sys_ioctl+0x6f/0xb0 [ 1752.871814] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1752.876410] do_syscall_64+0xf9/0x620 [ 1752.881536] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1752.886737] RIP: 0033:0x4665d9 [ 1752.890086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1752.909165] RSP: 002b:00007f4325cea188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 15:35:47 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x8001, 0x1, 0x4}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x5, 0x4d0280) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r1, 0xc01064c2, &(0x7f00000023c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r1, 0xc02064c3, &(0x7f0000002440)={&(0x7f0000002400)=[r2, r2, r2, r2, r2, r2, r2], 0xffffffffffffffff, 0x7, 0x1, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r1, 0xc01064c1, &(0x7f0000002480)={r2, 0x0, r3}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000002540)={&(0x7f00000024c0)=[r2, r2, r5, r2, r2, r5, r5], &(0x7f0000002500)=[r4, 0x0, r4, r4, r4], 0x10000, 0x7, 0x3, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000002580)={r5}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f00000001c0)={&(0x7f0000000100)=[0x0, r5, 0x0, r7], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, r4], 0x80, 0x1, 0xe, 0x0}) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r9, 0xc01864cd, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r9, 0xc01864cd, &(0x7f00000002c0)={&(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000340)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[r8, 0x0, 0x0, r10, 0x0], 0x7, 0x3, 0x7}) read$FUSE(0xffffffffffffffff, &(0x7f0000000380)={0x2020}, 0x2020) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000040)={0x4, 0x100, 0x3, {0x800, 0x7, 0x6, 0x8}}) 15:35:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0xeaffffff, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:47 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000000)) [ 1752.916888] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1752.924165] RDX: 0000000020000100 RSI: 00000000c100565c RDI: 0000000000000003 [ 1752.931621] RBP: 00007f4325cea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1752.938904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1752.946185] R13: 00007fffd67cf40f R14: 00007f4325cea300 R15: 0000000000022000 15:35:47 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x404d, 0x80001) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) 15:35:47 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0xc2) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000040)={0x1, "54148564ae373f14ff0403fb9038dece77c48eeae133ef271a2e638824bbf928", 0x1, 0x6, 0x7, 0xae4ff3711503b125, 0x2}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000100)={0x0, 0x1000, 0x1f, '\x00', &(0x7f00000000c0)=0x40}) 15:35:47 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f00000001c0)={0x0, @bt={0x7fa, 0x20, 0x1, 0x1, 0x3, 0x1000, 0x0, 0x80000001, 0x2, 0x5, 0x8, 0x31d4, 0x7, 0x3, 0x8, 0x2, {0x7fff, 0x3}, 0xe6, 0x40}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000000)={0x9, 0x50007, "ef5bed543db4e97456e80be3a9ea04acefecf9e08e441ae0", {0x3, 0x5}, 0x5}) 15:35:47 executing program 0: r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80400) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r3, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, r3, 0x1, 0x70bd26, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7fffffff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}]}, 0x60}, 0x1, 0x0, 0x0, 0x88000}, 0x4150) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r4) 15:35:47 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040), 0x6d, 0x4240) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) 15:35:47 executing program 2 (fault-call:1 fault-nth:23): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0xf0ffffff, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:47 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r0, 0x5421, &(0x7f00000001c0)) r1 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe5}]}, 0x3c}}, 0x2400c041) 15:35:47 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000040)={0x0, "d7a89b104f438ce0fbc7262d52986a74df03f8911473b9fd83402106c44a361f", 0x7}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3060876d57cab5dec1ecf7fc67b00005160f25226260f202a13bc6911fdf7a5", 0x0, 0x400000, 0x0, 0xbd68, 0xc}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000080)={0x1f, 0x9, 0x3, "2a1754d511982dd137168f8f879e0f0aba4ffff227eace1c0751209d13488c9d", 0x30314142}) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f0000000140)={0x3f, 0x0, 0x300d, 0x10000, 0x9, 0x5, 0x3, 0x1}) 15:35:47 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000000)={0x3e84e308, 0x31384142, 0x8, 0x8, 0x1, @discrete={0x0, 0x7f}}) 15:35:47 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x1) 15:35:47 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0xfcffffff, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:47 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) 15:35:47 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f0000000000)={0x1, 0x0, 0x2, 0x1, {0xffffffff, 0x81, 0xffffff00, 0x4}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:47 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x60000) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000140)={0x6, 0x2, 0x4, 0x4000, 0x5, {}, {0x3, 0x0, 0x20, 0x7, 0x1, 0x1, "eebfe1eb"}, 0x3, 0x2, @offset=0x20, 0x40, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x2, 0xc, 0x4, 0x70000, 0x1c00000, {0x77359400}, {0x2, 0x2, 0xa4, 0x1f, 0x5, 0x5, "19957a12"}, 0x7ff, 0x4, @offset=0x7, 0x6, 0x0, r2}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5de2c75160f2b79f92c8adc3def46911fdf76700", 0x0, 0x4}) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000040)) 15:35:47 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000040)={0x8000000, 0x9, 0x1}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000080)={0x0, @bt={0x8, 0x400, 0x3, 0x1, 0xa, 0x8f64, 0x3, 0xffffffc2, 0xfffffffc, 0xe59249e, 0x6, 0x6, 0x2, 0x4, 0x1a, 0x2, {0x1f, 0x1f}, 0x3, 0x6}}) 15:35:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0xfffff000, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:47 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x2, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:47 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_INPUT(r1, 0x80045626, &(0x7f0000000040)) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f00000001c0)={0x0, @bt={0x4, 0x614d1123, 0x0, 0x0, 0x6, 0x9, 0x4, 0x5, 0x6, 0x8, 0x7, 0x200, 0x1, 0xc8c8, 0x9db0e20a7b9cc9f2, 0x8, {0x5, 0x5}}}) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000340)={0x9d0000, 0x3, 0x12d, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x9c090a, 0x3, '\x00', @p_u8=&(0x7f00000002c0)=0x4}}) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000500)={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "3a3c27ea"}, 0x0, 0x0, @fd}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000380)={0x9, 0x2, 0x4, 0x1000, 0x7, {0x77359400}, {0x1, 0x2, 0x3, 0x5, 0xff, 0x40, "7f722479"}, 0xfffffc85, 0x3, @offset=0x1, 0x7f, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000400)={0x8, 0x1, 0x4, 0x40, 0xffffffff, {0x0, 0xea60}, {0x4, 0x8, 0x0, 0x5, 0x9, 0x3f, "0ec5922b"}, 0x9, 0x1, @offset=0x21, 0x2, 0x0, r4}) ioctl$VIDIOC_CREATE_BUFS(r2, 0x40045612, &(0x7f00000000c0)={0x0, 0x2, 0x2, {0x0, @pix_mp={0x7f, 0xef7a, 0x30383653, 0x1, 0x0, [{0x7fff, 0x4}, {0x100, 0x8}, {0xe6c6, 0xff}, {0x27}, {0x4bc, 0x7fffffff}, {0x213f0, 0x7f}, {0x7, 0x6}, {0x80, 0xfda0}], 0x7, 0x0, 0x6}}}) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f0000000280)) socket$nl_generic(0x10, 0x3, 0x10) 15:35:47 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000140)={0xa00000, 0xb1, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9909c8, 0x6, '\x00', @p_u16=&(0x7f0000000040)=0x5}}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) 15:35:47 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f00000001c0)={0x400, 0x4, 0x5, 0x1ff, 0x8001, 0x9, 0x7ff}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x4, {0x8, @pix_mp={0x5, 0x80000000, 0x41415270, 0x0, 0x7, [{0x24d, 0x7}, {0x4, 0x9}, {0xafe, 0x401}, {0xfff}, {0x3, 0x1ff}, {0x0, 0x4}, {0x6, 0x1ff}, {0x2, 0x1f}], 0x20, 0x2d, 0x2, 0x0, 0x7}}}) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000040)={0x1, 0x0, 0x102, 0x2, {0x6, 0x8, 0xffff, 0x4}}) 15:35:47 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x798, 0xc, 0x1}) r1 = syz_open_dev$video(&(0x7f0000000040), 0x5, 0x80) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000080)={0x0, "66aa4959152c26f21c430851ad290eb168699e6d9b1dfa8b056f8067c751ed7a", 0x2, 0x1ded0a6f, 0x4800000, 0xe0, 0x4}) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000140)={0x10000, 0x4, 0x4}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_G_INPUT(r2, 0x80045626, &(0x7f0000000100)) 15:35:47 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x5421, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0xffffff7f, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:47 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) r1 = syz_open_dev$video(&(0x7f00000001c0), 0x1, 0x80000) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000200)={0xfffffffc, "c7c9b732a7f681f89400af99883049c1625820d2f014e00da126bb9762ef8794", 0x2, 0xff, 0x7fffffff, 0x3000000, 0x4}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, &(0x7f0000000040)) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x3) 15:35:47 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000080), 0x4d, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000040)={0x80000001, 0x0, 0x1013, 0x1, 0x5, 0xff}) r2 = socket$inet(0x2, 0xa, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="0a01201899a1e8ad7b5c81a8864b51cdba0101ffff9cff0100000008000000e0000001070000000000000064010101ac1e0001ffffffffac1414bb0000000028c0097fc0aecd8bbbd246270f147d6ef9b436dd10e4276acb613da70e6bb314849251871b3fc307ccc99a4831e649d8d331b101f3e7e77115119b78b40dd0c9c56ca09fa957ea4fbef336be3023166da29237da531205072db6629c52b7709354"], 0x30) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000140)={0xf, 0x2, 0x4, 0x4, 0x5, {r4, r5/1000+10000}, {0x4, 0xc, 0x2, 0x81, 0x3, 0x2, "9f6e7f6f"}, 0xfffffffa, 0x3, @offset=0x8, 0x5}) 15:35:47 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x3, 0x800000, 0x3, {0xe, @raw_data="fe124c9c5d3a142590d83be5b8ad662455400b6719409f5f4daab5276619fd196d9057fee2c400f8ffffed198a1c341c97bee99182e6a682cdba2052c5031bddb2323a73dc7b1906a8020d9c47dfb2f3ca3b404a85f6d98acebef19d91e30028b8fcf6bfbadc6bc240c5e4970a79348da895c0595046260400000000000000166cb79103af6aaade4ad41bba9170070baa07f7fbd9d82a511a3f284d73365fd879dadc855334050fd841b57a0742d64cd975e732bc602345ff8f34338e1f8ca118e124f24ec69a4b"}}) 15:35:47 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x5450, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:47 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x10000, 0x8, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, "72b48000"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_S_JPEGCOMP(r1, 0x408c563e, &(0x7f0000000040)={0x5, 0xe, 0x21, "cd3661f651e51a8619b8214412c8d7d6fdd2c411124781721736221e787bdb521d789a009c736f75599acab0b8ce3cfbd2775587615ab87ef82f31f5", 0xf, "74bdca5c4842c4318a8cc498a5edb5e0f686d4fdc95fc9f1be3cbfd0df0d845daa002b6ea5a39d40f987fc53fc20bf05afaa8e1e2c123a8dc31b8d60", 0x58}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) 15:35:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0xffffff9e, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:48 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040), 0x1, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000080)={0xfff, 0x200, "1f58380000c31e3c341cb76a00", {0x28, 0xb}, 0x1}) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x9, 0x1, 0x2, "9c4e98a6c57b5baa4f596d9cfc3432c5261647c9a8f5dc032488471e29b5b625", 0x32315241}) 15:35:48 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x5451, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:48 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000040)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x7, 0x3, 0x1, {0x0, @sdr={0x32315258}}, 0x1}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000000)) 15:35:48 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x400, 0x2, {}, {0x1, 0xc, 0x1, 0x95, 0x4, 0x7, "8386d6fb"}, 0x9, 0x3, @userptr=0x5, 0x5}) 15:35:48 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$video(&(0x7f0000000040), 0x2, 0x40000) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f00000001c0)={0x2, 0x5, 0x4, 0x0, 0x3, {0x0, 0x2710}, {0x5, 0x0, 0x3, 0x2, 0xff, 0x20, "6a03512b"}, 0x0, 0x2, @userptr=0xfff, 0xffffffff, 0x0, r2}) syz_open_dev$video(&(0x7f0000000240), 0x9, 0x0) ioctl$VIDIOC_G_INPUT(r1, 0x80045626, &(0x7f0000000000)) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000280)={0x4, 0x0, 0x3018, 0x1f, 0x8, 0x7f, 0x1}) 15:35:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0xffffffa1, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:48 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000140)={0xa10000, 0x7, 0x8000, r0, 0x0, &(0x7f0000000080)={0xd90274268da8481b, 0x7, '\x00', @p_u16=&(0x7f0000000040)=0x6}}) 15:35:48 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x5452, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:48 executing program 4: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x10, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80) r1 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) 15:35:48 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x7fffffff, 0x6, 0x3, {0x5, @vbi={0x1, 0x6, 0x7fffffff, 0x36314d59, [0xffffffff, 0x4], [0x1, 0xd9cf], 0x1}}, 0x89f}) 15:35:48 executing program 0: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}, 0x3f}) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) socket(0x10, 0x3, 0x860a) r1 = syz_open_dev$video(&(0x7f0000000040), 0x401, 0x20000) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f00000001c0)={0x0, @reserved}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x4020565b, 0xfffffffffffffffd) r3 = syz_open_dev$video(&(0x7f0000000280), 0x0, 0x80400) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, &(0x7f00000002c0)={0x6, 0x2, 0x1, {0x6, 0x2b3d, 0x1c00, 0x3f}}) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000300)) 15:35:48 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x5460, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0xffffffea, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:48 executing program 1: ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x0, 0x0, 0x0, 0x3}) 15:35:48 executing program 5: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x10, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x3, {{0x2, 0x4e20, @empty}}}, 0x88) r1 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x2801) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc0405610, &(0x7f00000000c0)={0x2, 0x0, 0x617f3193e998bf50, {0x0, @sdr={0x14616521}}}) 15:35:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0xfffffff0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:48 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000040)={0x1, 0x0, {0x5, 0x3ff, 0x7ff, 0x5}}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f0000000300)={0x7ff, 0x59555956, 0x5, 0x6, 0x3, @discrete={0x9ad6, 0x8001}}) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f00000002c0)={0x0, 0x0, 0x8, '\x00', &(0x7f0000000280)=0xb2}) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000200)={0x9f0000, 0x9, 0x7f, r3, 0x0, &(0x7f00000001c0)={0x30928, 0x8, '\x00', @p_u8=&(0x7f0000000180)}}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100)=0xffffffffffffffff) r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000e80)={0x8, 0xb, 0x4, 0x4000, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, r5}) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x980000, 0x30, 0x0, r1, 0x0, &(0x7f0000000080)={0x990a69, 0x1, '\x00', @value64}}) 15:35:48 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40049409, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:48 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x0, {0x0, @vbi={0x3f, 0x1, 0x20, 0x35315258, [0x5, 0xc3de], [0xe58, 0x1], 0x2}}}) 15:35:48 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000001c0)={0x76, 0x0, 0x0, {0xb, @sdr={0x3032344d}}, 0x19}) 15:35:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0xfffffffc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:48 executing program 4: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0xd4, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000}, 0x8840) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x4, 0x1f, 0x6, 0x1}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0xcc0d1}, 0x20000010) r2 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) 15:35:48 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x4020940d, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:48 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f00000001c0)={0x0, @bt={0x9, 0x382c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x9, 0x200, 0xffffffff, 0x5, 0xfffffffa, 0x7f, 0x5, 0xc, 0x2c, {0xcf2b, 0xd86}, 0x9, 0xfd}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0xffffffff, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:48 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000000)={0xc, 0x3, 0x1, {0x2, 0x8, 0x1000, 0x1}}) 15:35:48 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x40) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) 15:35:48 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0045878, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:48 executing program 1: ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x8, 0x200}) r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000002c0)={0x400ff, 0x1, 0x4, 0x400, 0x4, {}, {0x4, 0x0, 0x2, 0xff, 0xc, 0x3f, "4019cbde"}, 0x0, 0x2, @planes=&(0x7f0000000280)={0x8, 0x7, @mem_offset=0x3f, 0x80000001}, 0x5, 0x0, 0xffffffffffffffff}) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000e80)={0x2, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0xc, 0x0, 0x0, 0xa, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, r2}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)={0x7f, 0x3, 0x4, 0x8, 0x4, {}, {0x3, 0xc, 0x5, 0x81, 0xef, 0xf9, '(>LG'}, 0x6, 0x2, @planes=&(0x7f0000000040)={0x8001, 0x305c6592, @fd=0xffffffffffffffff, 0x7c}}) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000001c0)={0x4000000, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x5, 0xc, 0x7, 0xff, 0x8, 0xbb, "7fd68f04"}, 0x5, 0x2, @fd=r4, 0x2}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) 15:35:48 executing program 0: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1c, 0x2, 0xff, 0x8, 0x606, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000005, 0x4}, 0x40) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f00000000c0)={0x800, 0x1000, "97cf28077745649bc97876cebdead363356ec8eee76b19a7", {0x0, 0x4}, 0x8}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000200)={0x101, 0x5, 0x80, 0x7, 0x1, 0x7, 0x1}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f00000001c0)={0xfffffffc, 0x6, 0x1, 0x7, 0x7ff, 0x40, 0x42}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000e80)={0x0, 0x6, 0x4, 0x0, 0x2, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000040)={0x0, 0x5, 0x2, 0x8, 0x7ff, 0x1, 0x3ff}) 15:35:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x3, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:48 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0045878, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:48 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f00000002c0)={0x5, 0x4, @value=0x5}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000000)={0x1, 0x2, 0x4, 0x40, 0x2, {}, {0x4, 0x2, 0x81, 0x3f, 0x7f, 0x7, "36640bd8"}, 0x6, 0x1, @offset=0x1, 0x8}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000001c0)={0x6, @raw_data="b66619bf014bcee747fa2f4d31d961a83057cd61a564bef4ad4a360808b13b6a29fc8a4cb72c47eb57d2648c7910ec055687a6424eb5fe665ad7950c9f3ef6425938d18bed14b8ca648b223cff704a4ee9ede3f8a0d0c3552ce458085de7abf316087ec2c89ca26617f58befe637a9d27defad5d2d9a8816518637c9bf8b0454486e1bc2b33037d95644f3e8ff588825203d23d638c2bf4305228cbdd77e7ab42eee5fdff7981e3a924ae570f26a732b61cbaf3e3c78409c12a931e7bc09178b3e4335c0b9bd7ff7"}) 15:35:48 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f00000001c0)={0x200, 0x1ff, @value=0xb939}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="90010000", @ANYRES16=r2, @ANYBLOB="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"], 0x190}, 0x1, 0x0, 0x0, 0x4008000}, 0x8040) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) syz_open_dev$video(&(0x7f0000000180), 0xd6, 0x8000) 15:35:48 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x0, 0x4}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000140)={0x7, @raw_data="654402157ad855eab7aa3a7579cd82a2884258bc9f171b3bd1a63210b29727c3d23cd14d8c6d82c9461a9f7bdb26d4d273eecbb1592ef64a80c7970113f51d9365138fab80e91f67f82c421753ed7eff0491776e094cc6f3ee15ab4ca38e2c69ca497c78633ca5812acb0e3de5a6a055cf5f7f641663c854e426e66ffb38ca537330b3f6db3ed23a300a38ab1f344d03429d71e1f325b286adf97f01ce7c4cea846469c1cdb00940cf58798bcba9ff097ec0fc731469e21da8d8ac6bfc19c240097811ae72e03906"}) 15:35:48 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f00000001c0)={0x0, @reserved}) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:49 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x8, 0x0, 0x0, 0x0, 0x2, "311d8306"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x10001, 0x1, 0x3ff, 0x5c1f, 0x3651, 0x70, 0x9}) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000240)={0x1, 0x1, 0x4, 0xe000, 0x5, {0x0, 0xea60}, {0x2, 0x0, 0x81, 0x7, 0x4, 0x3, "880576d4"}, 0x9, 0x2, @userptr=0xfffffffffffffff7, 0x5, 0x0, r2}) r4 = syz_open_dev$video(&(0x7f0000000040), 0x1f56, 0x20000) ioctl$VIDIOC_QUERYSTD(r4, 0x8008563f, &(0x7f00000001c0)) 15:35:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x8, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:49 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0189436, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:49 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x80000000}) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0xfffffff, 0xffffff00, 0x3f, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0903, 0x80000000, '\x00', @ptr=0x6}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x9, @win={{0xffff, 0x4, 0x40, 0x8}, 0x3, 0x8001, &(0x7f0000000180)={{0x5, 0x100, 0x7fff, 0x75f2}, &(0x7f0000000140)={{0x0, 0x3, 0x5, 0xfff}}}, 0x3, &(0x7f00000001c0)="7912f9a544c06e01dbbd08fb06ed1b93a89cf8a2bac719fd73d74df818e3eedab64db67e5243a238587a51af1e0ac42d746108cbd7793c46729635353e69451cea1c45221cfd34b9545e8ff10279b519c19ce4722d214aa49c344d", 0x61}}) 15:35:49 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x7, 0x5, 0x2, "6753543c3178ce817413cba67af993bdb3745baafd45d2d93916451c4d090f9b", 0x35315241}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) 15:35:49 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000000)) 15:35:49 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getresuid(&(0x7f0000000680), 0x0, 0x0) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000300)={0x3f, 0x4, 0x0, "9cbe988163231582515c1a3616f75a4e3580fff6367c87a46013673b6d753e93", 0x38415261}) r1 = socket(0x21, 0x1, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r1) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @raw_data="e6adf4a5460447c043fcf328311f149aef8df5c160f0e609aaff76c9bb483eab7ead83e8be376ee1c1b6a85f917fc7c5210cfe905922123720e76019ec9c102ce84b043ee91c3a96e7e8a929a6e7b5dfeb4f1422df2d655ebb5eb6ecc5199aa8352a2d4535be085ba8ef01b65392a14475f6cb7db940892c045112720a0b8af72f8fe465c6f23ac325c7ae8e14146f34421cd203984ff9349fb2ec03b0000630f8ffbb84b0e9da392ecb5ea606c2be06005fe93c0c7e608c9f72231d4e86b36a7e61ae5a28186387"}}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000001c0)={0x46, 0x8, 0x4, 0x20, 0xfffff27b, {0x0, 0x2710}, {0x3, 0x7, 0x0, 0xd2, 0x5, 0x7, "f0bd456f"}, 0x1, 0x4, @planes=&(0x7f0000000000)={0x5276, 0x2, @mem_offset=0x46ad, 0x400}, 0x2}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000280)={0x8, 0x2, 0x4, 0x2, 0x3, {0x77359400}, {0x5, 0x8, 0x0, 0x1, 0x67, 0x0, "d9c41689"}, 0x100, 0x3, @planes=&(0x7f0000000240)={0x5, 0x2, @userptr=0xb680, 0x6}, 0xfff}) 15:35:49 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0205647, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0xf, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:49 executing program 4: syz_open_dev$video(&(0x7f0000000000), 0x100, 0x0) 15:35:49 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x1, 0x3, 0x3}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) 15:35:49 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f0000000240)={0x0, 0x0, 0x0, {0x0, @sdr}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x727, 0x1d, 0x4, 0x10, 0x0, {0x77359400}, {0x1, 0x0, 0x0, 0x6, 0x3, 0xfe, 'xiba'}, 0x7, 0x2, @planes=&(0x7f0000000000)={0x6, 0x2, @userptr=0xfffffffffffffffa, 0x5}, 0xfffff16b}) 15:35:49 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0205649, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:49 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000000)={0x2, 0x5, @name="fc9dcbc9d49829b73956b0fa53dc188357302e67c3006fed7081082f96b256e1"}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000000300)={0x1, 0x102, 0x2, {0x1, 0x9, 0x22, 0x1ff}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x9, 0x0, {0x0, @win={{0x6a, 0x100, 0x9, 0x4}, 0x4, 0x6, &(0x7f0000000200)={{0x619, 0x8, 0xee6, 0x5}, &(0x7f00000001c0)={{0x8000, 0xf0946519, 0x8, 0x6}, &(0x7f0000000040)={{0x200, 0x8, 0x3, 0x80}}}}, 0x400, &(0x7f0000000240)="70bec1381f6750c05221d19dcbb157db31bf435078732f0d6a791a3a9db6ae7a3bdb6c498ebb8f26e980bcda921c851034677d7ca22fd7dda5ee9b7560b60a0ed7c7abc12e958e9e7bb178d36f99e177a2453ba159545de8f58b4566ab6f43cdbb6c7af879139536a89543e0627b69a384bfaef36caede0237988a882601d1bfc215", 0xff}}}) 15:35:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:49 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc020660b, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:49 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000001c0)={0x7, 0x8, 0x4, 0x1000, 0x101, {0x77359400}, {0x4, 0xa, 0x81, 0x3, 0xfe, 0x92, 'x!J8'}, 0x1, 0x2, @userptr=0x8, 0x7}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000140)={0x401, 0x0, 0x4, 0xe000, 0x9, {r2, r3/1000+60000}, {0x5, 0x2, 0xe, 0x40, 0x5, 0x7, "ec6ef630"}, 0x5, 0x1, @fd}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) 15:35:49 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9c, 0x0, 0x0, 0x0, 0x5}, [@jmp={0x5, 0x1, 0x4, 0x9, 0x1, 0x8, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x0, 0xb, 0x9, 0x10, 0xfffffffffffffffc}, @ldst={0x3, 0x2, 0x3, 0xa, 0x6, 0xfffffffffffffffe, 0xfffffffffffffff0}, @alu={0x4, 0x0, 0x1, 0x4, 0x9, 0xfffffffffffffff0, 0xfffffffffffffffc}, @ldst={0x1, 0x2, 0x6, 0xb, 0x4, 0x80}, @initr0, @ldst={0x3, 0x2, 0x6, 0x3, 0x14b5ac908306b808, 0x4, 0xfffffffffffffff0}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x35, &(0x7f0000000100)=""/53, 0x41000, 0x7, '\x00', 0x0, 0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0xf, 0xff, 0x4}, 0x10}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000280)={r1, r2}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x203, 0x1, 0x4}) 15:35:49 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, &(0x7f0000000080)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@private0, @in6=@dev}}, {{@in6=@private1}, 0x0, @in=@remote}}, &(0x7f0000000000)=0xe8) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f00000002c0)={0x0, @reserved}) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000040)={r0, 0x5}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:49 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0285628, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x26, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:49 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="f4000002", @ANYRES16=0x0, @ANYBLOB="000128bd7000fddbdf250b000000080001007063690011000200303030303a30303a31309752e82eee5b5ab11c50cc2a300000000008000b00050000000e0001006e657464657673696d90261d180000000f0002006e657464557673696d30000008000b0007000000080001007063690011000200303030303a30303a31302e300000000008000b00ff070000080001007063690011000200303030303a30303a31302e30e7ff000008000b00020000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00050000080800010070636900110002303a30303a31302e300000000008000b00a1000000"], 0xf4}, 0x1, 0x0, 0x0, 0x800}, 0x44000) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000200)={0x8, 0x40000, "b5315392ac7c08779ac949851155885ba31ba5576b61222d", {0xe, 0x8}, 0x1}) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000040)) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0x40045612, &(0x7f00000000c0)={0xe7b7, 0x0, 0x0, {0x0, @vbi={0x40, 0x400, 0x8001, 0x20363159, [0x8, 0x8], [0xf0000000, 0x75400000]}}}) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000000)={0x7f, 0xf2e, @value=0x85b4}) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000002c0)={0x8, @sliced={0x5, [0x6, 0x400, 0x3, 0x1bae, 0x5, 0x1, 0x6, 0x8, 0x6, 0x101, 0x200, 0x9, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1, 0x5, 0xf6f, 0x6, 0x6, 0x7, 0x2, 0x1, 0xff69, 0xfffe, 0x6, 0x8, 0x5, 0x0, 0x2, 0x7, 0x6f, 0x20, 0xe9d, 0x7, 0x687, 0x4, 0x5, 0xfff7, 0x2, 0x9, 0x4, 0x1f, 0x5, 0x200, 0x6549], 0x4}}) 15:35:49 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x3, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x0, 0x0, 0x0, 0x200000}) 15:35:49 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040), 0xdadc, 0x0) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000080)={0xedc2, 0x2, 0x8}) syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) 15:35:49 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0x7ff, 0x3ff, 0x7fffffff, 0xff}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x1, 0xc, 0x3}) 15:35:49 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0285629, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0xc0, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:49 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)={0x7, 0x3, 0x4, 0x10, 0x8000, {r1, r2/1000+60000}, {0x3, 0x1, 0x1, 0x9f, 0x7, 0x0, "33a62893"}, 0x0, 0x1, @fd=0xffffffffffffffff, 0x55e}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)={0x2bb, 0x4, 0x4, 0x4, 0x0, {}, {0x5, 0x9, 0x94, 0x39, 0x69, 0x3f, "44ed495d"}, 0x3, 0x3, @fd, 0x200, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000003c0)={0x10001, 0x2, 0x4, 0x4, 0x1, {}, {0x2, 0x2, 0x3, 0x50, 0x9d, 0x8, "88b9b88f"}, 0x1f, 0x4, @fd=r3, 0x2, 0x0, r4}) r5 = syz_open_dev$video(&(0x7f0000000040), 0x5, 0x414580) r6 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205649, &(0x7f00000001c0)={0xf000000, 0x7, 0x6, r6, 0x0, &(0x7f0000000180)={0x990a6a, 0xd43b, '\x00', @p_u16=&(0x7f0000000140)=0x2ce3}}) accept$inet(r6, &(0x7f0000000200), &(0x7f0000000240)=0x10) 15:35:49 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:49 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr={0x41415270}}}) 15:35:49 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000080), 0x9, 0x80000) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f00000000c0)) r1 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') 15:35:49 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0585609, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:49 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000140)={0x0, @reserved}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f00000002c0)={0x7ff, "96e7c8520f8b195745dbc7803f538cc7c1f3c0c5baf3a8941637d29b8a1052c4", 0x1}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000040)) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000200)={0x0, @bt={0xfffffe00, 0x80000001, 0x0, 0x3, 0x0, 0x2, 0x1, 0x3, 0x83d, 0x4, 0x0, 0x10001, 0x7c0f, 0x4, 0x1, 0x10, {0x6bbf, 0x1}, 0x5, 0x7f}}) 15:35:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0xec0, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:49 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x5, 0x0, {0x2, @sdr={0x30395056, 0x2}}}) 15:35:49 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc058560f, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:49 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000001c0)={0x0, 0x0, 0x0, {0x9, @vbi={0x4, 0x7, 0x6, 0x41495043, [0x5, 0x9], [0x9, 0xe7], 0x13a}}, 0xfffffffd}) 15:35:49 executing program 4: syz_open_dev$video(&(0x7f0000000000), 0x1, 0x6a6101) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000080)={0x0, 0xb, 0x4, 0x400, 0x0, {r2, r3/1000+10000}, {0x0, 0x2, 0x9, 0x0, 0x0, 0x6, "141d9b06"}, 0x193d, 0x0, @planes=0x0}) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000240)={0x200, 0x8, 0x4}) 15:35:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x33fe0, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:49 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000040)={0x1, 0x2, 0x1}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) ioctl$VIDIOC_S_JPEGCOMP(r0, 0x408c563e, &(0x7f0000000140)={0x4, 0xd, 0x2f, "63ba0f2144fe0eed928027b64154e06b2e5aa6c93a2c6b683bf452a16d0e00ebfaaa299f5cd4d78f66234d43f2d8aa155fb583215c7655d60eeb76b3", 0x1a, "6c41a41518cb472bebb1387bd0e80fe2b184623fe9da87ae052085ca237607fd324b2b9fc07ebb62e645b79ff06bc268916789c160fdcc0f78ddfc28", 0x40}) 15:35:49 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000001c0)={0x0, @sdr={0x494e4f4b, 0x7}}) 15:35:49 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0585611, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:50 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000000)={0x0, 0x0, 0x101, 0x2, {0xc7, 0x7, 0x44bf, 0x818}}) r1 = syz_open_dev$video(&(0x7f0000000040), 0x52e, 0x202000) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f00000001c0)={0x6, 0x0, 0xffffffff, 0x8, 0x7ff, 0x401, 0x9}) 15:35:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x200005f0, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:50 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000040)={0xb2, 0x1, 0x4, 0x8, 0x2, {0x0, 0x2710}, {0x3, 0x8, 0x3, 0x1f, 0xff, 0xfb, "6fd4e957"}, 0x6, 0x2, @fd=0xffffffffffffffff, 0xfffffffa}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000140)={0x200, 0x9, 0x4, 0x2000, 0x401, {}, {0x2, 0x8, 0xf9, 0x7f, 0x80, 0x47, "84465dd9"}, 0x8, 0x4, @fd=r1, 0x6}) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f00000002c0)={0x69a1, 0xf89, @name="77c54db146c815e5686cab83bf9ceac9ed02fa41cdc487c0b154d74cf82a816f"}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000300)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, 0x1, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000001c0)={0x1, 0x0, 0x1, {0xf36879c56d929bdc, @vbi={0x800, 0xa97, 0x20, 0x34343459, [0xffff9163, 0x5], [0x100000, 0x1], 0x1}}, 0x4}) 15:35:50 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x6, 0x3f, 0x1, 0x3, 0x1ff, 0x7, 0x1, 0x4, 0x0, 0x10001, 0x40000000, 0x10001, 0x1, 0x0, 0x7, 0x0, {0x10001, 0x344}, 0x1, 0x2}}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) 15:35:50 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x1f, 0x3ff, 0x2, {0x1, @raw_data="c03408137a6fdf9d63bfab110d6e47f4595a2e8c3fe2023298c3f0bfdb6eb2b667af3604cce58d71e9b8dbf86ada7488364a1e20a1154ab2223a23dc95b7f3078a6c3c90af952498c7d1288fdbf757c4af80841a7dd530ffe8ddaf0ee1cfc22100e0048e0b5de3eb0cce935f551cd10980017b94a678976d6031e57e71c14969aa037809b2f745b9b5d70284fd56c7ba65623c4667d95c7ed1d3442f9e18cc98e3408b0877b0ce1850a94cb600a0f18458a85da441fe2d56776b0a6406eebbb7f7620b937b8913bd"}, 0xffff}) 15:35:50 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc058565d, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x7ffff000, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:50 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000040)={0x1, 0x34325258, 0x7, 0x2487, 0x0, @discrete={0xfffffffd, 0x13577bf}}) 15:35:50 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x0, 0xfffffffe}) 15:35:50 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f0000000380)={0x4000000, 0x0, 0x0, {0x0, @sdr={0x0, 0x48000000}}, 0x7}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r2, 0xc0485619, &(0x7f0000000240)={0x0, 0xb700, "59acffcc4400077cf357a198202d5b6796013bf602a0e150", {}, 0x6}) r3 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VIDIOC_G_INPUT(r4, 0x80045626, &(0x7f00000004c0)) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f00000001c0)) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x1, 0xd, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x2, 0x0, 0x0, 0x39, 0x0, "311d8306"}, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f0000000080)) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000000)={0xffd, 0x1ff, @name="ea776bf8f86493e25485bdd7dd689817892b2636b7cb00"}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)={0x5, 0x4, 0x4, 0x2000, 0x7, {r6, r7/1000+10000}, {0x1, 0x0, 0x0, 0xbf, 0x5, 0x2, "c49dd42e"}, 0x87d, 0x1, @planes=&(0x7f0000000100)={0x4, 0x6c, @mem_offset=0x4, 0x7}, 0x3ff, 0x0, r5}) 15:35:50 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r1, 0x0, 0x0) write$apparmor_exec(r1, &(0x7f0000000000)={'exec ', '\x00'}, 0x6) 15:35:50 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc1005667, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0xfffffdef, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:50 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x680102) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f0000000040)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x20}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) r1 = syz_open_dev$video(&(0x7f0000000080), 0x101, 0x4001) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f00000000c0)) 15:35:50 executing program 5: openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000e80)={0xffffffff, 0xb, 0x4, 0x0, 0x8, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000001c0)={0x92, 0x1, 0x9b00dd53208d83cb, {0x0, @sdr={0x44495658}}}) syz_open_dev$video(&(0x7f0000000000), 0xfffffffffffffffa, 0x1) 15:35:50 executing program 0: ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, &(0x7f0000000000)) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:50 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x8, 0x0, 0x400, 0x0, 0x2b}) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000040)={0x1, 0x0, {0xfffff801, 0x0, 0x6e, 0x7}}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000140)={0x8, 0x9, 0x4, 0x20, 0x800, {0x77359400}, {0x2, 0xc, 0x0, 0x6, 0x9, 0x6, "7c599f58"}, 0x9, 0x2, @offset=0x9, 0x1640, 0x0, r3}) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000000080)={0xb, 0x101, 0x1, {0xffff, 0xc01c, 0x5, 0x5}}) 15:35:50 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x2, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:50 executing program 4: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000040)={0x4, 0x3, 0x4, 0x4000, 0x2, {0x0, 0xea60}, {0x3, 0x2, 0x5, 0xfb, 0x3, 0xff, "89882ca8"}, 0x3f, 0x1, @fd, 0x3ff}) r1 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) 15:35:50 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:50 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000040)={0x80, 0x8, 0x4, 0x2, 0x2, {0x77359400}, {0x1, 0x2, 0x7, 0x1, 0xbf, 0x40, "71683719"}, 0x9, 0x2, @fd}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x6, 0x6, 0x3, {0x5, @vbi={0x80, 0x6, 0x9, 0xacef3a237da5cb5c, [0x203, 0x56ba], [0x81, 0x3], 0x2}}, 0x6}) r1 = syz_open_dev$video(&(0x7f0000000140), 0x2, 0x1000) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000180)={0x8, 0x9, 0x1, "2acba78f34de0b0984eac0c798dc1e6652190856fdd59e83857e729d30cb6cd5", 0x37303250}) 15:35:50 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) r1 = syz_open_dev$video(&(0x7f0000000000), 0xffff, 0x20202) ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f00000001c0)={0x0, @bt={0x20, 0xfffffff9, 0x0, 0x0, 0x3, 0x3, 0x5, 0x1, 0x0, 0x1ff, 0xffffffe1, 0x7, 0x1000, 0x7, 0x19, 0x10, {0x8, 0x80000000}, 0x5, 0xad}}) 15:35:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x4, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:50 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x2, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:50 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000040)={0x101, 0x35303553, 0x9, 0x1, 0x2, @discrete={0x49}}) ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, &(0x7f0000000080)={0x7, "c941bf4d8eca58b23ae3e14c566dc9f402257df5e29a665fecffcef1a71e773a", 0x1, 0x2, 0x80, 0x8, 0x4}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) 15:35:50 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0xfffffffe, 0x0, @planes=0x0}) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f0000000000)={0x7f, 0x2, 0x7}) 15:35:50 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_JPEGCOMP(0xffffffffffffffff, 0x408c563e, &(0x7f00000001c0)={0x1, 0xf, 0x29, "38744170694e91397fac4095ba97f0c375d68491d0e168fed09b38cd4e282bd0322d852b406b4eb8a9742b4e0d0a1908b789cafc9eaa3a33a2f9e9fe", 0x17, "8e53278d22fb9abf0a9fdb6e5ad064531c0441230ec099acd9bbd7a1af5dec7c166134432c4925f12ba3d33fef19cfc6d85679d1e5d6dbb652ccef0a", 0x10}) 15:35:50 executing program 1: syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wg2\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x68, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r0}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r1 = syz_open_dev$video(&(0x7f0000000040), 0x80000000000004d, 0x102) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r2, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xf8, r3, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfafa}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x73b0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xf4ec}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3ff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x100}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4001}, 0x44) accept$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @initdev}, &(0x7f0000000140)=0x10) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000540)={0x3, 0x2, 0x4, 0x1000, 0x7fff, {r4, r5/1000+60000}, {0x5, 0x1, 0x6, 0x6, 0x9, 0x3, "2b475e95"}, 0x100, 0x4, @fd, 0x10001}) 15:35:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x7, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:50 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x5, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:50 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x9, 0x3}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000040)={0x8, "115828145f1c929037122a67bb79fd1d85c6455a1b37009677b53852806aa011", 0x3, 0x49, 0x7, 0x80008, 0x4030010, 0x2}) 15:35:50 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000040)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) syz_open_dev$media(&(0x7f0000000000), 0x6, 0x200) 15:35:50 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x2, 0x3, 0x4, 0x1000, 0xffff78e7, {r1, r2/1000+60000}, {0x5, 0x1, 0x1, 0x1, 0xff, 0xff, "71ec5800"}, 0x9, 0x4, @planes=&(0x7f0000000040)={0xffffffff, 0x5, @fd, 0x7}, 0xfff}) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x4, @vbi={0x80, 0xfffffeff, 0x8, 0x43353039, [0x0, 0x2], [0x1e0cd410, 0x2], 0x1}}}) 15:35:50 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0xe7, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x8, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:50 executing program 1: r0 = syz_open_dev$video(&(0x7f00000002c0), 0x18001, 0x20000) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0x0, 0x7, 0x1, {0xa, @raw_data="87aabb7cc3cfb0f525b8c7372033ec9a7afa810f7b63aa2f67678814559891dff4e8fc44b6f033379aebb6ed0d7147e4220bc9d20d0d6cea5707a16ca0f3b6274fa9e507a0cbda3d1410e20f4f0f8d3dd85659dd24f3ea372b316c84d187125fd95347ec29b4ca5b926cdb95950f36fc85523798d6ac5e9a05d2689e4a67ee37a8990f98a598279d522755997e37924b6e2722c55bc4f5f2febbb4c265ca5505b2bbc25f08458b8187f2d6888fc2e5d810cdb289fb900289a62a5322c2928f18274942128c8a08a3"}}) syz_open_dev$video(&(0x7f0000000000), 0x45, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000180)={0x7f7fffff, 0x8, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x1, 0x9, 0x7fffffff, 0x0, 0x8}) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000200)) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f0000000100)={0x1, 0x0, 0x2004, 0x6, 0x4, 0x5c1, 0x1, 0x1}) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000300)={0x91, 0x2, 0xc3}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x4020565b, &(0x7f0000000080)={0x4, 0x6, 0x2}) 15:35:51 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x500, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:51 executing program 4: r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000) r1 = socket$inet(0x2, 0xa, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x9, 0x3, 0x240, 0xd8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1a8, 0xffffffff, 0xffffffff, 0x1a8, 0xffffffff, 0x3, &(0x7f0000000380), {[{{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "e9386329661c2999b9e38f2418c449b5883f6d63f3ffd8dd1d3c5ceaa279"}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0x0, 0x1, [0x3a, 0x33, 0x3a, 0x23, 0xd, 0x2c, 0x22, 0x2b, 0x1f, 0xb, 0x27, 0x1b, 0x3d, 0x26, 0x1b, 0x15]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000180)={0xc7, 0xb, 0x4, 0x10, 0x360, {0x77359400}, {0x7, 0x1, 0x8, 0x3, 0x6, 0x0, "e13b1d16"}, 0x3f, 0x0, @offset=0x77, 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r4, 0x8, 0x70bd2d, 0x0, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r4, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x8, 0x5, 0x1f, 0x400}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r5, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_VLANID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x2000c000) syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) 15:35:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x300, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:51 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0x4, 0xfffffec0, '\x00', &(0x7f0000000040)=0x7}) pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000021c0)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000002500), 0xffffffffffffff3a, &(0x7f0000000100)=""/27, 0x11}, 0x40000140) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000002280)={0x7fffffff, 0x6, "d3483c76d55dec1ecd7fc67be2c75160f2b79f92c8adc306006911fdf76700", 0x0, 0x5, 0x2000003f, 0x101, 0xce}) 15:35:51 executing program 4: sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000fbdbdf2545000000080001007063690011000200303030303a300500000000000000000008008e0001000000080001007063690011000200303030303a30303a5b302e300000000008008e0002000000"], 0x5c}, 0x1, 0x0, 0x0, 0x8800}, 0x4000001) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000000)={0x7, 0x320000, "4772e0c00d5cd6cf87dc145161cb1216966a9bba258c34c5", {0x0, 0x8}, 0x10000}) 15:35:51 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x2000, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:51 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000000)={0xfffffffa, 0x2, 0x4, 0x2, 0x0, {0x77359400}, {0x3, 0x8, 0x3, 0x0, 0x3f, 0x1f, "f5e81161"}, 0x1, 0x4, @userptr=0xade, 0x4}) 15:35:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000040}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x54, r1, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x88d0}, 0x1) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:51 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000080)) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000140)={0x0, @bt={0x7, 0x40, 0x0, 0x2, 0x9, 0x80000000, 0x400, 0x4, 0x1, 0xad5, 0xb6b, 0x1f, 0xff, 0x1ff, 0xa, 0x18, {0x3, 0x964d}, 0x3, 0x40}}) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000040)={0x1, 0x0, {0x3, 0x0, 0x6, 0xff}}) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000000200)={0x0, @reserved}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) 15:35:51 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000080)={0x0, 0x5, 0x6d, '\x00', &(0x7f0000000040)=0x5}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) 15:35:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x2, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:51 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000001c0)={0x8, @vbi={0xfffffffa, 0x7ff, 0x2, 0x3136564e, [0x4, 0x9], [0x6, 0x8001], 0x1}}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f00000002c0)={0x6, "752131c84e1a400c89b9b6850be8337cac638cae71ffbe7c70d6ea91cc00", 0x3, 0x1069, 0x6d3, 0x2000000, 0x4}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:51 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0xe7ff, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:51 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000001c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000000)={0x8, "925df9a0a12f164c299b081e3251ade152b65841524ac77d864817dbcbc5a85f", 0x3, 0xeed, 0x2, 0x320000, 0x2000002, 0x2}) 15:35:51 executing program 1: syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) r0 = syz_open_dev$video(&(0x7f0000000040), 0x5, 0x228000) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x200, 0x4, "d3483c76d57cab5dec1ecd95c67be2c75160f2b79f92c8adc3def46911fdf767", 0x1}) 15:35:51 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000001c0)={0x800, 0x7, 0x1, {0x1, @vbi={0x1000, 0x401, 0xffff921c, 0x34324948, [0x2, 0x100], [0x80, 0x9], 0x108}}, 0x4}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000000)) 15:35:51 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000080)={0x5, 0x9, 0x4, 0x10, 0x6a78, {}, {0x3, 0x2, 0x80, 0x3, 0x2, 0x9, "7353e16d"}, 0x571, 0x4, @offset=0x800, 0x6, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000100)={0x5, 0x3, 0x4, 0xa801, 0x7f, {r2, r3/1000+10000}, {0x4, 0x8, 0x8, 0x6, 0x1e, 0xde, "c0a0d3ba"}, 0xa01e, 0x3, @userptr=0x7, 0x2, 0x0, r4}) 15:35:51 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0xfdfd, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x3, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:51 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000040)={0x7, 0x3, 0x5, {0x7, 0x1, 0x1f, 0x4}}) 15:35:51 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d05, &(0x7f00000004c0)=0x20) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000200)={0x0, @bt={0x1, 0x7ff, 0x0, 0x2, 0x2, 0xffffffff, 0xdd4, 0x8001, 0x9, 0x8a, 0xb4a5, 0x74a57a8e, 0x5, 0x8000, 0x1, 0x22, {0x1ff, 0x200}, 0x3, 0x81}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000540)={0x80, 0x1, 0x4, 0x100000, 0x80, {}, {0x5, 0x1, 0x81, 0x3, 0x6, 0x80, "c8eeccac"}, 0x8000, 0x1, @fd, 0xfffffffd, 0x0, r2}) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r3, 0xc0845658, &(0x7f00000002c0)={0x0, @reserved}) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000180)={0x5, 0x1, 0x4}) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f00000000c0)={0x2, 0x0, "a9b8cc0dcdd9c0f1eb971802678df756a6e1cea050c8426d", {0x200, 0x9}, 0x8}) ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f00000001c0)={0xa10000, 0x5, 0x80000001, r5, 0x0, &(0x7f0000000040)={0x9a0916, 0x0, '\x00', @value=0x7}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000003c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_G_SELECTION(r6, 0xc040565e, &(0x7f0000000140)={0x6, 0x2, 0x7, {0x0, 0x9, 0x6ff, 0x3ddd}}) 15:35:51 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) r1 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x430080) ioctl$VIDIOC_G_INPUT(r1, 0x80045626, &(0x7f0000000080)) 15:35:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, 0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_free(0xffffffffffffffff) r1 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000240)={0x200, 0x9, 0x1}) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0002, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r2, 0x80044dfd, &(0x7f0000000080)) 15:35:51 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0xffe7, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x4, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:51 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4c, 0xcb6741259b8f44b7) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) 15:35:51 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000000)={0x2, 0x0, 0x5, {0x6, 0x9a23, 0x9, 0x502}}) 15:35:51 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x400, 0xc, 0x4}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000000)={0x0}) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000200)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={r1, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 15:35:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x5, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:51 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x1e5081) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000080)={0x6, 0x3, 0x3, 0x6, 0x8, 0x80000000, 0x7}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 15:35:51 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x1000000, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:51 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @vbi={0x87c9, 0xffffffff, 0x7, 0x31424752, [0x4, 0x8], [0xffff, 0x8001], 0x108}}}) 15:35:51 executing program 1: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x2a943) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000180)={0xa30000, 0x7, 0x6, r1, 0x0, &(0x7f0000000140)={0x980923, 0x80, '\x00', @ptr=0x1}}) r2 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) 15:35:51 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0xcc655b6379ab641e, @sdr={0x38415262, 0xfffffffe}}, 0xfffffffd}) 15:35:51 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000000c0)={0x8, 0xb, 0x4, 0x2000, 0x10001, {r2, r3/1000+10000}, {0x5, 0x2, 0x20, 0x2, 0x1, 0x80, "5aadebf0"}, 0x0, 0x1, @userptr=0x7, 0x10, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)={0x1, 0x4, 0x4, 0x0, 0x8, {0x0, 0xea60}, {0x4, 0xb, 0x3, 0xb5, 0xb3, 0x0, "53561b02"}, 0x6, 0x2, @planes=&(0x7f0000000040)={0xfb3, 0x2, @mem_offset=0x8, 0x8}, 0x5, 0x0, r4}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_QUERYBUF(r5, 0xc0585609, &(0x7f00000001c0)={0x8, 0x2, 0x4, 0x100, 0x672, {0x0, 0x2710}, {0x1, 0x2, 0x6, 0x7, 0x64, 0x3, "ebdd2e2e"}, 0x0, 0x4, @userptr=0x40, 0x5}) 15:35:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x6, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:51 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x2000000, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:51 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x3, {0x0, @sdr={0x34324142}}}) 15:35:51 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_INPUT(r1, 0x80045626, &(0x7f0000000080)) 15:35:51 executing program 5: read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020}, 0x2020) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000002200)=@security={'security\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x220, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x0, 0x0, 0x4, 0x0, 0x6, 0x3], 0x4, 0x4}, {0x3, [0x2, 0x3, 0x4, 0x2, 0x7, 0x4], 0x1, 0x4}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x29}, @dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0xffffffff, 'rose0\x00', 'tunl0\x00', {}, {}, 0x8, 0x0, 0x2}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x4, 0x4, 0x2, 0x6, 0x2], 0x5, 0x5}}}, @common=@set={{0x40}, {{0x2, [0x7, 0x2, 0x4, 0x2, 0x2, 0x3], 0x4, 0x6}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast, 0x5, 0x2, [0x35, 0x38, 0xb3, 0x40, 0x18, 0x14, 0x20, 0x1, 0x8, 0x35, 0x12, 0x33, 0xb, 0x15, 0x14, 0x28], 0x0, 0x7f, 0x10001}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x10000, {0x10d3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 15:35:51 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000040)={0x7, 0x0, @value=0x400}) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000080)) 15:35:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x7, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:52 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x5000000, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:52 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f00000003c0)={0x2, 0x0, 0x0, {0x1200000, 0x81, 0x9fd1, 0x6}}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000002c0)={0x101, 0x3, 0x4, 0x0, 0x1, {r4, r5/1000+60000}, {0x1, 0xc, 0x3, 0xfe, 0x7, 0x8, "a7bda1cf"}, 0x1, 0x7, @fd, 0x0, 0x0, r2}) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000340)={0x181e, 0x5, 0x4, 0x1, 0x5, {}, {0x3, 0x2, 0x4, 0x3b, 0x0, 0x6, "f0e143c7"}, 0x5, 0x3, @planes=&(0x7f0000000040)={0xffff, 0x5, @fd, 0x6845}, 0x1, 0x0, r6}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f00000001c0)={0x0, @reserved}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:52 executing program 1: syz_open_dev$video(&(0x7f0000000280), 0x20000100, 0x7632c3) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) r1 = syz_open_dev$video(&(0x7f00000000c0), 0x4, 0x80401) ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000100)={0x0, @bt={0x100, 0x1, 0x0, 0x4, 0x919d, 0x3, 0x11ba, 0x7ff, 0x80000000, 0x7fffffff, 0x6, 0x80000000, 0x1, 0x6, 0x10, 0x3, {0x90, 0x80000000}, 0x3, 0x88}}) r2 = syz_open_dev$video(&(0x7f00000001c0), 0x8, 0x2000) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, &(0x7f0000000200)={0x1000, 0x106, "8ad2a4f1a6fe41624cf00490d5a843d08f59d968bfdfd94c1caa446db98d70b0", 0x4, 0x8, 0x81, 0x1000, 0x121}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000040)={0x7fffffff, 0x1, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x0, 0x0, 0x1000}) 15:35:52 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000001c0)={0x0, 0x100, "dbe6fc90464f4c507e9a6a4b7c807782c9c884e0ff4a6964889f3717f1d13f0d", 0xffffffc0, 0x79f3, 0x40, 0x9, 0x10d}) ioctl$VIDIOC_CREATE_BUFS(r1, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr={0xb5315258}}, 0x7fffffff}) 15:35:52 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) ioctl$VIDIOC_S_JPEGCOMP(r0, 0x408c563e, &(0x7f0000000040)={0x4, 0x7, 0x25, "d15521f0bfb1b0ca8a9325b2acc4d495789253f10a83fa9511fe7a38c161e80df21a8432f7fbd0fd333629892801827c2ca86526b2e7ba226f07480f", 0x39, "baf9181302cbb6a3b064bdf9183022b6eec06b2d047d4c666bdf8b026710e651bbbd17bd2a4ad7848b3e70d87db2ebfc89e588c03a616446f2cabfda", 0x80}) 15:35:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x8, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:52 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x4, {0x0, @sdr}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbf9, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x850}, 0x4008014) r2 = socket(0x2a, 0x4, 0x5) accept$inet(r2, &(0x7f0000000480)={0x2, 0x0, @loopback}, &(0x7f00000004c0)=0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000700)={0x3c, r4, 0x1, 0x70bd2c, 0x0, {}, [{@nsim={{}, {0x0, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x5e, 0x8c, 0x4000004}}]}, 0x59}}, 0x81) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xbc, r4, 0x20, 0x70bd27, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xfffc}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x21}, {0x6, 0x11, 0x4}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40011}, 0x4000004) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000500)={0x1ff, 0xb, 0x4, 0x400, 0xfffffffc, {0x0, 0x2710}, {0x3, 0x0, 0x80, 0x6, 0xf0, 0x7f, "1d0bc0b2"}, 0x2, 0x3, @userptr=0x219, 0x3}) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="06000000", @ANYRES16=r5, @ANYBLOB="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"], 0x134}, 0x1, 0x0, 0x0, 0x40480c0}, 0x4c000) 15:35:52 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) r1 = syz_open_dev$video(&(0x7f0000000040), 0x6, 0x40200) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000080)) 15:35:52 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr={0x30314142, 0x80000}}}) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000000)={0x6, "626aa98e129d52777a9477e07a28324074579551da3e044c2923a860b54bca83", 0x1, 0x1, 0x3, 0x100, 0x2}) 15:35:52 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x20000000, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0xe, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:52 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0xe7ffffff, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:52 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f00000001c0)={0x2, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) syz_open_dev$video(&(0x7f0000000000), 0x20, 0x400000) 15:35:52 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x800000}) 15:35:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0xf, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:52 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr={0x0, 0xe54}}}) 15:35:52 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x204a84, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000140)={0x4, 0x63, 0x1f, r2, 0x0, &(0x7f0000000100)={0x980921, 0x1, '\x00', @value64=0x2}}) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f00000000c0)={0x8001, 0x1, 0x8}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000280)={0x4c4b, 0xc3218f6cd6e7b2b5, 0x4, 0x800, 0x8, {r4, r5/1000+10000}, {0x1, 0xd, 0x26, 0x6b, 0x4, 0x8, "5dd3cda0"}, 0x8, 0x2, @planes=&(0x7f0000000200)={0x7, 0xa45, @mem_offset=0x2, 0x8000000}, 0x81}) 15:35:52 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0xfdfdffff, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:52 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_open_dev$video(&(0x7f00000002c0), 0xe98c, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000003c0)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x7}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x4020565b, &(0x7f0000000040)={0x0, 0x7}) 15:35:52 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5b0, 0x0, 0x380, 0x418, 0x2c0, 0x380, 0x518, 0x518, 0x518, 0x518, 0x518, 0x6, &(0x7f0000000040), {[{{@ip={@empty, @remote, 0xffffff00, 0xff, 'caif0\x00', 'tunl0\x00', {0xff}, {}, 0x62, 0x1, 0x1}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x1f, 'system_u:object_r:apt_exec_t:s0\x00'}}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x4, 0x1, 0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x4, 0x5, @ipv6=@local, 0x4e23}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x81}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x20, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x1b}}}, {{@ip={@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffffff, 'bond_slave_0\x00', 'batadv0\x00', {}, {0xff}, 0x8, 0x3, 0x10}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x0, 0xa, 0x6, 0x1, 0x2, 0x4], 0x1, 0x4}}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x610) r1 = socket$inet(0x2, 0xa, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000780)={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x17}, 0x1, 0x7, [@broadcast, @loopback, @empty, @rand_addr=0x64010100, @local, @loopback, @private=0xa010100]}, 0x2c) r2 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x100, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x0, 0x0, 0xffffffff, 0x0, 0x24}) 15:35:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x60, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:52 executing program 0: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0xf, @pix={0x1, 0x80, 0x32344d59, 0x8, 0x1, 0x2, 0x6, 0x80000000, 0x0, 0x0, 0x2, 0x7}}}) prctl$PR_GET_TSC(0x19, &(0x7f0000000040)) prctl$PR_GET_TSC(0x19, &(0x7f00000001c0)) 15:35:52 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0xfffffdfd, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:52 executing program 4: syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x1}) 15:35:52 executing program 5: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_open_dev$video(&(0x7f0000000000), 0x3e, 0x50000) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x3, 0x0, 0x0, {0x7, @sdr}}) r1 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_current(r1, 0x0, 0x4b) write$apparmor_current(r1, &(0x7f0000000040)=@profile={'changeprofile ', '/dev/video37\x00'}, 0x1b) 15:35:52 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x1ff, 0xb, 0x4, 0x0, 0x1, {0x77359400}, {0x2, 0xc, 0x7b, 0x36, 0x4, 0x20, "e4016233"}, 0xb, 0xc3545c34bdf2727d, @planes=&(0x7f0000000000)={0x4, 0x4, @userptr=0x857, 0x7d1}, 0x7fffffff}) 15:35:52 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000140)={0x0, @bt={0x1, 0x99, 0x0, 0x0, 0x8, 0x4, 0x0, 0x5, 0x4, 0x3, 0x9, 0x1000, 0x100010, 0x7, 0x1a, 0x18, {0x7, 0x3}, 0x81, 0xba}}) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0x7, 0x7f, 0x10001, 0x80000001}}) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000200)={0x2, "4c87f9da59d1a772aa1fbffde914c1786249907c1ac3b61723efc049e9ffdef3", 0x0, 0x4, 0x5, 0x200000, 0x4020d00, 0x2}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) 15:35:52 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0xffffffe7, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0xf0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:52 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) r1 = syz_open_dev$video(&(0x7f0000000140), 0x19f158e2, 0x200400) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000180)={0x0, @reserved}) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0xa10000, 0xe507, 0x14, r0, 0x0, &(0x7f0000000040)={0x3d0054, 0x0, '\x00', @ptr=0x9}}) 15:35:52 executing program 5: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0xa, @sdr}, 0x4}) 15:35:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x300, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:52 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0xffffffff, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:52 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000040)={0x1, 0x0, {0xa231, 0xc6, 0x0, 0x1200}}) 15:35:52 executing program 0: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x1, {0x0, @sdr}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f00000001c0)) 15:35:52 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000140)={0x80000000, "3cf8fe8069a9a87088bb7a84a6abc68df63ee853a23c16a16bd17f38038d4bcf", 0x1, 0x1, 0x20000000, 0x320000, 0x2}) r1 = syz_open_dev$video(&(0x7f0000000040), 0x6, 0x0) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000080)={0x5, 0x3, 0x4, {0x5, 0x200, 0x3b00f9b6, 0x5}}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x2, {0x10001, 0x9, 0x1}}) 15:35:52 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)={0xfffffff9, 0x2, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x1, 0x8, 0x8, 0x2, 0x6, 0x1, "3eb01d6d"}, 0x8001, 0x4, @fd, 0x7}) 15:35:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x500, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:52 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x2, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:53 executing program 0: ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000240)={0x6d07fc83530c72f4, 0x8, 0xd5, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x990a94, 0x1000, '\x00', @string=&(0x7f00000001c0)=0x80}}) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x0, 0xfffffffc, 0xda, '\x00', &(0x7f0000000000)=0x4}) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:53 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)={0x1000, 0x1, 0x4, 0x8, 0x3, {0x77359400}, {0x5, 0x2, 0x7, 0x8, 0x81, 0x8, "d90db9d6"}, 0x3ff, 0x1, @offset=0x8, 0xce, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)={0x4, 0xc71bccf09054e509, 0x4, 0x4, 0xffff, {0x77359400}, {0x3, 0x32841b505324e1ae, 0xfc, 0x7f, 0xfc, 0x1f, "eea2025e"}, 0x14f3, 0x4, @userptr=0x4000000, 0x5f, 0x0, r2}) 15:35:53 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x7, 0x0, 0x0, {0x9, @sdr}}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000001c0)={0x81, 0x9, 0x4, 0x0, 0x3, {r1, r2/1000+10000}, {0x4, 0xc, 0x9, 0x96, 0x2, 0x7d, "6a349780"}, 0x0, 0x4, @planes=&(0x7f0000000040)={0x2, 0x3, @mem_offset=0x6, 0x100}}) 15:35:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x600, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:53 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x3, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:53 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000000)={0x6, 0x100, "5071de7115915df498f49a30be3df15827c1fa69a4dc9dfa32a1c7a1a36afca0", 0x300, 0xfffffffe, 0x0, 0x3, 0x2}) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f00000001c0)) 15:35:53 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x81, 0x1, 0x2}) 15:35:53 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0xffffffff, 0x0, {0x0, @win={{0xfffffff8, 0x0, 0xc92, 0x2}, 0x7, 0x1ee3, &(0x7f0000000040)={{0x80000000, 0xa, 0x2410, 0x6}, &(0x7f0000000000)={{0x2, 0x503a, 0x6, 0xfffffff7}}}, 0x9, &(0x7f00000001c0)="06230033f7573f54d0627f1675fa791079314f87c0cf1cc9b27c8bebd511963b8e0d2a6f09b86474899ac69f21259c", 0xff}}, 0x10001}) 15:35:53 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x4, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x700, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:53 executing program 4: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x4}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20) r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f0000000300)={0x8001, 0x5, 0x825}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x104400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8c0) 15:35:53 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0xfffffffd, 0x0, 0x0, {0x0, @sdr}}) 15:35:53 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x5, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0xe00, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:53 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x7, @sdr}}) 15:35:53 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x6, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:53 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) wait4(0xffffffffffffffff, &(0x7f0000000000), 0x4, &(0x7f0000000280)) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f00000001c0)={0x0, @bt={0x1, 0x1000, 0x1, 0x2, 0x9, 0x10001, 0x7, 0x1, 0x4, 0xffffffff, 0x3fe3e29f, 0xa9, 0x0, 0x3ff, 0x20, 0x20, {0x8, 0x3}, 0x4, 0x6}}) 15:35:53 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x7, 0x9, 0x2, "5a85aa981fd9c2127966a85066657d24eca897bc23b8d64935098e0898f88ea7", 0x584e4f53}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:53 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0xbfffffffffffffff, 0x82) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f00000000c0)) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000040)={0x1, 0x0, 0x3, 0x0, {0x2, 0x10001, 0x6, 0x4}}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_QUERYMENU(r2, 0xc02c5625, &(0x7f0000000080)={0xa417, 0x2ff, @value}) 15:35:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0xf00, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:53 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x7, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:53 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4, 0x440400) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000040)={0x5, 0x2, 0x0, {0xc0000000, 0x3, 0x9, 0xffffffff}}) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x1) ioctl$VIDIOC_S_JPEGCOMP(r0, 0x408c563e, &(0x7f0000000080)={0x1, 0x9, 0x24, "91dacabc320f1b6faa8136953f56d588470fd65bc20c1ebd95ee5c66348ae2c0ba6272275863f0f917b4ea1267a6aee593b6db45a3a0d2622bf4d8bf", 0x35, "368a139d0b2e22c38273b82a142ecf8f50f0edbfa54b801ca77e925530ffd0b6b3e0ddcb6e248a61f5dedb4fd1962ef82d6c034db37e3304e8dd8d4b", 0x10}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) 15:35:53 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000340)={0x5, @win={{0x7, 0xf93, 0x9, 0x800000}, 0x2, 0x11cb, &(0x7f00000002c0)={{0x2, 0x1, 0x0, 0x4}, &(0x7f0000000280)={{0x0, 0xffff, 0x2, 0x4}, &(0x7f0000000040)={{0x7, 0x3f, 0xfffffe00, 0x3}}}}, 0x7, &(0x7f0000000300)="12926209d99adf63124482d6b5b0bcb528797de634", 0x1f}}) ioctl$VIDIOC_S_JPEGCOMP(r0, 0x408c563e, &(0x7f00000001c0)={0x10000, 0x800000, 0x36, "39fca74e711de98d19b2c93cdafc93d146094e8dd245a08ebb0a8d964982111577c5b5c13790f14513f094a239069ffd41eca028c7feb3a973e49b5a", 0x2f, "485408009dfc7f853437460e17a95ae49279b861c5e800114487161c66b5f1ef96c12db603000600ed252bbc961be7a8584900", 0x20}) 15:35:53 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000540)={&(0x7f00000004c0)=[r2, r3], &(0x7f0000000500)=[r5, 0x0, r5, r6, r5, 0x0, r5, r6], 0x2, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000600)={&(0x7f0000000580)=[r1, r3, r2, r4, r2, r2, r3, r1], &(0x7f00000005c0)=[r6, r5, 0x0, r5, 0x0, r5], 0x8, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000680)={&(0x7f0000000480)=[r4], &(0x7f0000000640)=[r5, r7, r8, 0x0, r6, r6], 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000340)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f00000003c0)={&(0x7f0000000380)=[0x0, 0x0, 0x0], 0x7, 0x3, 0x1, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000440)={&(0x7f0000000200)=[0x0, r1, r2, r3, 0x0, 0x0, r4, 0x0, 0x0, 0x0], &(0x7f0000000400)=[r5, r9, 0x0, 0x0, r10], 0xa, 0x1}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000040)={0x1, 0x0, 0x103, 0x0, {0x4, 0x9, 0x1, 0x8}}) 15:35:53 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0xb8, 0x0, 0x3, {0xb, @sdr={0x0, 0x2}}}) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000240)={0x6, 0x1, "be8c936bee0ff1e0cbec0300a7b17ecaaf000000000000000000008000", 0x8, 0x8000, 0x5, 0x9, 0x10a}) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000040)={0x1, "88d5946d596230faffbbfd7fd808e57fba28b91de803f7b643b32e1f40c9b6e2", 0x1}) 15:35:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x4aa5, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:53 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x8, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:53 executing program 5: ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000000)) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x8400, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x40002, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r1, 0x80044dfb, &(0x7f0000000180)) ioctl$SOUND_MIXER_READ_STEREODEVS(r1, 0x80044dfb, &(0x7f0000000100)) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f00000000c0)) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 15:35:53 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000000)={0x1, 0x0, {0x7, 0x3ff, 0x400, 0x101}}) syz_open_dev$video(&(0x7f0000000040), 0xfff, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:53 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040), 0x83, 0x200000) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000080)) r1 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_ENUMSTD(r2, 0xc0485619, &(0x7f00000000c0)={0x4, 0x200000, "1407dc687a0054d6438ce87317a07867f27d7eadfa73c915", {0x0, 0x3}, 0x9ec2}) 15:35:53 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f00000004c0)={0x5116, 0x6, @name="4eae482db7aab57a7c93c6d0ecb8dbf249a8705d694f3bbb2d01309b93cbaf50"}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0xffffffc1, 0x1, 0x1, {0x8, @vbi={0xefcc, 0x7, 0x2, 0x32314247, [0x81, 0x1], [0x9, 0x5], 0x138}}, 0x3}) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000440)={0x6, 0x6}) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f00000003c0)={0x9, 0x5, 0x4, 0x8, 0x0, {r7, r8/1000+60000}, {0x3, 0xc, 0x80, 0x6, 0x7c, 0x8, "2ce302f7"}, 0x6, 0x2, @planes=&(0x7f0000000380)={0x6, 0x3, @fd, 0x4}, 0x598, 0x0, r4}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000240)={0x7ff, 0x0, 0x4, 0x100, 0x7f, {r5, r6/1000+10000}, {0x2, 0xc, 0x20, 0x92, 0x3, 0x1, "9377caf6"}, 0xa28, 0x2, @offset=0x7, 0x7f, 0x0, r2}) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f00000002c0)={0x1, 0x4, 0x4, 0x100, 0x1000, {0x77359400}, {0x5, 0x2, 0x3, 0x80, 0x3, 0x40, "da1e69e9"}, 0x9, 0x4, @planes=&(0x7f0000000040)={0x401, 0x3ce1, @userptr=0x4, 0x8}, 0xe969, 0x0, r9}) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) 15:35:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x6000, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:53 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @raw_data="d777b8b7aaed9f752ca678c55c9556b32d209d45b2f494cf13369bd993f81752370f5a6fcbc1163a9062b72520fa8c9f31e13fa8565d35421564f2494aac5bbdc23e102c6d6b217443a431a340d92da90f073aeb39f47caa0e5a1172c66acffba78efab6baf7e3994a604aa16cb6e393f04c100bdf9249a9916302e27bbc11d1cedf6e9bad1fc5a5d1961946d5b16a1d50ab97d88ef505e13a3936c2a6af39101a1bc05c47c176149a9cfc3692b8094627d7d497d6af53d32b1c09ae6d6a6b1235dc80bee0ab140d"}}) 15:35:53 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x9, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:53 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000040)={0x2, "fa3d177b9a541b07b8d7c2d93de5874823a06b34ca33d52e9ab66a841fdb8b79", 0x3}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) 15:35:53 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000140)={0x0, @reserved}) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000080)={0x0, "7edc19d56e2dad377c29479e071ef11d188df7f77d29239afccf1dda96bc3240", 0x0, 0x1}) 15:35:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0xa54a, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:53 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0xa, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:53 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x400, 0x2, 0x6, 0x4, 0x3, 0x7, 0x8}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x61505c08, 0x8, 0x4, 0x20, 0x1, {0x0, 0xea60}, {0x4, 0x2, 0x20, 0x34, 0x2, 0x17, "396551a9"}, 0x4, 0x4, @fd, 0x3de}) 15:35:53 executing program 5: syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f00000001c0)={0x5, "ade7e66a3011c69e4e157b89658d098cad07ce192f9891152ead5a0c618e4c59", 0x3, 0x6f, 0x3, 0x100000, 0x5000800, 0x8}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0xf000, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:53 executing program 1: syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) 15:35:54 executing program 4: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x150, r0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5a}, {0x6, 0x11, 0x100}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}, {0x6, 0x11, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x37f1}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x76bc}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x7fff}}]}, 0x150}, 0x1, 0x0, 0x0, 0x4040004}, 0x4004810) r1 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) 15:35:54 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x2}, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000200)) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:54 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0xb, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x30000, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:54 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)={0x1, 0xb, 0x4, 0x2000, 0x3, {0x77359400}, {0x4, 0x1, 0x5, 0x9, 0x2, 0x7, "8a7ff880"}, 0x4, 0x4, @offset=0x2, 0x7fffffff}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000001c0)={0x0, 0x0, 0x0, {0x1, @sdr}}) 15:35:54 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000280)={0x9, 0x6, 0x4, 0x84, 0x4, {0x0, 0x2710}, {0x4, 0x6, 0x6, 0x14, 0x7, 0x5, "41618ab9"}, 0x6, 0x3, @userptr=0x6, 0x6}) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000180)={0x5, @vbi={0x6, 0x8, 0x20, 0x31324d59, [0x5, 0xd5], [0x0, 0x6], 0x1}}) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_G_INPUT(r3, 0x80045626, &(0x7f0000000080)) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f0000000040)) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000300)={0x8a3, 0x7, 0x4, 0x40, 0xf8f, {0x77359400}, {0x1, 0x0, 0xe0, 0x5, 0x4, 0xff, "ba403d15"}, 0x7, 0x1, @userptr=0x10000, 0x4, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000380)={0x4e, 0x8, 0x4, 0x8, 0x80000000, {0x0, 0xea60}, {0x5, 0x1, 0x3, 0xb8, 0x0, 0xa0, "f4931a0b"}, 0x8a, 0x3, @offset=0x100, 0x2, 0x0, r4}) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r5, 0xc0485619, &(0x7f0000000440)={0x81, 0xff0000, "ea2a2b5f60f157afb2512e818e304f2859106802c62bf184", {0x86aa, 0x200}, 0x9}) 15:35:54 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r0, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x20080) r2 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000a00000008000300", @ANYRES32=r6], 0x28}}, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x8005) 15:35:54 executing program 0: ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x2, 0x3, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f00000002c0)={&(0x7f0000000040)=[r0], &(0x7f0000000280)=[0x0, 0x0, 0x0, r1], 0x1}) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x34000, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:54 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0xc, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:54 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000000)={0x1, "61ff82e73a8c511202c8c0aadbd0b5da958506ca44978054096419564410a174", 0x1, 0x7d9, 0x4, 0x0, 0x2}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000001c0)={0x0, 0xffffffff, 0x2, {0x0, @raw_data="f97d718dc94a002087737deacc0347f6f18e6936da73ce3b2d258c9ec9a8147652a91dca8af8438cceff82093a55c6ce86d8f8292e9555d92c4307dcedd9ca35a28395ab27b857bd654dfb81d9b1fe5c8d1d39dcfbe34c0c6a21bfb346db688041874dad27f2f9b0ae3f69712e7b083db78a1cc5d5040948d3f70d57f9cab0f7c6a174a1b98b7f23aa96633cecbded4a6f34ca49a07dab18033d395ae882627435408e31f687bb03087e2e2c5ab5908e57f5b60736a596737d87af62600f1cc110ddcc5477c7ba8c"}}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x7, 0x6, 0x7, {0xb, @vbi={0x3f, 0x4, 0x2, 0x32314752, [0xf08, 0x100], [0xc1, 0xd2ac], 0x1}}, 0x1}) socket$nl_crypto(0x10, 0x3, 0x15) [ 1760.058435] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 15:35:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x400300, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:54 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0xd, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:54 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x2, @sdr}}) [ 1760.114019] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 15:35:54 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x2, {0x0, @raw_data="02642defd0ff4877911a878551a14fe45f2bbddd12c94d3c5dfc606d6967c3af427530737e393db0fa9020aa5a91c39add77c0ff5a1253308a5c93a86a6d857c0c4753a4f97453ae86bb40e61bfe6635ee7caf7f3baace409ea2ffccb2c8a3b61891695de95626685153bcbffa243be7c8c41d5be687f86ce479c8c296373884eb3637abfc6340c17fab271266e7d6c8f7d3a216877f566fa9c04e3ca8c655082a9311d9b8d958fba5795cd1219b45291e1176d664638ae3dc985c7bd71116db3708c547c6d423fc"}}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f0000000040)={0x5, 0x4}) 15:35:54 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x4, 0x4}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xc}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000040)=[0x0], &(0x7f00000000c0)=[r1], 0x1}) 15:35:54 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x40002, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x80044dfb, &(0x7f0000000100)) ioctl$SOUND_MIXER_READ_CAPS(r0, 0x80044dfc, &(0x7f0000000080)) r1 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x6, {0x0, 0x2710}, {0x0, 0x0, 0x3, 0x40, 0x0, 0x1, "7132b949"}, 0xffffffff, 0x0, @planes=0x0, 0x4}) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f0000000040)={0x5, 0x5, 0x81}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000200)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x200, 0x6, 0x1, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x5}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000380)={&(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[r3, 0x0, 0x0, r4, 0x0, r5], 0x3, 0x1}) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) 15:35:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0xf0ffff, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:54 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x10, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:54 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000000)={0x1, 0x3, 0x3}) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x8, @win={{0xf1b1, 0x800, 0x3e, 0x8}, 0x4, 0x0, &(0x7f0000000200)={{0x2, 0x400, 0x7584, 0x9e96}, &(0x7f00000001c0)={{0x6, 0x1, 0x6}, &(0x7f0000000040)={{0x7fffffff, 0xa6af, 0x1, 0x6}}}}, 0x8001, &(0x7f0000000240)="c83a78dbad920f7fe38927f2b38777f89919f49cf9159a68dac75890e6fb67e7da7f9b1be9d6656842a7faec5f15e7b9efe36ff2a4af8b0965669feeb6958a373a236e0bbfecdf25638e2e4e8c91f0e3a9969f656ae03feef85fd37ec456bbd20e98c56ba96749f1bf0918bccfadd1bb18964defe0f127cc6fa6abdb43f81a2eabcc5dd3b02575aeea6506d886aecc398dc53770c6b8a6debe87e075a6f2dd1e89cc1d30c9342d3cdfc115f5516e0526d46bb3e09c5ed784e5850d2b156a21462e15821a5669ccf1518145d52b717e4b11e177c9c64f2d19348373109a9e8958634e12deb7f161c17fe0608cc296792a677974f726698973e2"}}}) 15:35:54 executing program 4: syz_open_dev$video(&(0x7f0000000000), 0xa, 0x889987e5952cd422) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f00000000c0)={0xc, 0x0, 0x4, {0x3ff, 0x1ff, 0x6}}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x2}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000040)={0x5, 0x0, 0x1}) 15:35:54 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x8000, 0x0, 0x3, {0x1, @pix={0x4, 0x7, 0x30383653, 0x5, 0x3, 0x9, 0x7, 0x1, 0x1, 0x1, 0x2}}, 0xffffd192}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x1f, 0x0, {0x0, @sliced={0x9, [0x0, 0x0, 0x7, 0xffc1, 0x6, 0xb6, 0x9, 0xfff7, 0x5, 0x9bb9, 0x7fff, 0x6, 0xb399, 0x6, 0x8, 0x53, 0x7fff, 0x3, 0x2, 0x7, 0x2, 0x6, 0x7fff, 0x4, 0x800, 0x3ff, 0x6, 0xe000, 0x8001, 0x401, 0x846c, 0x7ff, 0x4, 0xb385, 0x7, 0x4, 0x3, 0xfeff, 0x1f, 0x7, 0x5, 0xd1, 0x5de, 0x101, 0x1ff, 0x4, 0x81, 0x8], 0x5}}}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f00000006c0)={&(0x7f0000000640)=[0x0], &(0x7f0000000680)=[0x0], 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000740)={&(0x7f0000000600)=[r1], &(0x7f0000000700)=[r2, 0x0], 0x2, 0x1, 0x3}) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f0000000580)={0x8, 0x59455247, 0x934, 0x7, 0x2, @stepwise={{0x0, 0x1}, {0x8, 0x7}, {0xf4, 0x3}}}) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000440)) ioctl$VIDIOC_ENUMOUTPUT(r3, 0xc0485630, &(0x7f00000003c0)={0x5, "c41aabebed409c6603895ea68b757343c84ae0d3ef6a897c31f06a658e4ad7ad", 0x3, 0x7, 0x6, 0x1, 0x8}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000500)={0x401, 0x9, "38580fe3945f27b4109ab1ec7684d903bc7e756e2edbb10e765d3cd5bb7266b4", 0x2, 0x5, 0x9, 0x7fff, 0x8}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x2, 0x0, 0x2, {0xa, @pix={0x38c000, 0x400, 0x4f424752, 0x6, 0x1, 0x2, 0x5, 0x7, 0x1, 0x4, 0x1}}}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 15:35:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x1000000, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:54 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x300, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:54 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x2, {0x0, @pix_mp={0x9, 0x8, 0x4745504d, 0xf, 0x0, [{0x7fffffff, 0x2}, {0xed8, 0x1ff}, {0xe33, 0xffffffff}, {0x3, 0x30}, {0x8, 0x7ff}, {0xc6, 0x1}, {0x10000, 0x3}, {0x8, 0x401}], 0xff, 0x80, 0x8, 0x1, 0x2}}}) 15:35:54 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000080)={0x3, 0x0, 0x300f, 0x3, 0x8, 0x7, 0x3}) 15:35:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x2000000, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:54 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) syz_open_dev$video(&(0x7f0000000000), 0x1ff, 0xa000) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0x6, 0x3f, 0x5, 0x7, 0x1000, 0xffffffffffffffff, 0x1, '\x00', r3, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x40) r4 = socket$kcm(0x29, 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000280)={0xa20000, 0x1df5, 0x9, r4, 0x0, &(0x7f0000000240)={0xa20929, 0x3, '\x00', @value=0x5}}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)={0x9, 0xb, 0x4, 0x70000, 0x2, {r1, r2/1000+10000}, {0x4, 0x1, 0x1, 0x0, 0xb4, 0x9, "0d1af197"}, 0x2, 0x3, @fd, 0xfff}) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f00000001c0)={0x9, "2bed63553a48d7b95a3a008baaa7aff48d290e5adeca70eb093fbcd32172ea21", 0x119a0f79f5fd5ec2, 0x0, 0x2, 0x2000, 0x20000, 0x8}) 15:35:54 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0xffffff1f, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:54 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0x1, 0xffffff01, 0x7, 0x6}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:54 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x20, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="02002dbd2a88b198ff250a0000000600a87b89520000f78b7a21e13b45d309bc9028b63089cb7d6225466112af28c262c80879e4265127d438d4f6bff03faff13d19c4"], 0x1c}, 0x1, 0x0, 0x0, 0x24040040}, 0x4008004) r3 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) 15:35:54 executing program 1: sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x14, 0x0, 0x400, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f0000000040)) 15:35:54 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f671eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x3000000, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:54 executing program 0: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0x40045612, &(0x7f00000000c0)={0x0, 0x4, 0x0, {0x0, @pix={0x7, 0x0, 0x47504a50, 0x6, 0x3, 0x8001, 0x0, 0x101, 0x1, 0x0, 0x0, 0x6}}}) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x8001, {}, {0x0, 0x0, 0x0, 0x4, 0xff, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x9d0000, 0xbd9, 0x8, r1, 0x0, &(0x7f0000000040)={0x0, 0x9, '\x00', @p_u32=&(0x7f0000000000)=0x7}}) 15:35:54 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x0, 0x0, 0x0, 0x0, 0x300}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x3f, 0x2, 0x2, "8046a7c78fb40e83f7ab37bb8cca970d005af6397ee46291be3877fb77d0bb14", 0x32314742}) 15:35:54 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b700100e00ba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x4000000, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:55 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369fecaedfebd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:55 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x7, 0x4, 0x0, 0x8001, 0x8, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2}, 0x40) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@multicast2}}, &(0x7f0000000400)=0xe8) bpf$MAP_CREATE(0x0, &(0x7f0000000440)={0x1a, 0x1000, 0xeb26, 0x2, 0x89, r1, 0x4, '\x00', r2, 0xffffffffffffffff, 0x5, 0x5, 0x7fff}, 0x40) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000240)={0x990000, 0x6, 0x1, r4, 0x0, &(0x7f0000000200)={0x990a73, 0x7, '\x00', @string=&(0x7f00000001c0)=0x8}}) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0xa, @sdr={0x0, 0x3}}}) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x9, 0x6, 0x3, "e223ce916e57bc364102d28f7db959911dbe192d1c7528fc15034330526a3552", 0x50424752}) 15:35:55 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000000)={0x7fff, 0x9, @name="e08c319932e26bbbfee52fd0b5edb72106853c4e7c224a72e72e2626bec3ee46"}) 15:35:55 executing program 4: syz_open_dev$video(&(0x7f0000000040), 0xcb, 0x468300) r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) connect$nfc_raw(r0, &(0x7f0000000000)={0x27, 0x1, 0x0, 0x2}, 0x10) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = accept4(r0, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0xc00) connect$nfc_raw(r2, &(0x7f0000000200)={0x27, 0x0, 0x1, 0x6}, 0x10) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, &(0x7f0000000100)={0x1, 0x0, 0x3, 0x4, {0x7, 0x0, 0xffff0000, 0x7fffffff}}) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000240)={0x200, 0x9, 0x2}) 15:35:55 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, r1, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5a}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) 15:35:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x5000000, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:55 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76027c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:55 executing program 4: sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x8041) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r2, 0x8, 0x70bd2d, 0x0, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x100, 0x70bd2a, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYRESDEC=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0xc000) r4 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000002c0)={@none, 0x7}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000440)={r1}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r6, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0x2c, r6, 0x800, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40811}, 0x20040040) 15:35:55 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) r1 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)={@rand_addr=0x64010100, @loopback, 0x1, 0x8, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @loopback, @private=0xa010102, @loopback, @empty, @multicast2, @private=0xa010101]}, 0x30) 15:35:55 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x7, @sdr}}) 15:35:55 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040), 0x4d, 0xb0000) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) 15:35:55 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76037c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:55 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f0000000040)) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x6000000, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:55 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f00000000c0)={0x5, 0xffffff, "f6c2f66435ee12441d3d9649fbeee4b24d8692663a4f4509", {0x4, 0xc28}, 0x5}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc0405610, &(0x7f00000001c0)={0x0, 0x0, 0x0, {0x3, @sdr={0x47504a4d}}}) 15:35:55 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000040)) 15:35:55 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000080)={0x4, 0x1, 0x0, {0x7, 0x4, 0x4, 0x7}}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000340)={0xc0000000, "35bbaa134b39dd6291c74133d5c5190f8e8cd4014f442742515fe42ee6ee857a", 0x3, 0x17, 0x4, 0x0, 0x1000020, 0x2}) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000140)={0x5, @sdr={0x4348037b, 0x3}}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000400)={0x0, @reserved}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000240)={0xfe, 0x7, 0x3, {0x4, @vbi={0x7, 0x0, 0x9, 0x55595659, [0x8000000, 0xfffff801], [0xfffffffb, 0x3], 0x1}}, 0x6}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) 15:35:55 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76047c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:55 executing program 0: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000080)={0xfffffff8, "b015627de58b5e7ef575b481715ca6420040a180836b6d6b4138d2011f98f992", 0xa67177bde37c093d}) 15:35:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x7000000, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:55 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x2, 0x101000) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f00000001c0)={0x0, @bt={0x1, 0x7, 0x0, 0x6, 0x0, 0x40, 0x9, 0x80000000, 0x8, 0x2, 0xfff, 0x337ef91a, 0x9f, 0x8000, 0xc, 0x1, {0x3, 0x2}, 0x40, 0x1}}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000280)={0x1c, "68e513715b4168c278169109c0fbdb117e15887093bf011604f8cc0bf580caee", 0x3, 0x1}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000040)={0x6, 0x0, 0x2010, 0xa65d, 0x101, 0x7fff, 0xffffffff}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:55 executing program 1: syz_open_dev$media(&(0x7f0000000040), 0x400, 0xc1) r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) socket$kcm(0x29, 0x0, 0x0) 15:35:55 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76057c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:55 executing program 4: r0 = socket(0x1b, 0x80000, 0x3) recvmsg$kcm(r0, &(0x7f0000000500)={&(0x7f0000000040)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/191, 0xbf}, {&(0x7f0000000180)=""/160, 0xa0}, {&(0x7f0000000280)=""/192, 0xc0}, {&(0x7f0000000340)=""/158, 0x9e}, {&(0x7f0000000400)=""/120, 0x78}], 0x5}, 0x41) r1 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) 15:35:55 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @vbi={0x5, 0xfffffffa, 0xff, 0x50565559, [0x1, 0x3], [0x20, 0xffffff7f], 0x2}}}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 15:35:55 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76067c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x8000000, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:55 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x51, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) 15:35:55 executing program 5: prctl$PR_SET_DUMPABLE(0x4, 0x1) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:55 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76077c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:55 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x9, 0x0, 0x2, "0cd3dcb4d8b114cc87ab369fe8cd5013c146b219706c94b8c86048169b4f7af2", 0x20343059}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0x9, @sdr={0x494e4f4b, 0x38}}) 15:35:55 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000040)={0x3, 0x32315258, 0x3, 0x2, 0x1, @discrete={0x7f, 0x4}}) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000200)={0xc, @win={{0x20, 0xffff, 0x8, 0x5}, 0x5, 0xfffffff9, &(0x7f0000000180)={{0xfffeffff, 0x6724, 0x4, 0x1}, &(0x7f0000000140)={{0x8, 0x9, 0x0, 0x6}, &(0x7f0000000080)={{0x20000, 0x200, 0x9, 0xcb1}}}}, 0x7963, &(0x7f00000001c0)="6e15136b0bfbe84388f23847667209f25de3f3ba02336462e1f715d98f48"}}) 15:35:55 executing program 0: ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f0000000400)) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x84b, 0x7, 0x4, 0xe000, 0x1, {0x0, 0xea60}, {0x5, 0xc, 0x2b, 0xc6, 0x2, 0x4, "b14e24b2"}, 0x1, 0x4, @fd=0xffffffffffffffff, 0x3}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000280)={0x8, 0x5, 0x4, 0x8, 0x7e, {r2, r3/1000+60000}, {0x3, 0x2, 0x40, 0x9, 0x3f, 0x1, "f31afeeb"}, 0x3, 0x0, @fd, 0x1, 0x0, 0xffffffffffffffff}) r5 = syz_open_dev$video(&(0x7f0000000000), 0xdbc0, 0x10000) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000380)={0x6, 0xb, 0x4, 0x1000, 0x3, {r6, r7/1000+10000}, {0x1, 0x0, 0x7, 0x3, 0x8d, 0xe, "22f44446"}, 0xffff, 0x4, @userptr=0x1, 0x8, 0x0, r4}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x81, 0xc, 0x4, 0x8, 0x6, {0x77359400}, {0x1, 0x0, 0xf7, 0x3, 0x8, 0x7f, "a9a1b113"}, 0x6, 0x3, @fd=r1, 0x4, 0x0, r4}) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0xe000000, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:55 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x2) syz_open_dev$media(&(0x7f0000000000), 0x8000, 0x48202) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:55 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76087c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:55 executing program 0: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0xfffffffc, 0x0, 0x0, {0x0, @sdr}}) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000040)) 15:35:55 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040), 0x1, 0x101000) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) 15:35:55 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000040)) 15:35:55 executing program 5: ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x1ff, 0xb, 0x0, "8247453dc39867dd0accfa9ccf76ccbd2f56b44ce728f7e676ae7b5b5ec059ae", 0x35323645}) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:55 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76097c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0xf000000, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:55 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x1, {0x0, @sdr={0x34363248}}, 0x807}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_INPUT(r1, 0x80045626, &(0x7f0000000040)) 15:35:55 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e760a7c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:55 executing program 4: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76067c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:55 executing program 1: syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$SOUND_MIXER_INFO(0xffffffffffffffff, 0x805c4d65, &(0x7f0000000040)) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) 15:35:56 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @win={{0x1e389a0b, 0x80000000, 0x4, 0x2}, 0x8, 0xffffff81, &(0x7f00000001c0)={{0x7ff, 0x80000000, 0x6, 0x10000}, &(0x7f0000000040)={{0xf3a9, 0x4040, 0x1f, 0x1}, &(0x7f0000000000)={{0x4, 0x2, 0xffff, 0x10200}}}}, 0xcd62, &(0x7f0000000200)="41e621f2b9044e0c29129111cf077f3520db34f3071ddde40f9c3ec22fed5f92eb803a005cde46", 0x5}}}) 15:35:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x60000000, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:56 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e760b7c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x7000000, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:56 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000040)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) 15:35:56 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f00000001c0)={0x0, @reserved}) 15:35:56 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x50ab0c1e9200a59, {0x0, @sdr}, 0xffffffff}) 15:35:56 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e760c7c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x9effffff, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:56 executing program 4: syz_open_dev$video(&(0x7f0000000040), 0xcb, 0x468300) r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) connect$nfc_raw(r0, &(0x7f0000000000)={0x27, 0x1, 0x0, 0x2}, 0x10) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = accept4(r0, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0xc00) connect$nfc_raw(r2, &(0x7f0000000200)={0x27, 0x0, 0x1, 0x6}, 0x10) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, &(0x7f0000000100)={0x1, 0x0, 0x3, 0x4, {0x7, 0x0, 0xffff0000, 0x7fffffff}}) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000240)={0x200, 0x9, 0x2}) 15:35:56 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3005, 0x9, 0x4, 0x7fff}) 15:35:56 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) r1 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x8200) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x7, 0xb, 0x0, "b4c69b987e1367a1198466a57e8ef462d07d74d0418fe8c76b81a7d67655de63", 0x20363059}) 15:35:56 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)={0xfff, 0x6, 0x4, 0x2, 0x8, {0x77359400}, {0x2, 0xc, 0x4, 0x1, 0x8, 0x1f, "b74c46a6"}, 0xffffff80, 0x2, @userptr=0xff, 0x9, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000380)={0x0, 0x7, 0x4, 0x5897c997d800336e, 0x3, {0x77359400}, {0x2, 0x2, 0xe0, 0x0, 0x0, 0x4, "4f51211d"}, 0x2, 0x3, @planes=&(0x7f00000002c0)={0x2, 0x8, @mem_offset=0x2, 0x7}, 0x4, 0x0, r1}) pselect6(0x40, &(0x7f0000000040)={0x0, 0x8000, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f00000000c0)={0x2}, 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x80000000, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x0, 0x107f, 0x1, 0xfff}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_G_STD(r2, 0x80085617, &(0x7f0000000280)) pselect6(0x40, &(0x7f0000000080)={0xb4e, 0x5, 0x9, 0x7, 0x2, 0x4, 0xae95, 0x3fffc0000000}, &(0x7f0000000140)={0x0, 0xc17, 0x2, 0xfa, 0x6, 0x8, 0x5, 0x8}, &(0x7f0000000180)={0x0, 0x197, 0x1, 0x7bf, 0x3f, 0xb67, 0x7d3c, 0x10000}, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan0\x00'}) 15:35:56 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e760d7c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:56 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x50ab0c1e9200a59, {0x0, @sdr}, 0xffffffff}) 15:35:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0xa1ffffff, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:56 executing program 0: r0 = socket$inet(0x2, 0x2, 0x3) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) recvmsg$kcm(r1, &(0x7f0000000580)={&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/111, 0x6f}, {&(0x7f0000000340)=""/247, 0xf7}, {&(0x7f0000000180)}], 0x3, &(0x7f0000000480)=""/224, 0xe0}, 0x100) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f00000005c0)={r0, 0x3773ab0f}) r3 = socket(0x3b, 0x6, 0x3c8b) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8081}, 0x408c4) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r4, 0xc040563e, &(0x7f0000000040)={0x0, 0x0, 0x100, 0xcf82f27ea4920e0e, {0x1, 0x20200, 0x1ff, 0x4}}) ioctl$VIDIOC_QUERYMENU(r4, 0xc02c5625, &(0x7f00000000c0)={0x4, 0xa823, @name="0a47a65abde0c0ddc450511f7d2cbb2ffd465df44d8e3d1445b46c20a8407985"}) ioctl$VIDIOC_CREATE_BUFS(r4, 0x40045612, &(0x7f00000001c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:56 executing program 5: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r1, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0xa47}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x24048000) 15:35:56 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:56 executing program 4: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369fecaedfebd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0xa54a0000, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:56 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f00000001c0)={0x2, @vbi={0x0, 0x7f, 0x8, 0x4745504d, [0x7, 0x2], [0x2, 0xffffff81], 0x1}}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @userptr=0x7}) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000000)={0x0, 0x103, 0x2, {0x7, 0x52, 0x2230, 0xc08}}) 15:35:56 executing program 4: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369fecaedfebd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:56 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}, 0x2}) 15:35:57 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x101, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000040)={0x4, 0x0, 0x1008, 0xfffffff8, 0x1, 0x180000, 0x0, 0x1}) 15:35:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0xeaffffff, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:57 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x521, 0x0, 0x0, {0x8, @raw_data="9f96335c44a116c3f10f8a722603795a335a99e3ba9f2131c03bf109ca27c7517e3fcb4731f04c8908bf50313056fe5362f490262ddefbb1249c4a3352d0705517906ed4d0d1fc45dd786ef20d9ca50658167b085cb00c98e0afc60f11638f904ed6ecc884959866a465803f6d74445b93aaf357cc0ff2d5d72a6cb27ef9bf9040ebab677c3e130f9e5628fab4d02c2b49e4111f7fe6b89d0b4fdced31f552416fe05735e392d502dc85b32c9b6c29f9fbc8abd3d1c0e1450e2c2799eb14e39b50df1c39de3e8d6f"}}) 15:35:57 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000300)={0x800, 0x3000000, "09a308cda7f6485de175261df40c574f4f9da832e0af0ef5", {0x2, 0x1f}, 0x3ff}) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x5, 0x8, 0x1, "1230994f008ffa30b0992936614d7fdc0cda444a9476485c18abb77f9205321d"}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000200)={0x4, 0x9, 0x3}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xc, 0x1, 0xfa1f, 0xdd, 0x1f0a, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x3}, 0x40) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000240)={0x9, 0x5, 0x4, 0x100, 0x5, {}, {0x5, 0x1, 0xa1, 0x0, 0x0, 0xc6, "68c65c45"}, 0x4, 0x2, @offset=0x1, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x1b, 0x8, 0xa0a7, 0x9, 0x1481, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x40) 15:35:57 executing program 4: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369fecaedfebd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:57 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}, 0x5}) 15:35:57 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x3, {0x0, @sdr={0x31435750}}}) syz_open_dev$video(&(0x7f0000000040), 0x7fff, 0x488382) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000000)) 15:35:57 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}, 0xe7}) 15:35:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0xf0ffffff, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:57 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x2, "03001c76557cab5dec92c8adc3def46911fdf7670300", 0x0, 0x0, 0x4000000}) accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f0000000080)=0x10) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f0000000140)={@default, @default, 0x2, 0x20}) 15:35:57 executing program 0: ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000000)={0x7, &(0x7f00000001c0)=[{@fixed}, {@none}, {}, {@fixed}, {@none}, {}, {@none}]}) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:57 executing program 4: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369fecaedfebd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:57 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}, 0x500}) 15:35:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0xfcffffff, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:57 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @reserved}) 15:35:57 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000000)) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f00000001c0)={0x2, 0x5, 0xf976b859b2483daa}) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:57 executing program 4: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369fecaedfebd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0xfffff000, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:57 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x0, 0x0, 0x0, 0x0, 0x180}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x7, 0x3}) 15:35:57 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}, 0x2000}) 15:35:57 executing program 4: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369fecaedfebd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:57 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}, 0xe7ff}) 15:35:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0xffffff7f, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:57 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000140)={0x8f, 0x4, 0x0, "c25e71e30a0df5aa1c2c20856e27e04249929415e483378fd8f391d0cbc15fc5", 0x44495658}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0xfffffffc, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x0, 0x0, 0xfffff819, 0x0, 0x60}) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000040)={0x44, "0882933b4cc90b82ab1b69be4dab1d8fcda1e328c62379aa78fa401860fd1ed1", 0x1, 0x6, 0x7c, 0x7, 0x4}) 15:35:57 executing program 4: r0 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369fecaedfebd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:57 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}, 0xfdfd}) 15:35:57 executing program 1: ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f00000000c0)={0x7ffffffb, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x0, 0x3, 0x0, 0x7}) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000140)) 15:35:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0xffffff9e, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:57 executing program 4: r0 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369fecaedfebd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:57 executing program 0: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f00000001c0)={0x4, 0x8, 0x4, 0x100000, 0x4, {0x0, 0x2710}, {0x2, 0x1, 0x7f, 0x1, 0xff, 0xd, "b75d2c63"}, 0x20, 0x2, @fd, 0x6}) ioctl$VIDIOC_CREATE_BUFS(r1, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @pix={0x3, 0x9, 0x30314142, 0x9, 0x2, 0x0, 0x5, 0x3, 0x1, 0x1, 0x0, 0x7}}}) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f0000000000)={0x2, 0x3}) 15:35:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0xffffffa1, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:57 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000140)) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) 15:35:57 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}, 0xffe7}) 15:35:57 executing program 4: r0 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369fecaedfebd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:58 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000b00)=@filter={'filter\x00', 0xe, 0x4, 0x3b0, 0xffffffff, 0xf8, 0xf8, 0xf8, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@addrtype={{0x30}}, @common=@ah={{0x30}}]}, @REJECT={0x28}}, {{@ip={@remote, @remote, 0x0, 0x0, 'veth1_vlan\x00', 'wg0\x00'}, 0x0, 0xd8, 0x138, 0x0, {}, [@common=@set={{0x40}, {{0x0, [], 0x0, 0x1}}}, @common=@ttl={{0x28}}]}, @common=@CLUSTERIP={0x60}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@icmp={{0x28}, {0x0, "0100"}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 15:35:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0xffffffea, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:58 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x284200, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x84, 0x3, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x0, 0x10002000, 0x200000, 0x80}) 15:35:58 executing program 4: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369fecaedfebd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:58 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}, 0x1000000}) [ 1763.896478] x_tables: duplicate underflow at hook 2 [ 1763.930144] x_tables: duplicate underflow at hook 2 15:35:58 executing program 4: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369fecaedfebd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:58 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000240)={0x6, 0x200f900, "ce8c2eea46527456e8da224babe4393503c02478e3874ad4", {0x2, 0x1000}, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xc, 0x4, 0x0, 0x0, {}, {0x2, 0xc, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @offset=0x3}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r3, 0xc0044d00, &(0x7f0000000300)=0xf) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000200)={0xf000000, 0x1, 0x9725, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x9a0001, 0x9, '\x00', @string=&(0x7f0000000040)=0x3f}}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x52, 0x3, 0x200, 0xfffffbff, 0x8, 0x3, 0x1f}) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r2, 0x800443d3, &(0x7f0000000340)={@none, 0xe8f, 0x1, 0x20}) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0xfffffff0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:58 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x20, 0x70bd2a, 0x6, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7ff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040010}, 0x80) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000040)) 15:35:58 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f00000001c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0], 0x9, 0x6, 0x1, 0x0}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f00000003c0)) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r2, 0xc01864cd, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r2, 0xc01864cd, &(0x7f0000000300)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[r0, 0x0, r0, r0, r0, r0, 0x0, r0, r0], 0x3}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, &(0x7f0000000380)={&(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000340)=[r5], 0x2, 0x1}) r8 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r9, 0xc01864cd, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0xc00864c0, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r2, 0xc01064c2, &(0x7f0000000600)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r2, 0xc01064c1, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f0000000740)={&(0x7f00000006c0)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[r6, 0x0, 0x0, r4, 0x0], 0x3}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r2, 0xc02064c3, &(0x7f00000007c0)={&(0x7f0000000780)=[0x0, 0x0, 0x0], 0x7fffffff, 0x3, 0x7, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r9, 0xc01864cd, &(0x7f0000000840)={&(0x7f0000000680)=[r10, 0x0, 0x0, r11, r12, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, r5, r13, r14, r3, r7], 0x8, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r8, 0xc0405610, &(0x7f0000000880)={0x0, 0x0, 0x0, {0x0, @win={{0x3a72, 0x80, 0x100, 0x4}, 0xc, 0xc2, &(0x7f0000000480)={{0x7, 0x2, 0x1f, 0x80}, &(0x7f0000000440)={{0xfe000, 0x0, 0x100, 0x10001}, &(0x7f0000000400)={{0x0, 0x80000000, 0x100, 0x5}}}}, 0x6, &(0x7f00000004c0)="502eee86f81a2c8911edc71c9294ac4d6ee695fa9627ca96510df0dd26abba63e2e5ea17b3838f13d6d738ca3eaac1f97aaaf8e575f6869e36f5216cab481019d9bc1c7cfff1518646ab9626b267ff13ac359891725a0b8ca1fdba4605c5556411509a2323c16e794818052e1bb341be3f0a7a59690092f1f59c64537d5f7fd1bde3dc2b32da045e6866ba84e390886fc27679f84f2d19d34f8bc560eaeb4bd6db5041b94141bbe0620dd41456f2e558d27d3645fa43ebf646d95d12429d2d606b8c52e325bef44dcf41a3096375decaa767a3497bb9df8697eface9c6d14a2c1fd028d64d81f3dc46", 0x8}}}) 15:35:58 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}, 0x2000000}) 15:35:58 executing program 4: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369fecaedfebd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:58 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @vbi={0x1, 0x10000, 0x5, 0x51424752, [0x5], [0x100, 0x40], 0x13a}}}) 15:35:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0xfffffffc, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:58 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000001c0)={0x0, 0x0, 0x4, {0x0, @pix={0x7, 0x2db5eb22, 0x20363159, 0x3, 0x10000, 0x8, 0x6, 0xdb4f, 0x0, 0x4, 0x0, 0x2}}}) 15:35:58 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) r1 = socket(0x9, 0x2, 0x6) syz_open_dev$video(&(0x7f0000000140), 0x1, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="040027bd7000fbdbdf2546000000080001007063690011000200303030303a30303a31302e300000000008008e00010000000c008f0001000000000000000c009000ffffffff00000000"], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0xcc) 15:35:58 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}, 0x5000000}) 15:35:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0xffffffff, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:58 executing program 4: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 15:35:58 executing program 5: clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) clock_settime(0x5, &(0x7f00000002c0)={r0, r1+10000000}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x400000) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x3}) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000200), 0x9, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r5, 0xc01064c1, &(0x7f0000000240)={r3}) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:58 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f00000001c0)={0x6, "a04c7a823913bc7c54437d572c731c42589dc35c4bbd8f6fe0e9bd58f1a747a1", 0x1, 0xffff8001, 0x1, 0x20000, 0x2000000, 0x2}) 15:35:58 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}, 0x20000000}) 15:35:58 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0xfff, 0x69, 0x2, {0x0, @sliced={0x1, [0xff, 0x4, 0xfff, 0x2, 0x7, 0x66, 0x0, 0x63, 0x7, 0x6, 0xca, 0x5379, 0x1000, 0x4, 0x6, 0x3, 0x400, 0x3, 0x7f, 0x8, 0x9, 0x9, 0x200, 0x7, 0x0, 0x0, 0x4, 0x400, 0x8001, 0x7, 0x45, 0x4cef, 0xd9e1, 0x3, 0x1, 0x7ff, 0x7, 0x6, 0xa0, 0x3f, 0x6, 0xe8c6, 0x2, 0x7, 0x8, 0x100, 0x1, 0x8], 0x1}}, 0x4de}) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000280)={0x3, "7dc0d661ceacae36fcc75064cf01f89e39fa3d89314d47fd265cb0f836e28e0d", 0x6c4dc8a2e4fae09e, 0x3e38, 0x1, 0x800000, 0x20014, 0x8}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) syz_open_dev$video(&(0x7f0000000080), 0xfffffffffffffffa, 0x40081) unshare(0x22040000) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000040)={0x7, 0x102, 0x7, {0x2, 0x0, 0x6, 0x3cf67aa2}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000240)) 15:35:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:58 executing program 4: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 15:35:58 executing program 5: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000000c0)) 15:35:58 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}, 0xe7ffffff}) 15:35:58 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x9, @pix_mp={0x4, 0x81, 0x52424752, 0x5, 0x1, [{0x9a5, 0x6}, {0x1000, 0x1}, {0x600, 0x2}, {0x5, 0x200}, {0x2, 0x5}, {0x400, 0x7ff}, {0x8, 0xffffff01}, {0x5, 0x40}], 0x40, 0xb9, 0x6, 0x2, 0x4}}, 0x3c76fd0e}) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) 15:35:58 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0xfff, 0x69, 0x2, {0x0, @sliced={0x1, [0xff, 0x4, 0xfff, 0x2, 0x7, 0x66, 0x0, 0x63, 0x7, 0x6, 0xca, 0x5379, 0x1000, 0x4, 0x6, 0x3, 0x400, 0x3, 0x7f, 0x8, 0x9, 0x9, 0x200, 0x7, 0x0, 0x0, 0x4, 0x400, 0x8001, 0x7, 0x45, 0x4cef, 0xd9e1, 0x3, 0x1, 0x7ff, 0x7, 0x6, 0xa0, 0x3f, 0x6, 0xe8c6, 0x2, 0x7, 0x8, 0x100, 0x1, 0x8], 0x1}}, 0x4de}) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000280)={0x3, "7dc0d661ceacae36fcc75064cf01f89e39fa3d89314d47fd265cb0f836e28e0d", 0x6c4dc8a2e4fae09e, 0x3e38, 0x1, 0x800000, 0x20014, 0x8}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) syz_open_dev$video(&(0x7f0000000080), 0xfffffffffffffffa, 0x40081) unshare(0x22040000) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000040)={0x7, 0x102, 0x7, {0x2, 0x0, 0x6, 0x3cf67aa2}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000240)) 15:35:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x2, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:58 executing program 4: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 15:35:58 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}, 0xfdfdffff}) 15:35:58 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000200)={0x4, 0xd36e}) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f00000001c0)={0x4, "7f926c799950ac254e221aeb5a8a08c6e0935b5c50939058b7bcc3fe84dc7a26", 0x3, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000300)={0xc00, 0x100, "58771a664db33af5d02f0f3bbf68c0f8b3206020418235e2bd5120c74f03059c", 0x2, 0x9, 0x0, 0x9, 0x122}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000240)={0x0, @reserved}) r3 = syz_open_dev$video(&(0x7f0000000380), 0x100, 0x20001) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) 15:35:58 executing program 4: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x0, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369fecaedfebd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:58 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0xfff, 0x69, 0x2, {0x0, @sliced={0x1, [0xff, 0x4, 0xfff, 0x2, 0x7, 0x66, 0x0, 0x63, 0x7, 0x6, 0xca, 0x5379, 0x1000, 0x4, 0x6, 0x3, 0x400, 0x3, 0x7f, 0x8, 0x9, 0x9, 0x200, 0x7, 0x0, 0x0, 0x4, 0x400, 0x8001, 0x7, 0x45, 0x4cef, 0xd9e1, 0x3, 0x1, 0x7ff, 0x7, 0x6, 0xa0, 0x3f, 0x6, 0xe8c6, 0x2, 0x7, 0x8, 0x100, 0x1, 0x8], 0x1}}, 0x4de}) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000280)={0x3, "7dc0d661ceacae36fcc75064cf01f89e39fa3d89314d47fd265cb0f836e28e0d", 0x6c4dc8a2e4fae09e, 0x3e38, 0x1, 0x800000, 0x20014, 0x8}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) syz_open_dev$video(&(0x7f0000000080), 0xfffffffffffffffa, 0x40081) unshare(0x22040000) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000040)={0x7, 0x102, 0x7, {0x2, 0x0, 0x6, 0x3cf67aa2}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000240)) 15:35:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x3, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:58 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}, 0xfffffdfd}) 15:35:59 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0xfff, 0x69, 0x2, {0x0, @sliced={0x1, [0xff, 0x4, 0xfff, 0x2, 0x7, 0x66, 0x0, 0x63, 0x7, 0x6, 0xca, 0x5379, 0x1000, 0x4, 0x6, 0x3, 0x400, 0x3, 0x7f, 0x8, 0x9, 0x9, 0x200, 0x7, 0x0, 0x0, 0x4, 0x400, 0x8001, 0x7, 0x45, 0x4cef, 0xd9e1, 0x3, 0x1, 0x7ff, 0x7, 0x6, 0xa0, 0x3f, 0x6, 0xe8c6, 0x2, 0x7, 0x8, 0x100, 0x1, 0x8], 0x1}}, 0x4de}) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000280)={0x3, "7dc0d661ceacae36fcc75064cf01f89e39fa3d89314d47fd265cb0f836e28e0d", 0x6c4dc8a2e4fae09e, 0x3e38, 0x1, 0x800000, 0x20014, 0x8}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) syz_open_dev$video(&(0x7f0000000080), 0xfffffffffffffffa, 0x40081) unshare(0x22040000) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000040)={0x7, 0x102, 0x7, {0x2, 0x0, 0x6, 0x3cf67aa2}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000240)) 15:35:59 executing program 4: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x0, 0x0, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369fecaedfebd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x4, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:59 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}, 0xffffffe7}) 15:35:59 executing program 5: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f0000000000)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:59 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x80000000, 0x0, 0x0, {0x0, @sdr={0x33363248}}, 0x2}) r1 = syz_open_dev$video(&(0x7f0000000200), 0x2, 0x1) r2 = socket(0x23, 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x4) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r2, 0x800443d3, &(0x7f0000000500)={@none, 0x7, 0x20, 0x300}) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000340)={0x2eda, 0x4, 0x7, 0x1, 0xff, 0x7fff, 0x5}) ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000600)={@bcast, @bcast, 0xfd, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]}) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000240)={0x3, 0x7, 0x0, "063b59cd7d6d5f4decdbd21d042c8f4294af684a5e065b8cfb2ebb1ebe14439e", 0x43564548}) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311de106"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000480)={0x1, 0x5, 0x4, 0x100, 0x7, {0x0, 0x2710}, {0x5, 0x2, 0xff, 0x8, 0x0, 0x3, "a8242359"}, 0x18b, 0x2, @planes=&(0x7f0000000440)={0x20, 0x7ff, @mem_offset=0x2, 0x5}, 0xfffffffc}) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000001c0)={0xa00000, 0x1, 0x403, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9e0905, 0x8, '\x00', @p_u16=&(0x7f0000000000)=0x1fee}}) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) r7 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000000540)={0x0, 0xb, 0x4, 0x0, 0x6, {r5, r6/1000+60000}, {0x0, 0x0, 0x0, 0x0, 0x9, 0x0, "301a8306"}, 0x0, 0x0, @offset=0x3ff, 0x1c}) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r4, 0x80845663, &(0x7f0000000280)) getresuid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) 15:35:59 executing program 4: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x0, 0x0, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369fecaedfebd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:59 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}, 0xffffffff}) 15:35:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x5, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:59 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0xfff, 0x69, 0x2, {0x0, @sliced={0x1, [0xff, 0x4, 0xfff, 0x2, 0x7, 0x66, 0x0, 0x63, 0x7, 0x6, 0xca, 0x5379, 0x1000, 0x4, 0x6, 0x3, 0x400, 0x3, 0x7f, 0x8, 0x9, 0x9, 0x200, 0x7, 0x0, 0x0, 0x4, 0x400, 0x8001, 0x7, 0x45, 0x4cef, 0xd9e1, 0x3, 0x1, 0x7ff, 0x7, 0x6, 0xa0, 0x3f, 0x6, 0xe8c6, 0x2, 0x7, 0x8, 0x100, 0x1, 0x8], 0x1}}, 0x4de}) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000280)={0x3, "7dc0d661ceacae36fcc75064cf01f89e39fa3d89314d47fd265cb0f836e28e0d", 0x6c4dc8a2e4fae09e, 0x3e38, 0x1, 0x800000, 0x20014, 0x8}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) syz_open_dev$video(&(0x7f0000000080), 0xfffffffffffffffa, 0x40081) unshare(0x22040000) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000040)={0x7, 0x102, 0x7, {0x2, 0x0, 0x6, 0x3cf67aa2}}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) 15:35:59 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f00000001c0)={0x0, @reserved}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000040)={0x814, 0x38414761, 0x4, 0x7fffffff, 0x3, @stepwise={{0x3, 0x6}, {0xc6, 0x20}, {0xffffff00, 0x1}}}) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000440)={0x2, 0x101, 0x1, {0x2, 0x101, 0xffff2768, 0x3}}) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000000)={0x7c91, "b3782912c7597840910f0ee6ae4143324b150f2827a90bdf8f72d8db150b8688", 0x1, 0x1}) r3 = syz_open_dev$video(&(0x7f00000002c0), 0xfffffffffffffffc, 0xc0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000480)={0x1, 0xb, 0x1}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000340)={0xffff0000, 0x2, 0x4, 0x2000, 0x3, {r4, r5/1000+60000}, {0x2, 0x0, 0x7, 0x3f, 0x2, 0x9, '2\t\f1'}, 0x0, 0x4, @userptr=0xfe62, 0x400, 0x0, r2}) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000003c0)={0x0, 0x8, 0x2, 0x400, 0x7ff, {}, {0x3, 0x0, 0x1, 0x3, 0x9, 0x8, "581359e2"}, 0x80, 0x0, @offset=0x3, 0x20, 0x0, r6}) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000280)) 15:35:59 executing program 5: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x160, r1, 0x100, 0x70bd27, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x64dcdc3079b29e1d}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x160}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) 15:35:59 executing program 4: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x0, 0x0, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369fecaedfebd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:59 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0xfff, 0x69, 0x2, {0x0, @sliced={0x1, [0xff, 0x4, 0xfff, 0x2, 0x7, 0x66, 0x0, 0x63, 0x7, 0x6, 0xca, 0x5379, 0x1000, 0x4, 0x6, 0x3, 0x400, 0x3, 0x7f, 0x8, 0x9, 0x9, 0x200, 0x7, 0x0, 0x0, 0x4, 0x400, 0x8001, 0x7, 0x45, 0x4cef, 0xd9e1, 0x3, 0x1, 0x7ff, 0x7, 0x6, 0xa0, 0x3f, 0x6, 0xe8c6, 0x2, 0x7, 0x8, 0x100, 0x1, 0x8], 0x1}}, 0x4de}) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000280)={0x3, "7dc0d661ceacae36fcc75064cf01f89e39fa3d89314d47fd265cb0f836e28e0d", 0x6c4dc8a2e4fae09e, 0x3e38, 0x1, 0x800000, 0x20014, 0x8}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) syz_open_dev$video(&(0x7f0000000080), 0xfffffffffffffffa, 0x40081) unshare(0x22040000) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000040)={0x7, 0x102, 0x7, {0x2, 0x0, 0x6, 0x3cf67aa2}}) 15:35:59 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000001c0)={0xa10000, 0x6, 0xfffffffd, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9909d2, 0x7, '\x00', @value=0x4}}) 15:35:59 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000040)={0x6, 0x3, 0x8001, 0x3, 0x8, 0x0, 0x3}) 15:35:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x6, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:59 executing program 4: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x0, 0x4, {0x0, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369fecaedfebd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:59 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0xfff, 0x69, 0x2, {0x0, @sliced={0x1, [0xff, 0x4, 0xfff, 0x2, 0x7, 0x66, 0x0, 0x63, 0x7, 0x6, 0xca, 0x5379, 0x1000, 0x4, 0x6, 0x3, 0x400, 0x3, 0x7f, 0x8, 0x9, 0x9, 0x200, 0x7, 0x0, 0x0, 0x4, 0x400, 0x8001, 0x7, 0x45, 0x4cef, 0xd9e1, 0x3, 0x1, 0x7ff, 0x7, 0x6, 0xa0, 0x3f, 0x6, 0xe8c6, 0x2, 0x7, 0x8, 0x100, 0x1, 0x8], 0x1}}, 0x4de}) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000280)={0x3, "7dc0d661ceacae36fcc75064cf01f89e39fa3d89314d47fd265cb0f836e28e0d", 0x6c4dc8a2e4fae09e, 0x3e38, 0x1, 0x800000, 0x20014, 0x8}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) syz_open_dev$video(&(0x7f0000000080), 0xfffffffffffffffa, 0x40081) unshare(0x22040000) 15:35:59 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sliced={0xfff8, [0x9, 0x7fff, 0x1, 0x80, 0x5016, 0x2, 0x5121, 0x10b8, 0x8d, 0x9, 0x3, 0xffff, 0x6, 0x6, 0x40, 0x4, 0xaa0e, 0x2, 0x101, 0x1ff, 0x49b, 0xd2, 0x800, 0xff, 0x6, 0x8000, 0x9, 0x20, 0x80, 0x4, 0x101, 0x2, 0x6, 0x3, 0x40, 0x4, 0x8, 0x7, 0xf530, 0x81ca, 0x4, 0xeb92, 0x7, 0x101, 0x1, 0x800, 0x1, 0x8]}}}) 15:35:59 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000040)={0xffffff69, 0x2, 0x1ff}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:35:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x7, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:59 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0xfff, 0x69, 0x2, {0x0, @sliced={0x1, [0xff, 0x4, 0xfff, 0x2, 0x7, 0x66, 0x0, 0x63, 0x7, 0x6, 0xca, 0x5379, 0x1000, 0x4, 0x6, 0x3, 0x400, 0x3, 0x7f, 0x8, 0x9, 0x9, 0x200, 0x7, 0x0, 0x0, 0x4, 0x400, 0x8001, 0x7, 0x45, 0x4cef, 0xd9e1, 0x3, 0x1, 0x7ff, 0x7, 0x6, 0xa0, 0x3f, 0x6, 0xe8c6, 0x2, 0x7, 0x8, 0x100, 0x1, 0x8], 0x1}}, 0x4de}) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000280)={0x3, "7dc0d661ceacae36fcc75064cf01f89e39fa3d89314d47fd265cb0f836e28e0d", 0x6c4dc8a2e4fae09e, 0x3e38, 0x1, 0x800000, 0x20014, 0x8}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) unshare(0x22040000) 15:35:59 executing program 4: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x0, 0x4, {0x0, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369fecaedfebd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:59 executing program 5: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) 15:35:59 executing program 0: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @vbi={0x401, 0x1ff, 0x1, 0x47504a4d, [0x7, 0x10000], [0x6, 0xff], 0x108}}, 0x1c}) 15:35:59 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000080)={0x0}) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000004c0)={0x9, 0x8, 0x1, "e433780da273ed416abdabca256b743dcbbdbf7303a5f71aa8074a00644afe91", 0x30323953}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000240)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x6}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f00000003c0)={&(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000440)={&(0x7f00000002c0)=[r1, r2, r4, 0x0, 0x0, r5, r6, r7, 0x0], &(0x7f0000000400)=[r8, 0x0, 0x0, 0x0, r9, 0x0], 0x9}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x8, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:59 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0xfff, 0x69, 0x2, {0x0, @sliced={0x1, [0xff, 0x4, 0xfff, 0x2, 0x7, 0x66, 0x0, 0x63, 0x7, 0x6, 0xca, 0x5379, 0x1000, 0x4, 0x6, 0x3, 0x400, 0x3, 0x7f, 0x8, 0x9, 0x9, 0x200, 0x7, 0x0, 0x0, 0x4, 0x400, 0x8001, 0x7, 0x45, 0x4cef, 0xd9e1, 0x3, 0x1, 0x7ff, 0x7, 0x6, 0xa0, 0x3f, 0x6, 0xe8c6, 0x2, 0x7, 0x8, 0x100, 0x1, 0x8], 0x1}}, 0x4de}) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000280)={0x3, "7dc0d661ceacae36fcc75064cf01f89e39fa3d89314d47fd265cb0f836e28e0d", 0x6c4dc8a2e4fae09e, 0x3e38, 0x1, 0x800000, 0x20014, 0x8}) unshare(0x22040000) 15:35:59 executing program 4: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x0, 0x4, {0x0, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369fecaedfebd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:35:59 executing program 5: pkey_free(0xffffffffffffffff) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000000)={0x0, 0xc15be4a, @name="01e9f6ba8171f29fd51e6240dc12224e36907f9897aa9deef2e5dd65a0d95705"}) 15:35:59 executing program 2: sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x30, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x5, 0xa27, 0xd81, 0x1}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000801) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f00000002c0)={0x9, "8c8b3c4f3ec0bccb1d57204037f3331672f55df2d9399d3ac010a9b86086c80c", 0x1, 0x1, 0x102, 0xff0000, 0x4}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000040)={0x0, @bt={0x6, 0x9a, 0x0, 0x1, 0x31, 0x3, 0x5, 0x7, 0x3, 0xffffff81, 0x4f68, 0x5, 0x3, 0x3fffffe, 0x4, 0x4, {0x7fffffff, 0x7}, 0x7, 0xe4}}) 15:35:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0xe, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:35:59 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) r1 = syz_open_dev$video(&(0x7f0000000000), 0x6, 0x200) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f00000001c0)) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000040)) 15:35:59 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0xfff, 0x69, 0x2, {0x0, @sliced={0x1, [0xff, 0x4, 0xfff, 0x2, 0x7, 0x66, 0x0, 0x63, 0x7, 0x6, 0xca, 0x5379, 0x1000, 0x4, 0x6, 0x3, 0x400, 0x3, 0x7f, 0x8, 0x9, 0x9, 0x200, 0x7, 0x0, 0x0, 0x4, 0x400, 0x8001, 0x7, 0x45, 0x4cef, 0xd9e1, 0x3, 0x1, 0x7ff, 0x7, 0x6, 0xa0, 0x3f, 0x6, 0xe8c6, 0x2, 0x7, 0x8, 0x100, 0x1, 0x8], 0x1}}, 0x4de}) unshare(0x22040000) 15:35:59 executing program 1: syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) unshare(0x22040000) 15:35:59 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000040)={0xc, 0x1, 0x1, {0x8, 0x2004, 0x4, 0x1000}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x9959, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @offset=0x401}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f00000001c0)={0x4, 0x34565559, 0x4, 0x0, 0x1, @stepwise={{0x3, 0x6}, {0x2, 0x2}, {0x80000001, 0x7fffffff}}}) 15:35:59 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x9, 0x20200) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x7, 0x9, 0x2}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a1b342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8a8b500"}}) 15:36:00 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f00000001c0)={0x0, @reserved}) 15:36:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0xf, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:00 executing program 1: unshare(0x22040000) 15:36:00 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r1, 0x408c563e, &(0x7f00000001c0)={0x3, 0xb, 0x35, "8be3e6993593a25b398f7c52cb5f8608186242c3dede4057e2123c7fd13c717c333fad845a1f9b13a3fae8f9c14995dd365e0eb4e3f78cfe8c3a96d9", 0x1, "4ec1832560289d65ddc1650533a6cf7fc06666f0da6349b45800b58549250f105179a5ee4d0ef34b17e53962b8b23a7fc30a4d654d5eae2100fb4127", 0x18}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0xffff, 0x1, 0x200, 0x1000, 0x1c04, 0x5, 0x4}) 15:36:00 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:36:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x60, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:00 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 15:36:00 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x170, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x170}, 0x1, 0x0, 0x0, 0x40}, 0x41004) 15:36:00 executing program 1: unshare(0x0) 15:36:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0xf0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:00 executing program 1: unshare(0x0) 15:36:00 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f0000000000)) 15:36:00 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000000)={0x1, 0x103, 0x6, {0x44, 0x7f, 0x73, 0x5}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:36:00 executing program 1: unshare(0x0) 15:36:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x300, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:00 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f0000000040)) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x4, {0x0, @pix={0x1, 0x3, 0x32344d59, 0x1, 0x4, 0x9013, 0xa, 0x8, 0x1, 0x1, 0x1, 0x5}}}) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000000)={0x80, "d588430e94b653d8ddfb67b26098172d69d14f74d87c55668b9686a30304c255"}) 15:36:00 executing program 2: r0 = gettid() syz_open_procfs$namespace(r0, 0x0) ptrace$setsig(0x4203, r0, 0x9, &(0x7f0000000200)={0x8, 0x40, 0x7}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ptrace$setsig(0x4203, r0, 0x5, &(0x7f0000000280)={0x8, 0x2}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 15:36:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x500, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:00 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x3) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x0) 15:36:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0xe0c40) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r0, 0xc01064c2, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$dri(&(0x7f0000000240), 0x9f, 0x420400) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r3, 0xc01064c1, &(0x7f0000000040)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r0, 0xc01064c1, &(0x7f00000001c0)={0x0, 0x0, r5}) r7 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r3, 0xc01864cd, &(0x7f0000000340)={&(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000400)={&(0x7f0000000380)=[r1, r6, r6, r6, r4, r6, r4], &(0x7f00000003c0)=[0x0, 0x0], 0x7, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r0, 0xc01064c1, &(0x7f0000000740)={r4, 0x1, r5}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r3, 0xc01864cb, &(0x7f00000004c0)={&(0x7f0000000780)=[r4, r4, r4, r11], &(0x7f0000000480)=[0x0, 0x0, 0x0], 0x4, 0x1}) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) clock_settime(0x1, &(0x7f00000007c0)={r13, r14+60000000}) r15 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r15, 0xc01864cd, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r0, 0xc01064c2, &(0x7f0000000640)={r4, 0x1, r5}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r15, 0xc01864cd, &(0x7f0000000700)={&(0x7f0000000680)=[r6, r4, r6, r1, r6, r1, r16, r6], &(0x7f00000006c0)=[r10, r9, 0x0, r12, r8], 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r3, 0xc01864cd, &(0x7f0000000580)={&(0x7f0000000500)=[0x0, r6, r4, r4, r1, r1], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r3, 0xc01864cd, &(0x7f0000000600)={&(0x7f0000000280)=[r4, r4, r4, r6], &(0x7f00000005c0)=[0x0, r9, 0x0, r10, r12, 0x0, r17], 0x4, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x1, {0x0, @pix_mp={0x8804, 0xb01, 0x35303553, 0x4, 0x9, [{0x0, 0x8}, {0xfffffffe, 0x8}, {0x4, 0x24}, {0x3, 0x401ff}, {0x1f, 0x3}, {0x8, 0xe9}, {0x2, 0x80000001}, {0x815, 0x2}], 0xf8, 0x6, 0x1, 0x2, 0x6}}, 0x3ff}) 15:36:00 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x2, 0x0, {0x0, @sdr={0x20363059, 0xfffffffe}}, 0x8}) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f0000000040)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x4, &(0x7f0000000280)=@raw=[@alu={0x7, 0x0, 0x2, 0x5, 0x2, 0x108, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0xa1}, @map={0x18, 0x9, 0x1, 0x0, 0x1}], &(0x7f00000002c0)='GPL\x00', 0x80000000, 0x21, &(0x7f0000000300)=""/33, 0x41000, 0x1b, '\x00', 0x0, 0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0xd, 0x4c630e60, 0x9}, 0xffffffffffffff60}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x2, &(0x7f0000000000)=@raw=[@btf_id={0x18, 0x4, 0x3, 0x0, 0x2}], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x9, 0x101}, 0x10, 0x0, r1}, 0x78) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) 15:36:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x600, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:00 executing program 2: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) getrusage(0xffffffffffffffff, &(0x7f0000000200)) 15:36:00 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_G_INPUT(r1, 0x80045626, &(0x7f0000000140)) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000001c0)={0x0, 0x0, 0x0, {0x0, @raw_data="c246a549502d5a8b5f8eed9edc20d861d46f8f52932f136394faa68b111e56a6eb27c28fc8b408a2ce592c94796fd3a3e1cf4934227bb14b553cad92af64e5349edaf91ae4564ab9fd9b1242f72184546da6345b918545785a915210f0805b120d6b709f0710887ddb98a548f65c4896045ff7466c14d3ac65d43d328e9c04e0bf230caa2e924fcc272b23bed83dc8b760b31383199ea626fd4463d7d8f9bb3dbf7a50ee34218ab4ea3fd5229d9fa7dd3f373e4a82f13f334339dba5d45472bfc20dd11764d51e7c"}}) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000000)={0x904, "f8ecb3b73eb422074f01b8f999cd8c18a80bbb3367071b7695475902db30a315", 0x1, 0x80, 0x5, 0x40, 0x2}) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f0000000100)={0xa20000, 0xfff, 0x5, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x990906, 0x2, '\x00', @ptr=0x7fff}}) 15:36:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x700, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:00 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000002c0)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000500)={0x0, 0x0, 0xffffffffffffff90, 0x0, 0x0, {0x77359400}, {}, 0x0, 0x0, @fd, 0x0, 0x0, r2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000001c0)={0x39, 0x1, 0x4, 0xe000, 0x1, {0x0, 0xea60}, {0x1, 0x0, 0x3, 0x81, 0x68, 0x80, "0bfd3513"}, 0x0, 0x1, @userptr=0x2}) r3 = socket$kcm(0x29, 0x2, 0x0) socket$inet(0x2, 0x5, 0x4) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_S_AUDOUT(r4, 0x40345632, &(0x7f0000000280)={0x8000, "a76da65f05e9f9b15e88123ad6636975478e81c58dbb6a4776d0febcb45c4acf", 0x3}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0xb, @sdr={0x30323953, 0x12000000}}}) 15:36:00 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x2, {0x4, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000000)={0x8000, 0x0, @name="f97fe070e2436dac7b19df9059676f8ac4ca0868d3d092800310746784950731"}) 15:36:00 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @raw_data="95247f633010228cd389e8ee088edec3b6de6827cf931af7cbb2085ce79ca4936c60797e08435eb65d886902e88641ba05fea174d72a887c4c187efb295f1ba9dd5bd95631a1f083d20096f1827fbf1083acc2f9251c9d4a4c9de7f872ce4747cfc10005e81af825fb5ea5b6f82baae6eb997744a0e24532752b58fc5855cfd6b8a9e3a8b141aee890b7e03c30719bcb9b83e76733be3fc7b7aa8f1caeb659302b8fdf473a4b8c9147deb4594906c31306508c491a1e047426c3189290dd4eb3119c9aa1ac39c6dc"}}) 15:36:00 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f0000000000)) 15:36:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0xe00, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:01 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000000)={0x9, "85c95cdca1b6d2634f05121979d196ef499f73afa3ebbd487509a3262dabfb01", 0x1, 0xfffffe00, 0x4, 0xc000c, 0x5000000, 0x8}) 15:36:01 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000002c0)={0x3, @win={{0x4, 0xffff, 0x4311, 0x80000000}, 0x8, 0x300, &(0x7f0000000200)={{0x8, 0x2, 0x1}, &(0x7f00000001c0)={{0x4, 0x7ff, 0x80000000, 0x6}, &(0x7f0000000040)={{0x44, 0x9, 0x5, 0x400}}}}, 0x7, &(0x7f0000000240)="eba12b6236c971f65f72bbec76b3ea5e5466189175d8d1d61b4bb7bd1b9c1680784e546b8e7ea9aab69b387ef7ff369c43437c98a8376de21320e55cc46b90c2c9bf70e25aeb", 0x9}}) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000000)={0x2, "935f0066f99c987284cdf9c4f5fa6d4eaa7b9463d40df09e500cecafda9eb83b", 0x2}) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:36:01 executing program 5: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x3, 0x0, 0x0, {0x9, @sliced={0x704c, [0x6, 0xa600, 0x3, 0x0, 0x401, 0x200, 0x3, 0x7, 0x2, 0x2, 0x3, 0x7, 0x0, 0x100, 0x2d, 0x3, 0x38, 0x3ff, 0x6, 0x231, 0xffff, 0xfff7, 0x8000, 0x8, 0x81, 0x75a2, 0x2df, 0x8, 0x8001, 0x3, 0xfffe, 0x33f8, 0x5, 0x401, 0x9, 0x400, 0x58, 0x0, 0x0, 0x6, 0x200, 0xffc0, 0x0, 0x1, 0x2, 0x48, 0x1, 0x8], 0x9}}}) 15:36:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0xf00, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:01 executing program 2: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f00000000c0)=0x10, 0x800) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x9, 0x3, 0x200, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x168, 0xffffffff, 0xffffffff, 0x168, 0xffffffff, 0x3, &(0x7f0000000200), {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0xff, 0xffffff00, 'team_slave_0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x5e}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x3, 0x86b571b0bda0e374, 0x3, 0x4, 0x4, 0x5], 0x4, 0x7}, {0x4, [0x0, 0x2, 0x1, 0x6, 0x2, 0x3], 0x0, 0x1}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x5, 0xe21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) r1 = syz_open_dev$video(&(0x7f0000000000), 0x401, 0x2000) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r2, 0xc01864cd, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000c40)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0xc00864c0, &(0x7f0000000c80)={r3}) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000040)) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f00000004c0)=@nl, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/36, 0x24}, {&(0x7f0000000680)=""/202, 0xca}, {&(0x7f0000000780)=""/87, 0x57}, {&(0x7f0000000800)=""/250, 0xfa}, {&(0x7f0000000900)=""/86, 0x56}, {&(0x7f0000000980)=""/253, 0xfd}], 0x7, &(0x7f0000000b00)=""/203, 0xcb}, 0x60) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000100)={0x85c7, 0x780a, 0x4, {0x8, @sliced={0x3f, [0x4d8, 0x1c7e, 0x1, 0x100, 0x3, 0x800, 0x968e, 0x5ee, 0x3, 0x2, 0x7f, 0x92, 0x6, 0x1ff, 0x1ff, 0x7, 0xffff, 0x200, 0x1, 0x5, 0x400, 0x0, 0x7fff, 0x38, 0x8000, 0x1ff, 0x991, 0x7f, 0x7f, 0x62, 0x53, 0x3, 0x5, 0x5, 0x12b, 0x3, 0x1, 0x1a, 0x5, 0x7, 0x1f, 0xdb, 0x80, 0x0, 0x9, 0x3ff, 0x6, 0x200], 0x80}}, 0x8}) 15:36:01 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000040)) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000001c0)={0x3, 0x5, 0x4, 0x1, 0x80000001, {0x0, 0xea60}, {0x2, 0x8, 0x0, 0x7f, 0xb9, 0x1, "65b4682f"}, 0x0, 0x2, @offset=0x9, 0xfffface9}) 15:36:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x4aa5, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:01 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x4, 0x10001, 0x3}) 15:36:01 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0xb0e, 0x0, 0x0, {0x0, @vbi={0x3, 0x6, 0x6, 0x0, [0x5, 0x400], [0x806a, 0x401], 0xad}}}) 15:36:01 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f00000001c0), 0x7f, 0x2) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000240)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f00000003c0)={&(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000002c0)=[0x0, r2, r3, 0x0, 0x0, 0x0, r4, 0x0], &(0x7f0000000400)=[r5, 0x0, r6, 0x0, 0x0, 0x0, 0x0], 0x6, 0x8, 0x2}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000000)={0x690, 0x5, "bcc323945eba8add5c7cf4f923381f808fc5f8dc5975b30ccf75b9d78fa69fd3", 0x5a0e, 0xffffffff, 0x4, 0xfffffffa, 0xe0}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:36:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x6000, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:01 executing program 0: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0x40045612, &(0x7f00000000c0)={0x0, 0xfffffffd, 0x1, {0x2, @sdr={0x0, 0x3d}}, 0x7}) 15:36:01 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x55083664, 0x280000) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000200)={0xff, 0xc, 0x4, 0x2, 0x8, {}, {0x5, 0x0, 0xb7, 0x2, 0x3f, 0x81, "c9075ed8"}, 0x6, 0x3, @planes=&(0x7f0000000080)={0x0, 0x0, @mem_offset=0xfffeffff, 0xff}, 0xca4, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x3, 0x4, {0x4, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000280)={0x3, 0x2, 0x4, 0x8, 0xa9, {0x77359400}, {0x3, 0x8, 0xfe, 0xe0, 0x40, 0x3, "732b1ff3"}, 0x7f, 0x1, @fd, 0xdf9, 0x0, r2}) 15:36:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0xa54a, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:01 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000340)={0x1, 0xf98b81d6c42fd7d2, 0x4, 0x1000, 0x9, {r1, r2/1000+10000}, {0x4, 0xc, 0x9, 0xac, 0xfb, 0x1f, "e068fb6d"}, 0x4, 0x2, @fd=0xffffffffffffffff, 0xe48}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000001c0)={0x4, 0x4, 0x4, 0x7cd44, 0x6, {}, {0x5, 0x0, 0x9, 0x4, 0x3f, 0x80, "5af0321d"}, 0x8, 0x2, @fd=r3, 0x8}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x6, 0x5, {0x0, @sdr={0x4c47504a}}}) 15:36:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0xf000, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r1, @ANYBLOB="00012cbd7000fedbdf25130000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b000400000006001100040000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080000000600110007000000080001007063690011000200303030303a30303a31302e3000000000080003000300000008000b000400000006001100ff0f0000911d2300b5f8a62f1fb7a315844bdc611dceb28c37e430c6e574f52040a227b900"/210], 0xb8}, 0x1, 0x0, 0x0, 0x240080c0}, 0x4) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x7, @pix_mp={0x81, 0x1ff, 0x30314442, 0x0, 0x0, [{0x1ff, 0x3}, {0x2, 0xffffffff}, {0x87, 0x7f}, {0x200, 0x6}, {0x3, 0xfffffffd}, {0xc929, 0x6747062e}, {0x101, 0x9}, {0x6, 0x1}], 0x97, 0x7d, 0x1, 0x1}}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3108000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x4c, r4, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4d54}]}, 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x850) 15:36:01 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x828000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x6c, r4, 0x300, 0x70bd2c, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x4004d) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000000)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:36:01 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x4, @sliced={0x0, [0x3, 0x4, 0x5, 0xf60a, 0xee26, 0xeb39, 0x397, 0x8, 0x8000, 0x6, 0x3, 0x0, 0x76, 0x9, 0x4, 0x7f, 0xd64, 0x401, 0x0, 0x4, 0xe1e3, 0x1f, 0x7, 0x0, 0x7c33, 0x7, 0x2, 0x9, 0x840b, 0xfff, 0x8001, 0x80, 0x1, 0x991, 0x7fff, 0x3f, 0x5, 0x7, 0x2, 0xa791, 0x0, 0x4, 0x0, 0x79f, 0x20, 0x2, 0x9, 0x3], 0x2d6c000}}, 0x80}) 15:36:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x30000, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:01 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x20, 0x48500) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000200)={&(0x7f00000000c0)=[0x0, 0x0, r1], 0x3}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:36:01 executing program 5: accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f00000001c0)={0x1000, 0x0, 0x1004, 0x81, 0x3f, 0x0, 0x2}) 15:36:01 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x94, 0x0, {0x0, @vbi={0x8000, 0x3f, 0x0, 0x34363248, [0x8, 0x5], [0x10000, 0x90], 0x1}}}) 15:36:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x34000, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:01 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f00000001c0)) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000040)={0x1f, 0x5, 0x28, 0x9, 0x4, 0x20, 0x20b}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000240)={0x8, 0x0, 0x6001, 0x81, 0x241, 0x1f, 0x3ff, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr={0x0, 0x6}}}) 15:36:01 executing program 2: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000200)={0x9, 0xc2, 0x4, {0xa, @sdr={0x33524742, 0x7}}, 0x6a58}) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:36:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x400300, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:01 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f00000001c0)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr={0x0, 0xfffffe01}}}) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000040)={0xa30000, 0xb2ea, 0x4, r0, 0x0, &(0x7f0000000000)={0x990a76, 0x1, '\x00', @ptr=0xa1}}) 15:36:01 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x4b00, 0x0) ioctl$SOUND_MIXER_INFO(r0, 0x805c4d65, &(0x7f0000000300)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000280)={0x0, 0x9, 0x100, '\x00', &(0x7f0000000240)=0xf8}) ioctl$SOUND_MIXER_WRITE_RECSRC(0xffffffffffffffff, 0xc0044dff, &(0x7f0000000380)=0x2) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) clock_gettime(0x2, &(0x7f0000000480)={0x0, 0x0}) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {r3, r4/1000+60000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0, 0x10}) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000500), 0x4143, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r6, 0x80044dfc, &(0x7f0000000540)) ioctl$VIDIOC_CREATE_BUFS(r2, 0x40045612, &(0x7f00000000c0)={0xfffffffe, 0x800000, 0x0, {0x0, @win={{0x7fffffff, 0x8000000, 0x611d}, 0x5, 0x5, &(0x7f0000000040)={{0x4, 0xfffffff7, 0x462, 0x9}, &(0x7f0000000000)={{0x9, 0x2, 0x45, 0x2}}}, 0x401, &(0x7f00000001c0)="7b65db1d325831eb899e66a9410d52defda5b351b5d1e46f741725cbf44918c04526daedb53d3a07e19c9c3926d018091275d481f28b85df075f3adb434adc736dccc8b28b08433b08014c2d511384a56feea0f474493639a96125435568f06df58fd72e3a7ecaf4d04db4eae5ba300538d85aedf1", 0x4}}}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0x40305652, &(0x7f0000000400)={0x2906, 0x5, 0x1ff, 0x20, 0x0, 0x4, 0x800}) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000003c0), 0x34001, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r7, 0x80044dff, &(0x7f00000004c0)) 15:36:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0xf0ffff, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x1000000, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:02 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) r1 = syz_open_dev$video(&(0x7f00000000c0), 0x800, 0x400000) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f00000002c0)) syz_open_dev$video(&(0x7f0000000080), 0x5, 0x400) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x4, 0x9, 0x3, "ee36062081000440605cf726de5c550900000000000000200a00", 0x315a5046}) 15:36:02 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000000)={0x7, 0x103, 0x2, {0x1, 0x1, 0x48}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f00000001c0)={0x8, 0x0, 0x1004, 0x4, 0x3f, 0xb7, 0xd7b, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:36:02 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, @sdr={0x38414261}}}) 15:36:02 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000000)={0x800, "c41970fb547795c27c83fa1039dcc383c045db45bc53b7824becb72f7d3ef6e1", 0x1}) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f00000002c0)) 15:36:02 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$inet(0x2, 0xa, 0xffff8000) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f00000001c0)={0x9, "d8528c315bdee24661748f7336254d94fcb6b604c46f2cef9493201d89347d0d", 0x0, 0x1}) accept$inet(r1, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000040)=0x10) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0xffffffff, 0x0, {0x0, @sdr}}) 15:36:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x2000000, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:02 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr={0x0, 0x8000000}}}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000040)) 15:36:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x3000000, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:02 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr={0x34325258}}}) 15:36:02 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000080)={0x5, "1a4c7a54bc567d80992809b82025fa96c4115ca5d0598bf5305875ac1bc2dbea", 0x1, 0x2, 0x3, 0xb000, 0x800, 0x2}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000200)={0x2, 0x2, @name="98cbf79fe8097b99a6b9584402a9874a9a1862de9179ec1c8aef12d7de6efd1b"}) 15:36:02 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000000)={0x3, 0x3a, @name="c16721ec2914fca74f9f71d783066cf07fcf0d12bef6a769fbb333264933147a"}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:36:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x4000000, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:02 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_open_dev$video(&(0x7f0000000240), 0x4, 0x21e302) ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000280)={0x0, @reserved}) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000200)={0x990000, 0xe5e, 0x5, r3, 0x0, &(0x7f00000001c0)={0x980915, 0x4, '\x00', @value=0x80}}) 15:36:02 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "31008306"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000200)={0x1, 0x2, 0x4, 0x10, 0x4, {0x0, 0x2710}, {0x1, 0x1, 0x20, 0x1f, 0x9, 0x8, "4120f1c0"}, 0x2ebf, 0x1, @userptr=0x200, 0x2, 0x0, r2}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000000)={0x6, 0x8, 0x2}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x2, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:36:02 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr={0x3231564e}}}) 15:36:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x3000000, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x5000000, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x4000000, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:02 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x2, 0x780c, 0x1, {0x1, @vbi={0x8000, 0x7ff, 0x8000, 0x48524742, [0x5a1, 0x7ff], [0x6, 0x80000001], 0x2}}}) 15:36:02 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, @sdr={0x38414261}}}) 15:36:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r1, @ANYBLOB="00012cbd7000fedbdf25130000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b000400000006001100040000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080000000600110007000000080001007063690011000200303030303a30303a31302e3000000000080003000300000008000b000400000006001100ff0f0000911d2300b5f8a62f1fb7a315844bdc611dceb28c37e430c6e574f52040a227b900"/210], 0xb8}, 0x1, 0x0, 0x0, 0x240080c0}, 0x4) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x7, @pix_mp={0x81, 0x1ff, 0x30314442, 0x0, 0x0, [{0x1ff, 0x3}, {0x2, 0xffffffff}, {0x87, 0x7f}, {0x200, 0x6}, {0x3, 0xfffffffd}, {0xc929, 0x6747062e}, {0x101, 0x9}, {0x6, 0x1}], 0x97, 0x7d, 0x1, 0x1}}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3108000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x4c, r4, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4d54}]}, 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x850) 15:36:02 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$video(&(0x7f0000000080), 0x6, 0x40000) ioctl$VIDIOC_G_INPUT(r1, 0x80045626, &(0x7f0000000280)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x800, 0x4, {0x1, @win={{0x6, 0x5, 0x104, 0x7}, 0x4, 0x2, &(0x7f00000000c0)={{0x41, 0x1, 0x6, 0x1ccc000}, &(0x7f0000000240)={{0x800, 0x7fff, 0x40000009}, &(0x7f0000000000)={{0x2, 0x4, 0xffffffff, 0x3}}}}, 0x5c, &(0x7f0000000200)="9f8efcc47e085885eca70e08f58e48bb669ae78b03a510bb9f13af3adb5bb1d6149cc4255444746bc9cb7ce8e6c6f5aa6bf896c0", 0x7}}}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_S_JPEGCOMP(0xffffffffffffffff, 0x408c563e, &(0x7f00000002c0)={0x2, 0x2, 0x7, "fc56f58cf6e63c12ee2690d1634db9a161050d5a077505eccf92d50e873fa204bce081810c35e3676fdafbdb3e0ad013fed1c3150559f3ccaaf5a48a", 0x1e, "ed05ae49ee4ac781b3fe4063148bbe0228ddcd287e889bb3ef6de491cc4732503158b143226fbe81a42a69c977123ac0595fc3c8c90f435ff10d1eda", 0x68}) 15:36:02 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, @sdr={0x38414261}}}) 15:36:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x6000000, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:02 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x2, 0x780c, 0x1, {0x1, @vbi={0x8000, 0x7ff, 0x8000, 0x48524742, [0x5a1, 0x7ff], [0x6, 0x80000001], 0x2}}}) 15:36:02 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, @sdr={0x38414261}}}) 15:36:02 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x2, 0x8, 0x0, "f109a47461e42f4d44e7111f4f8f37e9a862c6131dc5515db170d6b8e020dac0", 0x34324948}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) r1 = syz_open_dev$video(&(0x7f0000000000), 0x2000, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000080)) 15:36:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x7000000, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:02 executing program 5: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0x40045612, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, @sdr={0x38414261}}}) 15:36:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x8000000, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:02 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x2, 0x780c, 0x1, {0x1, @vbi={0x8000, 0x7ff, 0x8000, 0x48524742, [0x5a1, 0x7ff], [0x6, 0x80000001], 0x2}}}) 15:36:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, 0x0, 0x200408d1) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xc3) accept4(r2, &(0x7f0000000040)=@alg, &(0x7f00000000c0)=0x80, 0x80800) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ece7c30facdf0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:36:02 executing program 5: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0x40045612, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, @sdr={0x38414261}}}) 15:36:02 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x2, 0x780c, 0x1, {0x1, @vbi={0x8000, 0x7ff, 0x8000, 0x48524742, [0x5a1, 0x7ff], [0x6, 0x80000001], 0x2}}}) 15:36:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0xe000000, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:03 executing program 5: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0x40045612, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, @sdr={0x38414261}}}) 15:36:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0xf000000, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:03 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$video(&(0x7f0000000300), 0x401, 0x101000) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @win={{0x688c, 0xfff, 0x7, 0x6cc}, 0x2, 0x3da, &(0x7f00000000c0)={{0x7, 0x2, 0x4, 0x3f}, &(0x7f0000000080)={{0x0, 0x1, 0x1, 0x8}, &(0x7f0000000000)={{0x3, 0x7fe00000, 0x4, 0x400}}}}, 0xb8c, &(0x7f0000000200)="5ed6118ff6d590ff8a113a80021c2e66b2ae92eaf0c5bb634e051f5fc88f0caca4d00ebad170d6e791783720c8e14d587693aaa922f58348a8204d0af11b4750860a72789c9801eabdbf8b57f62ea798e3837b8c67fcffcac579f1f625a19ec48bda27c7e80b4a3631455795e756e14cb1541fbf6ea3e6cad0d5d5a66959d9bdcb594094a313d344b8945dc4abaab3b26c9aae9d196ec2decd5876096e49dfd71edbcb9bc07a428f69d912b79e1c6520fb9c3ef06ae3ab435e3ad796d33a524384cd86e903caf6e33436473470bfb6fb18048772dd055f6e", 0x7}}}) 15:36:03 executing program 0: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000100)={0x2, 0x780c, 0x1, {0x1, @vbi={0x8000, 0x7ff, 0x8000, 0x48524742, [0x5a1, 0x7ff], [0x6, 0x80000001], 0x2}}}) 15:36:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x60000000, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:03 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, @sdr={0x38414261}}}) 15:36:03 executing program 0: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000100)={0x2, 0x780c, 0x1, {0x1, @vbi={0x8000, 0x7ff, 0x8000, 0x48524742, [0x5a1, 0x7ff], [0x6, 0x80000001], 0x2}}}) 15:36:03 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r2 = syz_open_dev$video(&(0x7f0000000340), 0x7ff, 0x0) ioctl$VIDIOC_ENUMSTD(r2, 0xc0485619, &(0x7f0000000380)={0x8, 0x800004, "72db7f60262d2d48e49fc61afcd4a908c46ae8932190b583", {0x1, 0xf2e8}, 0x6}) ioctl$VIDIOC_ENUMSTD(r2, 0xc0485619, &(0x7f0000000500)={0x8, 0x2000000, "f2f5794f92b89a5a5575224c4a34c8f206e0879631acedfc", {0xffff, 0x8}, 0x322d}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x9, 0x7, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "00000001"}, 0x0, 0x0, @planes=0x0}) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_ENUMINPUT(r3, 0xc050561a, &(0x7f0000000240)={0x84, "f24e9c832d044a1cee310fe52fcd9a9f24ae81d8ea1520c3477c7864acaa6d77", 0x3, 0x0, 0x3, 0x10, 0x200, 0x8}) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f0000000000)) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000400)={0x0, @reserved}) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205649, &(0x7f0000000640)={0x990000, 0x5, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x990901, 0x9, '\x00', @p_u8=&(0x7f00000005c0)=0x7f}}) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f00000004c0)={0xb4f, 0x3, 0xc58}) ioctl$VIDIOC_G_STD(r5, 0x80085617, &(0x7f00000000c0)) ioctl$VIDIOC_S_AUDOUT(r5, 0x40345632, &(0x7f00000002c0)={0x202, "e3f84f0911ba82c81b2ef1a774d1ff261006b78c0068f3628876fe2e922bb804", 0x3}) 15:36:03 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, @sdr={0x38414261}}}) 15:36:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x9effffff, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:03 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, r0, 0x12, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffc}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x843}, 0x4000011) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000280)={0x3f, "91329b393f09f90ef5ee85b37a11664b08c6c8fadf92cab43b1ccdcaf05eff71", 0x1, 0x27, 0x3, 0x8, 0x4000200, 0x2}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x400) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:36:03 executing program 0: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000100)={0x2, 0x780c, 0x1, {0x1, @vbi={0x8000, 0x7ff, 0x8000, 0x48524742, [0x5a1, 0x7ff], [0x6, 0x80000001], 0x2}}}) 15:36:03 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, @sdr={0x38414261}}}) 15:36:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0xa1ffffff, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:03 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x0, 0xe0003) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:36:03 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x2, 0x780c, 0x1, {0x1, @vbi={0x8000, 0x7ff, 0x8000, 0x48524742, [0x5a1, 0x7ff], [0x6, 0x80000001], 0x2}}}) 15:36:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0xa54a0000, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:03 executing program 5: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0x40045612, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, @sdr={0x38414261}}}) 15:36:03 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000080)={0x6, 0x102, "25051854a9c5630a6d773046df79725b2594e2b92580b791daca2dd8aa98334f", 0x7f, 0xc8, 0x2, 0x7fff, 0x40}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x0, 0x3, 0x1, 0x5, 0x9, 0x6, 0x8}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:36:03 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x2, 0x780c, 0x1, {0x1, @vbi={0x8000, 0x7ff, 0x8000, 0x48524742, [0x5a1, 0x7ff], [0x6, 0x80000001], 0x2}}}) 15:36:03 executing program 5: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0x40045612, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, @sdr={0x38414261}}}) 15:36:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0xeaffffff, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:03 executing program 5: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0x40045612, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, @sdr={0x38414261}}}) 15:36:03 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x2, 0x780c, 0x1, {0x1, @vbi={0x8000, 0x7ff, 0x8000, 0x48524742, [0x5a1, 0x7ff], [0x6, 0x80000001], 0x2}}}) 15:36:03 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x44, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1000}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x1) 15:36:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0xf0ffffff, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:03 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, 0x0) 15:36:03 executing program 2: sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x4c, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}, 0xffffffff}) 15:36:03 executing program 0: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000100)={0x2, 0x780c, 0x1, {0x1, @vbi={0x8000, 0x7ff, 0x8000, 0x48524742, [0x5a1, 0x7ff], [0x6, 0x80000001], 0x2}}}) 15:36:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0xfcffffff, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)={0x0}) syz_open_dev$dri(&(0x7f0000000280), 0x9, 0x480) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000240)={&(0x7f0000000200)=[r1, 0x0, r2], 0x3}) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:36:03 executing program 0: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000100)={0x2, 0x780c, 0x1, {0x1, @vbi={0x8000, 0x7ff, 0x8000, 0x48524742, [0x5a1, 0x7ff], [0x6, 0x80000001], 0x2}}}) 15:36:03 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, 0x0) 15:36:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0xfffff000, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:04 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x7810, 0x3, {0x2, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:36:04 executing program 0: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000100)={0x2, 0x780c, 0x1, {0x1, @vbi={0x8000, 0x7ff, 0x8000, 0x48524742, [0x5a1, 0x7ff], [0x6, 0x80000001], 0x2}}}) 15:36:04 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, 0x0) 15:36:04 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000000)={0x5, 0x3, @name="b6431312cba4112653717c58970dc0bd3a1aa7dfd7e9614857c6bb8824f33249"}) 15:36:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0xffffff7f, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:04 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 15:36:04 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr={0x38414261}}}) 15:36:04 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 15:36:04 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000080)={0x1, 0x0, {0xda, 0x0, 0xfffffff7, 0x6b2}}) 15:36:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0xffffff9e, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:04 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr={0x38414261}}}) 15:36:04 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 15:36:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 15:36:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0xffffffa1, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:04 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr={0x38414261}}}) 15:36:04 executing program 2: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @pix_mp={0xfd, 0xf6, 0x3831354f, 0x6, 0x0, [{0x10001, 0x1f}, {0x7, 0x2}, {0x80}, {0x1, 0xfffffff9}, {0x7, 0x8}, {0xfffeffff, 0x4}, {0x6, 0x7fff}, {0x4ac, 0x3f}], 0x81, 0x0, 0xa, 0x2, 0x4}}}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x401, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="7da58831b2d4"}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x19e}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x80) 15:36:04 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x1, {0x1, @vbi={0x8000, 0x7ff, 0x8000, 0x48524742, [0x5a1, 0x7ff], [0x6, 0x80000001], 0x2}}}) 15:36:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0xffffffea, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:04 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, @sdr}}) 15:36:04 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000080)={0x6, "8c016e1450a5792e1d4b10e983e8ea6856f8e6610baad27743889533670c10e2", 0x3, 0x8, 0x0, 0x0, 0x8}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:36:04 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x0, 0x1, {0x1, @vbi={0x8000, 0x7ff, 0x8000, 0x48524742, [0x5a1, 0x7ff], [0x6, 0x80000001], 0x2}}}) 15:36:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0xfffffff0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:04 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x7, 0x20000000, 0x1, 0x1, 0xffffffffffffffff, 0x8000, 0x5, 0x1, 0x10001, 0xb6, 0xf1e, 0x2, 0x625, 0xa66b, 0x2, 0x28, {0x5a, 0x6}, 0x3, 0xfb}}) 15:36:04 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x0, 0x1, {0x1, @vbi={0x8000, 0x7ff, 0x8000, 0x48524742, [0x5a1, 0x7ff], [0x6, 0x80000001], 0x2}}}) 15:36:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0xfffffffc, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:04 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x0, 0x1, {0x1, @vbi={0x8000, 0x7ff, 0x8000, 0x48524742, [0x5a1, 0x7ff], [0x6, 0x80000001], 0x2}}}) 15:36:04 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x9, 0xc, 0x2, "0ecb4b2f44c42ebf0b2737d64a9c5d23f67a6bbef7f558cf180fe7ecb58fde84", 0x34524742}) 15:36:04 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x0, {0x1, @vbi={0x8000, 0x7ff, 0x8000, 0x48524742, [0x5a1, 0x7ff], [0x6, 0x80000001], 0x2}}}) 15:36:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0xffffffff, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:04 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)={0xfc000000, 0x3, 0x4, 0x1000, 0x1, {r1, r2/1000+10000}, {0x5, 0x1, 0xc0, 0x0, 0x7, 0x4, "af128fd8"}, 0x5, 0x4, @offset=0x8001, 0x753cd1bc}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000300)={0x0, 0x4, 0x1000, 0x1, 0x6, 0xffffffffc0668f15, 0x81, 0xbb93}, &(0x7f0000000340)={0x0, 0x1, 0x2, 0xee74, 0x8, 0x7, 0x100000001, 0x1}, &(0x7f0000000380)={0x8, 0x373, 0x1, 0x9, 0x0, 0x1, 0x5cf6cf54, 0x2}, &(0x7f0000000400)={r3, r4+60000000}, &(0x7f0000000480)={&(0x7f0000000440)={[0x4]}, 0x8}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000200)={0x4, @pix={0xfe63, 0x0, 0x55595659, 0x1, 0x0, 0x10000, 0x1, 0x10000, 0x1, 0x2, 0x1, 0x2}}) 15:36:04 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x0, {0x1, @vbi={0x8000, 0x7ff, 0x8000, 0x48524742, [0x5a1, 0x7ff], [0x6, 0x80000001], 0x2}}}) 15:36:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{0x0}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:05 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x6, @sdr={0x20493859, 0x1}}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0xffffffff, 0x2000000, "0b7194f561adce4e58a54653a54269ce63a621e0b46a3827", {0x3, 0x1de7e48d}, 0x2}) 15:36:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{0x2}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:05 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x0, {0x1, @vbi={0x8000, 0x7ff, 0x8000, 0x48524742, [0x5a1, 0x7ff], [0x6, 0x80000001], 0x2}}}) 15:36:05 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000000)) 15:36:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{0x7}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:05 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x1, {0x0, @vbi={0x8000, 0x7ff, 0x8000, 0x48524742, [0x5a1, 0x7ff], [0x6, 0x80000001], 0x2}}}) 15:36:05 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r1) 15:36:05 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x1, {0x0, @vbi={0x8000, 0x7ff, 0x8000, 0x48524742, [0x5a1, 0x7ff], [0x6, 0x80000001], 0x2}}}) 15:36:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{0x8}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:05 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x1, {0x0, @vbi={0x8000, 0x7ff, 0x8000, 0x48524742, [0x5a1, 0x7ff], [0x6, 0x80000001], 0x2}}}) 15:36:05 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf80261000000000000a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d1b2a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0069e6bbf6fff26e527ef646dec049fa3e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}, 0x1}) 15:36:05 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x1, {0x1, @vbi={0x0, 0x7ff, 0x8000, 0x48524742, [0x5a1, 0x7ff], [0x6, 0x80000001], 0x2}}}) 15:36:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{0x1, 0x2}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:05 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000080)={0x3, "713cb43b7f64f20666657b82fd2d92460635ec1b91dffa6bcb90f94f0a18d1ea", 0x2, 0x7f0, 0xe21, 0x400000, 0x2}) 15:36:05 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x1, {0x1, @vbi={0x0, 0x0, 0x8000, 0x48524742, [0x5a1, 0x7ff], [0x6, 0x80000001], 0x2}}}) 15:36:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{0x1, 0x3}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:05 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000200)={0x5, 0x1, 0x1, {0xa, @vbi={0x7, 0x7, 0x0, 0x3432564e, [0xfff, 0x3], [0x4, 0x5], 0x13a}}, 0x5}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0xfffffff8, 0x4, {0x4, @sdr={0x41414770, 0x2}}}) r1 = syz_open_dev$video(&(0x7f00000000c0), 0x0, 0x42000) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f0000000300)) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000080)={0x1fe7, 0x0, 0x2003, 0x8, 0x8, 0x1, 0x4, 0x1}) 15:36:05 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x48524742, [0x5a1, 0x7ff], [0x6, 0x80000001], 0x2}}}) 15:36:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{0x1, 0x4}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:05 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000200)={0x8000, 0x9, 0x3}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000240)={0x0, @reserved}) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x8042, 0x0) ioctl$SOUND_MIXER_INFO(r2, 0x805c4d65, &(0x7f0000000080)) 15:36:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{0x1, 0x5}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:05 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x5a1, 0x7ff], [0x6, 0x80000001], 0x2}}}) 15:36:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{0x1, 0x6}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:05 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x5a1], [0x6, 0x80000001], 0x2}}}) 15:36:05 executing program 2: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_open_dev$video(&(0x7f0000000000), 0x25, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000080)={0x1, 0x0, {0x6, 0x578, 0x100}}) r1 = syz_open_dev$video(&(0x7f00000000c0), 0x8, 0x840) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000200)={0x0, 0x780c, 0x0, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d86f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae6fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:36:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{0x1, 0x7}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:05 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000), 0x80000000, 0xa0600) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000080)={0x8, 0xd31, @name="e506a602fb463b14b3057abe835e9ec7704d09db4ba496948f554778b82f1469"}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:36:05 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x5a1], [0x6, 0x80000001], 0x2}}}) 15:36:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{0x1, 0x8}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:05 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x8, 0x0, 0x1007, 0xbe3d, 0x6, 0x101, 0x6}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:36:05 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x5a1], [0x6, 0x80000001], 0x2}}}) 15:36:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{0x1, 0xe}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:06 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @pix={0x800, 0x8, 0x38416761, 0x2, 0x9, 0x612e00fb, 0x4, 0x7f, 0x0, 0x1, 0x0, 0x4}}}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000200)={0x1, @pix={0x1, 0x8, 0x31363553, 0x6, 0x6, 0x0, 0x7, 0x64, 0x1, 0x7, 0x0, 0x6}}) 15:36:06 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x7ff], [0x6, 0x80000001], 0x2}}}) 15:36:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{0x1, 0xf}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:06 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x7ff], [0x6], 0x2}}}) 15:36:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{0x1, 0x60}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:06 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000a00000008000300", @ANYRES32=r3], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x3c, 0x0, 0x600, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x2000c000) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_SUBDEV_S_CROP(r5, 0xc038563c, &(0x7f0000000280)={0x1, 0x0, {0x3, 0x8001, 0x80000001, 0x1ff}}) 15:36:06 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x7ff], [], 0x2}}}) 15:36:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:06 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x7ff], [], 0x2}}}) [ 1772.114118] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1772.152916] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 15:36:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{0x1, 0x0, 0x2}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:06 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x400, 0x20840) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000200)={0x6, @sdr={0x39565559}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:36:06 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x7ff]}}}) 15:36:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{0x1, 0x0, 0x3}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:06 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x8000, 0x7ff, 0x4, {0x8, @sdr={0x32314d59, 0x2ee}}, 0x8001}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x30, 0x0, 0x124, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x73, 0x19, {0x7fffffff, 0x7, 0xff, 0x5}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x3f, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fbcf1c143976707ffaff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}, 0x80000003}) 15:36:06 executing program 2: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x9c, r0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008001) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:36:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{0x1, 0x0, 0x4}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{0x1, 0x0, 0x5}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:06 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}, 0x7}) 15:36:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{0x1, 0x0, 0x6}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:06 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0xa, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r1, 0x408c563e, &(0x7f0000000200)={0x1, 0xb, 0x17, "a104fd2911e8e47bcf5828a65a9a4ba730a8c5cdf8155ca8a2db299e900884c04e9f9fb0912df17feb97310c3f26e2f402c61b3c260dbaca84238a45", 0x6, "a44811694c0a245222ace97e50b81d13b0fe526eb48bc75cd352fdd3430153531912c40f53653fb461ca8ce9928d89f300e7dd4a829b79ae7380b204", 0x78}) 15:36:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{0x1, 0x0, 0x7}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:06 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000080)={0x8001, "eb9b6ebde69b2105185ac33d48df230199f31862a6b7d348950e4f50e66111e2", 0x232bc8cefad1d06a, 0x849, 0x3, 0x40000, 0x100, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @vbi={0x9, 0x66, 0x1, 0x39565559, [0x40, 0x5], [0x77ba, 0x400], 0x13a}}}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000005c0)) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)={0x9, 0x1, 0x4, 0x1000, 0x8001, {0x0, 0xea60}, {0x1, 0xb, 0x7, 0x2, 0xc0, 0x9, "271300"}, 0xc5ea, 0x4, @planes=&(0x7f0000000600)={0xfff, 0x3, @fd=0xffffffffffffffff, 0x3f}, 0xec, 0x0, r2}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000006c0)={0x0, 0x9, 0x4, 0x100000, 0x9, {r3, r4/1000+60000}, {0x3, 0xc, 0x0, 0xfe, 0x52, 0x5, "f54fa34c"}, 0x101, 0x4, @fd=r5, 0x8, 0x0, r2}) 15:36:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{0x1, 0x0, 0x8}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:06 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x4, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b500"}, 0x200}) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f00000000c0)) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000080)={0x0, 0x0, {0x6, 0x9, 0x7, 0x80000000}}) 15:36:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{0x1, 0x0, 0xe}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{0x1, 0x0, 0xf}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:07 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000500)={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "3a3c27ea"}, 0x0, 0x0, @fd}) clock_gettime(0x7, &(0x7f00000001c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000500)={0x6, 0x3, 0x4, 0x40, 0x87, {0x77359400}, {0x2, 0x1, 0x6, 0x20, 0xc0, 0x2, "518dc1bd"}, 0x5, 0x3, @planes=&(0x7f00000004c0)={0x12e3, 0x3, @fd=0xffffffffffffffff, 0x1}, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000580)={0x6, 0x2, 0x4, 0x4, 0x4, {r2, r3/1000+10000}, {0x1, 0x0, 0x0, 0x40, 0xf8, 0x8, "412929e3"}, 0x3, 0x4, @fd=r4, 0x7}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x780c, 0xa5ea50552938a784, {0x5, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:36:07 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x4, @win={{0x7, 0x4, 0x10000, 0xfa}, 0x9, 0x3ce, &(0x7f0000000000)={{0xffffff3a, 0x9, 0xfdb6, 0x5}}, 0x9, &(0x7f0000000200)="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", 0x59}}}) 15:36:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{0x1, 0x0, 0x60}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:07 executing program 2: ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f0000000240)={0x0, 0x0, 0x100, 0x2, {0x200, 0x1, 0xfff, 0x9}}) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) r1 = accept4(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000000)=0x80, 0x80000) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x40, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4048090) 15:36:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{0x1, 0x0, 0xf0}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:07 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, 0xffffffffffffffff) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x780d, 0x4, {0x8, @sdr={0x7017714, 0x8}}, 0x3}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000080)={0x898, 0x7, "3215f332cfb3f4b126bb51cf76641c9bc934eebb94423d1b44468e17741b8aee", 0x7, 0x8, 0x2c, 0xffffff80, 0x208}) 15:36:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{0x1, 0x0, 0xf}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{0x1, 0x0, 0x6}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:07 executing program 5: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x7ff], [], 0x2}}}) 15:36:07 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000080)={0xffff, 0x1, "e3c3bfff05cc288dcd35b97a7d4d15308032ca688e8b8dd0ef2309e20808b57c", 0x8, 0x67, 0x3487, 0xa7, 0x100}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:36:07 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, 0xffffffffffffffff) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x780d, 0x4, {0x8, @sdr={0x7017714, 0x8}}, 0x3}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000080)={0x898, 0x7, "3215f332cfb3f4b126bb51cf76641c9bc934eebb94423d1b44468e17741b8aee", 0x7, 0x8, 0x2c, 0xffffff80, 0x208}) 15:36:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{0x1, 0x3}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{0x1, 0x0, 0x300}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:07 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, 0xffffffffffffffff) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x780d, 0x4, {0x8, @sdr={0x7017714, 0x8}}, 0x3}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000080)={0x898, 0x7, "3215f332cfb3f4b126bb51cf76641c9bc934eebb94423d1b44468e17741b8aee", 0x7, 0x8, 0x2c, 0xffffff80, 0x208}) 15:36:07 executing program 2: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000000)={0x5, 0x1, 0x5, {0x11f, 0x7, 0x9, 0x95b9882c}}) 15:36:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{0x1, 0x0, 0xf0}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{0x8}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:07 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f00000001c0), 0x7f, 0x2) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000240)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f00000003c0)={&(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000002c0)=[0x0, r2, r3, 0x0, 0x0, 0x0, r4, 0x0], &(0x7f0000000400)=[r5, 0x0, r6, 0x0, 0x0, 0x0, 0x0], 0x6, 0x8, 0x2}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000000)={0x690, 0x5, "bcc323945eba8add5c7cf4f923381f808fc5f8dc5975b30ccf75b9d78fa69fd3", 0x5a0e, 0xffffffff, 0x4, 0xfffffffa, 0xe0}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:36:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{0x1, 0x0, 0x500}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:07 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780d, 0x0, {0x1, @pix_mp={0x0, 0x0, 0x52424752, 0x9, 0xb, [{0x2, 0x4}, {0x73fc}, {0xbb58, 0x40}, {0x4, 0x3}, {0x5, 0xab}, {0x6, 0x107e}, {0x6, 0x5}, {0x1ff, 0x1}], 0x9, 0x0, 0x7, 0x1}}}) r1 = syz_open_dev$video(&(0x7f0000000000), 0xff, 0x244002) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000200)={0x6, @raw_data="5e04425cd13d96440fe59432ab7b7edf2bf98a69ab2241454ca12c58cc710e4a29d1a3937be4b380d125c8f02e132bec0dd8c961fa5eaef1a385736575454d4124009615a177c1e07883e3b8b7bf2a011d54509e7812000c47406680913c422198e299d78abd73c939a730ca51583f28910e5dbb690cd414d21a40a367f25af8d3eadfba2db67cc767b16e78ffd514d6aa61c5a22fbf6579c21c5148053516949ce02e733e22cc37aee1b75f442069ca7fc9155c8885bc7782f1ebff158ad22098681644d79cdbf8"}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000300)={0x0, @reserved}) 15:36:07 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f00000001c0)={0x0, @reserved}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000040)={0x814, 0x38414761, 0x4, 0x7fffffff, 0x3, @stepwise={{0x3, 0x6}, {0xc6, 0x20}, {0xffffff00, 0x1}}}) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000440)={0x2, 0x101, 0x1, {0x2, 0x101, 0xffff2768, 0x3}}) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000000)={0x7c91, "b3782912c7597840910f0ee6ae4143324b150f2827a90bdf8f72d8db150b8688", 0x1, 0x1}) r3 = syz_open_dev$video(&(0x7f00000002c0), 0xfffffffffffffffc, 0xc0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000480)={0x1, 0xb, 0x1}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000340)={0xffff0000, 0x2, 0x4, 0x2000, 0x3, {r4, r5/1000+60000}, {0x2, 0x0, 0x7, 0x3f, 0x2, 0x9, '2\t\f1'}, 0x0, 0x4, @userptr=0xfe62, 0x400, 0x0, r2}) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000003c0)={0x0, 0x8, 0x2, 0x400, 0x7ff, {}, {0x3, 0x0, 0x1, 0x3, 0x9, 0x8, "581359e2"}, 0x80, 0x0, @offset=0x3, 0x20, 0x0, r6}) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000280)) 15:36:07 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f00000001c0)={0x0, @reserved}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000040)={0x814, 0x38414761, 0x4, 0x7fffffff, 0x3, @stepwise={{0x3, 0x6}, {0xc6, 0x20}, {0xffffff00, 0x1}}}) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000440)={0x2, 0x101, 0x1, {0x2, 0x101, 0xffff2768, 0x3}}) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000000)={0x7c91, "b3782912c7597840910f0ee6ae4143324b150f2827a90bdf8f72d8db150b8688", 0x1, 0x1}) r3 = syz_open_dev$video(&(0x7f00000002c0), 0xfffffffffffffffc, 0xc0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000480)={0x1, 0xb, 0x1}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000340)={0xffff0000, 0x2, 0x4, 0x2000, 0x3, {r4, r5/1000+60000}, {0x2, 0x0, 0x7, 0x3f, 0x2, 0x9, '2\t\f1'}, 0x0, 0x4, @userptr=0xfe62, 0x400, 0x0, r2}) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000003c0)={0x0, 0x8, 0x2, 0x400, 0x7ff, {}, {0x3, 0x0, 0x1, 0x3, 0x9, 0x8, "581359e2"}, 0x80, 0x0, @offset=0x3, 0x20, 0x0, r6}) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000280)) 15:36:07 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0xfff, 0x69, 0x2, {0x0, @sliced={0x1, [0xff, 0x4, 0xfff, 0x2, 0x7, 0x66, 0x0, 0x63, 0x7, 0x6, 0xca, 0x5379, 0x1000, 0x4, 0x6, 0x3, 0x400, 0x3, 0x7f, 0x8, 0x9, 0x9, 0x200, 0x7, 0x0, 0x0, 0x4, 0x400, 0x8001, 0x7, 0x45, 0x4cef, 0xd9e1, 0x3, 0x1, 0x7ff, 0x7, 0x6, 0xa0, 0x3f, 0x6, 0xe8c6, 0x2, 0x7, 0x8, 0x100, 0x1, 0x8], 0x1}}, 0x4de}) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000280)={0x3, "7dc0d661ceacae36fcc75064cf01f89e39fa3d89314d47fd265cb0f836e28e0d", 0x6c4dc8a2e4fae09e, 0x3e38, 0x1, 0x800000, 0x20014, 0x8}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) syz_open_dev$video(&(0x7f0000000080), 0xfffffffffffffffa, 0x40081) unshare(0x22040000) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000040)={0x7, 0x102, 0x7, {0x2, 0x0, 0x6, 0x3cf67aa2}}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) 15:36:07 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, 0xffffffffffffffff) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x780d, 0x4, {0x8, @sdr={0x7017714, 0x8}}, 0x3}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000080)={0x898, 0x7, "3215f332cfb3f4b126bb51cf76641c9bc934eebb94423d1b44468e17741b8aee", 0x7, 0x8, 0x2c, 0xffffff80, 0x208}) 15:36:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{0x1, 0x0, 0x600}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:07 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000240)={0x6, 0x200f900, "ce8c2eea46527456e8da224babe4393503c02478e3874ad4", {0x2, 0x1000}, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xc, 0x4, 0x0, 0x0, {}, {0x2, 0xc, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @offset=0x3}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r3, 0xc0044d00, &(0x7f0000000300)=0xf) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000200)={0xf000000, 0x1, 0x9725, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x9a0001, 0x9, '\x00', @string=&(0x7f0000000040)=0x3f}}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x52, 0x3, 0x200, 0xfffffbff, 0x8, 0x3, 0x1f}) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r2, 0x800443d3, &(0x7f0000000340)={@none, 0xe8f, 0x1, 0x20}) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:36:07 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000080)={0x9, 0x3, 0x4, 0x40, 0xa16d, {}, {0x1, 0xc, 0x7, 0x4f, 0x6, 0xf8, "5a330297"}, 0x0, 0x1, @userptr=0x800, 0x6, 0x0, r1}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000300)={0x8, @pix={0x80000000, 0x7fffffff, 0x34324948, 0x1, 0x1, 0x1, 0xa, 0x9, 0x0, 0x4, 0x2}}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000500)={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "3a3c27ea"}, 0x0, 0x0, @fd}) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_G_FREQUENCY(r4, 0xc02c5638, &(0x7f0000000180)={0x20, 0x4, 0x7}) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000100)={0x0, 0x1, 0x4, 0x2000, 0x7, {}, {0x5, 0x1, 0x3f, 0x0, 0xfb, 0x2, "efb8b858"}, 0x6e, 0x3, @userptr=0x100, 0x8, 0x0, r2}) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000200)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:36:07 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, 0xffffffffffffffff) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x780d, 0x4, {0x8, @sdr={0x7017714, 0x8}}, 0x3}) 15:36:07 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f00000001c0)={0x0, @reserved}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000040)={0x814, 0x38414761, 0x4, 0x7fffffff, 0x3, @stepwise={{0x3, 0x6}, {0xc6, 0x20}, {0xffffff00, 0x1}}}) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000440)={0x2, 0x101, 0x1, {0x2, 0x101, 0xffff2768, 0x3}}) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000000)={0x7c91, "b3782912c7597840910f0ee6ae4143324b150f2827a90bdf8f72d8db150b8688", 0x1, 0x1}) r3 = syz_open_dev$video(&(0x7f00000002c0), 0xfffffffffffffffc, 0xc0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000480)={0x1, 0xb, 0x1}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000340)={0xffff0000, 0x2, 0x4, 0x2000, 0x3, {r4, r5/1000+60000}, {0x2, 0x0, 0x7, 0x3f, 0x2, 0x9, '2\t\f1'}, 0x0, 0x4, @userptr=0xfe62, 0x400, 0x0, r2}) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000003c0)={0x0, 0x8, 0x2, 0x400, 0x7ff, {}, {0x3, 0x0, 0x1, 0x3, 0x9, 0x8, "581359e2"}, 0x80, 0x0, @offset=0x3, 0x20, 0x0, r6}) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000280)) 15:36:07 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0xfff, 0x69, 0x2, {0x0, @sliced={0x1, [0xff, 0x4, 0xfff, 0x2, 0x7, 0x66, 0x0, 0x63, 0x7, 0x6, 0xca, 0x5379, 0x1000, 0x4, 0x6, 0x3, 0x400, 0x3, 0x7f, 0x8, 0x9, 0x9, 0x200, 0x7, 0x0, 0x0, 0x4, 0x400, 0x8001, 0x7, 0x45, 0x4cef, 0xd9e1, 0x3, 0x1, 0x7ff, 0x7, 0x6, 0xa0, 0x3f, 0x6, 0xe8c6, 0x2, 0x7, 0x8, 0x100, 0x1, 0x8], 0x1}}, 0x4de}) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000280)={0x3, "7dc0d661ceacae36fcc75064cf01f89e39fa3d89314d47fd265cb0f836e28e0d", 0x6c4dc8a2e4fae09e, 0x3e38, 0x1, 0x800000, 0x20014, 0x8}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) syz_open_dev$video(&(0x7f0000000080), 0xfffffffffffffffa, 0x40081) unshare(0x22040000) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000040)={0x7, 0x102, 0x7, {0x2, 0x0, 0x6, 0x3cf67aa2}}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) 15:36:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{0x1, 0x0, 0x700}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:07 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000240)={0x6, 0x200f900, "ce8c2eea46527456e8da224babe4393503c02478e3874ad4", {0x2, 0x1000}, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xc, 0x4, 0x0, 0x0, {}, {0x2, 0xc, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @offset=0x3}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r3, 0xc0044d00, &(0x7f0000000300)=0xf) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000200)={0xf000000, 0x1, 0x9725, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x9a0001, 0x9, '\x00', @string=&(0x7f0000000040)=0x3f}}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x52, 0x3, 0x200, 0xfffffbff, 0x8, 0x3, 0x1f}) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r2, 0x800443d3, &(0x7f0000000340)={@none, 0xe8f, 0x1, 0x20}) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:36:07 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000000)={0xfffffffa, 0x0, 0x0, 0x12, 0x1, @discrete={0x8000, 0xf2}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x12c, r2, 0x20, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x24040000}, 0x11) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r1) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x74fe}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24000000) r4 = syz_open_dev$video(&(0x7f0000000380), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r4, 0xc040564a, &(0x7f00000003c0)={0x0, 0x0, 0x200b, 0x1ff, 0x61, 0xd7b, 0x3, 0x1}) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x40002, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r6, 0x80044dfb, &(0x7f0000000100)) ioctl$SOUND_OLD_MIXER_INFO(r6, 0x80304d65, &(0x7f0000000400)) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000200)={0x0, 0x780c, 0x4, {0xa, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58f2258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed263e68d6dc00ef66444f33cfb53082972b841d192a5101000000d21b22de13c357a223389b3f4ed3c68bfb04adc0059e6bbf6eff26e527ef646dec049f81e7722172380ca4cebe34640c84a8b500"}, 0xfffffffe}) 15:36:07 executing program 0: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, 0xffffffffffffffff) 15:36:07 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f00000001c0)={0x0, @reserved}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000040)={0x814, 0x38414761, 0x4, 0x7fffffff, 0x3, @stepwise={{0x3, 0x6}, {0xc6, 0x20}, {0xffffff00, 0x1}}}) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000440)={0x2, 0x101, 0x1, {0x2, 0x101, 0xffff2768, 0x3}}) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000000)={0x7c91, "b3782912c7597840910f0ee6ae4143324b150f2827a90bdf8f72d8db150b8688", 0x1, 0x1}) r3 = syz_open_dev$video(&(0x7f00000002c0), 0xfffffffffffffffc, 0xc0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000480)={0x1, 0xb, 0x1}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000340)={0xffff0000, 0x2, 0x4, 0x2000, 0x3, {r4, r5/1000+60000}, {0x2, 0x0, 0x7, 0x3f, 0x2, 0x9, '2\t\f1'}, 0x0, 0x4, @userptr=0xfe62, 0x400, 0x0, r2}) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000003c0)={0x0, 0x8, 0x2, 0x400, 0x7ff, {}, {0x3, 0x0, 0x1, 0x3, 0x9, 0x8, "581359e2"}, 0x80, 0x0, @offset=0x3, 0x20, 0x0, r6}) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000280)) 15:36:07 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0xfff, 0x69, 0x2, {0x0, @sliced={0x1, [0xff, 0x4, 0xfff, 0x2, 0x7, 0x66, 0x0, 0x63, 0x7, 0x6, 0xca, 0x5379, 0x1000, 0x4, 0x6, 0x3, 0x400, 0x3, 0x7f, 0x8, 0x9, 0x9, 0x200, 0x7, 0x0, 0x0, 0x4, 0x400, 0x8001, 0x7, 0x45, 0x4cef, 0xd9e1, 0x3, 0x1, 0x7ff, 0x7, 0x6, 0xa0, 0x3f, 0x6, 0xe8c6, 0x2, 0x7, 0x8, 0x100, 0x1, 0x8], 0x1}}, 0x4de}) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000280)={0x3, "7dc0d661ceacae36fcc75064cf01f89e39fa3d89314d47fd265cb0f836e28e0d", 0x6c4dc8a2e4fae09e, 0x3e38, 0x1, 0x800000, 0x20014, 0x8}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) syz_open_dev$video(&(0x7f0000000080), 0xfffffffffffffffa, 0x40081) unshare(0x22040000) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000040)={0x7, 0x102, 0x7, {0x2, 0x0, 0x6, 0x3cf67aa2}}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) 15:36:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{0x1, 0x0, 0xe00}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:08 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000240)={0x6, 0x200f900, "ce8c2eea46527456e8da224babe4393503c02478e3874ad4", {0x2, 0x1000}, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xc, 0x4, 0x0, 0x0, {}, {0x2, 0xc, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @offset=0x3}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r3, 0xc0044d00, &(0x7f0000000300)=0xf) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000200)={0xf000000, 0x1, 0x9725, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x9a0001, 0x9, '\x00', @string=&(0x7f0000000040)=0x3f}}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x52, 0x3, 0x200, 0xfffffbff, 0x8, 0x3, 0x1f}) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r2, 0x800443d3, &(0x7f0000000340)={@none, 0xe8f, 0x1, 0x20}) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) 15:36:08 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0xfff, 0x69, 0x2, {0x0, @sliced={0x1, [0xff, 0x4, 0xfff, 0x2, 0x7, 0x66, 0x0, 0x63, 0x7, 0x6, 0xca, 0x5379, 0x1000, 0x4, 0x6, 0x3, 0x400, 0x3, 0x7f, 0x8, 0x9, 0x9, 0x200, 0x7, 0x0, 0x0, 0x4, 0x400, 0x8001, 0x7, 0x45, 0x4cef, 0xd9e1, 0x3, 0x1, 0x7ff, 0x7, 0x6, 0xa0, 0x3f, 0x6, 0xe8c6, 0x2, 0x7, 0x8, 0x100, 0x1, 0x8], 0x1}}, 0x4de}) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000280)={0x3, "7dc0d661ceacae36fcc75064cf01f89e39fa3d89314d47fd265cb0f836e28e0d", 0x6c4dc8a2e4fae09e, 0x3e38, 0x1, 0x800000, 0x20014, 0x8}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) syz_open_dev$video(&(0x7f0000000080), 0xfffffffffffffffa, 0x40081) unshare(0x22040000) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000040)={0x7, 0x102, 0x7, {0x2, 0x0, 0x6, 0x3cf67aa2}}) 15:36:08 executing program 0: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0xffffffffffffffff) 15:36:08 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)={0xfff, 0x6, 0x4, 0x2, 0x8, {0x77359400}, {0x2, 0xc, 0x4, 0x1, 0x8, 0x1f, "b74c46a6"}, 0xffffff80, 0x2, @userptr=0xff, 0x9, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000380)={0x0, 0x7, 0x4, 0x5897c997d800336e, 0x3, {0x77359400}, {0x2, 0x2, 0xe0, 0x0, 0x0, 0x4, "4f51211d"}, 0x2, 0x3, @planes=&(0x7f00000002c0)={0x2, 0x8, @mem_offset=0x2, 0x7}, 0x4, 0x0, r1}) pselect6(0x40, &(0x7f0000000040)={0x0, 0x8000, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f00000000c0)={0x2}, 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x80000000, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x0, 0x107f, 0x1, 0xfff}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_G_STD(r2, 0x80085617, &(0x7f0000000280)) pselect6(0x40, &(0x7f0000000080)={0xb4e, 0x5, 0x9, 0x7, 0x2, 0x4, 0xae95, 0x3fffc0000000}, &(0x7f0000000140)={0x0, 0xc17, 0x2, 0xfa, 0x6, 0x8, 0x5, 0x8}, &(0x7f0000000180)={0x0, 0x197, 0x1, 0x7bf, 0x3f, 0xb67, 0x7d3c, 0x10000}, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan0\x00'}) 15:36:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{0x1, 0x0, 0xf00}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:08 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) unshare(0x10800) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0x1, 0x5d3f, '\x00', &(0x7f0000000000)=0xfd}) 15:36:08 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000240)={0x6, 0x200f900, "ce8c2eea46527456e8da224babe4393503c02478e3874ad4", {0x2, 0x1000}, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xc, 0x4, 0x0, 0x0, {}, {0x2, 0xc, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @offset=0x3}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r3, 0xc0044d00, &(0x7f0000000300)=0xf) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000200)={0xf000000, 0x1, 0x9725, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x9a0001, 0x9, '\x00', @string=&(0x7f0000000040)=0x3f}}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x52, 0x3, 0x200, 0xfffffbff, 0x8, 0x3, 0x1f}) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r2, 0x800443d3, &(0x7f0000000340)={@none, 0xe8f, 0x1, 0x20}) 15:36:08 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0xfff, 0x69, 0x2, {0x0, @sliced={0x1, [0xff, 0x4, 0xfff, 0x2, 0x7, 0x66, 0x0, 0x63, 0x7, 0x6, 0xca, 0x5379, 0x1000, 0x4, 0x6, 0x3, 0x400, 0x3, 0x7f, 0x8, 0x9, 0x9, 0x200, 0x7, 0x0, 0x0, 0x4, 0x400, 0x8001, 0x7, 0x45, 0x4cef, 0xd9e1, 0x3, 0x1, 0x7ff, 0x7, 0x6, 0xa0, 0x3f, 0x6, 0xe8c6, 0x2, 0x7, 0x8, 0x100, 0x1, 0x8], 0x1}}, 0x4de}) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000280)={0x3, "7dc0d661ceacae36fcc75064cf01f89e39fa3d89314d47fd265cb0f836e28e0d", 0x6c4dc8a2e4fae09e, 0x3e38, 0x1, 0x800000, 0x20014, 0x8}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) syz_open_dev$video(&(0x7f0000000080), 0xfffffffffffffffa, 0x40081) unshare(0x22040000) 15:36:08 executing program 0: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0xffffffffffffffff) 15:36:08 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket(0x0, 0x800, 0x6) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f00000000c0)={0x4, &(0x7f0000000240)=[{@fixed}, {@none}, {@none}, {@none}]}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000040)={0x2, 0x9, "913adfb43cf041e71c2c7902af38b5441c5a92f6c303235e5c3e634f82f97966", 0x5, 0x7f, 0x0, 0x2000, 0x2}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0xfffd, 0x2, 0x2, {0x2, @vbi={0x7, 0x0, 0x0, 0x33424752, [0x0, 0x8000], [0xfffffff8, 0x4], 0x1}}, 0x3}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f00000002c0)={0x2, &(0x7f0000000200)=[{@none}, {@fixed}]}) 15:36:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{0x1, 0x0, 0x4aa5}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:08 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000240)={0x6, 0x200f900, "ce8c2eea46527456e8da224babe4393503c02478e3874ad4", {0x2, 0x1000}, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xc, 0x4, 0x0, 0x0, {}, {0x2, 0xc, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @offset=0x3}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r3, 0xc0044d00, &(0x7f0000000300)=0xf) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000200)={0xf000000, 0x1, 0x9725, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x9a0001, 0x9, '\x00', @string=&(0x7f0000000040)=0x3f}}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x52, 0x3, 0x200, 0xfffffbff, 0x8, 0x3, 0x1f}) 15:36:08 executing program 0: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0xffffffffffffffff) 15:36:08 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0xfff, 0x69, 0x2, {0x0, @sliced={0x1, [0xff, 0x4, 0xfff, 0x2, 0x7, 0x66, 0x0, 0x63, 0x7, 0x6, 0xca, 0x5379, 0x1000, 0x4, 0x6, 0x3, 0x400, 0x3, 0x7f, 0x8, 0x9, 0x9, 0x200, 0x7, 0x0, 0x0, 0x4, 0x400, 0x8001, 0x7, 0x45, 0x4cef, 0xd9e1, 0x3, 0x1, 0x7ff, 0x7, 0x6, 0xa0, 0x3f, 0x6, 0xe8c6, 0x2, 0x7, 0x8, 0x100, 0x1, 0x8], 0x1}}, 0x4de}) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000280)={0x3, "7dc0d661ceacae36fcc75064cf01f89e39fa3d89314d47fd265cb0f836e28e0d", 0x6c4dc8a2e4fae09e, 0x3e38, 0x1, 0x800000, 0x20014, 0x8}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x7fffffff, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) unshare(0x22040000) 15:36:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{0x1, 0x0, 0x6000}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:08 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)={0xfff, 0x6, 0x4, 0x2, 0x8, {0x77359400}, {0x2, 0xc, 0x4, 0x1, 0x8, 0x1f, "b74c46a6"}, 0xffffff80, 0x2, @userptr=0xff, 0x9, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000380)={0x0, 0x7, 0x4, 0x5897c997d800336e, 0x3, {0x77359400}, {0x2, 0x2, 0xe0, 0x0, 0x0, 0x4, "4f51211d"}, 0x2, 0x3, @planes=&(0x7f00000002c0)={0x2, 0x8, @mem_offset=0x2, 0x7}, 0x4, 0x0, r1}) pselect6(0x40, &(0x7f0000000040)={0x0, 0x8000, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f00000000c0)={0x2}, 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x80000000, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x0, 0x107f, 0x1, 0xfff}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_G_STD(r2, 0x80085617, &(0x7f0000000280)) pselect6(0x40, &(0x7f0000000080)={0xb4e, 0x5, 0x9, 0x7, 0x2, 0x4, 0xae95, 0x3fffc0000000}, &(0x7f0000000140)={0x0, 0xc17, 0x2, 0xfa, 0x6, 0x8, 0x5, 0x8}, &(0x7f0000000180)={0x0, 0x197, 0x1, 0x7bf, 0x3f, 0xb67, 0x7d3c, 0x10000}, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan0\x00'}) 15:36:08 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000240)={0x6, 0x200f900, "ce8c2eea46527456e8da224babe4393503c02478e3874ad4", {0x2, 0x1000}, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xc, 0x4, 0x0, 0x0, {}, {0x2, 0xc, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @offset=0x3}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r3, 0xc0044d00, &(0x7f0000000300)=0xf) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000200)={0xf000000, 0x1, 0x9725, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x9a0001, 0x9, '\x00', @string=&(0x7f0000000040)=0x3f}}) 15:36:08 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @win={{0x5, 0x1, 0x5, 0x1}, 0x6, 0x10001, &(0x7f0000000000)={{0x7, 0x5, 0x4, 0x5}}, 0x1, &(0x7f0000000200)="4d4883699e79f5cbb0d41b3584787840469516f4d89fe0db58616a7d05b0df0e75e74913226467b919ec04a3927fef8c73a3cdad2adffa65cf953ea5b44f959c0af1e03260afe8bd201b0dab9d2e59d8af87efa117522b71d2dd34ec51f663928d4526f7758825967fdd89b698fa107d20d21d4aa9a47913e3e2641bd7adfa8597647c247d23a15831fd116944d02e506cc1", 0x7}}}) 15:36:08 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, 0xffffffffffffffff) 15:36:08 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0xfff, 0x69, 0x2, {0x0, @sliced={0x1, [0xff, 0x4, 0xfff, 0x2, 0x7, 0x66, 0x0, 0x63, 0x7, 0x6, 0xca, 0x5379, 0x1000, 0x4, 0x6, 0x3, 0x400, 0x3, 0x7f, 0x8, 0x9, 0x9, 0x200, 0x7, 0x0, 0x0, 0x4, 0x400, 0x8001, 0x7, 0x45, 0x4cef, 0xd9e1, 0x3, 0x1, 0x7ff, 0x7, 0x6, 0xa0, 0x3f, 0x6, 0xe8c6, 0x2, 0x7, 0x8, 0x100, 0x1, 0x8], 0x1}}, 0x4de}) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000280)={0x3, "7dc0d661ceacae36fcc75064cf01f89e39fa3d89314d47fd265cb0f836e28e0d", 0x6c4dc8a2e4fae09e, 0x3e38, 0x1, 0x800000, 0x20014, 0x8}) unshare(0x22040000) 15:36:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{0x1, 0x0, 0xa54a}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:09 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, 0xffffffffffffffff) 15:36:09 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000240)={0x6, 0x200f900, "ce8c2eea46527456e8da224babe4393503c02478e3874ad4", {0x2, 0x1000}, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xc, 0x4, 0x0, 0x0, {}, {0x2, 0xc, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @offset=0x3}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r3, 0xc0044d00, &(0x7f0000000300)=0xf) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) 15:36:09 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0xfff, 0x69, 0x2, {0x0, @sliced={0x1, [0xff, 0x4, 0xfff, 0x2, 0x7, 0x66, 0x0, 0x63, 0x7, 0x6, 0xca, 0x5379, 0x1000, 0x4, 0x6, 0x3, 0x400, 0x3, 0x7f, 0x8, 0x9, 0x9, 0x200, 0x7, 0x0, 0x0, 0x4, 0x400, 0x8001, 0x7, 0x45, 0x4cef, 0xd9e1, 0x3, 0x1, 0x7ff, 0x7, 0x6, 0xa0, 0x3f, 0x6, 0xe8c6, 0x2, 0x7, 0x8, 0x100, 0x1, 0x8], 0x1}}, 0x4de}) unshare(0x22040000) 15:36:09 executing program 2: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:36:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{0x1, 0x0, 0xf000}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:09 executing program 1: syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) unshare(0x22040000) 15:36:09 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)={0xfff, 0x6, 0x4, 0x2, 0x8, {0x77359400}, {0x2, 0xc, 0x4, 0x1, 0x8, 0x1f, "b74c46a6"}, 0xffffff80, 0x2, @userptr=0xff, 0x9, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000380)={0x0, 0x7, 0x4, 0x5897c997d800336e, 0x3, {0x77359400}, {0x2, 0x2, 0xe0, 0x0, 0x0, 0x4, "4f51211d"}, 0x2, 0x3, @planes=&(0x7f00000002c0)={0x2, 0x8, @mem_offset=0x2, 0x7}, 0x4, 0x0, r1}) pselect6(0x40, &(0x7f0000000040)={0x0, 0x8000, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f00000000c0)={0x2}, 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x80000000, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x0, 0x107f, 0x1, 0xfff}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_G_STD(r2, 0x80085617, &(0x7f0000000280)) pselect6(0x40, &(0x7f0000000080)={0xb4e, 0x5, 0x9, 0x7, 0x2, 0x4, 0xae95, 0x3fffc0000000}, &(0x7f0000000140)={0x0, 0xc17, 0x2, 0xfa, 0x6, 0x8, 0x5, 0x8}, &(0x7f0000000180)={0x0, 0x197, 0x1, 0x7bf, 0x3f, 0xb67, 0x7d3c, 0x10000}, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan0\x00'}) 15:36:09 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, 0xffffffffffffffff) 15:36:09 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x80000000, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:36:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{0x1, 0x0, 0xffff}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:09 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000240)={0x6, 0x200f900, "ce8c2eea46527456e8da224babe4393503c02478e3874ad4", {0x2, 0x1000}, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xc, 0x4, 0x0, 0x0, {}, {0x2, 0xc, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @offset=0x3}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r2, 0xc0044d00, &(0x7f0000000300)=0xf) 15:36:09 executing program 1: unshare(0x22040000) 15:36:09 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, 0xffffffffffffffff) 15:36:09 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000240)={0x6, 0x200f900, "ce8c2eea46527456e8da224babe4393503c02478e3874ad4", {0x2, 0x1000}, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xc, 0x4, 0x0, 0x0, {}, {0x2, 0xc, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @offset=0x3}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d00, &(0x7f0000000300)=0xf) 15:36:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:10 executing program 1: unshare(0x0) 15:36:10 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @reserved}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f00000002c0)={0x1, "4e348d656fc7877a395aad10ef3123734d9e90238b51d06a2e908546bc4fb7e0", 0x1, 0x5a1, 0x0, 0x0, 0x4000000, 0x8}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:36:10 executing program 0: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0xffffffffffffffff) 15:36:10 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)={0xfff, 0x6, 0x4, 0x2, 0x8, {0x77359400}, {0x2, 0xc, 0x4, 0x1, 0x8, 0x1f, "b74c46a6"}, 0xffffff80, 0x2, @userptr=0xff, 0x9, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000380)={0x0, 0x7, 0x4, 0x5897c997d800336e, 0x3, {0x77359400}, {0x2, 0x2, 0xe0, 0x0, 0x0, 0x4, "4f51211d"}, 0x2, 0x3, @planes=&(0x7f00000002c0)={0x2, 0x8, @mem_offset=0x2, 0x7}, 0x4, 0x0, r1}) pselect6(0x40, &(0x7f0000000040)={0x0, 0x8000, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f00000000c0)={0x2}, 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x80000000, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x0, 0x107f, 0x1, 0xfff}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_G_STD(r2, 0x80085617, &(0x7f0000000280)) pselect6(0x40, &(0x7f0000000080)={0xb4e, 0x5, 0x9, 0x7, 0x2, 0x4, 0xae95, 0x3fffc0000000}, &(0x7f0000000140)={0x0, 0xc17, 0x2, 0xfa, 0x6, 0x8, 0x5, 0x8}, &(0x7f0000000180)={0x0, 0x197, 0x1, 0x7bf, 0x3f, 0xb67, 0x7d3c, 0x10000}, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8}) 15:36:10 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000240)={0x6, 0x200f900, "ce8c2eea46527456e8da224babe4393503c02478e3874ad4", {0x2, 0x1000}, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xc, 0x4, 0x0, 0x0, {}, {0x2, 0xc, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @offset=0x3}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d00, &(0x7f0000000300)=0xf) 15:36:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {0x2}, {0x14}}}, 0x30}}, 0x0) 15:36:10 executing program 1: unshare(0x0) 15:36:10 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000000)={0x9, 0x38414761, 0x401, 0x1f, 0x0, @stepwise={{0x9, 0x2}, {0x5, 0x80000000}, {0x3d8, 0xd6f1}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="800539a2ff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983301000000010000002950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a27b874bb0ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:36:10 executing program 0: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0xffffffffffffffff) 15:36:10 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000240)={0x6, 0x200f900, "ce8c2eea46527456e8da224babe4393503c02478e3874ad4", {0x2, 0x1000}, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xc, 0x4, 0x0, 0x0, {}, {0x2, 0xc, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @offset=0x3}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d00, &(0x7f0000000300)=0xf) 15:36:10 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000200)={0x5ca3, 0xffff27e7, 0x4, {0x6, @sdr={0x20385655, 0x74d1}}, 0x200}) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000300)) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000080)={0xeb, 0x200000, "df39e7a9fba9134d3b6e09b1a180b14bfb314963709228c7", {0x93, 0x31}, 0x7f}) 15:36:10 executing program 1: unshare(0x0) 15:36:10 executing program 0: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0xffffffffffffffff) 15:36:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {0x3}, {0x14}}}, 0x30}}, 0x0) 15:36:10 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:36:11 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)={0xfff, 0x6, 0x4, 0x2, 0x8, {0x77359400}, {0x2, 0xc, 0x4, 0x1, 0x8, 0x1f, "b74c46a6"}, 0xffffff80, 0x2, @userptr=0xff, 0x9, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000380)={0x0, 0x7, 0x4, 0x5897c997d800336e, 0x3, {0x77359400}, {0x2, 0x2, 0xe0, 0x0, 0x0, 0x4, "4f51211d"}, 0x2, 0x3, @planes=&(0x7f00000002c0)={0x2, 0x8, @mem_offset=0x2, 0x7}, 0x4, 0x0, r1}) pselect6(0x40, &(0x7f0000000040)={0x0, 0x8000, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f00000000c0)={0x2}, 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x80000000, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x0, 0x107f, 0x1, 0xfff}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_G_STD(r2, 0x80085617, &(0x7f0000000280)) 15:36:11 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000240)={0x6, 0x200f900, "ce8c2eea46527456e8da224babe4393503c02478e3874ad4", {0x2, 0x1000}, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xc, 0x4, 0x0, 0x0, {}, {0x2, 0xc, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @offset=0x3}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r2, 0xc0044d00, &(0x7f0000000300)=0xf) 15:36:11 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000240)={0x6, 0x200f900, "ce8c2eea46527456e8da224babe4393503c02478e3874ad4", {0x2, 0x1000}, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xc, 0x4, 0x0, 0x0, {}, {0x2, 0xc, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @offset=0x3}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r3, 0xc0044d00, &(0x7f0000000300)=0xf) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000200)={0xf000000, 0x1, 0x9725, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x9a0001, 0x9, '\x00', @string=&(0x7f0000000040)=0x3f}}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x52, 0x3, 0x200, 0xfffffbff, 0x8, 0x3, 0x1f}) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r2, 0x800443d3, &(0x7f0000000340)={@none, 0xe8f, 0x1, 0x20}) 15:36:11 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) unshare(0x10800) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0x1, 0x5d3f, '\x00', &(0x7f0000000000)=0xfd}) 15:36:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {0x4}, {0x14}}}, 0x30}}, 0x0) 15:36:11 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0xffffffff, 0x4, 0xffffffe1, 0x1, 0x8a, 0x1, 0x8}) 15:36:11 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000240)={0x6, 0x200f900, "ce8c2eea46527456e8da224babe4393503c02478e3874ad4", {0x2, 0x1000}, 0x1}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r1, 0xc0044d00, &(0x7f0000000300)=0xf) 15:36:11 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) socket$nl_crypto(0x10, 0x3, 0x15) 15:36:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {0x5}, {0x14}}}, 0x30}}, 0x0) 15:36:11 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) unshare(0x10800) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0x1, 0x5d3f, '\x00', &(0x7f0000000000)=0xfd}) 15:36:11 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000240)={0x6, 0x200f900, "ce8c2eea46527456e8da224babe4393503c02478e3874ad4", {0x2, 0x1000}, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xc, 0x4, 0x0, 0x0, {}, {0x2, 0xc, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @offset=0x3}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r3, 0xc0044d00, &(0x7f0000000300)=0xf) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000200)={0xf000000, 0x1, 0x9725, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x9a0001, 0x9, '\x00', @string=&(0x7f0000000040)=0x3f}}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x52, 0x3, 0x200, 0xfffffbff, 0x8, 0x3, 0x1f}) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r2, 0x800443d3, &(0x7f0000000340)={@none, 0xe8f, 0x1, 0x20}) 15:36:11 executing program 5: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d00, &(0x7f0000000300)=0xf) 15:36:12 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)={0xfff, 0x6, 0x4, 0x2, 0x8, {0x77359400}, {0x2, 0xc, 0x4, 0x1, 0x8, 0x1f, "b74c46a6"}, 0xffffff80, 0x2, @userptr=0xff, 0x9, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000380)={0x0, 0x7, 0x4, 0x5897c997d800336e, 0x3, {0x77359400}, {0x2, 0x2, 0xe0, 0x0, 0x0, 0x4, "4f51211d"}, 0x2, 0x3, @planes=&(0x7f00000002c0)={0x2, 0x8, @mem_offset=0x2, 0x7}, 0x4, 0x0, r1}) pselect6(0x40, &(0x7f0000000040)={0x0, 0x8000, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f00000000c0)={0x2}, 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x80000000, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x0, 0x107f, 0x1, 0xfff}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) 15:36:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {0x6}, {0x14}}}, 0x30}}, 0x0) 15:36:12 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x3, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814eb523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde268d6dc00ef6633cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b500"}}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000000)={0x8, 0x34343452, 0x80, 0xfffff3a8, 0x0, @discrete={0x9, 0x3ff}}) 15:36:12 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) unshare(0x10800) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0x1, 0x5d3f, '\x00', &(0x7f0000000000)=0xfd}) 15:36:12 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000240)={0x6, 0x200f900, "ce8c2eea46527456e8da224babe4393503c02478e3874ad4", {0x2, 0x1000}, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xc, 0x4, 0x0, 0x0, {}, {0x2, 0xc, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @offset=0x3}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r3, 0xc0044d00, &(0x7f0000000300)=0xf) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000200)={0xf000000, 0x1, 0x9725, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x9a0001, 0x9, '\x00', @string=&(0x7f0000000040)=0x3f}}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x52, 0x3, 0x200, 0xfffffbff, 0x8, 0x3, 0x1f}) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r2, 0x800443d3, &(0x7f0000000340)={@none, 0xe8f, 0x1, 0x20}) 15:36:12 executing program 5: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d00, &(0x7f0000000300)=0xf) 15:36:12 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000240)={0x6, 0x200f900, "ce8c2eea46527456e8da224babe4393503c02478e3874ad4", {0x2, 0x1000}, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xc, 0x4, 0x0, 0x0, {}, {0x2, 0xc, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @offset=0x3}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r3, 0xc0044d00, &(0x7f0000000300)=0xf) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000200)={0xf000000, 0x1, 0x9725, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x9a0001, 0x9, '\x00', @string=&(0x7f0000000040)=0x3f}}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x52, 0x3, 0x200, 0xfffffbff, 0x8, 0x3, 0x1f}) 15:36:12 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) unshare(0x10800) 15:36:12 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d00, &(0x7f0000000300)=0xf) 15:36:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {0x7}, {0x14}}}, 0x30}}, 0x0) 15:36:12 executing program 0: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) unshare(0x10800) 15:36:12 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d00, &(0x7f0000000300)=0xf) 15:36:13 executing program 2: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000100)={0x0, 0x0, 0x0, {0xc94ac8c473c8575d, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) r0 = pkey_alloc(0x0, 0x0) pkey_free(r0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000200)={0x4, 0x6, 0x4, 0x1000, 0x5, {0x77359400}, {0x1, 0x8, 0x4, 0x8, 0x7, 0x7, "24128fbf"}, 0x1, 0x3, @fd, 0x6}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @vbi={0x2, 0x40, 0xffffff51, 0x30314247, [0xdc9], [0x7, 0xfffffff7], 0x1}}, 0x3}) 15:36:13 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000240)={0x6, 0x200f900, "ce8c2eea46527456e8da224babe4393503c02478e3874ad4", {0x2, 0x1000}, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xc, 0x4, 0x0, 0x0, {}, {0x2, 0xc, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @offset=0x3}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r3, 0xc0044d00, &(0x7f0000000300)=0xf) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000200)={0xf000000, 0x1, 0x9725, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x9a0001, 0x9, '\x00', @string=&(0x7f0000000040)=0x3f}}) 15:36:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {0x8}, {0x14}}}, 0x30}}, 0x0) 15:36:13 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)={0xfff, 0x6, 0x4, 0x2, 0x8, {0x77359400}, {0x2, 0xc, 0x4, 0x1, 0x8, 0x1f, "b74c46a6"}, 0xffffff80, 0x2, @userptr=0xff, 0x9, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000380)={0x0, 0x7, 0x4, 0x5897c997d800336e, 0x3, {0x77359400}, {0x2, 0x2, 0xe0, 0x0, 0x0, 0x4, "4f51211d"}, 0x2, 0x3, @planes=&(0x7f00000002c0)={0x2, 0x8, @mem_offset=0x2, 0x7}, 0x4, 0x0, r1}) pselect6(0x40, &(0x7f0000000040)={0x0, 0x8000, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f00000000c0)={0x2}, 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x80000000, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x0, 0x107f, 0x1, 0xfff}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) 15:36:13 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d00, &(0x7f0000000300)=0xf) 15:36:13 executing program 0: unshare(0x10800) 15:36:13 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000240)={0x6, 0x200f900, "ce8c2eea46527456e8da224babe4393503c02478e3874ad4", {0x2, 0x1000}, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xc, 0x4, 0x0, 0x0, {}, {0x2, 0xc, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @offset=0x3}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r3, 0xc0044d00, &(0x7f0000000300)=0xf) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) 15:36:13 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x5, 0xc, 0x4}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000280)={0x8001, 0x1, "247940000000000000003fd9505ba7d0c8e9094ddf56dc22775a739e5903e2b9", 0x29, 0x200000, 0x2, 0x3, 0x340}) 15:36:13 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d00, &(0x7f0000000300)=0xf) 15:36:13 executing program 0: unshare(0x0) 15:36:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {0xe}, {0x14}}}, 0x30}}, 0x0) 15:36:13 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000240)={0x6, 0x200f900, "ce8c2eea46527456e8da224babe4393503c02478e3874ad4", {0x2, 0x1000}, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xc, 0x4, 0x0, 0x0, {}, {0x2, 0xc, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @offset=0x3}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r3, 0xc0044d00, &(0x7f0000000300)=0xf) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) 15:36:13 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d00, &(0x7f0000000300)=0xf) 15:36:13 executing program 0: unshare(0x0) 15:36:14 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)={0xfff, 0x6, 0x4, 0x2, 0x8, {0x77359400}, {0x2, 0xc, 0x4, 0x1, 0x8, 0x1f, "b74c46a6"}, 0xffffff80, 0x2, @userptr=0xff, 0x9, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000380)={0x0, 0x7, 0x4, 0x5897c997d800336e, 0x3, {0x77359400}, {0x2, 0x2, 0xe0, 0x0, 0x0, 0x4, "4f51211d"}, 0x2, 0x3, @planes=&(0x7f00000002c0)={0x2, 0x8, @mem_offset=0x2, 0x7}, 0x4, 0x0, r1}) pselect6(0x40, &(0x7f0000000040)={0x0, 0x8000, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f00000000c0)={0x2}, 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x80000000, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x0, 0x107f, 0x1, 0xfff}) 15:36:14 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r1, 0xc0044d00, &(0x7f0000000080)=0x4b) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:36:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {0xf}, {0x14}}}, 0x30}}, 0x0) 15:36:14 executing program 0: unshare(0x0) 15:36:14 executing program 5: openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d00, &(0x7f0000000300)=0xf) 15:36:14 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000240)={0x6, 0x200f900, "ce8c2eea46527456e8da224babe4393503c02478e3874ad4", {0x2, 0x1000}, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xc, 0x4, 0x0, 0x0, {}, {0x2, 0xc, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @offset=0x3}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r2, 0xc0044d00, &(0x7f0000000300)=0xf) 15:36:14 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000240)={0x6, 0x200f900, "ce8c2eea46527456e8da224babe4393503c02478e3874ad4", {0x2, 0x1000}, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xc, 0x4, 0x0, 0x0, {}, {0x2, 0xc, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @offset=0x3}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r3, 0xc0044d00, &(0x7f0000000300)=0xf) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) 15:36:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {0x60}, {0x14}}}, 0x30}}, 0x0) 15:36:14 executing program 5: openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d00, &(0x7f0000000300)=0xf) 15:36:14 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000240)={0x6, 0x200f900, "ce8c2eea46527456e8da224babe4393503c02478e3874ad4", {0x2, 0x1000}, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xc, 0x4, 0x0, 0x0, {}, {0x2, 0xc, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @offset=0x3}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d00, &(0x7f0000000300)=0xf) 15:36:14 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0xfffffffb, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}, 0xffffffff}) 15:36:14 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000240)={0x6, 0x200f900, "ce8c2eea46527456e8da224babe4393503c02478e3874ad4", {0x2, 0x1000}, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xc, 0x4, 0x0, 0x0, {}, {0x2, 0xc, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @offset=0x3}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r3, 0xc0044d00, &(0x7f0000000300)=0xf) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) 15:36:15 executing program 5: openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d00, &(0x7f0000000300)=0xf) 15:36:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {0xf0}, {0x14}}}, 0x30}}, 0x0) 15:36:15 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000240)={0x6, 0x200f900, "ce8c2eea46527456e8da224babe4393503c02478e3874ad4", {0x2, 0x1000}, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xc, 0x4, 0x0, 0x0, {}, {0x2, 0xc, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @offset=0x3}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d00, &(0x7f0000000300)=0xf) 15:36:15 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)={0xfff, 0x6, 0x4, 0x2, 0x8, {0x77359400}, {0x2, 0xc, 0x4, 0x1, 0x8, 0x1f, "b74c46a6"}, 0xffffff80, 0x2, @userptr=0xff, 0x9, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000380)={0x0, 0x7, 0x4, 0x5897c997d800336e, 0x3, {0x77359400}, {0x2, 0x2, 0xe0, 0x0, 0x0, 0x4, "4f51211d"}, 0x2, 0x3, @planes=&(0x7f00000002c0)={0x2, 0x8, @mem_offset=0x2, 0x7}, 0x4, 0x0, r1}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x80000000, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x0, 0x107f, 0x1, 0xfff}) 15:36:15 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000240)={0x6, 0x200f900, "ce8c2eea46527456e8da224babe4393503c02478e3874ad4", {0x2, 0x1000}, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xc, 0x4, 0x0, 0x0, {}, {0x2, 0xc, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @offset=0x3}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r3, 0xc0044d00, &(0x7f0000000300)=0xf) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) 15:36:15 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_G_INPUT(r2, 0x80045626, &(0x7f0000000300)) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000200)={0x6, 0x4, 0x2, {0x4, @sliced={0x0, [0x2, 0x6, 0x1, 0x3ff, 0x2, 0x5, 0x4, 0x3ff, 0x6, 0x80, 0xf292, 0x1, 0x12e, 0x3, 0xfff8, 0x8000, 0xc005, 0x7, 0x9, 0x8, 0x1000, 0x1, 0x4, 0x6, 0x5, 0xc000, 0x3, 0x100, 0x9, 0x3, 0x400, 0x5306, 0x8, 0x7, 0x7, 0x970a, 0x1000, 0x2, 0x6, 0x2, 0x7, 0x7, 0x4e2, 0x6, 0xfffb, 0x4, 0x5, 0x81], 0x1}}, 0x9}) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_open_dev$video(&(0x7f0000000340), 0x8000, 0x224100) ioctl$VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f00000003c0)={0x9, 0x6, 0x4, 0x10, 0x4, {}, {0x1, 0xc, 0x1, 0x8, 0x3, 0xf9, "b020a663"}, 0x2, 0x4, @planes=&(0x7f0000000380)={0x20, 0xf, @fd, 0xffffffe0}, 0x9, 0x0, r3}) ioctl$VIDIOC_SUBDEV_S_SELECTION(r4, 0xc040563e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, {0x75, 0x5, 0x4, 0x401}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x780c, 0x4, {0x8, @pix={0x200, 0x1853127e, 0x32314742, 0x0, 0x80, 0x2, 0xc, 0x10000, 0x0, 0x0, 0x0, 0x5}}}) 15:36:15 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0x0, &(0x7f0000000300)=0xf) 15:36:15 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000240)={0x6, 0x200f900, "ce8c2eea46527456e8da224babe4393503c02478e3874ad4", {0x2, 0x1000}, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xc, 0x4, 0x0, 0x0, {}, {0x2, 0xc, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @offset=0x3}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d00, &(0x7f0000000300)=0xf) 15:36:15 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000240)={0x6, 0x200f900, "ce8c2eea46527456e8da224babe4393503c02478e3874ad4", {0x2, 0x1000}, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xc, 0x4, 0x0, 0x0, {}, {0x2, 0xc, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @offset=0x3}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r2, 0xc0044d00, &(0x7f0000000300)=0xf) 15:36:15 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x1, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:36:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {0x300}, {0x14}}}, 0x30}}, 0x0) 15:36:15 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)={0xfff, 0x6, 0x4, 0x2, 0x8, {0x77359400}, {0x2, 0xc, 0x4, 0x1, 0x8, 0x1f, "b74c46a6"}, 0xffffff80, 0x2, @userptr=0xff, 0x9}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x80000000, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x0, 0x107f, 0x1, 0xfff}) 15:36:15 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0x0, &(0x7f0000000300)=0xf) 15:36:15 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000240)={0x6, 0x200f900, "ce8c2eea46527456e8da224babe4393503c02478e3874ad4", {0x2, 0x1000}, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xc, 0x4, 0x0, 0x0, {}, {0x2, 0xc, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @offset=0x3}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d00, &(0x7f0000000300)=0xf) 15:36:15 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0x0, &(0x7f0000000300)=0xf) 15:36:15 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x80000000, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x0, 0x107f, 0x1, 0xfff}) 15:36:15 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000240)={0x6, 0x200f900, "ce8c2eea46527456e8da224babe4393503c02478e3874ad4", {0x2, 0x1000}, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xc, 0x4, 0x0, 0x0, {}, {0x2, 0xc, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @offset=0x3}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r2, 0xc0044d00, &(0x7f0000000300)=0xf) 15:36:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {0x500}, {0x14}}}, 0x30}}, 0x0) 15:36:15 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d00, 0x0) 15:36:15 executing program 4: ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f00000000c0)={0x80000000, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x0, 0x107f, 0x1, 0xfff}) 15:36:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {0x600}, {0x14}}}, 0x30}}, 0x0) [ 1789.814814] oom_reaper: reaped process 12943 (syz-executor.2), now anon-rss:0kB, file-rss:33784kB, shmem-rss:0kB [ 1789.853340] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1789.868735] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1789.874009] CPU: 1 PID: 8092 Comm: syz-fuzzer Not tainted 4.19.195-syzkaller #0 [ 1789.881552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1789.891295] Call Trace: [ 1789.893897] dump_stack+0x1fc/0x2ef [ 1789.897540] dump_header+0x15d/0xc3f [ 1789.901267] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1789.906381] ? ___ratelimit+0x319/0x590 [ 1789.910377] oom_kill_process.cold+0x10/0x692 [ 1789.914883] ? check_preemption_disabled+0x41/0x280 [ 1789.920106] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1789.925405] out_of_memory+0x1072/0x1390 [ 1789.929482] ? oom_killer_disable+0x270/0x270 [ 1789.933990] ? mutex_trylock+0x15f/0x1a0 [ 1789.938244] __alloc_pages_nodemask+0x23a2/0x2890 [ 1789.943093] ? find_get_entry+0x4cd/0x8a0 [ 1789.947247] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1789.952269] alloc_pages_current+0x193/0x2a0 [ 1789.956684] filemap_fault+0x146e/0x2180 [ 1789.957880] syz-executor.2: vmalloc: allocation failure, allocated 383234048 of 2325655552 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1789.960842] ext4_filemap_fault+0x84/0xb0 [ 1789.978679] __do_fault+0x10b/0x4b0 [ 1789.980679] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1789.982301] ? do_raw_spin_unlock+0x171/0x230 [ 1789.982319] __handle_mm_fault+0x273b/0x41c0 [ 1789.996914] ? vm_insert_page+0x9c0/0x9c0 [ 1790.001092] ? __fget+0x356/0x510 [ 1790.004629] ? check_preemption_disabled+0x41/0x280 [ 1790.009680] handle_mm_fault+0x436/0xb10 [ 1790.013831] __do_page_fault+0x68e/0xd60 [ 1790.018155] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1790.023175] ? spurious_fault+0x840/0x840 [ 1790.027486] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1790.032353] ? page_fault+0x8/0x30 [ 1790.036065] page_fault+0x1e/0x30 [ 1790.039639] RIP: 0033:0x461220 [ 1790.042825] Code: Bad RIP value. [ 1790.046174] RSP: 002b:000000c00003bc40 EFLAGS: 00010246 [ 1790.051522] RAX: 000000c002e89d40 RBX: 0000000000461220 RCX: 000000c000000180 [ 1790.058780] RDX: 000000c00003bcd8 RSI: 0000000000000001 RDI: 000000c00003bc7c [ 1790.066039] RBP: 000000c00003bc68 R08: 00007ffd72df7000 R09: 000001dfffa24f02 [ 1790.073384] R10: 0010795f68c5ee4f R11: 0000000000000001 R12: 000001aa75d7def4 [ 1790.080821] R13: 0000000000000001 R14: 000001aa75d7def4 R15: 0000000000000000 [ 1790.100090] Mem-Info: [ 1790.101204] CPU: 0 PID: 12943 Comm: syz-executor.2 Not tainted 4.19.195-syzkaller #0 [ 1790.102533] active_anon:193696 inactive_anon:29311 isolated_anon:0 [ 1790.102533] active_file:5 inactive_file:25 isolated_file:0 [ 1790.102533] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1790.102533] slab_reclaimable:24275 slab_unreclaimable:114874 [ 1790.102533] mapped:53483 shmem:29528 pagetables:14445 bounce:0 [ 1790.102533] free:13894 free_pcp:165 free_cma:0 [ 1790.110384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1790.110389] Call Trace: [ 1790.110409] dump_stack+0x1fc/0x2ef [ 1790.110426] warn_alloc.cold+0x7b/0x18f [ 1790.110463] ? zone_watermark_ok_safe+0x260/0x260 [ 1790.144090] Node 0 active_anon:774772kB inactive_anon:117244kB active_file:32kB inactive_file:84kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213932kB dirty:0kB writeback:0kB shmem:118112kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 645120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1790.153396] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1790.153418] ? retint_kernel+0x2d/0x2d [ 1790.153445] __vmalloc_area_node+0x4fd/0x780 [ 1790.153462] ? __vmalloc_node_range+0x180/0x180 [ 1790.153475] ? _raw_spin_unlock+0x29/0x40 [ 1790.153488] ? __get_vm_area_node+0x2e2/0x3a0 [ 1790.153508] __vmalloc_node_range+0xed/0x180 [ 1790.153522] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1790.153537] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1790.153550] vmalloc_user+0x70/0xe0 [ 1790.153565] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1790.153577] vb2_vmalloc_alloc+0xb3/0x2f0 [ 1790.153592] __vb2_queue_alloc+0x472/0xe60 [ 1790.153618] vb2_core_create_bufs+0x273/0x7e0 [ 1790.153634] ? __vb2_queue_free+0x870/0x870 [ 1790.153650] ? mutex_trylock+0x1a0/0x1a0 [ 1790.153672] vb2_create_bufs+0x332/0x620 [ 1790.153690] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1790.153706] ? __video_do_ioctl+0x632/0xcd0 [ 1790.153718] ? mutex_trylock+0x1a0/0x1a0 [ 1790.153734] ? mark_held_locks+0xf0/0xf0 [ 1790.153750] ? futex_wait_queue_me+0x404/0x5e0 [ 1790.153768] vb2_ioctl_create_bufs+0x20d/0x360 [ 1790.153783] ? memset+0x20/0x40 [ 1790.153801] v4l_create_bufs+0xb2/0x160 [ 1790.153819] __video_do_ioctl+0x49a/0xcd0 [ 1790.153841] ? v4l_querycap+0x340/0x340 [ 1790.153860] ? __might_fault+0x192/0x1d0 [ 1790.153878] ? v4l_querycap+0x340/0x340 [ 1790.153893] video_usercopy+0x13f/0xfa0 [ 1790.153915] ? v4l_enumstd+0x60/0x60 [ 1790.153929] ? do_futex+0x171/0x1880 [ 1790.153944] ? mark_held_locks+0xf0/0xf0 [ 1790.153963] ? debug_check_no_obj_freed+0x201/0x490 [ 1790.153987] ? video_usercopy+0xfa0/0xfa0 [ 1790.153998] v4l2_ioctl+0x147/0x1a0 [ 1790.154011] ? video_devdata+0xa0/0xa0 [ 1790.154028] do_vfs_ioctl+0xcdb/0x12e0 [ 1790.154043] ? lock_downgrade+0x720/0x720 [ 1790.154058] ? check_preemption_disabled+0x41/0x280 [ 1790.154073] ? ioctl_preallocate+0x200/0x200 [ 1790.154091] ? __fget+0x356/0x510 [ 1790.154107] ? do_dup2+0x450/0x450 [ 1790.154122] ? __se_sys_futex+0x298/0x3b0 [ 1790.154145] ksys_ioctl+0x9b/0xc0 [ 1790.154161] __x64_sys_ioctl+0x6f/0xb0 [ 1790.154175] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1790.154189] do_syscall_64+0xf9/0x620 [ 1790.154207] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1790.154224] RIP: 0033:0x4665d9 [ 1790.154238] Code: Bad RIP value. [ 1790.154246] RSP: 002b:00007f4325cea188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1790.154259] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1790.154267] RDX: 0000000020000100 RSI: 00000000c100565c RDI: 0000000000000003 [ 1790.154275] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1790.154283] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 [ 1790.154291] R13: 00007fffd67cf40f R14: 00007f4325cea300 R15: 0000000000022000 [ 1790.173862] Mem-Info: [ 1790.198819] Node 1 active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1790.198828] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1790.219595] active_anon:193696 inactive_anon:29311 isolated_anon:0 [ 1790.219595] active_file:5 inactive_file:25 isolated_file:0 [ 1790.219595] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1790.219595] slab_reclaimable:24275 slab_unreclaimable:114874 [ 1790.219595] mapped:53483 shmem:29528 pagetables:14445 bounce:0 [ 1790.219595] free:13894 free_pcp:165 free_cma:0 [ 1790.221168] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1790.225640] Node 0 active_anon:774772kB inactive_anon:117244kB active_file:32kB inactive_file:84kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213932kB dirty:0kB writeback:0kB shmem:118112kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 645120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1790.238033] Node 0 DMA32 free:17792kB min:35996kB low:44992kB high:53988kB active_anon:774772kB inactive_anon:117244kB active_file:60kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2763460kB mlocked:0kB kernel_stack:25632kB pagetables:57780kB bounce:0kB free_pcp:412kB local_pcp:100kB free_cma:0kB [ 1790.249193] Node 1 active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1790.262860] lowmem_reserve[]: 0 0 1 1 1 [ 1790.274291] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1790.285778] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1790.287066] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1790.291838] lowmem_reserve[]: 0 0 0 0 0 [ 1790.303636] Node 0 DMA32 free:17792kB min:35996kB low:44992kB high:53988kB active_anon:774772kB inactive_anon:117244kB active_file:60kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2763460kB mlocked:0kB kernel_stack:25632kB pagetables:57780kB bounce:0kB free_pcp:412kB local_pcp:312kB free_cma:0kB [ 1790.311337] Node 1 Normal free:26916kB min:53876kB low:67344kB high:80812kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 1790.312500] lowmem_reserve[]: 0 0 1 1 1 [ 1790.316454] lowmem_reserve[]: 0 0 0 0 0 [ 1790.326526] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1790.331563] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10860kB [ 1790.332305] lowmem_reserve[]: 0 0 0 0 0 [ 1790.335999] Node 0 DMA32: 2074*4kB (ME) 453*8kB (ME) 153*16kB (ME) 69*32kB (M) 19*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17792kB [ 1790.354126] Node 1 Normal free:26916kB min:53876kB low:67344kB high:80812kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 1790.354160] lowmem_reserve[]: 0 0 0 0 0 [ 1790.354179] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10860kB [ 1790.354257] Node 0 DMA32: 2074*4kB (ME) 453*8kB (ME) 153*16kB (ME) 69*32kB (M) 19*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17792kB [ 1790.354322] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1790.354376] Node 1 Normal: 5*4kB (UME) 2*8kB (ME) 4*16kB (UME) 2*32kB (M) 2*64kB (M) 4*128kB (UME) 4*256kB (UME) 3*512kB (M) 1*1024kB (M) 1*2048kB (U) 5*4096kB (M) = 26916kB [ 1790.362131] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1790.376149] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1790.382327] Node 1 Normal: 5*4kB (UME) 2*8kB (ME) 4*16kB (UME) 2*32kB (M) 2*64kB (M) 4*128kB (UME) 4*256kB (UME) 3*512kB (M) 1*1024kB (M) 1*2048kB (U) 5*4096kB (M) = 26916kB [ 1790.386358] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1790.387103] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1790.403920] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1790.411149] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1790.424423] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1790.432781] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1790.450515] 29558 total pagecache pages [ 1790.456370] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1790.467310] 0 pages in swap cache [ 1790.491575] 29558 total pagecache pages [ 1790.518237] Swap cache stats: add 0, delete 0, find 0/0 [ 1790.565241] 0 pages in swap cache [ 1790.592882] Free swap = 0kB [ 1790.627604] Swap cache stats: add 0, delete 0, find 0/0 [ 1790.643582] Total swap = 0kB [ 1790.658127] Free swap = 0kB [ 1790.674631] 2097051 pages RAM [ 1790.717026] Total swap = 0kB [ 1790.750103] 0 pages HighMem/MovableOnly [ 1790.775619] 2097051 pages RAM [ 1790.793032] 369647 pages reserved [ 1790.809674] 0 pages HighMem/MovableOnly [ 1790.833092] 0 pages cma reserved [ 1790.840678] 369647 pages reserved [ 1791.092823] 0 pages cma reserved [ 1791.096293] Out of memory (oom_kill_allocating_task): Kill process 8092 (syz-fuzzer) score 0 or sacrifice child [ 1791.107576] Killed process 8118 (syz-executor.2) total-vm:84924kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 1791.152108] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1791.780095] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1791.803825] CPU: 1 PID: 8092 Comm: syz-fuzzer Not tainted 4.19.195-syzkaller #0 [ 1791.811396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1791.820844] Call Trace: [ 1791.823462] dump_stack+0x1fc/0x2ef [ 1791.827107] dump_header+0x15d/0xc3f [ 1791.830860] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1791.836374] ? ___ratelimit+0x319/0x590 [ 1791.840448] oom_kill_process.cold+0x10/0x692 [ 1791.844963] ? check_preemption_disabled+0x41/0x280 [ 1791.850001] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1791.855295] out_of_memory+0x1072/0x1390 [ 1791.859377] ? oom_killer_disable+0x270/0x270 [ 1791.863882] ? mutex_trylock+0x15f/0x1a0 [ 1791.868046] __alloc_pages_nodemask+0x23a2/0x2890 [ 1791.873441] ? find_get_entry+0x4cd/0x8a0 [ 1791.877617] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1791.882589] alloc_pages_current+0x193/0x2a0 [ 1791.887545] filemap_fault+0x146e/0x2180 [ 1791.891931] ext4_filemap_fault+0x84/0xb0 [ 1791.896287] __do_fault+0x10b/0x4b0 [ 1791.900012] ? do_raw_spin_unlock+0x171/0x230 [ 1791.904695] __handle_mm_fault+0x273b/0x41c0 [ 1791.909208] ? vm_insert_page+0x9c0/0x9c0 [ 1791.913983] ? __fget+0x356/0x510 [ 1791.917461] ? check_preemption_disabled+0x41/0x280 [ 1791.922525] handle_mm_fault+0x436/0xb10 [ 1791.926615] __do_page_fault+0x68e/0xd60 [ 1791.930739] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1791.935764] ? spurious_fault+0x840/0x840 [ 1791.939919] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1791.944771] ? page_fault+0x8/0x30 [ 1791.948337] page_fault+0x1e/0x30 [ 1791.951880] RIP: 0033:0x461220 [ 1791.955163] Code: 48 89 4c 24 10 48 89 5c 24 18 e8 9b 40 fa ff 48 8b 6c 24 20 48 83 c4 28 c3 e8 6c 95 00 00 eb aa cc cc cc cc cc cc cc cc cc cc <64> 48 8b 0c 25 f8 ff ff ff 48 3b 61 10 76 2b 48 83 ec 10 48 89 6c [ 1791.974499] RSP: 002b:000000c00003bc40 EFLAGS: 00010246 [ 1791.979995] RAX: 000000c002e89d40 RBX: 0000000000461220 RCX: 000000c000000180 [ 1791.987363] RDX: 000000c00003bcd8 RSI: 0000000000000001 RDI: 000000c00003bc7c [ 1791.995072] RBP: 000000c00003bc68 R08: 00007ffd72df7000 R09: 000001dfffa24f02 [ 1792.003046] R10: 0010795f68c5ee4f R11: 0000000000000001 R12: 000001aa75d7def4 [ 1792.010417] R13: 0000000000000001 R14: 000001aa75d7def4 R15: 0000000000000000 [ 1792.094088] Mem-Info: [ 1792.130618] active_anon:168472 inactive_anon:29311 isolated_anon:0 [ 1792.130618] active_file:142 inactive_file:1225 isolated_file:0 [ 1792.130618] unevictable:0 dirty:34 writeback:0 unstable:0 [ 1792.130618] slab_reclaimable:24234 slab_unreclaimable:112372 [ 1792.130618] mapped:54355 shmem:29528 pagetables:11832 bounce:0 [ 1792.130618] free:43598 free_pcp:509 free_cma:0 [ 1792.166420] Node 0 active_anon:662820kB inactive_anon:117244kB active_file:568kB inactive_file:4896kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:217420kB dirty:136kB writeback:0kB shmem:118112kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 540672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1792.198144] Node 1 active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1792.224583] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1792.252540] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1792.258224] Node 0 DMA32 free:151616kB min:35996kB low:44992kB high:53988kB active_anon:662820kB inactive_anon:117244kB active_file:568kB inactive_file:4896kB unevictable:0kB writepending:184kB present:3129332kB managed:2763460kB mlocked:0kB kernel_stack:22048kB pagetables:46736kB bounce:0kB free_pcp:2800kB local_pcp:1348kB free_cma:0kB [ 1792.289138] lowmem_reserve[]: 0 0 1 1 1 [ 1792.293137] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1792.320168] lowmem_reserve[]: 0 0 0 0 0 [ 1792.324171] Node 1 Normal free:26916kB min:53876kB low:67344kB high:80812kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:252kB local_pcp:248kB free_cma:0kB [ 1792.352831] lowmem_reserve[]: 0 0 0 0 0 [ 1792.356829] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10860kB [ 1792.371230] Node 0 DMA32: 4220*4kB (UMEH) 2410*8kB (UMEH) 295*16kB (UME) 196*32kB (UM) 24*64kB (UM) 9*128kB (UM) 2*256kB (U) 1*512kB (U) 2*1024kB (U) 32*2048kB (M) 8*4096kB (M) = 151216kB [ 1792.389460] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1792.401143] Node 1 Normal: 5*4kB (UME) 2*8kB (ME) 4*16kB (UME) 2*32kB (M) 2*64kB (M) 4*128kB (UME) 4*256kB (UME) 3*512kB (M) 1*1024kB (M) 1*2048kB (U) 5*4096kB (M) = 26916kB [ 1792.417625] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1792.426470] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1792.436077] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1792.445644] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1792.454944] 30940 total pagecache pages [ 1792.459512] 0 pages in swap cache [ 1792.462968] Swap cache stats: add 0, delete 0, find 0/0 [ 1792.469324] Free swap = 0kB [ 1792.472516] Total swap = 0kB [ 1792.475557] 2097051 pages RAM [ 1792.480021] 0 pages HighMem/MovableOnly [ 1792.484001] 369647 pages reserved [ 1792.487442] 0 pages cma reserved [ 1792.492147] Out of memory (oom_kill_allocating_task): Kill process 8092 (syz-fuzzer) score 0 or sacrifice child [ 1792.503069] Killed process 8122 (syz-executor.4) total-vm:84924kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 1792.514367] oom_reaper: reaped process 8122 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1792.839607] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.845223] ieee802154 phy1 wpan1: encryption failed: -22 [ 1793.848154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1793.867107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1793.884032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1793.891835] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1793.908330] device bridge_slave_1 left promiscuous mode [ 1793.914398] bridge0: port 2(bridge_slave_1) entered disabled state [ 1793.937746] device bridge_slave_0 left promiscuous mode [ 1793.943362] bridge0: port 1(bridge_slave_0) entered disabled state [ 1793.960735] device veth1_macvtap left promiscuous mode [ 1793.966520] device veth0_macvtap left promiscuous mode [ 1793.973235] device veth1_vlan left promiscuous mode [ 1793.979652] device veth0_vlan left promiscuous mode [ 1794.098632] device hsr_slave_1 left promiscuous mode [ 1794.110144] device hsr_slave_0 left promiscuous mode [ 1794.133309] team0 (unregistering): Port device team_slave_1 removed [ 1794.146612] team0 (unregistering): Port device team_slave_0 removed [ 1794.160465] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1794.173668] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1794.217153] bond0 (unregistering): Released all slaves 15:36:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {0x700}, {0x14}}}, 0x30}}, 0x0) 15:36:31 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000200)={0xa20000, 0x0, 0x3, r1, 0x0, &(0x7f00000000c0)={0x980902, 0x6, '\x00', @value=0xfffffff7}}) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000080)={0x1f, 0x8, 0x0, "28bbafe6392f7df70458a6a07530b68206597ff0db71f3a7dc0965ca94c6ef1a", 0x2081114}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:36:31 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d00, 0x0) 15:36:31 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000240)={0x6, 0x200f900, "ce8c2eea46527456e8da224babe4393503c02478e3874ad4", {0x2, 0x1000}, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xc, 0x4, 0x0, 0x0, {}, {0x2, 0xc, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @offset=0x3}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d00, &(0x7f0000000300)=0xf) 15:36:31 executing program 4: ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f00000000c0)={0x80000000, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x0, 0x107f, 0x1, 0xfff}) 15:36:31 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000240)={0x6, 0x200f900, "ce8c2eea46527456e8da224babe4393503c02478e3874ad4", {0x2, 0x1000}, 0x1}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r1, 0xc0044d00, &(0x7f0000000300)=0xf) 15:36:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {0xe00}, {0x14}}}, 0x30}}, 0x0) 15:36:31 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d00, 0x0) 15:36:31 executing program 1: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d00, &(0x7f0000000300)=0xf) 15:36:31 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000240)={0x6, 0x200f900, "ce8c2eea46527456e8da224babe4393503c02478e3874ad4", {0x2, 0x1000}, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xc, 0x4, 0x0, 0x0, {}, {0x2, 0xc, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @offset=0x3}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d00, &(0x7f0000000300)=0xf) 15:36:31 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d00, &(0x7f0000000300)) 15:36:31 executing program 1: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d00, &(0x7f0000000300)=0xf) 15:36:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {0xf00}, {0x14}}}, 0x30}}, 0x0) [ 1797.465607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1797.472932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1797.481482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1797.488417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1797.496015] device bridge_slave_1 left promiscuous mode [ 1797.501610] bridge0: port 2(bridge_slave_1) entered disabled state [ 1797.509402] device bridge_slave_0 left promiscuous mode [ 1797.515029] bridge0: port 1(bridge_slave_0) entered disabled state [ 1797.526362] device veth1_macvtap left promiscuous mode [ 1797.531894] device veth0_macvtap left promiscuous mode [ 1797.537352] device veth1_vlan left promiscuous mode [ 1797.542516] device veth0_vlan left promiscuous mode [ 1797.624860] device hsr_slave_1 left promiscuous mode [ 1797.634341] device hsr_slave_0 left promiscuous mode [ 1797.647044] team0 (unregistering): Port device team_slave_1 removed [ 1797.660708] team0 (unregistering): Port device team_slave_0 removed [ 1797.671226] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1797.682085] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1797.711090] bond0 (unregistering): Released all slaves [ 1799.565831] IPVS: ftp: loaded support on port[0] = 21 [ 1799.574205] IPVS: ftp: loaded support on port[0] = 21 [ 1799.738725] chnl_net:caif_netlink_parms(): no params data found [ 1799.776112] chnl_net:caif_netlink_parms(): no params data found [ 1800.005483] bridge0: port 1(bridge_slave_0) entered blocking state [ 1800.012445] bridge0: port 1(bridge_slave_0) entered disabled state [ 1800.020733] device bridge_slave_0 entered promiscuous mode [ 1800.028435] bridge0: port 1(bridge_slave_0) entered blocking state [ 1800.034981] bridge0: port 1(bridge_slave_0) entered disabled state [ 1800.042905] device bridge_slave_0 entered promiscuous mode [ 1800.050174] bridge0: port 2(bridge_slave_1) entered blocking state [ 1800.056694] bridge0: port 2(bridge_slave_1) entered disabled state [ 1800.064661] device bridge_slave_1 entered promiscuous mode [ 1800.071282] bridge0: port 2(bridge_slave_1) entered blocking state [ 1800.080779] bridge0: port 2(bridge_slave_1) entered disabled state [ 1800.089326] device bridge_slave_1 entered promiscuous mode [ 1800.120106] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1800.129782] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1800.139308] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1800.161758] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1800.172551] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1800.180075] team0: Port device team_slave_0 added [ 1800.193855] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1800.201241] team0: Port device team_slave_1 added [ 1800.218715] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1800.226169] team0: Port device team_slave_0 added [ 1800.236414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1800.243353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1800.269822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1800.281999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1800.289552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1800.315105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1800.326360] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1800.334698] team0: Port device team_slave_1 added [ 1800.345181] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1800.353113] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1800.366540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1800.373953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1800.400766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1800.417706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1800.423959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1800.449778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1800.465892] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1800.476369] device hsr_slave_0 entered promiscuous mode [ 1800.485304] device hsr_slave_1 entered promiscuous mode [ 1800.491959] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1800.499925] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1800.513821] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1800.537595] device hsr_slave_0 entered promiscuous mode [ 1800.543417] device hsr_slave_1 entered promiscuous mode [ 1800.558392] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1800.573384] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1800.683112] bridge0: port 2(bridge_slave_1) entered blocking state [ 1800.689850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1800.696623] bridge0: port 1(bridge_slave_0) entered blocking state [ 1800.703306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1800.719092] bridge0: port 1(bridge_slave_0) entered disabled state [ 1800.727693] bridge0: port 2(bridge_slave_1) entered disabled state [ 1800.744855] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1800.796612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1800.809176] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1800.820520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1800.829883] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1800.836526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1800.844551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1800.855457] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1800.864834] 8021q: adding VLAN 0 to HW filter on device team0 [ 1800.872284] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1800.881739] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1800.888688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1800.895632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1800.905416] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1800.914050] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1800.921158] 8021q: adding VLAN 0 to HW filter on device team0 [ 1800.927842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1800.935630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1800.943553] bridge0: port 1(bridge_slave_0) entered blocking state [ 1800.950068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1800.957449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1800.966108] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1800.975251] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1800.982958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1800.990864] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1800.998908] bridge0: port 1(bridge_slave_0) entered blocking state [ 1801.005370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1801.013277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1801.021603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1801.029570] bridge0: port 2(bridge_slave_1) entered blocking state [ 1801.036033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1801.044844] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1801.054027] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1801.061731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1801.070172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1801.078062] bridge0: port 2(bridge_slave_1) entered blocking state [ 1801.084508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1801.092123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1801.103445] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1801.112368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1801.121516] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1801.130481] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1801.138612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1801.146620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1801.158696] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1801.168186] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1801.176148] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1801.184410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1801.192633] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1801.201555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1801.209921] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1801.217845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1801.225775] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1801.236153] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1801.238439] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1801.254009] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1801.261414] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1801.268833] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1801.275862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1801.283842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1801.291566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1801.299806] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1801.309001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1801.316507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1801.327198] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1801.335886] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1801.345688] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1801.354786] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1801.362387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1801.372941] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1801.380755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1801.390872] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1801.401665] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1801.408076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1801.425390] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1801.435498] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1801.444141] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1801.451912] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1801.460725] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1801.472145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1801.480625] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1801.487709] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1801.494436] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1801.510858] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1801.521052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1801.536180] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1801.544501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1801.553106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1801.564369] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1801.575282] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1801.582706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1801.590839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1801.607375] Bluetooth: hci2: command 0x0409 tx timeout [ 1801.613026] Bluetooth: hci4: command 0x0409 tx timeout [ 1801.639684] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1801.647588] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1801.654322] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1801.664668] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1801.672546] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1801.679960] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1801.689767] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1801.699780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1801.708096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1801.715655] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1801.723591] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1801.733745] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1801.743819] device veth0_vlan entered promiscuous mode [ 1801.750439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1801.758380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1801.765890] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1801.773166] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1801.783555] device veth0_vlan entered promiscuous mode [ 1801.792841] device veth1_vlan entered promiscuous mode [ 1801.811892] device veth1_vlan entered promiscuous mode [ 1801.821897] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1801.833364] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1801.843825] device veth0_macvtap entered promiscuous mode [ 1801.850971] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1801.859853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1801.868112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1801.876010] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1801.887177] device veth1_macvtap entered promiscuous mode [ 1801.893311] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1801.903554] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1801.915881] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1801.925686] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1801.933466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1801.941741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1801.952089] device veth0_macvtap entered promiscuous mode [ 1801.959235] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1801.967072] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1801.977149] device veth1_macvtap entered promiscuous mode [ 1801.983662] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1801.993864] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1802.002910] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1802.013499] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1802.022657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1802.033472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1802.042848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1802.052657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1802.062336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1802.072349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1802.081905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1802.091882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1802.101996] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1802.109098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1802.117209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1802.128203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1802.137498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1802.147672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1802.157222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1802.167235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1802.176487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1802.186249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1802.195701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1802.205565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1802.215675] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1802.222746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1802.230824] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1802.239681] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1802.247351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1802.255089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1802.263783] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1802.272081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1802.282022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1802.293171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1802.305852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1802.317315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1802.326438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1802.337535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1802.346662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1802.356456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1802.367662] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1802.374626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1802.384019] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1802.392083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1802.400593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1802.410418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1802.419724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1802.429811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1802.439975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1802.449748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1802.458953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1802.468796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1802.478481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1802.488982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1802.499380] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1802.506255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1802.517469] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1802.525387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1802.742557] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 1802.749970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1802.758366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1802.764984] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 1802.773457] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1802.796158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1802.805860] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1802.823935] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1802.838259] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 1802.847056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1802.847827] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 1802.857772] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1802.862787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1802.873521] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1802.874908] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1802.891731] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 15:36:37 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000080)) 15:36:37 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000240)={0x6, 0x200f900, "ce8c2eea46527456e8da224babe4393503c02478e3874ad4", {0x2, 0x1000}, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xc, 0x4, 0x0, 0x0, {}, {0x2, 0xc, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @offset=0x3}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r2, 0xc0044d00, &(0x7f0000000300)=0xf) 15:36:37 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d00, &(0x7f0000000300)) 15:36:37 executing program 1: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d00, &(0x7f0000000300)=0xf) 15:36:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {0x4aa5}, {0x14}}}, 0x30}}, 0x0) 15:36:37 executing program 4: ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f00000000c0)={0x80000000, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x0, 0x107f, 0x1, 0xfff}) 15:36:37 executing program 4: r0 = syz_open_dev$video(0x0, 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x80000000, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x0, 0x107f, 0x1, 0xfff}) 15:36:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {0x6000}, {0x14}}}, 0x30}}, 0x0) 15:36:37 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000240)={0x6, 0x200f900, "ce8c2eea46527456e8da224babe4393503c02478e3874ad4", {0x2, 0x1000}, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xc, 0x4, 0x0, 0x0, {}, {0x2, 0xc, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @offset=0x3}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r2, 0xc0044d00, &(0x7f0000000300)=0xf) 15:36:37 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d00, &(0x7f0000000300)=0xf) 15:36:37 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d00, &(0x7f0000000300)) 15:36:37 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x8000, 0x1, {0x6, @pix={0x42c9, 0x9, 0x3132564e, 0x3, 0x9a8, 0x800, 0x1, 0x9, 0x0, 0x5, 0x2, 0x7}}, 0x5}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:36:37 executing program 4: r0 = syz_open_dev$video(0x0, 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x80000000, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x0, 0x107f, 0x1, 0xfff}) 15:36:37 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000240)={0x6, 0x200f900, "ce8c2eea46527456e8da224babe4393503c02478e3874ad4", {0x2, 0x1000}, 0x1}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r1, 0xc0044d00, &(0x7f0000000300)=0xf) 15:36:37 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d00, &(0x7f0000000300)=0xf) 15:36:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {0xa54a}, {0x14}}}, 0x30}}, 0x0) 15:36:37 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d00, &(0x7f0000000300)) 15:36:37 executing program 2: ioctl$mixer_OSS_ALSAEMULVER(0xffffffffffffffff, 0x80044df9, &(0x7f0000000000)) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:36:37 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d00, &(0x7f0000000300)) 15:36:37 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d00, &(0x7f0000000300)=0xf) 15:36:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {0xf000}, {0x14}}}, 0x30}}, 0x0) 15:36:37 executing program 4: r0 = syz_open_dev$video(0x0, 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x80000000, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x0, 0x107f, 0x1, 0xfff}) 15:36:37 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000240)={0x6, 0x200f900, "ce8c2eea46527456e8da224babe4393503c02478e3874ad4", {0x2, 0x1000}, 0x1}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r1, 0xc0044d00, &(0x7f0000000300)=0xf) 15:36:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {0x30000}, {0x14}}}, 0x30}}, 0x0) 15:36:37 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d00, &(0x7f0000000300)=0xf) 15:36:37 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d00, &(0x7f0000000300)) 15:36:37 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000240)={0x6, 0x200f900, "ce8c2eea46527456e8da224babe4393503c02478e3874ad4", {0x2, 0x1000}, 0x1}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r1, 0xc0044d00, &(0x7f0000000300)=0xf) 15:36:37 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x80000000, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x0, 0x107f, 0x1, 0xfff}) 15:36:37 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000080)={0x164, "b897cc9e6e8ee8198319444a75b64c5f28d9c366c800", 0x2, 0x4, 0x5, 0x10003, 0x40001, 0x2}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f0000000240)={0x54, 0x5, 0x6}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x422000, 0x0) 15:36:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {0x34000}, {0x14}}}, 0x30}}, 0x0) 15:36:37 executing program 0: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000e80)={0x0, 0xc, 0x4, 0x0, 0x0, {}, {0x2, 0xc, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @offset=0x3}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r1, 0xc0044d00, &(0x7f0000000300)=0xf) 15:36:37 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x80000000, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x0, 0x107f, 0x1, 0xfff}) 15:36:37 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d00, &(0x7f0000000300)=0xf) 15:36:37 executing program 5: ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d00, &(0x7f0000000300)) [ 1803.677108] Bluetooth: hci4: command 0x041b tx timeout [ 1803.687097] Bluetooth: hci2: command 0x041b tx timeout 15:36:37 executing program 1: openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d00, &(0x7f0000000300)=0xf) 15:36:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {0x400300}, {0x14}}}, 0x30}}, 0x0) 15:36:37 executing program 5: ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d00, &(0x7f0000000300)) 15:36:38 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x80000000, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x0, 0x107f, 0x1, 0xfff}) 15:36:38 executing program 0: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000e80)={0x0, 0xc, 0x4, 0x0, 0x0, {}, {0x2, 0xc, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @offset=0x3}) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d00, &(0x7f0000000300)=0xf) 15:36:38 executing program 2: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x40002, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x80044dfb, &(0x7f0000000100)) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d00, &(0x7f0000000000)) ioctl$SOUND_MIXER_INFO(r0, 0x805c4d65, &(0x7f0000000280)) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000080)={0x4, 0x0, 0x2006, 0x0, 0x8, 0x9, 0x80000000, 0x1}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000200)={0x4, 0xc, 0x4, 0x0, 0x6, {0x0, 0x2710}, {0x1, 0x2, 0x40, 0x8, 0x1a, 0x6, "fdec770c"}, 0x80000001, 0x3, @planes=&(0x7f0000000300)={0x6, 0x7, @mem_offset=0x4, 0x7}, 0xfffffffb}) 15:36:38 executing program 1: openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d00, &(0x7f0000000300)=0xf) 15:36:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {0xf0ffff}, {0x14}}}, 0x30}}, 0x0) 15:36:38 executing program 5: ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d00, &(0x7f0000000300)) 15:36:38 executing program 4: syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f00000000c0)={0x80000000, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x0, 0x107f, 0x1, 0xfff}) 15:36:38 executing program 0: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000e80)={0x0, 0xc, 0x4, 0x0, 0x0, {}, {0x2, 0xc, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @offset=0x3}) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d00, &(0x7f0000000300)=0xf) 15:36:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {0x1000000}, {0x14}}}, 0x30}}, 0x0) 15:36:38 executing program 1: openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d00, &(0x7f0000000300)=0xf) 15:36:38 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d00, &(0x7f0000000300)) 15:36:38 executing program 4: syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f00000000c0)={0x80000000, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x0, 0x107f, 0x1, 0xfff}) 15:36:38 executing program 0: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d00, &(0x7f0000000300)=0xf) 15:36:38 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0xa26, 0x3, 0x3, 0x3ff, 0x140, 0x8, 0x2}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:36:38 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0x0, &(0x7f0000000300)=0xf) 15:36:38 executing program 4: syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f00000000c0)={0x80000000, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x0, 0x107f, 0x1, 0xfff}) 15:36:38 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d00, &(0x7f0000000300)) 15:36:38 executing program 0: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) r0 = openat$mixer(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d00, &(0x7f0000000300)=0xf) 15:36:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {0x2000000}, {0x14}}}, 0x30}}, 0x0) 15:36:38 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0x0, &(0x7f0000000300)=0xf) 15:36:38 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d00, &(0x7f0000000300)) 15:36:38 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) 15:36:38 executing program 0: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) r0 = openat$mixer(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d00, &(0x7f0000000300)=0xf) 15:36:38 executing program 2: ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x40002, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r2, 0x80044dfb, &(0x7f0000000100)) ioctl$SOUND_MIXER_INFO(r2, 0x805c4d65, &(0x7f0000000300)) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000000)={0x2, 0xc6, &(0x7f0000000200)=""/198}) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:36:38 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0x0, &(0x7f0000000300)=0xf) 15:36:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {0x3000000}, {0x14}}}, 0x30}}, 0x0) 15:36:38 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) 15:36:38 executing program 0: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) r0 = openat$mixer(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d00, &(0x7f0000000300)=0xf) 15:36:38 executing program 5: openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d00, &(0x7f0000000300)) 15:36:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {0x4000000}, {0x14}}}, 0x30}}, 0x0) 15:36:38 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d00, 0x0) 15:36:38 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) 15:36:38 executing program 5: openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d00, &(0x7f0000000300)) 15:36:38 executing program 0: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d00, &(0x7f0000000300)=0xf) 15:36:38 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000280)={0xa20000, 0x2, 0x800, r2, 0x0, &(0x7f0000000240)={0x9d0902, 0x3, '\x00', @string=&(0x7f0000000200)=0x4}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000100)={0x1, 0x780c, 0x2, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38e1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d0c, &(0x7f00000002c0)) write$sysctl(r3, &(0x7f0000000140)='7\x00', 0x2) write$sysctl(r3, &(0x7f0000000080)='0\x00', 0x2) 15:36:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {0x5000000}, {0x14}}}, 0x30}}, 0x0) 15:36:38 executing program 5: openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d00, &(0x7f0000000300)) 15:36:38 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d00, 0x0) 15:36:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {0x6000000}, {0x14}}}, 0x30}}, 0x0) 15:36:38 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x0, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x0, 0x107f, 0x1, 0xfff}) 15:36:38 executing program 0: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d00, &(0x7f0000000300)=0xf) 15:36:39 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x6, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:36:39 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d00, 0x0) 15:36:39 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0x0, &(0x7f0000000300)) 15:36:39 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x0, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x0, 0x107f, 0x1, 0xfff}) 15:36:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {0x7000000}, {0x14}}}, 0x30}}, 0x0) 15:36:39 executing program 0: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d00, &(0x7f0000000300)=0xf) 15:36:39 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d00, &(0x7f0000000300)) 15:36:39 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0x0, &(0x7f0000000300)) 15:36:39 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x0, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x0, 0x107f, 0x1, 0xfff}) 15:36:39 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0xfffffe01, 0x5, 0x3}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000140)={0x0, @reserved}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000100)={0x0, 0x2, 0x5, 0x25, 0x1, 0x4, 0x6}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000200)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:36:39 executing program 0: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d00, &(0x7f0000000300)=0xf) 15:36:39 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0x0, &(0x7f0000000300)) 15:36:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {0x8000000}, {0x14}}}, 0x30}}, 0x0) 15:36:39 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d00, &(0x7f0000000300)) 15:36:39 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x80000000, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x0, 0x0, 0x1, 0xfff}) 15:36:39 executing program 0: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0x0, &(0x7f0000000300)=0xf) 15:36:39 executing program 2: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 15:36:39 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d00, 0x0) 15:36:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {0xe000000}, {0x14}}}, 0x30}}, 0x0) 15:36:39 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d00, &(0x7f0000000300)) 15:36:39 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d00, 0x0) 15:36:39 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) 15:36:39 executing program 0: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0x0, &(0x7f0000000300)=0xf) 15:36:39 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x80000000, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767", 0x0, 0x0, 0x0, 0xfff}) 15:36:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {0x400300}, {0x14}}}, 0x30}}, 0x0) 15:36:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {0xf000000}, {0x14}}}, 0x30}}, 0x0) 15:36:39 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d00, 0x0) 15:36:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {0xa54a}, {0x14}}}, 0x30}}, 0x0) 15:36:39 executing program 0: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0x0, &(0x7f0000000300)=0xf) 15:36:39 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4d, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x80000000, 0x0, "d3483c76d57cab5dec1ecd7fc67be2c75160f2b79f92c8adc3def46911fdf767"}) 15:36:39 executing program 1: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x8000, 0x1, {0x6, @pix={0x42c9, 0x9, 0x3132564e, 0x3, 0x9a8, 0x800, 0x1, 0x9, 0x0, 0x5, 0x2, 0x7}}, 0x5}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:36:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {0x60000000}, {0x14}}}, 0x30}}, 0x0) 15:36:39 executing program 5: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x1, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:36:39 executing program 0: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d00, 0x0) 15:36:39 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000240)={0x6, 0x200f900, "ce8c2eea46527456e8da224babe4393503c02478e3874ad4", {0x2, 0x1000}, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xc, 0x4, 0x0, 0x0, {}, {0x2, 0xc, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @offset=0x3}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r2, 0xc0044d00, &(0x7f0000000300)=0xf) 15:36:39 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000240)={0x6, 0x200f900, "ce8c2eea46527456e8da224babe4393503c02478e3874ad4", {0x2, 0x1000}, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)={0x0, 0xc, 0x4, 0x0, 0x0, {}, {0x2, 0xc, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @offset=0x3}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r3, 0xc0044d00, &(0x7f0000000300)=0xf) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000e80)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "311d8306"}, 0x0, 0x0, @planes=0x0}) 15:36:39 executing program 1: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}, 0x2}) 15:36:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {0x9effffff}, {0x14}}}, 0x30}}, 0x0) 15:36:39 executing program 0: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d00, 0x0) 15:36:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {0xa1ffffff}, {0x14}}}, 0x30}}, 0x0) 15:36:39 executing program 0: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d00, 0x0) [ 1805.756513] Bluetooth: hci2: command 0x040f tx timeout [ 1805.762163] Bluetooth: hci4: command 0x040f tx timeout 15:36:40 executing program 0: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d00, &(0x7f0000000300)) 15:36:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {0xa54a0000}, {0x14}}}, 0x30}}, 0x0) 15:36:40 executing program 0: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d00, &(0x7f0000000300)) [ 1807.836730] Bluetooth: hci4: command 0x0419 tx timeout [ 1807.842434] Bluetooth: hci2: command 0x0419 tx timeout [ 1810.822175] oom_reaper: reaped process 13873 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1810.863120] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1810.882547] in:imklog cpuset=/ mems_allowed=0-1 [ 1810.887347] CPU: 1 PID: 7800 Comm: in:imklog Not tainted 4.19.195-syzkaller #0 [ 1810.894705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1810.904059] Call Trace: [ 1810.906658] dump_stack+0x1fc/0x2ef [ 1810.910286] dump_header+0x15d/0xc3f [ 1810.914096] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1810.919233] ? ___ratelimit+0x319/0x590 [ 1810.923301] oom_kill_process.cold+0x10/0x692 [ 1810.927807] ? check_preemption_disabled+0x41/0x280 [ 1810.932830] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1810.938208] out_of_memory+0x1072/0x1390 [ 1810.942284] ? oom_killer_disable+0x270/0x270 [ 1810.946878] ? mutex_trylock+0x15f/0x1a0 [ 1810.950953] __alloc_pages_nodemask+0x23a2/0x2890 [ 1810.955804] ? find_get_entry+0x4cd/0x8a0 [ 1810.960011] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1810.964876] alloc_pages_current+0x193/0x2a0 [ 1810.969285] filemap_fault+0x146e/0x2180 [ 1810.973358] ext4_filemap_fault+0x84/0xb0 [ 1810.977509] __do_fault+0x10b/0x4b0 [ 1810.982302] __handle_mm_fault+0x273b/0x41c0 [ 1810.986802] ? vm_insert_page+0x9c0/0x9c0 [ 1810.991194] ? lock_downgrade+0x720/0x720 [ 1810.995357] ? check_preemption_disabled+0x41/0x280 [ 1811.000386] handle_mm_fault+0x436/0xb10 [ 1811.004717] __do_page_fault+0x68e/0xd60 [ 1811.008784] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1811.014006] ? spurious_fault+0x840/0x840 [ 1811.018154] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1811.023265] ? page_fault+0x8/0x30 [ 1811.027019] page_fault+0x1e/0x30 [ 1811.030480] RIP: 0033:0x7f980184c22d [ 1811.034199] Code: Bad RIP value. [ 1811.037609] RSP: 002b:00007f97ff1e8580 EFLAGS: 00010293 [ 1811.043062] RAX: 0000000000000077 RBX: 0000000000000000 RCX: 00007f980184c22d [ 1811.050350] RDX: 0000000000001fa0 RSI: 00007f97ff1e8da0 RDI: 0000000000000004 [ 1811.057631] RBP: 0000557e574b39d0 R08: 0000000000000000 R09: 0000000000000000 [ 1811.065077] R10: 2ce33e6c02ce33e7 R11: 0000000000000293 R12: 00007f97ff1e8da0 [ 1811.072346] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f97ff1e8e1a [ 1811.087338] Mem-Info: [ 1811.089792] active_anon:137834 inactive_anon:29312 isolated_anon:0 [ 1811.089792] active_file:15 inactive_file:17 isolated_file:0 [ 1811.089792] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1811.089792] slab_reclaimable:23782 slab_unreclaimable:106579 [ 1811.089792] mapped:53546 shmem:29528 pagetables:9862 bounce:0 [ 1811.089792] free:13890 free_pcp:235 free_cma:0 [ 1811.125779] Node 0 active_anon:551312kB inactive_anon:117248kB active_file:56kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214184kB dirty:0kB writeback:0kB shmem:118112kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 446464kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1811.140321] syz-executor.5: vmalloc: allocation failure, allocated 677781504 of 2325655552 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1811.158319] Node 1 active_anon:24kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1811.178825] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1811.196983] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1811.209479] CPU: 0 PID: 13873 Comm: syz-executor.5 Not tainted 4.19.195-syzkaller #0 [ 1811.229184] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1811.233181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1811.238231] Node 0 DMA32 free:17936kB min:35996kB low:44992kB high:53988kB active_anon:551312kB inactive_anon:117248kB active_file:56kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2763460kB mlocked:0kB kernel_stack:19840kB pagetables:39448kB bounce:0kB free_pcp:444kB local_pcp:196kB free_cma:0kB [ 1811.247533] Call Trace: [ 1811.247558] dump_stack+0x1fc/0x2ef [ 1811.247576] warn_alloc.cold+0x7b/0x18f [ 1811.247593] ? zone_watermark_ok_safe+0x260/0x260 [ 1811.247607] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1811.247626] ? retint_kernel+0x2d/0x2d [ 1811.247653] __vmalloc_area_node+0x4fd/0x780 [ 1811.247675] ? __vmalloc_node_range+0x180/0x180 [ 1811.247689] ? _raw_spin_unlock+0x29/0x40 [ 1811.247701] ? __get_vm_area_node+0x2e2/0x3a0 [ 1811.247720] __vmalloc_node_range+0xed/0x180 [ 1811.247741] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1811.247756] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1811.247770] vmalloc_user+0x70/0xe0 [ 1811.247784] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1811.247798] vb2_vmalloc_alloc+0xb3/0x2f0 [ 1811.247814] __vb2_queue_alloc+0x472/0xe60 [ 1811.247842] vb2_core_create_bufs+0x273/0x7e0 [ 1811.247858] ? __vb2_queue_free+0x870/0x870 [ 1811.247874] ? mutex_trylock+0x1a0/0x1a0 [ 1811.247895] vb2_create_bufs+0x332/0x620 [ 1811.247913] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1811.247928] ? __video_do_ioctl+0x632/0xcd0 [ 1811.247940] ? mutex_trylock+0x1a0/0x1a0 [ 1811.247956] ? mark_held_locks+0xf0/0xf0 [ 1811.247972] ? futex_wait_queue_me+0x404/0x5e0 [ 1811.247991] vb2_ioctl_create_bufs+0x20d/0x360 [ 1811.248006] ? memset+0x20/0x40 [ 1811.248024] v4l_create_bufs+0xb2/0x160 [ 1811.248042] __video_do_ioctl+0x49a/0xcd0 [ 1811.248064] ? v4l_querycap+0x340/0x340 [ 1811.248083] ? __might_fault+0x192/0x1d0 [ 1811.248100] ? v4l_querycap+0x340/0x340 [ 1811.248116] video_usercopy+0x13f/0xfa0 [ 1811.248137] ? v4l_enumstd+0x60/0x60 [ 1811.248152] ? do_futex+0x171/0x1880 [ 1811.248167] ? mark_held_locks+0xf0/0xf0 [ 1811.248186] ? debug_check_no_obj_freed+0x201/0x490 [ 1811.248209] ? video_usercopy+0xfa0/0xfa0 [ 1811.248221] v4l2_ioctl+0x147/0x1a0 [ 1811.248234] ? video_devdata+0xa0/0xa0 [ 1811.248250] do_vfs_ioctl+0xcdb/0x12e0 [ 1811.248267] ? lock_downgrade+0x720/0x720 [ 1811.248282] ? check_preemption_disabled+0x41/0x280 [ 1811.248296] ? ioctl_preallocate+0x200/0x200 [ 1811.248314] ? __fget+0x356/0x510 [ 1811.248331] ? do_dup2+0x450/0x450 [ 1811.248346] ? __se_sys_futex+0x298/0x3b0 [ 1811.248368] ksys_ioctl+0x9b/0xc0 [ 1811.248385] __x64_sys_ioctl+0x6f/0xb0 [ 1811.248399] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1811.248412] do_syscall_64+0xf9/0x620 [ 1811.248429] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1811.248440] RIP: 0033:0x4665d9 [ 1811.248454] Code: Bad RIP value. [ 1811.248461] RSP: 002b:00007ffae15d4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1811.248474] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1811.248482] RDX: 0000000020000100 RSI: 00000000c100565c RDI: 0000000000000003 [ 1811.248490] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1811.248498] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 [ 1811.248506] R13: 00007ffe2faa9bdf R14: 00007ffae15d4300 R15: 0000000000022000 [ 1811.261210] Mem-Info: [ 1811.284642] lowmem_reserve[]: 0 0 1 1 1 [ 1811.296043] active_anon:137834 inactive_anon:29312 isolated_anon:0 [ 1811.296043] active_file:15 inactive_file:17 isolated_file:0 [ 1811.296043] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1811.296043] slab_reclaimable:23782 slab_unreclaimable:106579 [ 1811.296043] mapped:53546 shmem:29528 pagetables:9862 bounce:0 [ 1811.296043] free:13890 free_pcp:234 free_cma:0 [ 1811.303859] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1811.313672] Node 0 active_anon:551312kB inactive_anon:117248kB active_file:56kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214184kB dirty:0kB writeback:0kB shmem:118112kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 446464kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1811.315024] lowmem_reserve[]: 0 0 0 0 0 [ 1811.319865] Node 1 active_anon:24kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1811.330862] Node 1 Normal free:26732kB min:53876kB low:67344kB high:80812kB active_anon:24kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:496kB local_pcp:248kB free_cma:0kB [ 1811.341475] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1811.348057] lowmem_reserve[]: 0 0 0 0 0 [ 1811.350875] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1811.355432] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10884kB [ 1811.365687] Node 0 DMA32 free:17936kB min:35996kB low:44992kB high:53988kB active_anon:551312kB inactive_anon:117248kB active_file:56kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2763460kB mlocked:0kB kernel_stack:19840kB pagetables:39448kB bounce:0kB free_pcp:432kB local_pcp:248kB free_cma:0kB [ 1811.373940] Node 0 DMA32: 2188*4kB (UME) 852*8kB (UME) 140*16kB (UM) 4*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17936kB [ 1811.384792] lowmem_reserve[]: 0 0 1 1 1 [ 1811.385839] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1811.391169] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1811.391199] lowmem_reserve[]: 0 0 0 0 0 [ 1811.400732] Node 1 Normal: 5*4kB (ME) 7*8kB (UME) 6*16kB (ME) 4*32kB (UM) 5*64kB (UM) 4*128kB (UME) 2*256kB (ME) 3*512kB (M) 1*1024kB (M) 1*2048kB (U) 5*4096kB (M) = 26732kB [ 1811.409752] Node 1 Normal free:26732kB min:53876kB low:67344kB high:80812kB active_anon:24kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:496kB local_pcp:248kB free_cma:0kB [ 1811.416537] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1811.421391] lowmem_reserve[]: 0 0 0 0 0 [ 1811.423707] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1811.431152] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10884kB [ 1811.438120] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1811.445189] Node 0 DMA32: 2188*4kB (UME) 852*8kB (UME) 140*16kB (UM) 4*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17936kB [ 1811.447019] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1811.449234] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1811.455985] 29560 total pagecache pages [ 1811.460026] Node 1 Normal: 5*4kB (ME) 7*8kB (UME) 6*16kB (ME) 4*32kB (UM) 5*64kB (UM) 4*128kB (UME) 2*256kB (ME) 3*512kB (M) 1*1024kB (M) 1*2048kB (U) 5*4096kB (M) = 26732kB [ 1811.461027] 0 pages in swap cache [ 1811.466078] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1811.466089] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1811.466099] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1811.466108] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1811.466131] 29560 total pagecache pages [ 1811.466158] 0 pages in swap cache [ 1811.481013] Swap cache stats: add 0, delete 0, find 0/0 [ 1811.483850] Swap cache stats: add 0, delete 0, find 0/0 [ 1811.485478] Free swap = 0kB [ 1811.491131] Free swap = 0kB [ 1811.499490] Total swap = 0kB [ 1811.504072] Total swap = 0kB [ 1811.514010] 2097051 pages RAM [ 1811.521677] 2097051 pages RAM [ 1811.537475] 0 pages HighMem/MovableOnly [ 1811.544417] 0 pages HighMem/MovableOnly [ 1811.556334] 369647 pages reserved [ 1811.566166] 369647 pages reserved [ 1811.609757] 0 pages cma reserved [ 1811.630546] 0 pages cma reserved [ 1811.658916] Out of memory (oom_kill_allocating_task): Kill process 7800 (in:imklog) score 0 or sacrifice child [ 1812.102580] Killed process 7795 (rsyslogd) total-vm:254332kB, anon-rss:4952kB, file-rss:0kB, shmem-rss:0kB [ 1812.115513] oom_reaper: reaped process 7795 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1812.138448] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1812.176309] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1812.181492] CPU: 1 PID: 8092 Comm: syz-fuzzer Not tainted 4.19.195-syzkaller #0 [ 1812.189024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1812.198410] Call Trace: [ 1812.201002] dump_stack+0x1fc/0x2ef [ 1812.204632] dump_header+0x15d/0xc3f [ 1812.208347] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1812.213447] ? ___ratelimit+0x319/0x590 [ 1812.217424] oom_kill_process.cold+0x10/0x692 [ 1812.221922] ? check_preemption_disabled+0x41/0x280 [ 1812.226942] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1812.232303] out_of_memory+0x1072/0x1390 [ 1812.236383] ? oom_killer_disable+0x270/0x270 [ 1812.240894] ? mutex_trylock+0x15f/0x1a0 [ 1812.244958] __alloc_pages_nodemask+0x23a2/0x2890 [ 1812.249841] ? find_get_entry+0x4cd/0x8a0 [ 1812.254362] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1812.259494] alloc_pages_current+0x193/0x2a0 [ 1812.263919] filemap_fault+0x146e/0x2180 [ 1812.267998] ext4_filemap_fault+0x84/0xb0 [ 1812.272148] __do_fault+0x10b/0x4b0 [ 1812.275805] __handle_mm_fault+0x273b/0x41c0 [ 1812.280306] ? vm_insert_page+0x9c0/0x9c0 [ 1812.284640] ? __fget+0x356/0x510 [ 1812.288136] ? check_preemption_disabled+0x41/0x280 [ 1812.293167] handle_mm_fault+0x436/0xb10 [ 1812.297242] __do_page_fault+0x68e/0xd60 [ 1812.301308] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1812.306327] ? spurious_fault+0x840/0x840 [ 1812.310474] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1812.315323] ? page_fault+0x8/0x30 [ 1812.318861] page_fault+0x1e/0x30 [ 1812.322320] RIP: 0033:0x46e380 [ 1812.325508] Code: Bad RIP value. [ 1812.328875] RSP: 002b:000000c00003b7f0 EFLAGS: 00010246 [ 1812.334229] RAX: 0000000000000000 RBX: 000000000000016f RCX: 000000000046e380 [ 1812.341701] RDX: 0000000000000080 RSI: 000000c00003b840 RDI: 0000000000000003 [ 1812.350300] RBP: 000000c00003be40 R08: 0000000000000000 R09: 0000000000000000 [ 1812.357584] R10: 000000000000016f R11: 0000000000000246 R12: 0000000000000003 [ 1812.364942] R13: 000000c000001200 R14: 0000000000000004 R15: 0000000000000000 [ 1812.376566] Mem-Info: [ 1812.379208] active_anon:136560 inactive_anon:29312 isolated_anon:0 [ 1812.379208] active_file:15 inactive_file:15 isolated_file:0 [ 1812.379208] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1812.379208] slab_reclaimable:23766 slab_unreclaimable:106577 [ 1812.379208] mapped:53546 shmem:29528 pagetables:9824 bounce:0 [ 1812.379208] free:15282 free_pcp:49 free_cma:0 [ 1812.413274] Node 0 active_anon:546216kB inactive_anon:117248kB active_file:60kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214184kB dirty:0kB writeback:0kB shmem:118112kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 444416kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1812.441869] Node 1 active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1812.470320] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1812.498522] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1812.503575] Node 0 DMA32 free:23400kB min:35996kB low:44992kB high:53988kB active_anon:546216kB inactive_anon:117248kB active_file:60kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2763460kB mlocked:0kB kernel_stack:19712kB pagetables:39296kB bounce:0kB free_pcp:168kB local_pcp:168kB free_cma:0kB [ 1812.534385] lowmem_reserve[]: 0 0 1 1 1 [ 1812.538498] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1812.574380] lowmem_reserve[]: 0 0 0 0 0 [ 1812.582576] Node 1 Normal free:27132kB min:53876kB low:67344kB high:80812kB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1812.622758] lowmem_reserve[]: 0 0 0 0 0 [ 1812.632618] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10884kB [ 1812.654138] Node 0 DMA32: 2287*4kB (UME) 905*8kB (UME) 161*16kB (UM) 13*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 2*2048kB (M) 0*4096kB = 23476kB [ 1812.680408] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1812.691688] Node 1 Normal: 5*4kB (ME) 7*8kB (UME) 7*16kB (UME) 5*32kB (UM) 6*64kB (UM) 5*128kB (UME) 3*256kB (UME) 3*512kB (M) 1*1024kB (M) 1*2048kB (U) 5*4096kB (M) = 27228kB [ 1812.715130] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1812.724122] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1812.739985] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1812.749179] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1812.765511] 29558 total pagecache pages [ 1812.769632] 0 pages in swap cache [ 1812.773362] Swap cache stats: add 0, delete 0, find 0/0 [ 1812.786522] Free swap = 0kB [ 1812.789547] Total swap = 0kB [ 1812.792574] 2097051 pages RAM [ 1812.795672] 0 pages HighMem/MovableOnly [ 1812.803505] 369647 pages reserved [ 1812.810658] 0 pages cma reserved [ 1812.814039] Out of memory (oom_kill_allocating_task): Kill process 8092 (syz-fuzzer) score 0 or sacrifice child [ 1812.831447] Killed process 13063 (syz-executor.2) total-vm:84924kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 1812.842007] oom_reaper: reaped process 13063 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1812.853825] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1812.919045] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1812.923947] CPU: 1 PID: 8092 Comm: syz-fuzzer Not tainted 4.19.195-syzkaller #0 [ 1812.932155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1812.942037] Call Trace: [ 1812.944838] dump_stack+0x1fc/0x2ef [ 1812.948924] dump_header+0x15d/0xc3f [ 1812.952748] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1812.957858] ? ___ratelimit+0x319/0x590 [ 1812.962219] oom_kill_process.cold+0x10/0x692 [ 1812.967673] ? check_preemption_disabled+0x41/0x280 [ 1812.973160] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1812.978715] out_of_memory+0x1072/0x1390 [ 1812.982889] ? oom_killer_disable+0x270/0x270 [ 1812.987389] ? mutex_trylock+0x15f/0x1a0 [ 1812.991650] __alloc_pages_nodemask+0x23a2/0x2890 [ 1812.997124] ? find_get_entry+0x4cd/0x8a0 [ 1813.001271] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1813.006126] alloc_pages_current+0x193/0x2a0 [ 1813.010528] filemap_fault+0x146e/0x2180 [ 1813.014755] ext4_filemap_fault+0x84/0xb0 [ 1813.019442] __do_fault+0x10b/0x4b0 [ 1813.023067] __handle_mm_fault+0x273b/0x41c0 [ 1813.027622] ? vm_insert_page+0x9c0/0x9c0 [ 1813.031889] ? __fget+0x356/0x510 [ 1813.035524] ? check_preemption_disabled+0x41/0x280 [ 1813.040702] handle_mm_fault+0x436/0xb10 [ 1813.044763] __do_page_fault+0x68e/0xd60 [ 1813.048909] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1813.053912] ? spurious_fault+0x840/0x840 [ 1813.058144] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1813.062986] ? page_fault+0x8/0x30 [ 1813.066511] page_fault+0x1e/0x30 [ 1813.069944] RIP: 0033:0x46e380 [ 1813.073224] Code: Bad RIP value. [ 1813.076570] RSP: 002b:000000c00003b7f0 EFLAGS: 00010246 [ 1813.081933] RAX: 0000000000000000 RBX: 000000000000016f RCX: 000000000046e380 [ 1813.089271] RDX: 0000000000000080 RSI: 000000c00003b840 RDI: 0000000000000003 [ 1813.096527] RBP: 000000c00003be40 R08: 0000000000000000 R09: 0000000000000000 [ 1813.103780] R10: 000000000000016f R11: 0000000000000246 R12: 0000000000000003 [ 1813.111504] R13: 000000c000001200 R14: 0000000000000004 R15: 0000000000000000 [ 1813.131028] Mem-Info: [ 1813.133491] active_anon:136535 inactive_anon:29312 isolated_anon:0 [ 1813.133491] active_file:15 inactive_file:11 isolated_file:0 [ 1813.133491] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1813.133491] slab_reclaimable:23762 slab_unreclaimable:106635 [ 1813.133491] mapped:53546 shmem:29528 pagetables:9787 bounce:0 [ 1813.133491] free:15301 free_pcp:160 free_cma:0 [ 1813.168478] Node 0 active_anon:546116kB inactive_anon:117248kB active_file:56kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214184kB dirty:0kB writeback:0kB shmem:118112kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 444416kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1813.198547] Node 1 active_anon:24kB inactive_anon:0kB active_file:4kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1813.232827] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1813.284263] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1813.293162] Node 0 DMA32 free:23132kB min:35996kB low:44992kB high:53988kB active_anon:546116kB inactive_anon:117248kB active_file:56kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2763460kB mlocked:0kB kernel_stack:19680kB pagetables:39148kB bounce:0kB free_pcp:588kB local_pcp:28kB free_cma:0kB [ 1813.329816] lowmem_reserve[]: 0 0 1 1 1 [ 1813.333812] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1813.366409] lowmem_reserve[]: 0 0 0 0 0 [ 1813.370418] Node 1 Normal free:327068kB min:53876kB low:67344kB high:80812kB active_anon:24kB inactive_anon:0kB active_file:104kB inactive_file:2800kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:2728kB local_pcp:1468kB free_cma:0kB [ 1813.407295] lowmem_reserve[]: 0 0 0 0 0 [ 1813.412193] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10884kB [ 1813.431859] Node 0 DMA32: 2211*4kB (UME) 878*8kB (UME) 161*16kB (UM) 14*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 2*2048kB (M) 0*4096kB = 22988kB [ 1813.452852] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1813.465006] Node 1 Normal: 15*4kB (UE) 4*8kB (UME) 7*16kB (UME) 12*32kB (U) 21*64kB (UM) 20*128kB (UE) 22*256kB (UME) 19*512kB (U) 16*1024kB (UM) 14*2048kB (U) 84*4096kB (UM) = 408972kB [ 1813.517452] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1813.538452] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1813.550350] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1813.560966] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1813.589113] 31330 total pagecache pages [ 1813.593217] 0 pages in swap cache [ 1813.609244] Swap cache stats: add 0, delete 0, find 0/0 [ 1813.614638] Free swap = 0kB [ 1813.619275] Total swap = 0kB [ 1813.622305] 2097051 pages RAM [ 1813.625403] 0 pages HighMem/MovableOnly [ 1813.642081] 369647 pages reserved [ 1813.651905] 0 pages cma reserved [ 1813.656773] Out of memory (oom_kill_allocating_task): Kill process 8092 (syz-fuzzer) score 0 or sacrifice child [ 1813.671777] Killed process 8120 (syz-executor.3) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1813.683615] oom_reaper: reaped process 8120 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1815.625174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1815.644406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1815.654344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1815.662820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1815.672214] device bridge_slave_1 left promiscuous mode [ 1815.680815] bridge0: port 2(bridge_slave_1) entered disabled state [ 1815.690838] device bridge_slave_0 left promiscuous mode [ 1815.698703] bridge0: port 1(bridge_slave_0) entered disabled state [ 1815.715414] device veth1_macvtap left promiscuous mode [ 1815.722643] device veth0_macvtap left promiscuous mode [ 1815.729603] device veth1_vlan left promiscuous mode [ 1815.734667] device veth0_vlan left promiscuous mode [ 1815.891531] device hsr_slave_1 left promiscuous mode [ 1815.901168] device hsr_slave_0 left promiscuous mode [ 1815.924911] team0 (unregistering): Port device team_slave_1 removed [ 1815.944053] team0 (unregistering): Port device team_slave_0 removed [ 1815.961876] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1815.981663] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1816.043814] bond0 (unregistering): Released all slaves 15:36:53 executing program 0: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d00, &(0x7f0000000300)) 15:36:53 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x20, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="02002dbd2a88b198ff250a0000000600a87b89520000f78b7a21e13b45d309bc9028b63089cb7d6225466112af28c262c80879e4265127d438d4f6bff03faff13d19c4"], 0x1c}, 0x1, 0x0, 0x0, 0x24040040}, 0x4008004) r3 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) 15:36:53 executing program 1: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x4, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}, 0x2}) 15:36:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {0x9effffff}, {0x14}}}, 0x30}}, 0x0) 15:36:53 executing program 5: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x780c, 0x1, {0x1, @raw_data="ea3f5c1eff61699df5c3369a9c7d28ee54aad4b7309a9e8aba796369f680a621bd79a6b584a02d58da258c5e10fe7f2de41ee6dc7774e38c1d06f214c6be3f476e76017c8f1ecea5923da6f0a3bc814db523d60bf8294c8bd22fbba424a21e48983332259b4b44bdf9bc2950fde20af4ed0f3e68d6dc00ef66444f33cfb53082972b841d192a51342f7d18d21b22de13c357a25e874bc9ca56eae2fb04adc0059e6bbf6eff26e527ef646dec049f81e772217238246e65a4398312f8b4960ca4cebe34640c84a8b5"}}) 15:36:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {0xeaffffff}, {0x14}}}, 0x30}}, 0x0) 15:36:53 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @sdr}}) syz_open_dev$video(&(0x7f0000000000), 0x1ff, 0xa000) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0x6, 0x3f, 0x5, 0x7, 0x1000, 0xffffffffffffffff, 0x1, '\x00', r3, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x40) r4 = socket$kcm(0x29, 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000280)={0xa20000, 0x1df5, 0x9, r4, 0x0, &(0x7f0000000240)={0xa20929, 0x3, '\x00', @value=0x5}}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)={0x9, 0xb, 0x4, 0x70000, 0x2, {r1, r2/1000+10000}, {0x4, 0x1, 0x1, 0x0, 0xb4, 0x9, "0d1af197"}, 0x2, 0x3, @fd, 0xfff}) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f00000001c0)={0x9, "2bed63553a48d7b95a3a008baaa7aff48d290e5adeca70eb093fbcd32172ea21", 0x119a0f79f5fd5ec2, 0x0, 0x2, 0x2000, 0x20000, 0x8}) 15:36:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0xf0ffff, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:53 executing program 0: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r0, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x20080) r2 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x4}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000a00000008000300", @ANYRES32=r6], 0x28}}, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x8005) [ 1819.190098] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 15:36:53 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000000)={0x1, "61ff82e73a8c511202c8c0aadbd0b5da958506ca44978054096419564410a174", 0x1, 0x7d9, 0x4, 0x0, 0x2}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000001c0)={0x0, 0xffffffff, 0x2, {0x0, @raw_data="f97d718dc94a002087737deacc0347f6f18e6936da73ce3b2d258c9ec9a8147652a91dca8af8438cceff82093a55c6ce86d8f8292e9555d92c4307dcedd9ca35a28395ab27b857bd654dfb81d9b1fe5c8d1d39dcfbe34c0c6a21bfb346db688041874dad27f2f9b0ae3f69712e7b083db78a1cc5d5040948d3f70d57f9cab0f7c6a174a1b98b7f23aa96633cecbded4a6f34ca49a07dab18033d395ae882627435408e31f687bb03087e2e2c5ab5908e57f5b60736a596737d87af62600f1cc110ddcc5477c7ba8c"}}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x7, 0x6, 0x7, {0xb, @vbi={0x3f, 0x4, 0x2, 0x32314752, [0xf08, 0x100], [0xc1, 0xd2ac], 0x1}}, 0x1}) socket$nl_crypto(0x10, 0x3, 0x15) 15:36:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x34000, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x30000, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:36:53 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @raw_data="d777b8b7aaed9f752ca678c55c9556b32d209d45b2f494cf13369bd993f81752370f5a6fcbc1163a9062b72520fa8c9f31e13fa8565d35421564f2494aac5bbdc23e102c6d6b217443a431a340d92da90f073aeb39f47caa0e5a1172c66acffba78efab6baf7e3994a604aa16cb6e393f04c100bdf9249a9916302e27bbc11d1cedf6e9bad1fc5a5d1961946d5b16a1d50ab97d88ef505e13a3936c2a6af39101a1bc05c47c176149a9cfc3692b8094627d7d497d6af53d32b1c09ae6d6a6b1235dc80bee0ab140d"}}) [ 1820.260700] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1820.295337] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1820.303929] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1820.325341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1820.338150] device bridge_slave_1 left promiscuous mode [ 1820.343677] bridge0: port 2(bridge_slave_1) entered disabled state [ 1820.376242] device bridge_slave_0 left promiscuous mode [ 1820.381842] bridge0: port 1(bridge_slave_0) entered disabled state [ 1820.393330] device veth1_macvtap left promiscuous mode [ 1820.402056] device veth0_macvtap left promiscuous mode [ 1820.424184] device veth1_vlan left promiscuous mode [ 1820.429467] device veth0_vlan left promiscuous mode [ 1823.515026] Bluetooth: hci3: command 0x0409 tx timeout [ 1823.759841] Bluetooth: hci4: command 0x0409 tx timeout [ 1825.594921] Bluetooth: hci3: command 0x041b tx timeout [ 1825.839643] Bluetooth: hci4: command 0x041b tx timeout [ 1827.611752] device hsr_slave_1 left promiscuous mode [ 1827.621314] device hsr_slave_0 left promiscuous mode [ 1827.647951] team0 (unregistering): Port device team_slave_1 removed [ 1827.674790] Bluetooth: hci3: command 0x040f tx timeout [ 1827.701336] team0 (unregistering): Port device team_slave_0 removed [ 1827.719019] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1827.740708] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1827.874556] bond0 (unregistering): Released all slaves [ 1827.915294] Bluetooth: hci4: command 0x040f tx timeout [ 1828.686038] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1828.731019] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1828.784603] CPU: 0 PID: 8089 Comm: syz-fuzzer Not tainted 4.19.195-syzkaller #0 [ 1828.792251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1828.801704] Call Trace: [ 1828.804298] dump_stack+0x1fc/0x2ef [ 1828.807930] dump_header+0x15d/0xc3f [ 1828.811647] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1828.816835] ? ___ratelimit+0x319/0x590 [ 1828.820815] oom_kill_process.cold+0x10/0x692 [ 1828.825313] ? check_preemption_disabled+0x41/0x280 [ 1828.830334] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1828.835614] out_of_memory+0x1072/0x1390 [ 1828.839679] ? oom_killer_disable+0x270/0x270 [ 1828.844178] ? mutex_trylock+0x15f/0x1a0 [ 1828.848265] __alloc_pages_nodemask+0x23a2/0x2890 [ 1828.853143] ? find_get_entry+0x4cd/0x8a0 [ 1828.857307] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1828.862195] alloc_pages_current+0x193/0x2a0 [ 1828.866612] filemap_fault+0x146e/0x2180 [ 1828.870685] ext4_filemap_fault+0x84/0xb0 [ 1828.874831] __do_fault+0x10b/0x4b0 [ 1828.878463] __handle_mm_fault+0x273b/0x41c0 [ 1828.882871] ? vm_insert_page+0x9c0/0x9c0 [ 1828.887033] ? check_preemption_disabled+0x41/0x280 [ 1828.892117] handle_mm_fault+0x436/0xb10 [ 1828.896181] __do_page_fault+0x68e/0xd60 [ 1828.900244] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1828.905260] ? spurious_fault+0x840/0x840 [ 1828.909414] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1828.914255] ? page_fault+0x8/0x30 [ 1828.917795] page_fault+0x1e/0x30 [ 1828.921246] RIP: 0033:0x40c059 [ 1828.924433] Code: Bad RIP value. [ 1828.927793] RSP: 002b:000000c00003ded8 EFLAGS: 00010212 [ 1828.933151] RAX: ffffffffffffff92 RBX: 000000c00002e000 RCX: 000000000046e163 [ 1828.940425] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00000000018575b8 [ 1828.947870] RBP: 000000c00003df00 R08: 0000000000000000 R09: 0000000000000000 [ 1828.955597] R10: 000000c00003deb8 R11: 0000000000000206 R12: 000000000043b6a0 [ 1828.962861] R13: 0000000000000000 R14: 000000000094b8c4 R15: 0000000000000000 [ 1829.022917] Mem-Info: [ 1829.032504] active_anon:111173 inactive_anon:29305 isolated_anon:0 [ 1829.032504] active_file:15 inactive_file:14 isolated_file:0 [ 1829.032504] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1829.032504] slab_reclaimable:16257 slab_unreclaimable:116391 [ 1829.032504] mapped:53586 shmem:29519 pagetables:6849 bounce:0 [ 1829.032504] free:25011 free_pcp:62 free_cma:0 [ 1829.087504] Node 0 active_anon:444492kB inactive_anon:117200kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214344kB dirty:0kB writeback:0kB shmem:118044kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 348160kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1829.160538] Node 1 active_anon:200kB inactive_anon:20kB active_file:20kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:32kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1829.202707] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1829.242566] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1829.263405] Node 0 DMA32 free:35760kB min:35996kB low:44992kB high:53988kB active_anon:444492kB inactive_anon:117200kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2763460kB mlocked:0kB kernel_stack:15776kB pagetables:27396kB bounce:0kB free_pcp:196kB local_pcp:196kB free_cma:0kB [ 1829.312504] lowmem_reserve[]: 0 0 1 1 1 [ 1829.323462] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1829.367782] lowmem_reserve[]: 0 0 0 0 0 [ 1829.371796] Node 1 Normal free:53308kB min:53876kB low:67344kB high:80812kB active_anon:200kB inactive_anon:20kB active_file:20kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 1829.420278] lowmem_reserve[]: 0 0 0 0 0 [ 1829.424278] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10968kB [ 1829.453152] Node 0 DMA32: 4174*4kB (UME) 1641*8kB (UME) 301*16kB (UME) 32*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35664kB [ 1829.481361] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1829.498307] Node 1 Normal: 31*4kB (UME) 27*8kB (UME) 25*16kB (UME) 16*32kB (UM) 14*64kB (M) 10*128kB (UME) 4*256kB (ME) 4*512kB (UM) 2*1024kB (M) 2*2048kB (M) 10*4096kB (UM) = 53604kB [ 1829.540661] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1829.549602] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1829.558242] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1829.577880] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1829.595607] 29557 total pagecache pages [ 1829.599676] 0 pages in swap cache [ 1829.603131] Swap cache stats: add 0, delete 0, find 0/0 [ 1829.610269] Free swap = 0kB [ 1829.613877] Total swap = 0kB [ 1829.617500] 2097051 pages RAM [ 1829.621240] 0 pages HighMem/MovableOnly [ 1829.625901] 369647 pages reserved [ 1829.629351] 0 pages cma reserved [ 1829.632718] Out of memory (oom_kill_allocating_task): Kill process 8089 (syz-fuzzer) score 0 or sacrifice child [ 1829.654331] Killed process 13064 (syz-executor.4) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1829.746128] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1829.757963] Bluetooth: hci3: command 0x0419 tx timeout [ 1829.780355] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1829.802470] CPU: 1 PID: 8089 Comm: syz-fuzzer Not tainted 4.19.195-syzkaller #0 [ 1829.810216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1829.819658] Call Trace: [ 1829.822252] dump_stack+0x1fc/0x2ef [ 1829.825940] dump_header+0x15d/0xc3f [ 1829.829755] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1829.834862] ? ___ratelimit+0x319/0x590 [ 1829.838840] oom_kill_process.cold+0x10/0x692 [ 1829.843340] ? check_preemption_disabled+0x41/0x280 [ 1829.848359] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1829.853638] out_of_memory+0x1072/0x1390 [ 1829.857713] ? oom_killer_disable+0x270/0x270 [ 1829.862205] ? mutex_trylock+0x15f/0x1a0 [ 1829.866267] __alloc_pages_nodemask+0x23a2/0x2890 [ 1829.871119] ? find_get_entry+0x4cd/0x8a0 [ 1829.875280] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1829.880235] alloc_pages_current+0x193/0x2a0 [ 1829.884652] filemap_fault+0x146e/0x2180 [ 1829.888735] ext4_filemap_fault+0x84/0xb0 [ 1829.892969] __do_fault+0x10b/0x4b0 [ 1829.896605] __handle_mm_fault+0x273b/0x41c0 [ 1829.901009] ? vm_insert_page+0x9c0/0x9c0 [ 1829.905162] ? check_preemption_disabled+0x41/0x280 [ 1829.910181] handle_mm_fault+0x436/0xb10 [ 1829.914254] __do_page_fault+0x68e/0xd60 [ 1829.918316] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1829.923336] ? spurious_fault+0x840/0x840 [ 1829.927476] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1829.932323] ? page_fault+0x8/0x30 [ 1829.935871] page_fault+0x1e/0x30 [ 1829.939317] RIP: 0033:0x40c059 [ 1829.942502] Code: Bad RIP value. [ 1829.945852] RSP: 002b:000000c00003ded8 EFLAGS: 00010212 [ 1829.951208] RAX: ffffffffffffff92 RBX: 000000c00002e000 RCX: 000000000046e163 [ 1829.958472] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00000000018575b8 [ 1829.965742] RBP: 000000c00003df00 R08: 0000000000000000 R09: 0000000000000000 [ 1829.973009] R10: 000000c00003deb8 R11: 0000000000000206 R12: 000000000043b6a0 [ 1829.980278] R13: 0000000000000000 R14: 000000000094b8c4 R15: 0000000000000000 [ 1829.993450] Mem-Info: [ 1830.007090] Bluetooth: hci4: command 0x0419 tx timeout [ 1830.013780] active_anon:111150 inactive_anon:29305 isolated_anon:0 [ 1830.013780] active_file:4 inactive_file:12 isolated_file:0 [ 1830.013780] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1830.013780] slab_reclaimable:16229 slab_unreclaimable:116186 [ 1830.013780] mapped:44917 shmem:29519 pagetables:6849 bounce:0 [ 1830.013780] free:25109 free_pcp:153 free_cma:0 [ 1830.051771] Node 0 active_anon:444412kB inactive_anon:117200kB active_file:16kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:179664kB dirty:0kB writeback:0kB shmem:118044kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 348160kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1830.086773] Node 1 active_anon:188kB inactive_anon:20kB active_file:0kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:32kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1830.125537] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1830.156993] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1830.162064] Node 0 DMA32 free:37820kB min:35996kB low:44992kB high:53988kB active_anon:444412kB inactive_anon:117200kB active_file:344kB inactive_file:896kB unevictable:0kB writepending:0kB present:3129332kB managed:2763460kB mlocked:0kB kernel_stack:15776kB pagetables:27396kB bounce:0kB free_pcp:1888kB local_pcp:608kB free_cma:0kB [ 1830.192967] lowmem_reserve[]: 0 0 1 1 1 [ 1830.197324] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1830.224035] lowmem_reserve[]: 0 0 0 0 0 [ 1830.228074] Node 1 Normal free:53564kB min:53876kB low:67344kB high:80812kB active_anon:188kB inactive_anon:20kB active_file:0kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 1830.257822] lowmem_reserve[]: 0 0 0 0 0 [ 1830.261818] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10968kB [ 1830.275157] Node 0 DMA32: 3501*4kB (UME) 2029*8kB (UME) 309*16kB (UME) 35*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36300kB [ 1830.291291] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1830.305678] Node 1 Normal: 31*4kB (UME) 26*8kB (UME) 24*16kB (UME) 17*32kB (UM) 14*64kB (M) 10*128kB (UME) 4*256kB (ME) 4*512kB (UM) 2*1024kB (M) 2*2048kB (M) 10*4096kB (UM) = 53612kB [ 1830.324304] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1830.335055] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1830.343644] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1830.371612] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1830.382014] 30123 total pagecache pages [ 1830.403886] 0 pages in swap cache [ 1830.410273] Swap cache stats: add 0, delete 0, find 0/0 [ 1830.416199] Free swap = 0kB [ 1830.419294] Total swap = 0kB [ 1830.422312] 2097051 pages RAM [ 1830.425515] 0 pages HighMem/MovableOnly [ 1830.430350] 369647 pages reserved [ 1830.434312] 0 pages cma reserved [ 1830.447971] Out of memory (oom_kill_allocating_task): Kill process 8089 (syz-fuzzer) score 0 or sacrifice child [ 1830.458535] Killed process 14003 (syz-executor.3) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1830.469098] oom_reaper: reaped process 14003 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1831.048847] IPVS: ftp: loaded support on port[0] = 21 [ 1831.769205] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1831.843035] systemd-journal cpuset=/ mems_allowed=0-1 [ 1831.861479] CPU: 1 PID: 4692 Comm: systemd-journal Not tainted 4.19.195-syzkaller #0 [ 1831.869715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1831.879967] Call Trace: [ 1831.882564] dump_stack+0x1fc/0x2ef [ 1831.886193] dump_header+0x15d/0xc3f [ 1831.889909] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1831.895005] ? ___ratelimit+0x319/0x590 [ 1831.898968] oom_kill_process.cold+0x10/0x692 [ 1831.903647] ? check_preemption_disabled+0x41/0x280 [ 1831.908663] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1831.914320] out_of_memory+0x1072/0x1390 [ 1831.918409] ? oom_killer_disable+0x270/0x270 [ 1831.922894] ? mutex_trylock+0x15f/0x1a0 [ 1831.926943] __alloc_pages_nodemask+0x23a2/0x2890 [ 1831.931769] ? find_get_entry+0x4cd/0x8a0 [ 1831.935902] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1831.940742] alloc_pages_current+0x193/0x2a0 [ 1831.945132] filemap_fault+0x146e/0x2180 [ 1831.949269] ext4_filemap_fault+0x84/0xb0 [ 1831.953401] __do_fault+0x10b/0x4b0 [ 1831.957020] __handle_mm_fault+0x273b/0x41c0 [ 1831.961498] ? vm_insert_page+0x9c0/0x9c0 [ 1831.965639] ? check_preemption_disabled+0x41/0x280 [ 1831.970710] handle_mm_fault+0x436/0xb10 [ 1831.974772] __do_page_fault+0x68e/0xd60 [ 1831.978884] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1831.983884] ? spurious_fault+0x840/0x840 [ 1831.988019] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1831.992942] ? page_fault+0x8/0x30 [ 1831.996592] page_fault+0x1e/0x30 [ 1832.000082] RIP: 0033:0x7fa02c2b9b2b [ 1832.003809] Code: Bad RIP value. [ 1832.007156] RSP: 002b:00007ffe048a23f0 EFLAGS: 00010246 [ 1832.012584] RAX: 00005584f945c270 RBX: 00005584f945c250 RCX: ffffffffffffffff [ 1832.020102] RDX: 0000000000000001 RSI: 00000000ffffffff RDI: 00005584f945c270 [ 1832.027648] RBP: 0000000000000000 R08: 0000000000000041 R09: 0000000000000018 [ 1832.034930] R10: 0000000000000069 R11: 0000000000000000 R12: 00000000ffffffff [ 1832.042379] R13: 00000000fffffffe R14: 00007ffe048a2700 R15: 00005584f9468b70 [ 1832.067660] Mem-Info: [ 1832.070123] active_anon:111175 inactive_anon:29305 isolated_anon:0 [ 1832.070123] active_file:26 inactive_file:12 isolated_file:0 [ 1832.070123] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1832.070123] slab_reclaimable:16152 slab_unreclaimable:116365 [ 1832.070123] mapped:36185 shmem:29519 pagetables:6797 bounce:0 [ 1832.070123] free:25005 free_pcp:62 free_cma:0 [ 1832.117637] Node 0 active_anon:444604kB inactive_anon:117200kB active_file:112kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:144740kB dirty:0kB writeback:0kB shmem:118044kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 348160kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1832.151716] Node 1 active_anon:96kB inactive_anon:20kB active_file:0kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:32kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1832.185975] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1832.216425] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1832.221473] Node 0 DMA32 free:35304kB min:35996kB low:44992kB high:53988kB active_anon:444604kB inactive_anon:117200kB active_file:112kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2763460kB mlocked:0kB kernel_stack:15744kB pagetables:27188kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 1832.253734] lowmem_reserve[]: 0 0 1 1 1 [ 1832.257947] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1832.284306] lowmem_reserve[]: 0 0 0 0 0 [ 1832.288295] Node 1 Normal free:53740kB min:53876kB low:67344kB high:80812kB active_anon:96kB inactive_anon:20kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1832.317132] lowmem_reserve[]: 0 0 0 0 0 [ 1832.321201] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10968kB [ 1832.338993] Node 0 DMA32: 4046*4kB (UME) 1634*8kB (UME) 308*16kB (UME) 35*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35304kB [ 1832.353201] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1832.366370] Node 1 Normal: 33*4kB (UME) 23*8kB (UME) 17*16kB (UME) 15*32kB (UM) 9*64kB (M) 11*128kB (UME) 4*256kB (ME) 5*512kB (UM) 2*1024kB (M) 2*2048kB (M) 10*4096kB (UM) = 53740kB [ 1832.395844] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1832.407002] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1832.416558] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1832.436742] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1832.454476] 29554 total pagecache pages [ 1832.458472] 0 pages in swap cache [ 1832.461918] Swap cache stats: add 0, delete 0, find 0/0 [ 1832.479133] Free swap = 0kB [ 1832.482276] Total swap = 0kB [ 1832.489273] 2097051 pages RAM [ 1832.492388] 0 pages HighMem/MovableOnly [ 1832.503537] 369647 pages reserved [ 1832.510337] 0 pages cma reserved [ 1832.514076] Out of memory (oom_kill_allocating_task): Kill process 4692 (systemd-journal) score 0 or sacrifice child [ 1832.539542] Killed process 4692 (systemd-journal) total-vm:70684kB, anon-rss:524kB, file-rss:0kB, shmem-rss:5452kB [ 1832.551486] oom_reaper: reaped process 4692 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:5452kB [ 1832.571901] kworker/u4:5 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1832.588691] kworker/u4:5 cpuset=/ mems_allowed=0-1 [ 1832.620569] CPU: 0 PID: 14043 Comm: kworker/u4:5 Not tainted 4.19.195-syzkaller #0 [ 1832.628474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1832.638092] Call Trace: [ 1832.640688] dump_stack+0x1fc/0x2ef [ 1832.644939] dump_header+0x15d/0xc3f [ 1832.649009] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1832.654363] ? ___ratelimit+0x319/0x590 [ 1832.658327] oom_kill_process.cold+0x10/0x692 [ 1832.662807] ? oom_badness.part.0+0x135/0x6e0 [ 1832.667296] ? lock_downgrade+0x720/0x720 [ 1832.671447] ? check_preemption_disabled+0x41/0x280 [ 1832.676857] out_of_memory+0x34d/0x1390 [ 1832.680842] ? oom_killer_disable+0x270/0x270 [ 1832.685344] ? mutex_trylock+0x15f/0x1a0 [ 1832.689651] __alloc_pages_nodemask+0x23a2/0x2890 [ 1832.694504] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1832.699353] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1832.704370] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1832.708955] ? ____cache_alloc_node+0x156/0x1d0 [ 1832.713975] ? cache_grow_begin+0x64/0x8a0 [ 1832.718551] cache_grow_begin+0xa4/0x8a0 [ 1832.722614] fallback_alloc+0x213/0x2e0 [ 1832.726594] kmem_cache_alloc+0x1e4/0x370 [ 1832.730724] getname_kernel+0x4e/0x370 [ 1832.734610] call_usermodehelper_exec_async+0x500/0x6a0 [ 1832.740339] ? umh_complete+0x90/0x90 [ 1832.744219] ret_from_fork+0x24/0x30 [ 1832.752117] Mem-Info: [ 1832.771118] active_anon:111050 inactive_anon:29305 isolated_anon:0 [ 1832.771118] active_file:39 inactive_file:5 isolated_file:0 [ 1832.771118] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1832.771118] slab_reclaimable:16149 slab_unreclaimable:116359 [ 1832.771118] mapped:34833 shmem:29519 pagetables:6797 bounce:0 [ 1832.771118] free:25068 free_pcp:99 free_cma:0 [ 1832.813751] Node 0 active_anon:444112kB inactive_anon:117192kB active_file:120kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139268kB dirty:0kB writeback:0kB shmem:118044kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 348160kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1832.861055] Node 1 active_anon:96kB inactive_anon:20kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:32kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1832.892584] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1832.928766] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1832.933834] Node 0 DMA32 free:35840kB min:35996kB low:44992kB high:53988kB active_anon:444088kB inactive_anon:117192kB active_file:168kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2763460kB mlocked:0kB kernel_stack:15744kB pagetables:27064kB bounce:0kB free_pcp:396kB local_pcp:396kB free_cma:0kB [ 1832.978081] lowmem_reserve[]: 0 0 1 1 1 [ 1832.982356] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1833.012002] lowmem_reserve[]: 0 0 0 0 0 [ 1833.022700] Node 1 Normal free:53740kB min:53876kB low:67344kB high:80812kB active_anon:96kB inactive_anon:20kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1833.059350] lowmem_reserve[]: 0 0 0 0 0 [ 1833.063366] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10968kB [ 1833.081552] Node 0 DMA32: 4114*4kB (UME) 1651*8kB (UME) 310*16kB (UME) 38*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35840kB [ 1833.100802] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1833.125865] Node 1 Normal: 33*4kB (UME) 23*8kB (UME) 17*16kB (UME) 15*32kB (UM) 9*64kB (M) 11*128kB (UME) 4*256kB (ME) 5*512kB (UM) 2*1024kB (M) 2*2048kB (M) 10*4096kB (UM) = 53740kB [ 1833.153042] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1833.161967] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1833.171894] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1833.187310] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1833.197495] 29554 total pagecache pages [ 1833.201540] 0 pages in swap cache [ 1833.208477] Swap cache stats: add 0, delete 0, find 0/0 [ 1833.214057] Free swap = 0kB [ 1833.219870] Total swap = 0kB [ 1833.223099] 2097051 pages RAM [ 1833.230073] 0 pages HighMem/MovableOnly [ 1833.237637] 369647 pages reserved [ 1833.241264] 0 pages cma reserved [ 1833.248160] Out of memory: Kill process 13960 (syz-executor.5) score 1005 or sacrifice child [ 1833.260301] Killed process 13964 (syz-executor.5) total-vm:93252kB, anon-rss:2192kB, file-rss:34816kB, shmem-rss:0kB [ 1833.273781] oom_reaper: reaped process 13964 (syz-executor.5), now anon-rss:0kB, file-rss:34812kB, shmem-rss:0kB [ 1833.363478] systemd-rfkill invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 1833.404240] systemd-rfkill cpuset=/ mems_allowed=0-1 [ 1833.409795] CPU: 1 PID: 14037 Comm: systemd-rfkill Not tainted 4.19.195-syzkaller #0 [ 1833.417770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1833.427148] Call Trace: [ 1833.429748] dump_stack+0x1fc/0x2ef [ 1833.433377] dump_header+0x15d/0xc3f [ 1833.437093] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1833.442457] ? ___ratelimit+0x319/0x590 [ 1833.446431] oom_kill_process.cold+0x10/0x692 [ 1833.451280] ? check_preemption_disabled+0x41/0x280 [ 1833.456302] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1833.461754] out_of_memory+0x1072/0x1390 [ 1833.465821] ? oom_killer_disable+0x270/0x270 [ 1833.470414] ? mutex_trylock+0x15f/0x1a0 [ 1833.474565] __alloc_pages_nodemask+0x23a2/0x2890 [ 1833.479441] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1833.484374] ? flush_tlb_mm_range+0x185/0x320 [ 1833.488883] ? do_raw_spin_unlock+0x171/0x230 [ 1833.493466] alloc_pages_current+0x193/0x2a0 [ 1833.497874] __pmd_alloc+0x37/0x440 [ 1833.501500] move_page_tables+0x14d9/0x1b50 [ 1833.505834] shift_arg_pages+0x1a7/0x450 [ 1833.509892] ? mprotect_fixup+0x54c/0x9b0 [ 1833.514047] ? put_arg_page+0x210/0x210 [ 1833.518016] ? get_random_u32+0xf3/0x1e0 [ 1833.522075] ? change_protection+0xc0/0xc0 [ 1833.526328] ? lock_downgrade+0x720/0x720 [ 1833.530485] ? lock_acquire+0x170/0x3c0 [ 1833.534457] ? get_random_u32+0x46/0x1e0 [ 1833.538533] ? lock_acquire+0x170/0x3c0 [ 1833.542516] ? setup_arg_pages+0x297/0x790 [ 1833.546765] setup_arg_pages+0x62a/0x790 [ 1833.550836] ? shift_arg_pages+0x450/0x450 [ 1833.555080] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1833.559688] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1833.564796] load_elf_binary+0xba0/0x5050 [ 1833.568952] ? do_raw_read_unlock+0x3b/0x70 [ 1833.573384] ? _raw_read_unlock+0x29/0x40 [ 1833.577537] ? elf_core_dump+0x4c10/0x4c10 [ 1833.581947] ? lock_acquire+0x170/0x3c0 [ 1833.585918] ? search_binary_handler.part.0+0x108/0x4e0 [ 1833.591281] ? ima_file_mmap+0x130/0x130 [ 1833.595348] search_binary_handler.part.0+0xf9/0x4e0 [ 1833.600472] __do_execve_file+0x1357/0x2360 [ 1833.604238] syz-executor.5: vmalloc: allocation failure, allocated 872841216 of 2325655552 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1833.604796] ? open_exec+0x70/0x70 [ 1833.622035] ? check_preemption_disabled+0x41/0x280 [ 1833.627050] ? __phys_addr+0x9a/0x110 [ 1833.630844] ? __phys_addr_symbol+0x2c/0x70 [ 1833.635169] ? strncpy_from_user+0x2a2/0x350 [ 1833.639582] do_execve+0x35/0x50 [ 1833.642952] __x64_sys_execve+0x7c/0xa0 [ 1833.646928] do_syscall_64+0xf9/0x620 [ 1833.650074] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1833.650730] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1833.660995] RIP: 0033:0x7f345e086647 [ 1833.664705] Code: Bad RIP value. [ 1833.668079] RSP: 002b:00007fffc9c4c618 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1833.675782] RAX: ffffffffffffffda RBX: 000056264d4521e0 RCX: 00007f345e086647 [ 1833.683049] RDX: 000056264d3dba70 RSI: 000056264d3360f0 RDI: 000056264d3569c0 [ 1833.690332] RBP: 00007fffc9c4c780 R08: 000000000000fefe R09: 0000000000000030 [ 1833.697595] R10: 000056264d387bc0 R11: 0000000000000246 R12: 000056264d328458 [ 1833.704861] R13: 0000000000000000 R14: 000056264d3360f0 R15: 00007fffc9c4c860 [ 1833.712164] CPU: 0 PID: 13964 Comm: syz-executor.5 Not tainted 4.19.195-syzkaller #0 [ 1833.720058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1833.729506] Call Trace: [ 1833.732101] dump_stack+0x1fc/0x2ef [ 1833.735820] warn_alloc.cold+0x7b/0x18f [ 1833.739795] ? zone_watermark_ok_safe+0x260/0x260 [ 1833.744680] ? retint_kernel+0x2d/0x2d [ 1833.748575] ? policy_node+0x14/0x140 [ 1833.752421] __vmalloc_area_node+0x4fd/0x780 [ 1833.756831] ? __vmalloc_node_range+0x180/0x180 [ 1833.761505] ? _raw_spin_unlock+0x29/0x40 [ 1833.765690] ? __get_vm_area_node+0x2e2/0x3a0 [ 1833.770203] __vmalloc_node_range+0xed/0x180 [ 1833.783328] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1833.787662] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1833.792477] Mem-Info: [ 1833.793022] vmalloc_user+0x70/0xe0 [ 1833.795467] active_anon:110465 inactive_anon:29303 isolated_anon:0 [ 1833.795467] active_file:32 inactive_file:7 isolated_file:0 [ 1833.795467] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1833.795467] slab_reclaimable:16149 slab_unreclaimable:116359 [ 1833.795467] mapped:34817 shmem:29519 pagetables:6766 bounce:0 [ 1833.795467] free:13883 free_pcp:124 free_cma:0 [ 1833.799125] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1833.833707] Node 0 active_anon:441764kB inactive_anon:117192kB active_file:120kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139268kB dirty:0kB writeback:0kB shmem:118044kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 348160kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1833.837963] vb2_vmalloc_alloc+0xb3/0x2f0 [ 1833.837983] __vb2_queue_alloc+0x472/0xe60 [ 1833.867033] Node 1 active_anon:96kB inactive_anon:20kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:32kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1833.871144] vb2_core_create_bufs+0x273/0x7e0 [ 1833.871157] ? __vb2_queue_free+0x870/0x870 [ 1833.871177] ? mutex_trylock+0x1a0/0x1a0 [ 1833.871198] vb2_create_bufs+0x332/0x620 [ 1833.871215] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1833.871228] ? __video_do_ioctl+0x632/0xcd0 [ 1833.871241] ? mutex_trylock+0x1a0/0x1a0 [ 1833.871257] ? mark_held_locks+0xf0/0xf0 [ 1833.871277] vb2_ioctl_create_bufs+0x20d/0x360 [ 1833.871291] ? memset+0x20/0x40 [ 1833.871308] v4l_create_bufs+0xb2/0x160 [ 1833.871326] __video_do_ioctl+0x49a/0xcd0 [ 1833.871348] ? v4l_querycap+0x340/0x340 [ 1833.871367] ? __might_fault+0x192/0x1d0 [ 1833.871385] ? v4l_querycap+0x340/0x340 [ 1833.871400] video_usercopy+0x13f/0xfa0 [ 1833.871421] ? v4l_enumstd+0x60/0x60 [ 1833.871436] ? do_futex+0x171/0x1880 [ 1833.871452] ? mark_held_locks+0xf0/0xf0 [ 1833.871470] ? debug_check_no_obj_freed+0x201/0x490 [ 1833.871493] ? video_usercopy+0xfa0/0xfa0 [ 1833.871505] v4l2_ioctl+0x147/0x1a0 [ 1833.871517] ? video_devdata+0xa0/0xa0 [ 1833.871532] do_vfs_ioctl+0xcdb/0x12e0 [ 1833.871548] ? lock_downgrade+0x720/0x720 [ 1833.871563] ? check_preemption_disabled+0x41/0x280 [ 1833.871578] ? ioctl_preallocate+0x200/0x200 [ 1833.871596] ? __fget+0x356/0x510 [ 1833.871613] ? do_dup2+0x450/0x450 [ 1833.871627] ? __se_sys_futex+0x298/0x3b0 [ 1833.871650] ksys_ioctl+0x9b/0xc0 [ 1833.871665] __x64_sys_ioctl+0x6f/0xb0 [ 1833.871680] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1833.871694] do_syscall_64+0xf9/0x620 [ 1833.871713] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1833.871725] RIP: 0033:0x4665d9 [ 1833.871738] Code: Bad RIP value. [ 1833.871745] RSP: 002b:00007ffae15d4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1833.871758] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1833.871766] RDX: 0000000020000100 RSI: 00000000c100565c RDI: 0000000000000003 [ 1833.871774] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1833.871781] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 [ 1833.871790] R13: 00007ffe2faa9bdf R14: 00007ffae15d4300 R15: 0000000000022000 [ 1833.880281] Mem-Info: [ 1833.932715] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1834.011090] active_anon:110458 inactive_anon:29303 isolated_anon:0 [ 1834.011090] active_file:17 inactive_file:16 isolated_file:0 [ 1834.011090] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1834.011090] slab_reclaimable:16149 slab_unreclaimable:116387 [ 1834.011090] mapped:34817 shmem:29519 pagetables:6731 bounce:0 [ 1834.011090] free:13908 free_pcp:128 free_cma:0 [ 1834.025033] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1834.122945] Node 0 active_anon:441740kB inactive_anon:117192kB active_file:64kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139268kB dirty:0kB writeback:0kB shmem:118044kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 346112kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1834.218480] Node 0 DMA32 free:17964kB min:35996kB low:44992kB high:53988kB active_anon:441740kB inactive_anon:117192kB active_file:60kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2763460kB mlocked:0kB kernel_stack:15680kB pagetables:26924kB bounce:0kB free_pcp:256kB local_pcp:244kB free_cma:0kB [ 1834.278872] lowmem_reserve[]: 0 0 1 1 1 [ 1834.303294] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1834.348090] lowmem_reserve[]: 0 0 0 0 0 [ 1834.352089] Node 1 Normal free:26780kB min:53876kB low:67344kB high:80812kB active_anon:92kB inactive_anon:20kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 1834.403891] lowmem_reserve[]: 0 0 0 0 0 [ 1834.411202] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10884kB [ 1834.443766] Node 0 DMA32: 2136*4kB (UME) 902*8kB (UME) 124*16kB (UME) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17744kB [ 1834.478801] Node 1 active_anon:92kB inactive_anon:20kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:32kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1834.499712] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1834.509911] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1834.545383] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1834.550425] Node 0 DMA32 free:17744kB min:35996kB low:44992kB high:53988kB active_anon:441740kB inactive_anon:117192kB active_file:144kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2763460kB mlocked:0kB kernel_stack:15680kB pagetables:26924kB bounce:0kB free_pcp:484kB local_pcp:236kB free_cma:0kB [ 1834.580409] Node 1 Normal: 29*4kB (ME) 21*8kB (ME) 16*16kB (UME) 14*32kB (UM) 9*64kB (UM) 11*128kB (ME) 5*256kB (UME) 4*512kB (M) 2*1024kB (M) 3*2048kB (UM) 3*4096kB (M) = 26780kB [ 1834.580492] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1834.580507] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1834.580516] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1834.580524] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1834.580530] 29552 total pagecache pages [ 1834.580542] 0 pages in swap cache [ 1834.580549] Swap cache stats: add 0, delete 0, find 0/0 [ 1834.580554] Free swap = 0kB [ 1834.580558] Total swap = 0kB [ 1834.580616] 2097051 pages RAM [ 1834.580621] 0 pages HighMem/MovableOnly [ 1834.580626] 369647 pages reserved [ 1834.580630] 0 pages cma reserved [ 1834.580641] Out of memory (oom_kill_allocating_task): Kill process 14037 (systemd-rfkill) score 0 or sacrifice child [ 1834.581234] Killed process 14037 (systemd-rfkill) total-vm:4kB, anon-rss:4kB, file-rss:0kB, shmem-rss:0kB [ 1834.624147] lowmem_reserve[]: 0 0 1 1 1 [ 1834.663267] systemd-rfkill: page allocation failure: order:0, mode:0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null) [ 1834.704100] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1834.709617] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1834.764938] lowmem_reserve[]: 0 0 0 0 0 [ 1834.769223] Node 1 Normal free:26780kB min:53876kB low:67344kB high:80812kB active_anon:92kB inactive_anon:20kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 1834.773817] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1834.803904] systemd-rfkill cpuset= [ 1834.820739] lowmem_reserve[]: 0 0 0 0 0 [ 1834.828348] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10884kB [ 1834.834360] / mems_allowed=0-1 [ 1834.857593] Node 0 DMA32: 2136*4kB (UME) 902*8kB (UME) 124*16kB (UME) 1*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17776kB [ 1834.881536] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1834.893183] Node 1 Normal: 29*4kB (ME) 21*8kB (ME) 16*16kB (UME) 14*32kB (UM) 9*64kB (UM) 11*128kB (ME) 5*256kB (UME) 4*512kB (M) 2*1024kB (M) 3*2048kB (UM) 3*4096kB (M) = 26780kB [ 1834.896124] CPU: 1 PID: 14037 Comm: systemd-rfkill Not tainted 4.19.195-syzkaller #0 [ 1834.917371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1834.924106] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1834.926731] Call Trace: [ 1834.938480] dump_stack+0x1fc/0x2ef [ 1834.942112] warn_alloc.cold+0x7b/0x18f [ 1834.946298] ? zone_watermark_ok_safe+0x260/0x260 [ 1834.951152] ? mark_oom_victim+0x68/0x420 [ 1834.955325] ? wait_for_completion_io+0x10/0x10 [ 1834.960084] __alloc_pages_nodemask+0x232f/0x2890 [ 1834.964090] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1834.964949] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1834.973503] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1834.978330] ? flush_tlb_mm_range+0x185/0x320 [ 1834.978355] ? do_raw_spin_unlock+0x171/0x230 [ 1834.978373] alloc_pages_current+0x193/0x2a0 [ 1834.978388] __pmd_alloc+0x37/0x440 [ 1834.978408] move_page_tables+0x14d9/0x1b50 [ 1834.978436] shift_arg_pages+0x1a7/0x450 [ 1834.978448] ? mprotect_fixup+0x54c/0x9b0 [ 1834.978459] ? put_arg_page+0x210/0x210 [ 1834.978471] ? get_random_u32+0xf3/0x1e0 [ 1834.978485] ? change_protection+0xc0/0xc0 [ 1834.978500] ? lock_downgrade+0x720/0x720 [ 1834.978512] ? lock_acquire+0x170/0x3c0 [ 1834.978521] ? get_random_u32+0x46/0x1e0 [ 1834.978536] ? lock_acquire+0x170/0x3c0 [ 1834.978548] ? setup_arg_pages+0x297/0x790 [ 1834.978566] setup_arg_pages+0x62a/0x790 [ 1834.978583] ? shift_arg_pages+0x450/0x450 [ 1834.978598] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1834.978613] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1834.978630] load_elf_binary+0xba0/0x5050 [ 1834.978652] ? do_raw_read_unlock+0x3b/0x70 [ 1834.978665] ? _raw_read_unlock+0x29/0x40 [ 1834.978682] ? elf_core_dump+0x4c10/0x4c10 [ 1834.978695] ? lock_acquire+0x170/0x3c0 [ 1834.978706] ? search_binary_handler.part.0+0x108/0x4e0 [ 1834.978719] ? ima_file_mmap+0x130/0x130 [ 1834.978736] search_binary_handler.part.0+0xf9/0x4e0 [ 1834.978753] __do_execve_file+0x1357/0x2360 [ 1834.978769] ? open_exec+0x70/0x70 [ 1834.978788] ? check_preemption_disabled+0x41/0x280 [ 1835.054052] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1835.055010] ? __phys_addr+0x9a/0x110 [ 1835.059044] 29552 total pagecache pages [ 1835.063276] ? __phys_addr_symbol+0x2c/0x70 [ 1835.094037] 0 pages in swap cache [ 1835.099274] ? strncpy_from_user+0x2a2/0x350 [ 1835.103308] Swap cache stats: add 0, delete 0, find 0/0 [ 1835.108392] do_execve+0x35/0x50 [ 1835.108410] __x64_sys_execve+0x7c/0xa0 [ 1835.108424] do_syscall_64+0xf9/0x620 [ 1835.108441] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1835.108453] RIP: 0033:0x7f345e086647 [ 1835.108468] Code: Bad RIP value. [ 1835.108474] RSP: 002b:00007fffc9c4c618 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1835.108486] RAX: ffffffffffffffda RBX: 000056264d4521e0 RCX: 00007f345e086647 [ 1835.108498] RDX: 000056264d3dba70 RSI: 000056264d3360f0 RDI: 000056264d3569c0 [ 1835.144870] Free swap = 0kB [ 1835.145597] RBP: 00007fffc9c4c780 R08: 000000000000fefe R09: 0000000000000030 [ 1835.145608] R10: 000056264d387bc0 R11: 0000000000000246 R12: 000056264d328458 [ 1835.150346] Total swap = 0kB [ 1835.155776] R13: 0000000000000000 R14: 000056264d3360f0 R15: 00007fffc9c4c860 [ 1835.184034] CPU: 1 PID: 8089 Comm: syz-fuzzer Not tainted 4.19.195-syzkaller #0 [ 1835.237290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1835.246634] Call Trace: [ 1835.246894] 2097051 pages RAM [ 1835.249308] dump_stack+0x1fc/0x2ef [ 1835.252393] 0 pages HighMem/MovableOnly [ 1835.256264] dump_header+0x15d/0xc3f [ 1835.256279] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1835.256290] ? ___ratelimit+0x319/0x590 [ 1835.256304] oom_kill_process.cold+0x10/0x692 [ 1835.256319] ? check_preemption_disabled+0x41/0x280 [ 1835.256336] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1835.256352] out_of_memory+0x1072/0x1390 [ 1835.266926] 369647 pages reserved [ 1835.269190] ? oom_killer_disable+0x270/0x270 [ 1835.273391] 0 pages cma reserved [ 1835.278219] ? mutex_trylock+0x15f/0x1a0 [ 1835.278235] __alloc_pages_nodemask+0x23a2/0x2890 [ 1835.278254] ? find_get_entry+0x4cd/0x8a0 [ 1835.278273] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1835.278311] alloc_pages_current+0x193/0x2a0 [ 1835.278324] filemap_fault+0x146e/0x2180 [ 1835.278350] ext4_filemap_fault+0x84/0xb0 [ 1835.335504] __do_fault+0x10b/0x4b0 [ 1835.339232] __handle_mm_fault+0x273b/0x41c0 [ 1835.343651] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1835.348797] ? vm_insert_page+0x9c0/0x9c0 [ 1835.352965] ? check_preemption_disabled+0x41/0x280 [ 1835.357993] handle_mm_fault+0x436/0xb10 [ 1835.362066] __do_page_fault+0x68e/0xd60 [ 1835.366151] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1835.371257] ? spurious_fault+0x840/0x840 [ 1835.375502] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1835.380356] ? page_fault+0x8/0x30 [ 1835.383917] page_fault+0x1e/0x30 [ 1835.387373] RIP: 0033:0x46dabd [ 1835.390562] Code: Bad RIP value. [ 1835.394035] RSP: 002b:000000c00003df18 EFLAGS: 00010202 [ 1835.399423] RAX: 0000000000000000 RBX: 0000000000004e20 RCX: 000000000046dabd [ 1835.406797] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000c00003df18 [ 1835.414067] RBP: 000000c00003df28 R08: 00000000000c6cf0 R09: 000001ebc1e68459 [ 1835.421337] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000043b6a0 [ 1835.428694] R13: 0000000000000000 R14: 000000000094b8c4 R15: 0000000000000000 [ 1835.458523] Mem-Info: [ 1835.460979] active_anon:110458 inactive_anon:29303 isolated_anon:0 [ 1835.460979] active_file:40 inactive_file:0 isolated_file:0 [ 1835.460979] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1835.460979] slab_reclaimable:16146 slab_unreclaimable:116391 [ 1835.460979] mapped:34817 shmem:29519 pagetables:6731 bounce:0 [ 1835.460979] free:13853 free_pcp:170 free_cma:0 [ 1835.512221] Node 0 active_anon:441740kB inactive_anon:117192kB active_file:160kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139268kB dirty:0kB writeback:0kB shmem:118044kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 346112kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1835.598471] Node 1 active_anon:92kB inactive_anon:20kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:32kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1835.642047] Mem-Info: [ 1835.651201] active_anon:110458 inactive_anon:29303 isolated_anon:0 [ 1835.651201] active_file:37 inactive_file:0 isolated_file:0 [ 1835.651201] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1835.651201] slab_reclaimable:16146 slab_unreclaimable:116391 [ 1835.651201] mapped:34817 shmem:29519 pagetables:6731 bounce:0 [ 1835.651201] free:13853 free_pcp:167 free_cma:0 [ 1835.701312] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1835.747547] Node 0 active_anon:441740kB inactive_anon:117192kB active_file:124kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139268kB dirty:0kB writeback:0kB shmem:118044kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 346112kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1835.792768] Node 1 active_anon:92kB inactive_anon:20kB active_file:16kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:32kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1835.870693] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1835.881509] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1835.897895] Node 0 DMA32 free:18816kB min:35996kB low:44992kB high:53988kB active_anon:441740kB inactive_anon:117192kB active_file:72kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2763460kB mlocked:0kB kernel_stack:15680kB pagetables:26924kB bounce:0kB free_pcp:244kB local_pcp:244kB free_cma:0kB [ 1835.960168] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1835.990728] Node 0 DMA32 free:18816kB min:35996kB low:44992kB high:53988kB active_anon:441740kB inactive_anon:117192kB active_file:72kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2763460kB mlocked:0kB kernel_stack:15680kB pagetables:26924kB bounce:0kB free_pcp:484kB local_pcp:240kB free_cma:0kB [ 1836.050855] lowmem_reserve[]: 0 0 1 1 1 [ 1836.072539] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1836.092474] lowmem_reserve[]: 0 0 1 1 1 [ 1836.116221] lowmem_reserve[]: 0 0 0 0 0 [ 1836.121166] Node 1 Normal free:27028kB min:53876kB low:67344kB high:80812kB active_anon:92kB inactive_anon:20kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1836.121373] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1836.199263] oom_reaper: unable to reap pid:14037 (systemd-rfkill) [ 1836.250468] [ 1836.250468] Showing all locks held in the system: [ 1836.297238] 2 locks held by systemd/1: [ 1836.301149] #0: 0000000073066d22 (&mm->mmap_sem){++++}, at: __do_page_fault+0x398/0xd60 [ 1836.343932] #1: 000000001c52a3bf (&ei->i_mmap_sem){++++}, at: ext4_filemap_fault+0x7c/0xb0 [ 1836.352482] 1 lock held by oom_reaper/1570: [ 1836.363928] lowmem_reserve[]: 0 0 0 0 0 [ 1836.367934] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10884kB [ 1836.379816] lowmem_reserve[]: 0 0 0 0 0 [ 1836.417388] #0: 00000000b2fa431d (rcu_read_lock){....}, at: debug_show_all_locks+0x53/0x265 [ 1836.425370] Node 1 Normal free:27028kB min:53876kB low:67344kB high:80812kB active_anon:92kB inactive_anon:20kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1836.436886] Node 0 DMA32: 2109*4kB (UME) 954*8kB (UME) 127*16kB (UME) 6*32kB (U) 1*64kB (U) 3*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18740kB [ 1836.486908] 4 locks held by kworker/u4:4/3148: [ 1836.491531] 3 locks held by systemd-udevd/4706: [ 1836.517100] 3 locks held by syz-fuzzer/8089: [ 1836.521528] 4 locks held by syz-fuzzer/19178: [ 1836.540997] #0: 00000000f6f8f16c (&mm->mmap_sem){++++}, at: __do_page_fault+0x398/0xd60 [ 1836.577261] #1: 000000006ef93384 (&ei->i_mmap_sem){++++}, at: ext4_filemap_fault+0x7c/0xb0 [ 1836.597204] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1836.623902] #2: 00000000633dfd79 (fs_reclaim){+.+.}, at: __alloc_pages_nodemask+0x191e/0x2890 [ 1836.632697] #3: 000000008c5c72b7 (shrinker_rwsem){++++}, at: shrink_slab+0xc7/0x550 [ 1836.634145] lowmem_reserve[]: 0 0 0 0 0 [ 1836.657314] Node 1 Normal: 29*4kB (ME) 22*8kB (UME) 15*16kB (ME) 14*32kB (UM) 9*64kB (UM) 11*128kB (ME) 4*256kB (ME) 5*512kB (UM) 2*1024kB (M) 3*2048kB (UM) 3*4096kB (M) = 27028kB [ 1836.703909] 8 locks held by kworker/u4:6/9424: [ 1836.708578] 2 locks held by kworker/0:3/13006: [ 1836.713150] #0: 00000000ff9efa68 ((wq_completion)"events"){+.+.}, at: process_one_work+0x767/0x1570 [ 1836.721242] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10884kB [ 1836.740923] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1836.773588] Node 0 DMA32: 2109*4kB (UME) 954*8kB (UME) 127*16kB (UME) 6*32kB (U) 1*64kB (U) 3*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18740kB [ 1836.776766] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1836.819337] #1: 00000000ebdee525 ((work_completion)(&cgrp->release_agent_work)){+.+.}, at: process_one_work+0x79c/0x1570 [ 1836.831050] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1836.867193] 2 locks held by kworker/u4:1/13325: [ 1836.872145] #0: 0000000052c56e6b ((wq_completion)"events_unbound"){+.+.}, at: process_one_work+0x767/0x1570 [ 1836.893921] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1836.902781] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1836.911147] Node 1 Normal: 29*4kB (ME) 22*8kB (UME) 15*16kB (ME) 14*32kB (UM) 9*64kB (UM) 11*128kB (ME) 4*256kB (ME) 5*512kB (UM) 2*1024kB (M) 3*2048kB (UM) 3*4096kB (M) = 27028kB [ 1836.927701] #1: 000000005887420f ((work_completion)(&sub_info->work)){+.+.}, at: process_one_work+0x79c/0x1570 [ 1836.927740] 2 locks held by in:imklog/13943: [ 1836.951414] 29552 total pagecache pages [ 1836.967207] 0 pages in swap cache [ 1836.970680] Swap cache stats: add 0, delete 0, find 0/0 [ 1836.976113] #0: 00000000fa334965 (&mm->mmap_sem){++++}, at: __do_page_fault+0x398/0xd60 [ 1836.993895] Free swap = 0kB [ 1836.996927] Total swap = 0kB [ 1836.999943] 2097051 pages RAM [ 1837.003036] 0 pages HighMem/MovableOnly [ 1837.009674] #1: 000000008353696d (&ei->i_mmap_sem){++++}, at: ext4_filemap_fault+0x7c/0xb0 [ 1837.024117] 1 lock held by syz-executor.5/13964: [ 1837.028890] 1 lock held by syz-executor.1/13966: [ 1837.038230] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1837.043893] 369647 pages reserved [ 1837.050521] 0 pages cma reserved [ 1837.053960] #0: 0000000081914645 (&vcap->lock){+.+.}, at: _vb2_fop_release+0x38/0x280 [ 1837.062298] 2 locks held by syz-executor.2/14002: [ 1837.067222] Out of memory (oom_kill_allocating_task): Kill process 8089 (syz-fuzzer) score 0 or sacrifice child [ 1837.077528] 1 lock held by systemd-rfkill/14037: [ 1837.082282] 2 locks held by kworker/u4:1/14046: [ 1837.087388] Killed process 8124 (syz-executor.5) total-vm:84924kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 1837.130874] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1837.140180] #0: 0000000023cb598d (&sig->cred_guard_mutex){+.+.}, at: __do_execve_file+0x38c/0x2360 [ 1837.210272] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1837.569618] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1837.670366] #1: 00000000d79ab855 (&cfs_rq->removed.lock){-.-.}, at: dequeue_entity+0x52d/0x2800 [ 1837.720445] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1837.739576] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1837.752540] CPU: 0 PID: 19178 Comm: syz-fuzzer Not tainted 4.19.195-syzkaller #0 [ 1837.754983] [ 1837.760099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1837.760105] Call Trace: [ 1837.760130] dump_stack+0x1fc/0x2ef [ 1837.760146] dump_header+0x15d/0xc3f [ 1837.760161] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1837.760172] ? ___ratelimit+0x319/0x590 [ 1837.760188] oom_kill_process.cold+0x10/0x692 [ 1837.760203] ? check_preemption_disabled+0x41/0x280 [ 1837.760221] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1837.760236] out_of_memory+0x1072/0x1390 [ 1837.760253] ? oom_killer_disable+0x270/0x270 [ 1837.760267] ? mutex_trylock+0x15f/0x1a0 [ 1837.760284] __alloc_pages_nodemask+0x23a2/0x2890 [ 1837.760306] ? find_get_entry+0x4cd/0x8a0 [ 1837.760329] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1837.760368] alloc_pages_current+0x193/0x2a0 [ 1837.760384] filemap_fault+0x146e/0x2180 [ 1837.760411] ext4_filemap_fault+0x84/0xb0 [ 1837.760426] __do_fault+0x10b/0x4b0 [ 1837.760442] __handle_mm_fault+0x273b/0x41c0 [ 1837.760460] ? vm_insert_page+0x9c0/0x9c0 [ 1837.760487] ? check_preemption_disabled+0x41/0x280 [ 1837.760507] handle_mm_fault+0x436/0xb10 [ 1837.760527] __do_page_fault+0x68e/0xd60 [ 1837.760548] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1837.760562] ? spurious_fault+0x840/0x840 [ 1837.760577] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1837.760593] ? page_fault+0x8/0x30 [ 1837.760623] page_fault+0x1e/0x30 [ 1837.760633] RIP: 0033:0x42d75f [ 1837.760646] Code: Bad RIP value. [ 1837.760653] RSP: 002b:000000c0008efab0 EFLAGS: 00010246 [ 1837.760663] RAX: 00007ff871d6c080 RBX: 0000000000000000 RCX: 0000000000000000 [ 1837.760677] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000ff [ 1837.760684] RBP: 000000c0008efb70 R08: 0000000000000000 R09: 0000000000bacca0 [ 1837.760691] R10: 9e7fffffbfffffff R11: 9e7fffffbfffffff R12: 0000000000000000 [ 1837.760697] R13: 0000000000000000 R14: 0000000000b83080 R15: 0000000002030000 [ 1837.809636] Mem-Info: [ 1837.813385] 30974 total pagecache pages [ 1837.822821] active_anon:86393 inactive_anon:29303 isolated_anon:0 [ 1837.822821] active_file:299 inactive_file:1199 isolated_file:0 [ 1837.822821] unevictable:0 dirty:64 writeback:0 unstable:0 [ 1837.822821] slab_reclaimable:16120 slab_unreclaimable:115803 [ 1837.822821] mapped:35729 shmem:29519 pagetables:4895 bounce:0 [ 1837.822821] free:39513 free_pcp:527 free_cma:0 [ 1837.827853] 0 pages in swap cache [ 1837.864525] Node 0 active_anon:345372kB inactive_anon:117180kB active_file:2396kB inactive_file:4228kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:143684kB dirty:352kB writeback:0kB shmem:118028kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 256000kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1837.869618] ============================================= [ 1837.869618] [ 1837.894109] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1837.894699] Swap cache stats: add 0, delete 0, find 0/0 [ 1837.898590] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1837.900767] Free swap = 0kB [ 1837.910879] Node 1 active_anon:48kB inactive_anon:8kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1837.914295] Total swap = 0kB [ 1837.936019] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1837.944913] 2097051 pages RAM [ 1837.960127] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 1837.985437] 0 pages HighMem/MovableOnly [ 1838.117165] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 1838.120191] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1838.131557] Node 0 DMA32 free:121272kB min:35996kB low:44992kB high:53988kB active_anon:345220kB inactive_anon:117180kB active_file:2200kB inactive_file:5020kB unevictable:0kB writepending:352kB present:3129332kB managed:2763460kB mlocked:0kB kernel_stack:13312kB pagetables:19404kB bounce:0kB free_pcp:2576kB local_pcp:1252kB free_cma:0kB [ 1838.162345] lowmem_reserve[]: 0 0 1 1 1 [ 1838.166692] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1838.183336] systemd[1]: Stopped Journal Service. [ 1838.194061] lowmem_reserve[]: 0 0 0 0 0 [ 1838.202090] Node 1 Normal free:123728kB min:53876kB low:67344kB high:80812kB active_anon:48kB inactive_anon:8kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:1312kB local_pcp:4kB free_cma:0kB [ 1838.231080] 369647 pages reserved [ 1838.234836] 0 pages cma reserved [ 1838.238738] ------------[ cut here ]------------ [ 1838.238974] lowmem_reserve[]: 0 0 0 0 0 [ 1838.247044] memory commitment underflow [ 1838.247150] WARNING: CPU: 0 PID: 1 at mm/util.c:668 __vm_enough_memory+0x516/0x650 [ 1838.248695] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10884kB [ 1838.251891] Kernel panic - not syncing: panic_on_warn set ... [ 1838.251891] [ 1838.273765] Node 0 DMA32: 2462*4kB (UME) 1853*8kB (UME) 226*16kB (UME) 91*32kB (UM) 9*64kB (U) 4*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 35*2048kB (M) 4*4096kB (M) = 121120kB [ 1838.279852] CPU: 0 PID: 1 Comm: systemd Not tainted 4.19.195-syzkaller #0 [ 1838.302713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1838.312248] Call Trace: [ 1838.314853] dump_stack+0x1fc/0x2ef [ 1838.318490] panic+0x26a/0x50e [ 1838.321688] ? __warn_printk+0xf3/0xf3 [ 1838.323774] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1838.325578] ? __vm_enough_memory+0x516/0x650 [ 1838.340987] ? __probe_kernel_read+0x130/0x1b0 [ 1838.343807] Node 1 Normal: 18*4kB (UME) 14*8kB (UME) 11*16kB (UME) 11*32kB (UM) 12*64kB (UM) 12*128kB (UME) 7*256kB (UME) 7*512kB (UM) 2*1024kB (UM) 5*2048kB (UM) 48*4096kB (UM) = 217288kB [ 1838.345661] ? __warn.cold+0x5/0x5a [ 1838.367094] ? __warn+0xe4/0x200 [ 1838.370557] ? __vm_enough_memory+0x516/0x650 [ 1838.375329] __warn.cold+0x20/0x5a [ 1838.378968] ? kvm_sched_clock_read+0x14/0x40 [ 1838.383740] ? __vm_enough_memory+0x516/0x650 [ 1838.383775] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1838.388250] report_bug+0x262/0x2b0 [ 1838.400697] do_error_trap+0x1d7/0x310 [ 1838.404591] ? math_error+0x310/0x310 [ 1838.408496] ? mark_held_locks+0xa6/0xf0 [ 1838.412589] ? vprintk_emit+0x22d/0x740 [ 1838.413813] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1838.416579] ? error_entry+0x72/0xd0 [ 1838.428836] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1838.433769] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1838.433873] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1838.442714] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1838.447662] invalid_op+0x14/0x20 [ 1838.447679] RIP: 0010:__vm_enough_memory+0x516/0x650 [ 1838.447691] Code: 09 31 ff 89 de e8 0a f1 db ff 84 db 0f 85 a9 fb ff ff e8 cd ef db ff 48 c7 c7 a0 e7 71 88 c6 05 db 02 88 09 01 e8 fa 4d 6b 06 <0f> 0b 48 b8 00 00 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 0f b6 14 [ 1838.447697] RSP: 0018:ffff8880b5a07b90 EFLAGS: 00010282 [ 1838.447706] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1838.447718] RDX: 0000000000000000 RSI: ffffffff814dfc91 RDI: ffffed1016b40f64 [ 1838.483769] 31399 total pagecache pages [ 1838.483862] RBP: 0000000000000001 R08: 0000000000000000 R09: 00000000000036c0 [ 1838.489296] 0 pages in swap cache [ 1838.496549] R10: 0000000000000006 R11: 0000000000000000 R12: 0000000000000001 [ 1838.496557] R13: ffffffffffed37cc R14: ffffffff8a009a20 R15: 0000000000000d2b [ 1838.496580] ? vprintk_func+0x81/0x180 [ 1838.496609] copy_process.part.0+0x3414/0x8260 [ 1838.523801] Swap cache stats: add 0, delete 0, find 0/0 [ 1838.525898] ? __cleanup_sighand+0x60/0x60 [ 1838.533212] Free swap = 0kB [ 1838.537090] ? __do_page_fault+0x6d1/0xd60 [ 1838.537107] _do_fork+0x22f/0xf30 [ 1838.537124] ? fork_idle+0x220/0x220 [ 1838.537139] ? up_read+0x17/0x110 [ 1838.553753] Total swap = 0kB [ 1838.554312] ? __do_page_fault+0x180/0xd60 [ 1838.558691] 2097051 pages RAM [ 1838.562151] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1838.573751] 0 pages HighMem/MovableOnly [ 1838.576672] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1838.580514] 369647 pages reserved [ 1838.585097] ? do_syscall_64+0x21/0x620 [ 1838.585110] do_syscall_64+0xf9/0x620 [ 1838.585128] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1838.585142] RIP: 0033:0x7f345e08638b [ 1838.603745] 0 pages cma reserved [ 1838.605648] Code: db 45 85 f6 0f 85 95 01 00 00 64 4c 8b 04 25 10 00 00 00 31 d2 4d 8d 90 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 de 00 00 00 85 c0 41 89 c5 0f 85 e5 00 00 [ 1838.610925] Out of memory (oom_kill_allocating_task): Kill process 19178 (syz-fuzzer) score 0 or sacrifice child [ 1838.614898] RSP: 002b:00007fffc9c4c770 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1838.614909] RAX: ffffffffffffffda RBX: 00007fffc9c4c770 RCX: 00007f345e08638b [ 1838.614915] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1838.614921] RBP: 00007fffc9c4c7c0 R08: 00007f345fae0500 R09: 0000000000000000 [ 1838.614927] R10: 00007f345fae07d0 R11: 0000000000000246 R12: 0000000000000000 [ 1838.614934] R13: 0000000000000020 R14: 0000000000000001 R15: 0000000000000000 [ 1838.619822] Kernel Offset: disabled [ 1838.697465] Rebooting in 86400 seconds..