20:26:20 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x4) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="600bd241dcf342e006000a0300001af5c9782e", 0x13, 0x400}], 0x0, 0x0) 20:26:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r1, 0x1277, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x5, 0x7, 0x100000001, 0x3, 0x3e, 0x0, 0x11e, 0x38, 0x3cd, 0x4, 0x3, 0x20, 0x1, 0x1200, 0x6, 0x4}, [{0x6474e551, 0x4d8, 0x2, 0xa87, 0x9, 0x0, 0x7fffffff, 0x9}], "e914dbdc29bbc9bbb073ca39891984ae686c930c53a856536409905f43eb2435b355ee79bba976fda7123957976a6c3b6e4e55f912fefea3a65b7f74ae684fac4398f6539c6dbe3ef5f17ece4347e19fb6facac9f6238e61af58dfd9b40b591003ac897fadb344bc6642f87fe2713abd16ac3b82e0b999750523123f7e85fdf0dd5fb71b0896743b8be41c02584ae5dc872fa85a07650fded746f4b4c2ade988710da387c2d962255b04ac87d2ce2120f5d81e3aaf51daede03d56b51896fc3e38b1fadb4dc05e16625fa13841e1870009ef64b0afb9b823"}, 0x130) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) ioctl$RTC_AIE_OFF(r2, 0x7002) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000000)) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r4 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) ioctl$KDENABIO(r5, 0x4b36) 20:26:20 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x980900, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:26:20 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000180)=0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$CAPI_REGISTER(r2, 0x400c4301, &(0x7f0000000040)={0x101, 0x1, 0xff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x8955, &(0x7f0000000000)=0x2) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x10000, 0x0) ioctl$BLKIOMIN(r4, 0x1277, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x4, 0x4, 0x10000, 0x5d3b, {0x77359400}, {0x5, 0xc, 0x7, 0x1, 0x7, 0x0, "41f5cc79"}, 0x0, 0x1, @userptr=0xfc, 0x8, 0x0, r4}) ioctl$TIOCGICOUNT(r5, 0x545d, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r6, &(0x7f00000017c0), 0x315, 0x800000) [ 1454.120798][T11516] Sensor A: ================= START STATUS ================= [ 1454.149577][T11516] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1454.185949][T11516] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1454.211883][T11516] v4l2-ctrls: Sensor A: Horizontal Flip: false 20:26:21 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a0090040300001af5c97824", 0x12, 0x400}], 0x0, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000040)={0x18, 0x1, 0x0, {0x800}}, 0x18) [ 1454.249131][T11516] v4l2-ctrls: Sensor A: Brightness: 128 [ 1454.278044][T11516] v4l2-ctrls: Sensor A: Contrast: 128 [ 1454.299243][T11516] v4l2-ctrls: Sensor A: Hue: 0 [ 1454.315230][T11516] v4l2-ctrls: Sensor A: Saturation: 128 [ 1454.333014][T11516] Sensor A: ================== END STATUS ================== 20:26:21 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x1a6502, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r3, 0x1277, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000080)={0x9a0000, 0x1, 0x8, r3, 0x0, &(0x7f0000000040)={0x990901, 0x8, [], @ptr=0x5}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$ttys(0xc, 0x2, 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/212, 0xd4}, 0x5e1}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x8955, &(0x7f0000000000)=0x2) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r7, &(0x7f00000017c0), 0x315, 0x800000) 20:26:21 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x980901, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:26:21 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000040)="3dd56abd995a820ec3f281dc1d31d74c379dcd442ef7f67e83751db844ce457bf37665520c3b13f297f0f3d505c5d3ff98f15254100843381639267a27bb6a7ae697") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) write$P9_RFSYNC(r3, &(0x7f00000001c0)={0x7, 0x33, 0x1}, 0x7) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a0090040300001af5c97824", 0x12, 0x400}], 0x0, 0x0) [ 1454.608935][T11540] Sensor A: ================= START STATUS ================= [ 1454.643943][T11540] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar 20:26:21 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) ioctl$BLKIOMIN(r2, 0x1277, 0x0) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r4, 0x0, 0x5a, 0x0, &(0x7f0000000000)="3f006671d7af52f647751500080089ea01000000c8744e1a000000000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r5, 0x1277, 0x0) dup(r5) r6 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x8955, &(0x7f0000000000)=0x2) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r7, &(0x7f00000017c0), 0x315, 0x800000) [ 1454.679427][T11540] v4l2-ctrls: Sensor A: Vertical Flip: false 20:26:21 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000300), 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x2, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000094}, 0x8000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000340)={0x800, {{0xa, 0x4e20, 0x10001, @mcast2, 0x4}}}, 0x88) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a0090040300001af5c97824", 0x12, 0x400}], 0x0, 0x0) [ 1454.719985][T11540] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1454.752559][T11540] v4l2-ctrls: Sensor A: Brightness: 128 [ 1454.777384][T11540] v4l2-ctrls: Sensor A: Contrast: 128 [ 1454.798225][T11540] v4l2-ctrls: Sensor A: Hue: 0 [ 1454.816418][T11540] v4l2-ctrls: Sensor A: Saturation: 128 [ 1454.839972][T11540] Sensor A: ================== END STATUS ================== [ 1454.930059][ T27] audit: type=1804 audit(1591043181.840:286): pid=11553 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir310235184/syzkaller.KKpbs4/578/cgroup.controllers" dev="sda1" ino=16345 res=1 [ 1455.044729][ T27] audit: type=1804 audit(1591043181.910:287): pid=11524 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir310235184/syzkaller.KKpbs4/578/cgroup.controllers" dev="sda1" ino=16345 res=1 20:26:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20499, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x970ba90543d1828e) open(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x101000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6c00) creat(0x0, 0x54) dup(0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x40280, 0xef) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20008808, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x101, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x68042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r2, 0x7fff) sendfile(0xffffffffffffffff, r2, 0x0, 0x8000fffffffe) 20:26:24 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x980902, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:26:24 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a0090040300001af5c97824", 0x12, 0x400}], 0x0, 0x0) 20:26:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)=0x3000000) 20:26:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r2, 0x1277, 0x0) readahead(r2, 0x8, 0x9) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000140)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r5, 0x0, 0x100000001) ioctl$TCSETX(r5, 0x5433, &(0x7f0000000100)={0x2, 0xb4b9, [0x6, 0x84a9, 0x7, 0x800, 0x8], 0x1000}) getsockopt$llc_int(r4, 0x10c, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) 20:26:24 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xffffff7d}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x8955, &(0x7f0000000000)=0x2) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000440)={0x5, 0x0, [{0xa, 0x65da, 0x5, 0x3, 0xff}, {0x80000019, 0xff, 0x1000, 0x4, 0x3}, {0x80000007, 0x100, 0x5, 0x7, 0x4}, {0x1, 0x1f, 0x4c1, 0x1, 0x2}, {0x80000008, 0x8001, 0xffff, 0x1, 0x1}]}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000001) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000340)={0x5ddf284145d525d8, @win={{0xffff, 0x1, 0x1, 0x1}, 0x9, 0xd4dd, &(0x7f0000000100)={{0x80, 0x26b, 0x3, 0x8}, &(0x7f00000000c0)={{0xffffcf6b, 0xffffffe0, 0x7f}, &(0x7f0000000080)={{0x200, 0x31a, 0x3f, 0x1}}}}, 0x5, &(0x7f0000000140)="57d177fa135c82bdbcef988a900edd5b0b81adc582cee01bc20497231c7708a8a6f78647d3cd816dc7", 0x3f}}) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r5, &(0x7f0000000040), 0x0, 0x200800000) [ 1457.731266][T11585] Sensor A: ================= START STATUS ================= [ 1457.773329][T11585] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1457.811136][T11585] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1457.836927][T11585] v4l2-ctrls: Sensor A: Horizontal Flip: false 20:26:24 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x8955, &(0x7f0000000000)=0x2) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r4, &(0x7f0000000100)=[{&(0x7f0000000040)=""/7, 0x7}, {&(0x7f0000000080)=""/46, 0x2e}, {&(0x7f00000000c0)=""/14, 0xe}, {&(0x7f0000000340)=""/235, 0xeb}], 0x4, 0x800000) 20:26:24 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) syz_mount_image$minix(&(0x7f0000000100)='minix\x00', &(0x7f0000000080)='./file0\x00', 0xfff7ffff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="607f42e006000a0090040300001af5c97824", 0x12, 0x400}], 0x802002, 0x0) [ 1457.920877][ T27] audit: type=1804 audit(1591043184.830:288): pid=11587 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir310235184/syzkaller.KKpbs4/579/cgroup.controllers" dev="sda1" ino=16349 res=1 [ 1457.957182][T11585] v4l2-ctrls: Sensor A: Brightness: 128 [ 1458.011617][T11585] v4l2-ctrls: Sensor A: Contrast: 128 [ 1458.030415][T11585] v4l2-ctrls: Sensor A: Hue: 0 [ 1458.046356][T11585] v4l2-ctrls: Sensor A: Saturation: 128 [ 1458.069477][T11585] Sensor A: ================== END STATUS ================== 20:26:25 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x980903, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:26:25 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = socket$kcm(0x2, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0) close(r2) r3 = socket$kcm(0x2, 0x2, 0x0) sendmsg$sock(r3, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0) close(r3) sendmsg$kcm(r2, &(0x7f0000002480)={&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x0, 0x2, 0x4, 0x4, {0xa, 0x4e21, 0x8001, @private0, 0x9}}}, 0x80, &(0x7f0000002300)=[{&(0x7f00000001c0)="e092ffe90f94197ec1d1fbd6dc73af3f6bfcbd17b1e0b14b80262c5f92fb6e308d4c15aa9f8dc1cf05f0513a9a5045ca082a2aa7ca369ebf61fed2c2645f7e6e74b4c3655cd1a908cdcdf60e587bd19a685b621b0998b36185", 0x59}, {&(0x7f0000000240)="b136c816534e0c624f58e8f411607a582b6f2d1c664bbc372c104a108aa52440cd46c98dcfb8dd", 0x27}, {&(0x7f00000002c0)="4fb45fd70bff3aa2dd2e8661d019a5733f", 0x11}, {&(0x7f0000000300)="cd0878a34c3790b3ed5c588b92cfbb373e86f8b19161816c994d74186315fa67366821d6eff94a451b32f0bd7ce6c55d56c472ea628e8dc56ae43e7272b50874b26b993ab1d3865f5efe8ef38bde376a60fec1a76a22f02d0e8d4f79e82be69e6d94446b0f074b7e742a93038d2de96d31d525abd2bffae6b08b21e71ee2bf28a4ac9397121927d3703d8fec90ea67d39e1e92691990235fb9be31bcb507a5912ad162a6d417eda0db53b1e44cf886f9c7b131c14c34ed6977e44bec84780183411e29ab71be0e75655c41c221258bd333b7fa02e6885a16a0de28e7ced48e33106287fb20767cf99afe2b159d0dc48e9959bcc3666f9c150bb42a70fcfd92ae8ee9fa544db7ec3b0ba3367ec958e8e0670f0986dc3d654be5e91e4700b52f7fce3f353abb7cad3d48620c3e676b501636dbdbf6d885a3dcf8a80c0389a0a3d5761909345c98081c47f3569c93e23d7a2802ae7de0beee7de3d706cee2f8fa2d2a2cc733752fe683e28f02cedbb46f3b938aedbd22e90b20e8795632649ab7d3c5b141ef51c237e94fd68a23e68afd9d966da4434cbc42027b7f3295781baa16419b001bf2a54e05be5f7686e82c1bc02ada8f3108e3301481255c4e425d7143a665095e1a2dc6ec538679646b454afd5a1d92d9eadcbbcb8c173cf30ea24cb733c6b2683374d46fc1406beab6d3c5df6dabb3cdc528a1a6a16535cad4fe0c9751fdb93b32db24607a6885d379cacb88bde765cbefb6124f57143ce9e04f7831071845d29d308b71ad3441063b1116a9d7faae635622c869757573564ff21174560422a583a73e80a068b95cb7e977aed4b1bce763e3f9d935ed6795723a640a83a0a6fab47072dbda3c62999e9e3038b422dd5994f79b7fd057a765e4d61ba6a3b561dcb76c2e2652d936d31929f80d97389ca37ddf87a1cd8d49fdd8eefeb00830a85516d21ba1010a73be73af850b1503426b3de2d35d930ed85eb2ceca88556f469f385461a53e1428ea7b2ccba218cc11dc1d15137777746e97472a6eeea9edb5a5f212b02c081c03cdde7575ead5c630cbf956d38e2df3fd21f15b64f0b1d05287e4b3c87dfa524981c35bf8d34882bf066f1f449b45c654094c7b4e0ca7e692d68afe2b78ab98d65e0f6b22abe8021a2c5af7472c50d61c0fdbca45270c5ff5cfd9d31c6367a18a10641381aace13c7891420bc4a35cbd9b6594a970698ce060a9f4f1e057d6c6c31ee5a1bcb1a8d2782381abc57c5f983634ece1eff78ea5d99d64134e3e2dd960fd134ec52827fab39625a4827ce5edcc074bcff6e27a16df83c86fbcf95232adddf166926b2b6ad89140550ff7807d956b66eddb037dd36b89a2366b6ed96dcb413220a5d12422d688843744a1e95478d8432ff905459bb629e55fe624e0197542244c8045b4e30016135142cab3bb17be8888cb786d6e12271485c92eda47ae64d0d1c8fcb40015a6b15c749a256a08bdf349e9e3952e0d933350b9722bf2abf4f9778a82a39c07db345c9b88fe78ce4005b2256729b6a4da02f67086dbcc0d3e3a0a9b3d2bf2cbbf77b79bdc89d6b5e0e70abd2a8874ef964388136b2bb9e528124d355edfd9af5c0b19f7519ba564c81668c23e35f5fc4b3c48c698c06ffbf756478f6f9264db3bc9eaaa9585533e502e3a84356a5242fe0a0dae98f88ba94a9eb6bd41fe489d0dc365f31bcfdb99c174321ecc759b162fa87e12a3bdba077f4e7a791d21537cab036a3360d95fbc08a2fc8ad13741fe4d4b66ac623546960b77c4097c9f0fd384225f7cbf097ff704320f5d03404a447d37dd615371ef9252b6e93a2bbc9411e0544a6f0a0c6032cb4179571fe11e03aafcdba055dca401bb7aad7b66a4a2efeee47ad830b905771eabd852195dfdeb28f6471d2d492b46a5a7646f71ca36664a473be95fc6bddb22e47915b832547116fc0f87310111f2fb90644f355678dbd19a8d4c7fd06c4ebcdcf317b3c7fd424f3eb294a0ef01865b7a4127525fe8bb9bcfaf0dc3fa915db89ba8b8455eef52787d901124be36598f9838d76561e2e394f9cea0fb4693f14df41f203a325ee2820fa3bdc9d292ea7f7320e3b7aeedcea7db6dea623bf3eef4613e61f7b2faf0d0be41a8513a3a4ccf477814b2cbead813f1dde39240015dd1db6eb683836e939be3ef58def1a74de86ac47a887e28db84c247c4f1d1074b093081ecb7ff182dc426cfa93867d7b174ebf75a8b42c7a687d2317d89ba458c54eb73b2b1025adcd54ecaafb85a3e479b6b2c2e170c5e040e8a3911d0d850e9df2e72ecdcefdc6d7ac0005ab3a77512abf4bd75c9b8580b226360a9acab09dfe6358a57d463541c1f3253ff68627c6148245775bb4fcfd8769bda3b9329bd518c1d9fa84108f4c2ce923025e98007cf87c336d5e4382aaeda20097caafb6417408a45536fea4189272d0d39dcb53bcc139b296df003d1bafdabf705596f375b00d8456f29ad9b38fae091f6bad237eb354be09df45c8e36cacb68e73da4789a7af9dbbd8f051ed8e2219066dc2df95bec9888a0b4cc207c56f1e6fb28aa8b78c22a8990e013944873f2e4eb82bbe8869973a99f0e1b6bb3213e5a20828813e0646176c881cd3104f1fe8e93b2d04050f428f4e041c0d5eeff34bb79a938414279aac83f7e5140cb4bdbfb9c83c07ab390b8589e996101ccb1c52f0a6723da3064255bdd66e7cbf2f7fe13c68650bcc55a83b0f10c775342f08a0a84b86dd99b0d208670c3a93af8cecdb8f784ce705308f08d1162776f3f09fa7b8ffc976b3ab400d8ef1848a9319ae9a74a7dbcee6fb7b4d98aa9e8b62313b4698d1a38f3e89906a2ed25fd4610f9b03097e45af592c541ff97bf026936f899fe55f14c3fe076de0425fce3bf06a45aec9d95640df822a3d1312f71f8a3d2b0d29bad602f374ffbb8b2d313beb27c0abfb0ddbb94fafbf30e313fddd23c13d1ed572776aaece7d7e59152090c4c7162d6ab6accd4e327dc8639947ca554f6cfd210d3c43e122c62df7863b06471d2de8d8a7b507639bd4e1540ad972cd59d8390ed7d8b1b83e42295108da18ec5e3717e67723ed55f2c5b7fe7202e8e43d5297bad70dbdd01b0ce3671f357443881cb39c2eef6b56506295e9d7d21bd497307df89dfe5a84f817bdd5a013ed4ea0f1a453f2761ba173f618692a77043dba4fb8343e5879cd4a5420cadee0e04d55577b3d1ef869a4c1cf08c6e3cf5c5ccbcc3ebd3c1a1bc71a064ea4090b3d527c938cfd7e6090bc7a3bdb3f86e27829926bdd78789098b4e826807412b610b2fd0effaaf40d93c32d27969a8c6b4deac5e63000910150695d3315227dedb16cd1cb5c8a8295f51d038c875d9fdd04fd707ea5a045fe3574fed039a154ea35597769726be4edd101aaaa5039434942ccb73b9d9a634f6d9385436ef056431ef90d8727f13a96611b5079db1a32bf964aff44da1f0ef861f49b0a323f1b46123703253bd3e8dc12cd13aa5ae7832d946436d4d44d2fb20393f1fce58cceecded09156e94535a5a9948f7ea0a66cb030b96bf3e24ac6301a22e3c8b4eed7a63733bc9c8c209a4924ce758563319254151056f5ffc6c3fc921977c9371500767ee848a75cb709231f4b5723d864cb80ff2df1244b8bc7f4133bfc87cacdc3117691d72ddf84544776942f36bf2b139e1842ed44a6d04d844c1c54975669fa60cd5c85c9f0af46405a7dbd7d2d9013a38021f670b1bc9f4593fd8be3cfe72bdbce6f431f477ff785deb89f3be44b987375728484932c42e6e1460166367e6a7e34698c6236aa751d9f1d53b52681ee3366e0362c5d9969a4442f98ced2f03bc3845e612daf91cbdc479472636ecb87e59b62a40047490f2bbd359341a1e1228a74b1921ead7b0337159f67d350f06541b938a9cb65c11ee65de7d7b9cfa981849d8ff182d9596eb4850de79ac626f0c08b74865456642d571a3fda59ec826607979e2c09922eb62f53e27c0cb30fe71c4a1519c59ffab564a8176214f87878b9cf9f1f96773e02e396863215f1f444c84e30e18f621edccd14c1e850009e0cf3eb6e996881c5c8b7290dec5c5d393857bd9829c4862dc9610875830c21369b50f6fdb4826e2f1c30010e39672356c9a40460da2097c00f9039c7df20b0f602a8267280832e883ad5a90e6e9701c2e9b768f950bd62c8abc686fc5168d8a46e9fa038ab93b6df2e5ec147bc1f2c72ce40c0f5dd07cef48f01504564ab04c2b5bc3e13cb166b2b37e12c68e0e47ae42a65562bed2fb910ca71cb9be2d6c3a733833bc6c0d0bd9f577f01ae60b2d4016918cf9cd3cca1e852cfa821171adae16c03f88e9ac1273e4040252de9354170b0fb6bce720157c1e0bac244de629982fbc6ecdc6b020bd59f5ef9389603bb6428a9733a9202e13d6e1c05794fe603c89b7bfb0bcc6eb0fc67019b8a464c8193f222034164992f45c15ad1a1d724715eb0b63f053f867b8f51e9ad5f985c71edb79a7ee721000d36242f6bfe960334e7673f35dc8dbaa4eb08862569fd9e4cc3941bea13b727547c0d86f1fea6c401fb23b714eec2406da909064344797ef8ec48efc196a95c505625c25b4d2b8c06584d9caf03142486c6796eb9f08148f79d362b2fc3975f43ad1218282ece1663e4635fcee38e23d92f2d6a8f1e510957b2db9a6372f31d6926439caf9a7d33a30fc4ed7631ca825d6dc499631a8486e561c708659c8fe20b3669fe75b86e8b1664fa25acfdec1f7c5bf9f6592a172f53fec3b5ff95a7d1c429bbfd46d0f165ac3ce9c53864bd6c5b4ff1f32aed13150df48926f0826023d2de54824076e332cfe89a8ac02f4af6c7e674143d4eae8a33597bfacc58cbdf8030f4f9010f7490d4eaa6873a9e7e993e1019bab69e1387f878afb670166cf0d881b81d470dbafe3c59b67f89847c38ec1d333793de5a04fd3952e04f3db2496d370b127bc7519bb5943c3eec7519178c6c8627d095b44fe2d0fc52fd8a23abe59656b3359911313ef9465c9eb047c6e77d83bc2796c6cfd94d9ccc581ea0f1ec85f5b466e0862aadc6527bd30e05aafd988405e46bb9a9a6724f84e254389876ed6f15dec8c589489b1e061b31b2fb0e42189567559de96f41c950519a2ca63047ccc4913b00dbd68782fe7bbf6664701ba8bdaca783c6671654b9620b305f54ae1f9a154207eef77af781b58a438761131e79b02aab24a27fe306583331a1b8a7a037581bb0470c2f2067d7385bd6b4208eed3297132ff5fc931ac1cda05fd7ac2d1e340585175093f4abc23d841cec3f8254a78e593c912f7bb9c1ed1dac7dad7804d86a03cc63aef092e68fc32dd9be20b8711323c2886c2fbb260d75274eb19cf2266798e9364a0f322f8b44c897ed1d7b1d33375df5d315317055d79b43f50375bace5bc7cbfc04b0ba1b5f0e9af58b39f9e05f7f16f5b613127c6b5500235ae0530ff7c002f40fff88f778be5ef05c29065f10bd277fc64dc9b391f6a9205b40c4356c00cdd3a09733dfbe06d55db15ce3e345588db122e5716fddcf8ab4b7575729da27d52b03cbea2c8e8ecc194782b49ac8ed50bf825d1d456d4fbeca1293321eb5c2889da490044552adfdb19ef961704b0346d0e41ffd7e0920ff701dd4be24fdc06bdfc2cb7e7e39fcafc9a0570c481b920bd9bae42d226057fb41c2c3cb8bc028252cb93ce90ce4e492f1c2b55386f43726dea8bdebb16f445ecdb822c8e6a4f8ac2ff46a59a4a6b437676c52903aee9062e60080499b7b1c494f0a6489d83174b6ab53", 0x1000}, {&(0x7f0000001300)="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", 0x1000}], 0x5, &(0x7f0000002380)=ANY=[@ANYBLOB="e000000000000000340100007f000000ec4c5ee9adb36fc81df19cd069560779ba08654af8164bacd2d20329ec517bbcfbc902c2dbbe99521aa76144269a25a9be0900000000000000ff0351c341235c6fd0d7c3815a6fb3d5673aa5787d669a41dfef27c6fd72a7ff0039d19868114df49b16f1db743ace525d114487e1424fc29ece364a2a1695b5ca6d59c222d0f5ed5309ac5a446a5db43593fae5adf8ef91e462d8780dd0b1170beae3625d2d6385b9c93352e418327fb03975d09ba56ccda6ccb556d6042c64e99000000000000000"], 0xe0}, 0x9629c6fbd875ebcd) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0xaaaaaaaaaaaac20, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a0090040300001af5c97824", 0x12, 0x401}], 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x100000001) getsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000024c0), &(0x7f0000002500)=0xe) openat$sndseq(0xffffffffffffff9c, &(0x7f0000002540)='/dev/snd/seq\x00', 0x40000) 20:26:25 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000080), &(0x7f00000000c0)=0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8955, &(0x7f0000000000)=0x2) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) preadv(r5, &(0x7f00000017c0), 0x315, 0x800000) [ 1458.346486][T11609] Sensor A: ================= START STATUS ================= [ 1458.382882][T11609] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1458.415699][T11609] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1458.448906][T11609] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1458.476634][T11609] v4l2-ctrls: Sensor A: Brightness: 128 [ 1458.535373][T11609] v4l2-ctrls: Sensor A: Contrast: 128 [ 1458.581440][T11609] v4l2-ctrls: Sensor A: Hue: 0 20:26:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x0, 0x0, "400002bc04000000000087d400"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x6, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$KDSKBLED(r2, 0x4b65, 0x800) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r3, 0x1277, 0x0) splice(r1, &(0x7f0000000000)=0x3, r3, &(0x7f0000000040)=0xc03, 0x101, 0x2) [ 1458.622029][T11609] v4l2-ctrls: Sensor A: Saturation: 128 [ 1458.655198][T11609] Sensor A: ================== END STATUS ================== 20:26:27 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x980914, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:26:27 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)=0x4000000) 20:26:27 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r2, 0x800442d4, &(0x7f0000000040)=0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$inet(0x2, 0x3, 0x7) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x8955, &(0x7f0000000000)=0x2) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r4, &(0x7f00000017c0), 0x315, 0x800000) 20:26:27 executing program 4: syz_mount_image$minix(&(0x7f00000001c0)='minix\x00', &(0x7f0000000200)='./file0\x00', 0xf2, 0x3, &(0x7f0000000400)=[{&(0x7f0000000300)="17ea51989952d1c23b693b746dbfa120dc3f2784dc2d26df3d22ebfe92e14a40c9c1acd9561a57926f3786ea7e0186f3855cb029", 0x34, 0x8}, {&(0x7f0000000340)="0b20a895685bc4e7fc36d20074b6505a5d7d", 0x12, 0x80000000}, {&(0x7f0000000380)="996696890aaba6377ebff3610383018b47dff55f5b5846658ac75268e46f40ae0036f841bbb2bfdf38a8ad93d6482707be0f684d913ac49337dd1c2f75dd5ee98b80e6466a197b916de2b6074ac912e2ca", 0x51, 0x5e4}], 0x801000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4001ff) mknod(&(0x7f0000000180)='./file0\x00', 0x80, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) accept$unix(r2, &(0x7f0000000280), &(0x7f0000000080)=0x6e) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000140)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000000)=[{&(0x7f0000000240)="600b42e006000a00900493c3f41c895c24ccc23d0030674f0324000000000000", 0x20, 0x400}], 0x0, 0x0) 20:26:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20499, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x82) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x970ba90543d1828e) open(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x101000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6c00) creat(0x0, 0x54) dup(0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 20:26:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) r3 = syz_open_pts(r1, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9010000f40e1990582f1809fae00100"}) [ 1460.354299][T11660] Sensor A: ================= START STATUS ================= [ 1460.367217][T11660] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1460.389701][T11660] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1460.420770][T11660] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1460.442090][T11660] v4l2-ctrls: Sensor A: Brightness: 128 [ 1460.463230][ T27] audit: type=1804 audit(1591043187.370:289): pid=11658 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir974568076/syzkaller.AbVOfh/1058/cgroup.controllers" dev="sda1" ino=16346 res=1 [ 1460.463492][T11660] v4l2-ctrls: Sensor A: Contrast: 128 20:26:27 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) mknod(&(0x7f0000000100)='\x00', 0x800, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$inet(0x2, 0x80000, 0x6) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x8955, &(0x7f0000000000)=0x2) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') prctl$PR_GET_NAME(0x10, &(0x7f0000000040)=""/151) preadv(r4, &(0x7f00000017c0), 0x315, 0x800000) connect$pptp(r2, &(0x7f0000000340)={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0x1f}}}, 0x1e) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r5, 0x1277, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r5, 0x6612) [ 1460.630780][T11660] v4l2-ctrls: Sensor A: Hue: 0 [ 1460.648928][T11660] v4l2-ctrls: Sensor A: Saturation: 128 [ 1460.671934][T11660] Sensor A: ================== END STATUS ================== 20:26:27 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x40, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r2, 0x711, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x22be25aa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044090}, 0x48096) r6 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a0090040300001af5c97824", 0x12, 0x400}], 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r7, 0x1277, 0x0) fcntl$getown(r7, 0x9) 20:26:27 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x980915, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1460.910675][T11694] Sensor A: ================= START STATUS ================= [ 1460.942346][T11694] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar 20:26:27 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x8955, &(0x7f0000000000)=0x2) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x280) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000080)=0x9, 0x4) preadv(r4, &(0x7f00000017c0), 0x315, 0x800000) 20:26:27 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a0090040300001af5c97824", 0x12, 0x400}], 0x0, 0x0) ioctl$KVM_GET_TSC_KHZ(r1, 0xaea3) [ 1460.969981][T11694] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1460.997794][T11694] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1461.025512][T11694] v4l2-ctrls: Sensor A: Brightness: 128 [ 1461.042930][T11694] v4l2-ctrls: Sensor A: Contrast: 128 [ 1461.058495][T11694] v4l2-ctrls: Sensor A: Hue: 0 [ 1461.078711][T11694] v4l2-ctrls: Sensor A: Saturation: 128 [ 1461.102314][T11694] Sensor A: ================== END STATUS ================== 20:26:28 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0xf00001, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:26:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000140)=ANY=[], 0x208e24b) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000200)={0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @private=0xa010102}]}, &(0x7f0000000180)=0x10) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x7a, &(0x7f0000000080)={r7, 0x0, 0x0, 0xfffffffffffffffe}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000040)={r7, 0x7, 0xc64}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000001c0)={r8}, 0x8) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a0090040300001af5c97824", 0x12, 0x400}], 0x0, 0x0) 20:26:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)=0x5000000) 20:26:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x3800) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000000), 0x3, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000003) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000300)={0x1, @null, @netrom={'nr', 0x0}, 0x5, 'syz0\x00', @null, 0x0, 0x2, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)=@null) lseek(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x1ff) [ 1461.351822][T11719] Sensor A: ================= START STATUS ================= [ 1461.387177][T11719] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1461.411395][T11719] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1461.438943][T11719] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1461.457879][ T27] audit: type=1804 audit(1591043188.360:290): pid=11732 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir974568076/syzkaller.AbVOfh/1061/cgroup.controllers" dev="sda1" ino=16357 res=1 [ 1461.458385][T11719] v4l2-ctrls: Sensor A: Brightness: 128 [ 1461.537334][ T27] audit: type=1804 audit(1591043188.400:291): pid=11730 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir974568076/syzkaller.AbVOfh/1061/cgroup.controllers" dev="sda1" ino=16357 res=1 20:26:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000080)={r3, 0x0, 0x0, 0xfffffffffffffffe}, &(0x7f0000000100)=0x18) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x100000001) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @private=0xa010102}]}, &(0x7f0000000180)=0x10) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x7a, &(0x7f0000000080)={r8, 0x0, 0x10, 0xfffffffffffffffe}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e21, @multicast1}}, [0x10000, 0x9, 0x6, 0x6, 0x9, 0x7fff, 0x9, 0x4dc3ee, 0x100000001, 0x80000000, 0x1083, 0x1, 0x4, 0x4, 0xfffffffffffff000]}, &(0x7f0000000080)=0x100) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000001c0)={r3, 0x9, 0x4, 0x3, 0x5, 0x9, 0x1, 0x5, {r9, @in6={{0xa, 0x4e23, 0x9, @private2, 0x2bf8}}, 0x9, 0x400007ff, 0x7, 0x5, 0x5}}, &(0x7f00000003c0)=0xb0) syz_mount_image$minix(&(0x7f0000000640)='minix\x00', &(0x7f0000000400)='./file0/file0\x00', 0xfffffffb, 0x2, &(0x7f0000000140)=[{&(0x7f0000000440)="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", 0xfc, 0x1}, {&(0x7f00000006c0)="bcef05ba5357fe023b191395b7529e3d85a88e5c351826eba0259df4e4865d1a7096a37de0b5e5df1e593c90a0a0f6f9522476cdb9ebacc32d17757615749e0a6daa765604829721362cd051f72fee0000000000000006fcbce2c80e4357f1c61688ca549f4fd229d915fd87745c1280df62b2fe9eb3b02379afd17927c181e3f9289ac1486f7be704e122c761f04a154e3e5cc15af35a070d753e22e5186bc8886eabe871f97fefdf1570ccc162a47e79bd3a48a46738f8f85ad8dc501cd800004f5e405ebca7407a351a792467ce", 0xcf, 0x9}], 0x840400, 0x0) [ 1461.583761][T11719] v4l2-ctrls: Sensor A: Contrast: 128 [ 1461.622412][T11719] v4l2-ctrls: Sensor A: Hue: 0 [ 1461.636247][T11719] v4l2-ctrls: Sensor A: Saturation: 128 [ 1461.652171][T11719] Sensor A: ================== END STATUS ================== 20:26:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20499, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000180)='./bus\x00', 0x0, 0x10) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x970ba90543d1828e) open(&(0x7f0000000140)='./file0\x00', 0x101000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6c00) creat(0x0, 0x54) dup(0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xfffffff7, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0xfffffffc, @empty, 0x6}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 20:26:32 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x8955, &(0x7f0000000000)=0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/keycreate\x00') preadv(r4, &(0x7f00000017c0), 0x315, 0x800000) 20:26:32 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r2, 0x1277, 0x0) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xfa) write(r0, &(0x7f00000001c0)="30f72a94422312988c8390a4c8e28dcfd046e8a95f68a2a1d8c374866259b526077f3b6885f04f9288cdf8611006459d849444d49148d24286a2cd0107c8d81343fb4f7e571cf674ef1a9cff74cc0766672ffa97d590f6ca98177005904cf63ebef22cf115d2929f35740d5fd327773afff0be9101052371d3a399b806e8b5371758ac3b0e22a284a122eb40f04228", 0x8f) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a0090040300001af5c97824", 0x12, 0x400}], 0x0, 0x0) 20:26:32 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0xf0f000, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:26:32 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)=0x6000000) [ 1465.555750][T11759] Sensor A: ================= START STATUS ================= [ 1465.570305][T11759] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1465.608176][T11759] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1465.635758][T11759] v4l2-ctrls: Sensor A: Horizontal Flip: false 20:26:32 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) epoll_wait(r2, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], 0x6, 0x1) socketpair(0x3, 0x800, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r3, 0x800443d3, &(0x7f0000000200)={@fixed={[], 0x12}, 0x400, 0x3, 0x7fff}) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="600b42e006000a0090040300001af5c97824", 0x12, 0x400}], 0x0, 0x0) [ 1465.662312][T11759] v4l2-ctrls: Sensor A: Brightness: 128 [ 1465.688616][T11759] v4l2-ctrls: Sensor A: Contrast: 128 [ 1465.724657][T11759] v4l2-ctrls: Sensor A: Hue: 0 [ 1465.746364][T11759] v4l2-ctrls: Sensor A: Saturation: 128 [ 1465.766556][T11759] Sensor A: ================== END STATUS ================== 20:26:32 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x8955, &(0x7f0000000000)=0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000040)={'raw\x00'}, &(0x7f00000000c0)=0x54) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r5, &(0x7f00000017c0), 0x315, 0x800000) 20:26:32 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x1000000, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:26:32 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a0090040300001af5c97824", 0x12, 0x400}], 0x0, 0x0) [ 1466.008265][T11786] Sensor A: ================= START STATUS ================= [ 1466.035443][T11786] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1466.058711][T11786] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1466.081760][T11786] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1466.107260][T11786] v4l2-ctrls: Sensor A: Brightness: 128 [ 1466.144597][T11786] v4l2-ctrls: Sensor A: Contrast: 128 [ 1466.168903][T11786] v4l2-ctrls: Sensor A: Hue: 0 20:26:33 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod(&(0x7f0000000180)='./file0\x00', 0x10, 0x1ff) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000040)='./file0\x00', 0x5bcf9311, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a009004ebffffb5c9782400", 0x12}], 0x0, 0x0) [ 1466.189832][T11786] v4l2-ctrls: Sensor A: Saturation: 128 [ 1466.210841][T11786] Sensor A: ================== END STATUS ================== 20:26:34 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r2, 0x1277, 0x0) dup(r2) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8955, &(0x7f0000000000)=0x2) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r5, &(0x7f00000017c0), 0x315, 0x800000) 20:26:34 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x1009800, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:26:34 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x300000f, 0x4010, r0, 0x62c3b000) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a0090040300001af5c97824", 0x12, 0x400}], 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}}}, 0x78) mount$fuse(0x0, &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='fuse\x00', 0x40000, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@allow_other='allow_other'}, {@blksize={'blksize'}}, {@allow_other='allow_other'}], [{@subj_user={'subj_user', 0x3d, 'minix\x00'}}, {@fsname={'fsname', 0x3d, 'minix\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x39, 0x33, 0x36, 0x33, 0x31, 0x38, 0x0, 0x39], 0x2d, [0x34, 0x31, 0x66, 0x38], 0x2d, [0x63, 0x36, 0xb91a74d4872d2278, 0x30], 0x2d, [0x35, 0x34, 0x36, 0x62], 0x2d, [0x35, 0x65, 0x63, 0x32, 0x33, 0x35, 0x35, 0x38]}}}, {@dont_hash='dont_hash'}]}}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r6, 0x0, 0x100000001) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0x180, 0x0, 0x2, 0x3, 0x0, 0x0, {0xc, 0x0, 0x9}, [@CTA_EXPECT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x6}, @CTA_EXPECT_TUPLE={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_TUPLE={0x98, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={[], [], @rand_addr=0x64010102}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @loopback}}}]}, @CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x3}]}, 0x180}, 0x1, 0x0, 0x0, 0x14}, 0x0) 20:26:34 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)=0x7000000) 20:26:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20499, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000080), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x970ba90543d1828e) open(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x101000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) r0 = creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6c00) creat(0x0, 0x54) dup(0xffffffffffffffff) mkdirat(r0, 0x0, 0x45) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff3b) open$dir(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e20, 0x100004, @mcast1}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0xe, 0x10010, 0xffffffffffffffff, 0x12f5b000) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r3, 0x7fff) sendfile(r2, r3, 0x0, 0x8000fffffffe) 20:26:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/wireless\x00') r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) preadv(r1, &(0x7f00000017c0), 0x199, 0x300000000000000) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r4 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) [ 1467.674389][T11817] Sensor A: ================= START STATUS ================= [ 1467.690898][T11817] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1467.707035][T11817] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1467.726324][T11817] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1467.740593][T11817] v4l2-ctrls: Sensor A: Brightness: 128 [ 1467.755683][T11817] v4l2-ctrls: Sensor A: Contrast: 128 [ 1467.767906][T11817] v4l2-ctrls: Sensor A: Hue: 0 [ 1467.784448][T11817] v4l2-ctrls: Sensor A: Saturation: 128 [ 1467.812638][T11817] Sensor A: ================== END STATUS ================== 20:26:34 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) setsockopt$inet_tcp_buf(r1, 0x6, 0xe, &(0x7f00000001c0)="9ffae430652970c8729c89681247c10b2f9de98a1d37f48c6d96a2e507d91ce7adca725191970304bf777de8cbe28fa1a8c9d12310d151e0164ac3887b4375d8aff5e2dae2", 0x45) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a4faa1f2a00001af5c97824", 0x12, 0x400}], 0x0, 0x0) 20:26:34 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x100f000, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:26:35 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x60, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000200012800b000067656e657665000010008280060005000300000004643500060008000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB], 0x50}}, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000002c0)={0x0, @ethernet={0x1, @dev={[], 0x37}}, @l2tp={0x2, 0x0, @rand_addr=0x64010102, 0x1}, @can={0x1d, r6}, 0x101, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)='syzkaller1\x00', 0x1, 0x4, 0x7f}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)={0x66, 0x2, 0x4, 0x40, 0xffff40ca, {r2, r3/1000+60000}, {0x0, 0x2, 0x1, 0xc4, 0x1, 0x2b, "396dd458"}, 0xffffff77, 0x4, @userptr=0x9, 0x7f}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a0090040300001af5c97824", 0x12, 0x400}], 0x0, 0x0) [ 1468.170710][T11844] Sensor A: ================= START STATUS ================= [ 1468.206898][T11844] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar 20:26:35 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$inet(0x2, 0xa, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)={0x50, r4, 0x78d, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1f}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7c}]}, 0x50}}, 0x94) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000600)={0x214, r4, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x0, 0x10, 0x1}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x0, 0x9, 0x387}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x0, 0x14, 0xffffffffffffff3f}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x0, 0x15, 0x46}, @NL80211_MESHCONF_FORWARDING={0x0, 0x13, 0x1}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x0, 0x3, 0xa1}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x0, 0x1, 0xfb}]}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x3}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x401, 0x4}}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_BSS_BASIC_RATES={0x0, 0x24, "3456658b7a1f5d245b1f5e2f3fdb01630b6c8bb4951b0efafd2dc267cf095e63fdfe2a72330b"}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211, @NL80211_ATTR_HANDLE_DFS, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x2}, @NL80211_ATTR_DTIM_PERIOD={0xa, 0xd, 0x1}, @NL80211_ATTR_SOCKET_OWNER]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x8955, &(0x7f0000000000)=0x2) r5 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0xd1e, 0x200000) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000027000a304ab60000001f00000005000000000000080000000000006934"]) ioctl$KDGKBMETA(r5, 0x4b62, &(0x7f0000000080)) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r6, &(0x7f00000017c0), 0x315, 0x800000) [ 1468.231219][T11844] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1468.237226][T11844] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1468.267867][T11849] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1468.300293][T11849] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1468.315850][T11844] v4l2-ctrls: Sensor A: Brightness: 128 [ 1468.339657][T11844] v4l2-ctrls: Sensor A: Contrast: 128 [ 1468.366123][T11844] v4l2-ctrls: Sensor A: Hue: 0 [ 1468.392169][T11844] v4l2-ctrls: Sensor A: Saturation: 128 [ 1468.414634][T11844] Sensor A: ================== END STATUS ================== 20:26:35 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x1099800, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:26:35 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000001) ioctl$SCSI_IOCTL_SYNC(r3, 0x4) ioctl$FIOCLEX(r0, 0x5451) mknod(&(0x7f0000000180)='./file0\x00', 0x8, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a0090040300001af5c97824", 0x12, 0xc00}], 0x0, 0x0) 20:26:35 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000640)='/dev/sequencer\x00', 0x44000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000680)='/dev/dlm-control\x00', 0x0, 0x0) setsockopt$packet_int(r3, 0x107, 0x9, &(0x7f00000006c0)=0x7e50000, 0x4) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8955, &(0x7f0000000000)=0x2) syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r5, 0x1277, 0x0) preadv(r5, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/69, 0x45}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000000340)=""/105, 0x69}, {&(0x7f0000000700)=""/58, 0x3a}, {&(0x7f0000000180)=""/34, 0x22}, {&(0x7f00000003c0)=""/144, 0x90}, {&(0x7f0000000480)=""/92, 0x5c}, {&(0x7f0000000500)=""/148, 0x94}], 0x8, 0x800000) 20:26:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000000)=0x4, 0x4) 20:26:35 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)=0x8000000) [ 1468.679076][T11863] Sensor A: ================= START STATUS ================= [ 1468.711561][T11863] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1468.746040][T11863] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1468.772124][T11863] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1468.807847][T11863] v4l2-ctrls: Sensor A: Brightness: 128 [ 1468.850415][T11863] v4l2-ctrls: Sensor A: Contrast: 128 [ 1468.882398][T11863] v4l2-ctrls: Sensor A: Hue: 0 20:26:35 executing program 4: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081) r2 = socket$rds(0x15, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r1, 0x4008550c, 0x0) [ 1468.902993][T11863] v4l2-ctrls: Sensor A: Saturation: 128 [ 1468.926041][T11863] Sensor A: ================== END STATUS ================== 20:26:38 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x2000000, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:26:38 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x8955, &(0x7f0000000000)=0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x400000, 0x0) fdatasync(r4) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r5, &(0x7f00000017c0), 0x315, 0x800000) 20:26:38 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000ffffffc600000000000000630a00ff000000009500000000000000b4e47fcb504922421b549111b14d03e6f0b8ee3374701e2c88c646ca6586fe81b933030a2236757076e875b498a0db5e6c4d18c4311c2ba1ed3fc9088a9d283c25801f79ec838af275ce33"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 20:26:38 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)=0x3f000000) 20:26:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20499, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x970ba90543d1828e) open(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x101000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6c00) creat(0x0, 0x54) dup(0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r1, 0x7fff) sendfile(0xffffffffffffffff, r1, 0x0, 0x8000fffffffe) 20:26:38 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) recvmsg$can_j1939(r1, &(0x7f0000000740)={&(0x7f0000000500)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000580)=""/137, 0x89}, {&(0x7f0000000640)=""/45, 0x2d}], 0x2, &(0x7f00000006c0)=""/104, 0x68}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000001) bind$xdp(r0, &(0x7f0000000780)={0x2c, 0xc, r2, 0x21, r3}, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r5, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r6 = syz_open_pts(r5, 0x0) ioctl$TCSETSF(r6, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) [ 1471.470826][T11916] Sensor A: ================= START STATUS ================= [ 1471.479741][T11916] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1471.500343][T11916] v4l2-ctrls: Sensor A: Vertical Flip: false 20:26:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = getpid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10801}, r2, 0x0, 0xffffffffffffffff, 0x2) syz_open_procfs(r2, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x1f, 0x20, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000000), 0xb}, 0x0, 0x0, 0x6e07, 0x1, 0x0, 0x5, 0x4}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) ftruncate(r3, 0x200004) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mount$9p_xen(0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r0, r3, 0x0, 0x80001d00c0d0) [ 1471.524927][T11916] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1471.555536][T11916] v4l2-ctrls: Sensor A: Brightness: 128 20:26:38 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) [ 1471.575185][T11916] v4l2-ctrls: Sensor A: Contrast: 128 [ 1471.611491][T11916] v4l2-ctrls: Sensor A: Hue: 0 [ 1471.629050][T11916] v4l2-ctrls: Sensor A: Saturation: 128 [ 1471.642477][T11916] Sensor A: ================== END STATUS ================== 20:26:38 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x2099800, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:26:38 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x44000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x3, "43f0a9000000f40e00f30800000000ff0100"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) accept4$tipc(r2, 0x0, &(0x7f00000000c0), 0x40000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000001) ioctl$KVM_ASSIGN_DEV_IRQ(r3, 0x4040ae70, &(0x7f0000000000)={0x80000004, 0x0, 0x442, 0x203}) [ 1471.944632][T11941] Sensor A: ================= START STATUS ================= 20:26:38 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x8955, &(0x7f0000000000)=0x2) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) r3 = geteuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}}}, 0x78) r5 = getpgrp(0x0) sched_setaffinity(r5, 0xfffffffffffffe6a, &(0x7f0000000100)=0x200baa) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, r3, r4, 0x4, 0x85a}, 0x3, 0x8e8, 0x5, 0x3f, r5, r6}) [ 1471.991022][T11941] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1472.017688][T11941] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1472.045783][T11941] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1472.083238][T11941] v4l2-ctrls: Sensor A: Brightness: 128 20:26:39 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000100), 0xc, &(0x7f0000000980)={&(0x7f0000000280)={0x10}, 0x10}}, 0x0) recvmsg$can_bcm(r2, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000bc0)=""/15, 0xf}, {&(0x7f0000000dc0)=""/252, 0xfc}], 0x2}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)=""/29, 0x1d}, {&(0x7f0000000580)=""/109, 0x6d}], 0x2}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000006c0)=""/82, 0x52}, {&(0x7f00000001c0)=""/50, 0x32}, {&(0x7f0000000ac0)=""/243, 0xf3}], 0x3}}], 0x3, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000007c0)=[{{&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x2, {0x0, @local, @local}}}], 0x20}}], 0x2, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x18a}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x833}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 1472.109870][T11941] v4l2-ctrls: Sensor A: Contrast: 128 [ 1472.121439][ T27] audit: type=1804 audit(1591043199.021:292): pid=11948 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir310235184/syzkaller.KKpbs4/587/cgroup.controllers" dev="sda1" ino=16381 res=1 [ 1472.162447][T11941] v4l2-ctrls: Sensor A: Hue: 0 [ 1472.185531][T11941] v4l2-ctrls: Sensor A: Saturation: 128 [ 1472.207380][T11941] Sensor A: ================== END STATUS ================== [ 1472.341412][ T27] audit: type=1804 audit(1591043199.241:293): pid=11951 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir310235184/syzkaller.KKpbs4/587/cgroup.controllers" dev="sda1" ino=16381 res=1 20:26:39 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x3000000, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:26:39 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000ffffffb600000000000000630a00ff000000009500000000000000b4e47fcb504922421b549111b14d03e6f0b8ee3374701e2c88c646ca6586fe81b933030a2236757076e875b498a0db5e6c4d18c4311c2ba1ed3fc9088a9d283c25801f79ec838af275ce33"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 20:26:39 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@can_delroute={0x2c, 0x19, 0x4, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x5}, [@CGW_MOD_AND={0x15, 0x1, {{{0x0, 0x0, 0x0, 0x1}, 0x7, 0x7, 0x0, 0x0, "171f932dbb832346"}, 0x3}}]}, 0x2c}}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r5, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1b, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x2}}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fffffff}, [@call={0x85, 0x0, 0x0, 0x11}, @generic={0x7, 0x2, 0x7, 0x6, 0x3}, @map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, @jmp={0x5, 0x0, 0x2, 0x7, 0x1, 0xfffffffffffffff0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x2, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000100)='GPL\x00', 0xffff, 0x9e, &(0x7f0000000340)=""/158, 0x40f00, 0x0, [], 0x0, 0x1, r2, 0x8, &(0x7f0000000180)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0xb, 0x1, 0xfffffff8}, 0x10, r6, r2}, 0x78) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x8955, &(0x7f0000000000)=0x2) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r7, &(0x7f00000017c0), 0x315, 0x800000) r8 = socket$pppl2tp(0x18, 0x1, 0x1) fremovexattr(r8, &(0x7f0000000040)=@known='trusted.overlay.redirect\x00') [ 1472.470464][ T27] audit: type=1804 audit(1591043199.241:294): pid=11948 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir310235184/syzkaller.KKpbs4/587/cgroup.controllers" dev="sda1" ino=16381 res=1 [ 1472.560646][T11965] Sensor A: ================= START STATUS ================= [ 1472.584943][T11965] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar 20:26:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)=0x40000000) [ 1472.613858][T11965] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1472.646258][T11965] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1472.676100][T11965] v4l2-ctrls: Sensor A: Brightness: 128 [ 1472.700886][T11965] v4l2-ctrls: Sensor A: Contrast: 128 [ 1472.733782][T11965] v4l2-ctrls: Sensor A: Hue: 0 [ 1472.756445][T11965] v4l2-ctrls: Sensor A: Saturation: 128 [ 1472.792526][T11965] Sensor A: ================== END STATUS ================== 20:26:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = getpid() ptrace$setsig(0x4203, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10801}, r2, 0x0, 0xffffffffffffffff, 0x2) syz_open_procfs(r2, &(0x7f0000000180)='maps\x00') r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x145) ftruncate(r3, 0x200004) mount$9p_xen(0x0, 0x0, &(0x7f0000000280)='9p\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 20:26:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) r3 = openat$cgroup_ro(r1, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r3, 0x5502) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r4 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) 20:26:41 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x8955, &(0x7f0000000000)=0x2) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r4, &(0x7f00000017c0), 0x315, 0x800000) 20:26:41 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x3099800, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:26:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20499, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x970ba90543d1828e) open(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x101000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6c00) creat(0x0, 0x54) dup(0xffffffffffffffff) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20008008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000100)=0x7, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 20:26:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)=0xfdfdffff) [ 1474.613011][T12002] Sensor A: ================= START STATUS ================= [ 1474.651539][T12002] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1474.719367][T12002] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1474.748864][T12002] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1474.777083][T12002] v4l2-ctrls: Sensor A: Brightness: 128 [ 1474.812108][T12002] v4l2-ctrls: Sensor A: Contrast: 128 [ 1474.848606][T12002] v4l2-ctrls: Sensor A: Hue: 0 20:26:41 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x113, 0x0, &(0x7f0000000380)="3f006671d7af527d97f9ea01000000080000000000000000000000000000000000419e65d402756f9a851a5ed2daac95e8d6384af81ad826eafdf1044b6b2d1bd6e61a0abf108e4cff69af9b1a0e1b218f5fa0bacf000bf303000000e0579edbf94ba2bfa5f8de957520072cade66322009a8b23e6bc13e21845484138f08e5bfe65a609e1af6fb2add6fe88d24456a430a4fb9bd4e441c06a13e4847871d0d3ae83d45f923c692b50ce6553d18928ab1b9788bebf6d547417af2f55a74af7da5130866810c7f4fb24b9d7c7364fc1d5975ee871e64914522fd43a43f48ab829cd9430148e4d7c0a95f0990c80dba7683c7d77267750ac53abd52979c6570444781670046535cf6e81474be92954383569c2a7", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x8955, &(0x7f0000000000)=0x2) ioctl$SNDRV_PCM_IOCTL_START(r2, 0x4142, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) getsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffffffffffe}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0xff}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000180)={r5, 0x8}, &(0x7f0000000340)=0x8) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r6, &(0x7f00000017c0), 0x315, 0x800000) 20:26:41 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x17, 0x1, 0x63, 0x8, 0x1bc7, 0x9010, 0x6e8e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xd6, 0xc, 0x2b, 0x0, [], [{{0x9, 0x5, 0xb, 0x2, 0x128}}, {{0x9, 0x5, 0x8a, 0x2, 0x1}}]}}]}}]}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_mreqn(r1, 0x0, 0x31, 0x0, &(0x7f0000000200)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a300a33341dc", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f00)=@newtfilter={0x3c, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @loopback}]}}]}, 0x3c}}, 0x0) [ 1474.875243][T12002] v4l2-ctrls: Sensor A: Saturation: 128 [ 1474.909164][T12002] Sensor A: ================== END STATUS ================== 20:26:41 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x4000000, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1475.143026][T12032] Sensor A: ================= START STATUS ================= [ 1475.166443][T12032] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1475.180992][T12032] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1475.195136][T12032] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1475.209114][T12032] v4l2-ctrls: Sensor A: Brightness: 128 [ 1475.222964][T12032] v4l2-ctrls: Sensor A: Contrast: 128 [ 1475.235065][T12032] v4l2-ctrls: Sensor A: Hue: 0 [ 1475.245451][T12032] v4l2-ctrls: Sensor A: Saturation: 128 [ 1475.268176][T12032] Sensor A: ================== END STATUS ================== 20:26:42 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x5000000, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1475.357773][ T4106] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1475.458502][ T4106] usb 5-1: Using ep0 maxpacket: 8 20:26:42 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400080, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000380)=[@in={0x2, 0x4, @private=0xa010102}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000080)={r3, 0x0, 0x0, 0xfffffffffffffffe}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000180)={r3, 0xd}, &(0x7f0000000340)=0x8) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="88000000000000000500000000000000050000000000000003000000000000040000000000000000766d6e65743173656c696e75785c736563757269747928000100000000000000cef8ffffffffffff070000020000000025766d6e65743000060000000000000009000000000000000d000000010000002f6465762f6e65742f74756e00000000"], 0x88) r6 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x8955, &(0x7f0000000000)=0x2) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r7, &(0x7f00000017c0), 0x315, 0x800000) [ 1475.528654][T12047] Sensor A: ================= START STATUS ================= [ 1475.556691][T12047] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar 20:26:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)=0xff000000) 20:26:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0, @ANYRESHEX, @ANYRESOCT=r0, @ANYRESHEX=r0, @ANYBLOB="0e3d3bfa06ae7a8fb0a7bb4e3be7f69465b7c5bcdd63e733dcf59715d7276eac92e4350c46b7"], 0xffffff3a) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x101000, 0x0) r2 = syz_open_pts(r1, 0x400000) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x1ff, 0x4, "20f0a9000000f40e00f30800000000ff0100"}) [ 1475.578848][ T4106] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 296 [ 1475.592424][T12047] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1475.607976][ T4106] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 1 [ 1475.626723][T12047] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1475.645766][ T4106] usb 5-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=6e.8e [ 1475.656170][T12047] v4l2-ctrls: Sensor A: Brightness: 128 [ 1475.680541][T12047] v4l2-ctrls: Sensor A: Contrast: 128 [ 1475.700840][ T4106] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1475.715558][T12047] v4l2-ctrls: Sensor A: Hue: 0 [ 1475.736238][T12047] v4l2-ctrls: Sensor A: Saturation: 128 [ 1475.749834][ T4106] usb 5-1: config 0 descriptor?? [ 1475.769265][T12047] Sensor A: ================== END STATUS ================== [ 1475.799917][T12028] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1475.807560][T12028] raw-gadget gadget: fail, usb_ep_enable returned -22 20:26:42 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x8955, &(0x7f0000000000)=0x2) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r4, &(0x7f00000017c0), 0x315, 0x800000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r5, 0x1277, 0x0) fstat(r5, &(0x7f0000000040)) 20:26:42 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x6000000, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1475.873562][ T4106] option 5-1:0.0: GSM modem (1-port) converter detected [ 1475.896538][ T4106] usb 5-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 1476.022225][T12073] Sensor A: ================= START STATUS ================= [ 1476.049441][T12073] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1476.071892][T12073] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1476.088059][ T49] usb 5-1: USB disconnect, device number 24 [ 1476.104553][ T49] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 1476.115813][T12073] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1476.130188][ T49] option 5-1:0.0: device disconnected [ 1476.136784][T12073] v4l2-ctrls: Sensor A: Brightness: 128 [ 1476.157817][T12073] v4l2-ctrls: Sensor A: Contrast: 128 [ 1476.171613][T12073] v4l2-ctrls: Sensor A: Hue: 0 [ 1476.183742][T12073] v4l2-ctrls: Sensor A: Saturation: 128 [ 1476.196002][T12073] Sensor A: ================== END STATUS ================== 20:26:43 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@private0, @in6=@local, 0x4e21, 0xfff8, 0x4e24, 0x1ff, 0xa, 0xa0, 0x10, 0x73, 0x0, 0xee00}, {0x4, 0x8, 0xffffffffffffffe1, 0xffffffff, 0x6, 0x1, 0x3}, {0x0, 0x80000001, 0x3, 0x1ff}, 0x7, 0x6e6bbd, 0x1, 0x0, 0x2, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d3, 0x6c}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3502, 0x1, 0x3, 0x6, 0xf94a, 0x20, 0x8000}}, 0xe8) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8955, &(0x7f0000000000)=0x2) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r5, &(0x7f00000017c0), 0x315, 0x800000) [ 1476.867664][ T49] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1476.958413][ T49] usb 5-1: Using ep0 maxpacket: 8 [ 1477.088287][ T49] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 296 [ 1477.110497][ T49] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 1 [ 1477.137593][ T49] usb 5-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=6e.8e [ 1477.146698][ T49] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1477.159676][ T49] usb 5-1: config 0 descriptor?? [ 1477.180878][T12028] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1477.198313][T12028] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1477.229999][ T49] option 5-1:0.0: GSM modem (1-port) converter detected [ 1477.243654][ T49] usb 5-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 1477.471804][ T49] usb 5-1: USB disconnect, device number 25 [ 1477.490598][ T49] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 1477.547881][ T49] option 5-1:0.0: device disconnected 20:26:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20499, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x970ba90543d1828e) open(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x101000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6c00) creat(0x0, 0x54) dup(0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 20:26:45 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x7000000, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:26:45 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000080)={0x1, 0x1, [@local]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x3, 0x0, [{}, {}, {}]}) r4 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8955, &(0x7f0000000000)=0x2) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r5, &(0x7f00000017c0), 0x315, 0x800000) 20:26:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r1, 0x1277, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x1) r3 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) 20:26:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)=0xfffffdfd) 20:26:45 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002e0, 0x69, 0x20000000, &(0x7f00000004c0)="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", 0x0, 0xfd, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) gettid() [ 1478.720457][T12142] Sensor A: ================= START STATUS ================= [ 1478.801124][T12142] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1478.858004][T12142] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1478.907590][T12142] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1478.953289][T12142] v4l2-ctrls: Sensor A: Brightness: 128 [ 1478.979786][T12142] v4l2-ctrls: Sensor A: Contrast: 128 [ 1479.010863][T12142] v4l2-ctrls: Sensor A: Hue: 0 20:26:46 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x10000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x8955, &(0x7f0000000000)=0x2) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000140)=ANY=[], 0x208e24b) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) ioctl$KDSIGACCEPT(r6, 0x4b4e, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) epoll_wait(r5, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x4) preadv(r4, &(0x7f00000017c0), 0x315, 0x800000) [ 1479.033877][T12142] v4l2-ctrls: Sensor A: Saturation: 128 [ 1479.060887][T12142] Sensor A: ================== END STATUS ================== 20:26:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0), 0xfffffdef) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500), &(0x7f0000000080)=0x14) bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x0, 0x400000, 0x1}, 0x3c) r1 = socket(0x200000000000011, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x3c) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002a80)={{{@in=@loopback, @in=@dev}}, {{@in6=@private1}, 0x0, @in6=@loopback}}, &(0x7f0000002b80)=0xe8) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, r5}, 0x14) bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1}, 0x3c) 20:26:46 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x8000000, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1479.345375][T12167] Sensor A: ================= START STATUS ================= [ 1479.372959][T12167] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1479.386387][T12167] v4l2-ctrls: Sensor A: Vertical Flip: false 20:26:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0), 0xfffffdef) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500), &(0x7f0000000080)=0x14) bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x0, 0x400000, 0x1}, 0x3c) r1 = socket(0x200000000000011, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x3c) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002a80)={{{@in=@loopback, @in=@dev}}, {{@in6=@private1}, 0x0, @in6=@loopback}}, &(0x7f0000002b80)=0xe8) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, r5}, 0x14) bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1}, 0x3c) [ 1479.407996][T12167] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1479.435216][T12167] v4l2-ctrls: Sensor A: Brightness: 128 [ 1479.457237][T12167] v4l2-ctrls: Sensor A: Contrast: 128 [ 1479.491799][T12167] v4l2-ctrls: Sensor A: Hue: 0 20:26:46 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x8955, &(0x7f0000000000)=0x2) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x60, &(0x7f0000000140)={&(0x7f0000000b80)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x300}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@private0={0xfc, 0x0, [], 0x1}, r6}, 0x14) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r7, &(0x7f00000017c0), 0x315, 0x800000) [ 1479.514704][T12167] v4l2-ctrls: Sensor A: Saturation: 128 [ 1479.541912][T12167] Sensor A: ================== END STATUS ================== 20:26:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x6, 0x0, 0x80000020, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$SIOCAX25DELFWD(r2, 0x89eb, &(0x7f0000000000)={@bcast, @null}) [ 1479.716239][T12181] device geneve2 entered promiscuous mode [ 1480.154625][T12187] device geneve2 entered promiscuous mode 20:26:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20499, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f00000001c0), 0x10}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000000080)='./bus\x00', 0x220241, 0xa) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x970ba90543d1828e) open(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x180) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2c00) creat(0x0, 0x54) dup(0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = open$dir(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x1) r2 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x6e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f0000000100)=0x5, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1c1042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r3, 0x7fff) sendfile(r2, r3, 0x0, 0x8000fffffffe) 20:26:48 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x14099800, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:26:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) r1 = socket$kcm(0x2, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0) close(r1) getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f0000000180)=""/95, &(0x7f0000000200)=0x5f) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000040)={0x10001, 0x6, 0x65, &(0x7f0000000100)="46548d9d61e7cdfd10e93ffc555f3c3fbcfb3fd21207a5015f6e41e9c85ef4058b400aecf3de65bfa34b6cbabd66f74354acf6d8d086dc5dcd2fe6067229c20114ef64ae6162e37a0a2c682770523bb42fa32dce63bbb683b007024558fa45d45e4741bec7"}) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) 20:26:48 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0200002d000507d25a80648c63940d0624fc601000024009000200051a82c137153e670402098003001700d1bd", 0x33fe0}], 0x1}, 0x0) 20:26:48 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x8955, &(0x7f0000000000)=0x2) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r4, &(0x7f00000017c0), 0x315, 0x800000) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x1) 20:26:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x16, "20f0a9000000f40e00f30800000000ff0100"}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r2, 0x1277, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) r4 = dup3(r2, r1, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1b) [ 1481.900412][T12228] Sensor A: ================= START STATUS ================= [ 1481.922295][T12228] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1481.944701][T12228] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1481.969502][T12228] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1481.999565][T12228] v4l2-ctrls: Sensor A: Brightness: 128 20:26:48 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002e0, 0x69, 0x20000000, &(0x7f00000004c0)="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", 0x0, 0xfd, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) gettid() perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x75c4f2668ab45b70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1482.025569][T12228] v4l2-ctrls: Sensor A: Contrast: 128 [ 1482.042331][T12228] v4l2-ctrls: Sensor A: Hue: 0 [ 1482.062769][T12228] v4l2-ctrls: Sensor A: Saturation: 128 [ 1482.082207][T12228] Sensor A: ================== END STATUS ================== 20:26:49 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000001) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000040)=0x6) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x8955, &(0x7f0000000000)=0x2) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r6, &(0x7f00000017c0), 0x315, 0x800000) 20:26:49 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x15099800, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1482.386299][T12252] Sensor A: ================= START STATUS ================= [ 1482.416707][T12252] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1482.465329][T12252] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1482.491856][T12252] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1482.528119][T12252] v4l2-ctrls: Sensor A: Brightness: 128 [ 1482.583394][T12252] v4l2-ctrls: Sensor A: Contrast: 128 [ 1482.626281][T12252] v4l2-ctrls: Sensor A: Hue: 0 20:26:49 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fcntl$notify(r1, 0x402, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'tunl0\x00', 0x800}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x8955, &(0x7f0000000000)=0x2) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r4, &(0x7f00000017c0), 0x315, 0x800000) [ 1482.674912][T12252] v4l2-ctrls: Sensor A: Saturation: 128 [ 1482.710744][T12252] Sensor A: ================== END STATUS ================== 20:26:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000380), 0x1000) 20:26:49 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0xff000000, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1482.958682][T12276] Sensor A: ================= START STATUS ================= [ 1482.994714][T12276] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1483.019232][T12276] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1483.042223][T12276] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1483.056106][T12276] v4l2-ctrls: Sensor A: Brightness: 128 [ 1483.070796][T12276] v4l2-ctrls: Sensor A: Contrast: 128 [ 1483.083539][T12276] v4l2-ctrls: Sensor A: Hue: 0 [ 1483.095895][T12276] v4l2-ctrls: Sensor A: Saturation: 128 [ 1483.109416][T12276] Sensor A: ================== END STATUS ================== 20:26:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20499, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x970ba90543d1828e) open(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x101000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6c00) creat(0x0, 0x54) dup(0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x541042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 20:26:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000000)={0x1ff, 0x4, 0x4, 0x4000, 0xffffffff, {0x77359400}, {0x4, 0x0, 0xc1, 0x3, 0x9, 0x3, "8644cad6"}, 0x10001, 0x4, @offset=0x6, 0x3, 0x0, r0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r2, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8010) r3 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) 20:26:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x428400, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r1, 0x1277, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r2, 0x1277, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000000)={{{0x8, 0x1}}, 0xd4, 0x80, &(0x7f0000000100)="1bc3d2db44d71fd86eb5ea949157a445ca5faa2dc6c217c92cdae255ce0ba9fb480dffa88fb156f5fdebf7c3c8449678a890b0406166e1b0942bbf08bc3bc17199c5538b510e46f4053409dc205745ccc3bd553b64aa609f9d8825a75ee58f3dcb117e69ef7f78eeef52c07100008d3b2306eaa322cf6ceb1e9f06bb324a6ca5fab0446a0729f94a31dd044545dc5abe400fcd7938819fb387bad98443ad636a7ebd33402126d6a755b5b70371a1194327e4c02e87196c6289416916b6897c1c499049d315a2f7c4cf6c7e5f752618eaaf4d5114"}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$KDSKBLED(r3, 0x4b65, 0x9) 20:26:53 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x8e}}}) ioctl$VIDIOC_DQBUF(r0, 0xc0505609, &(0x7f0000000600)={0x0, 0xb, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "9d494949"}, 0x0, 0x0, @fd}) 20:26:53 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$inet(0x2, 0xa, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8955, &(0x7f0000000000)=0x7) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r5, &(0x7f00000017c0), 0x315, 0x800000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) getpeername$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) 20:26:53 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1486.344208][T12300] Sensor A: ================= START STATUS ================= [ 1486.381029][T12300] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar 20:26:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0), 0xfffffdef) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r1}, 0x3c) socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x1000000000000, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002a80)={{{@in=@loopback, @in=@dev}}, {{@in6=@private1}, 0x0, @in6=@loopback}}, &(0x7f0000002b80)=0xe8) r3 = socket(0x200000000000011, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(r3, &(0x7f0000000240), 0x14) bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1}, 0x3c) [ 1486.411734][T12300] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1486.442798][T12300] v4l2-ctrls: Sensor A: Horizontal Flip: false 20:26:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x181000, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='pids.current\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) r4 = socket$kcm(0x2, 0x2, 0x0) sendmsg$sock(r4, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0) close(r4) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r6 = socket(0x0, 0x800, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f00000001c0)=0x4, 0x4) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}}}, 0x78) syz_open_dev$hiddev(&(0x7f0000000240)='/dev/usb/hiddev#\x00', 0xff, 0x101400) write$P9_RGETATTR(r2, &(0x7f0000000100)={0xa0, 0x19, 0x1, {0x68, {0x10, 0x0, 0x8}, 0xa6, r5, r7, 0x3, 0xff, 0x1a1, 0x3, 0x10000000000, 0x10001, 0x7db8ad94, 0xffffffffffffb268, 0x8, 0xff, 0x4, 0x400, 0x7, 0x100000001, 0x3}}, 0xa0) [ 1486.505929][T12300] v4l2-ctrls: Sensor A: Brightness: 128 [ 1486.526281][T12300] v4l2-ctrls: Sensor A: Contrast: 128 [ 1486.541547][T12300] v4l2-ctrls: Sensor A: Hue: 0 [ 1486.551852][T12300] v4l2-ctrls: Sensor A: Saturation: 128 [ 1486.572594][T12300] Sensor A: ================== END STATUS ================== 20:26:53 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0}) 20:26:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x620000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000040)={0x0, 0xb59, &(0x7f00000000c0)="d3d9b652be18f017c1c3b2a6d0de1a9be5bade041f5644c43435487574858fd592279b3163dc8490857243fe6446afff7549d4ee085380e55dd9ecc05a9d02502213c17a4d02347a78731dc546c33e019a4c78c2b3590f746d7e45b2368bdfe9c916c0fea714a124a9", 0x0, 0x69}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x3, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x4055) r5 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) [ 1486.830093][T12328] Sensor A: ================= START STATUS ================= 20:26:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x101, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0xfffffffffffffe6a, &(0x7f0000000100)=0x200baa) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000180)={{0x3, 0x0, 0x80000001, 0x2f, 'syz0\x00', 0x80}, 0x1, 0x20000000, 0x0, r2, 0x9, 0x9, 'syz1\x00', &(0x7f0000000100)=['/dev/ptmx\x00', '+#usertrustedkeyringwlan0\x00', '/dev/ptmx\x00', '/dev/ptmx\x00', ':\x00', ']*^\x00', '\x00', '{!\x00', '/dev/null\x00'], 0x4c, [], [0x707, 0x7, 0x9, 0x5]}) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xffff) [ 1486.870624][T12328] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar 20:26:53 executing program 4: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000004040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000000)={0x2e, 0x6, 0x0, {0x1, 0x0, 0x5, 0x0, 'fuse\x00'}}, 0x2e) [ 1486.917952][T12328] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1486.978896][T12328] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1487.011357][T12328] v4l2-ctrls: Sensor A: Brightness: 128 [ 1487.047884][T12328] v4l2-ctrls: Sensor A: Contrast: 128 [ 1487.074413][T12328] v4l2-ctrls: Sensor A: Hue: 0 [ 1487.097046][T12328] v4l2-ctrls: Sensor A: Saturation: 128 [ 1487.123645][T12328] Sensor A: ================== END STATUS ================== 20:26:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000100)={0x79, 0x74, 0x1, 'queue0\x00', 0x10001}) 20:26:56 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20499, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x970ba90543d1828e) open(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x101000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x0) creat(0x0, 0x54) dup(0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x3, @loopback}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r3, 0x7fff) sendfile(r2, r3, 0x0, 0x8000fffffffe) 20:26:56 executing program 4: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffff9c, &(0x7f00000002c0)='/dev/vcsa\x00', 0x2001, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "88c93d06b7c71cbd085033122bc66307ebd61a956318944ef1200b19e64054"}, 0x97) 20:26:56 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0}) 20:26:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r2, 0x1277, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000100)) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r4 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r3, &(0x7f0000000000)="21ffa622709fede6776de101d59c5ff1eb2dd9e127aca699e44a8a6b1c45a237f1d85245891c63b72969f4", 0x2b) sendfile(r6, r5, 0x0, 0x100000001) 20:26:56 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/205, 0xcd}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x100) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x8955, &(0x7f0000000000)=0x2) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r4, &(0x7f00000017c0), 0x315, 0x800000) [ 1489.967437][T12372] Sensor A: ================= START STATUS ================= [ 1489.985107][T12372] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1489.994462][T12372] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1490.001292][T12372] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1490.007823][T12372] v4l2-ctrls: Sensor A: Brightness: 128 [ 1490.013780][T12372] v4l2-ctrls: Sensor A: Contrast: 128 [ 1490.022522][T12372] v4l2-ctrls: Sensor A: Hue: 0 20:26:57 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0}) [ 1490.022537][T12372] v4l2-ctrls: Sensor A: Saturation: 128 [ 1490.022918][T12372] Sensor A: ================== END STATUS ================== 20:26:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0xffffffff, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) 20:26:57 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x1f, &(0x7f0000000080)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x8955, &(0x7f0000000000)=0x2) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r4, &(0x7f00000017c0), 0x315, 0x800000) [ 1490.253333][T12395] Sensor A: ================= START STATUS ================= 20:26:57 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000004040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="2e000000060000000000000000000000010000000000ffffffe300000000000005"], 0x2e) [ 1490.302341][T12395] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1490.335471][T12395] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1490.366580][T12395] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1490.390739][T12395] v4l2-ctrls: Sensor A: Brightness: 128 [ 1490.411845][T12395] v4l2-ctrls: Sensor A: Contrast: 128 [ 1490.435412][T12395] v4l2-ctrls: Sensor A: Hue: 0 [ 1490.456113][T12395] v4l2-ctrls: Sensor A: Saturation: 128 [ 1490.480798][T12395] Sensor A: ================== END STATUS ================== 20:26:57 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x0}) 20:26:57 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002e0, 0x69, 0x20000000, &(0x7f00000004c0)="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", 0x0, 0xfd, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x75c4f2668ab45b70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)=""/109, 0x8a, 0x6d}, 0x20) gettid() [ 1490.742127][T12422] Sensor A: ================= START STATUS ================= [ 1490.785357][T12422] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1490.819736][T12422] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1490.825749][T12422] v4l2-ctrls: Sensor A: Horizontal Flip: false 20:26:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) [ 1490.893275][T12422] v4l2-ctrls: Sensor A: Brightness: 128 [ 1490.924598][T12422] v4l2-ctrls: Sensor A: Contrast: 128 [ 1490.957895][T12422] v4l2-ctrls: Sensor A: Hue: 0 [ 1490.985037][T12422] v4l2-ctrls: Sensor A: Saturation: 128 [ 1491.016063][T12422] Sensor A: ================== END STATUS ================== 20:27:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20499, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x970ba90543d1828e) open(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x101000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6c00) creat(0x0, 0x54) dup(0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 20:27:00 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0xfffffffffffffe8b, 0x0, 0x0, &(0x7f00000001c0)=""/220, 0xda}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$inet(0x2, 0xa, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000040)={{0x8, 0x7f}, {0x1, 0xff}, 0xffff, 0x2, 0x3}) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x8955, &(0x7f0000000000)=0x2) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r4, &(0x7f00000017c0), 0x315, 0x800000) 20:27:00 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x0}) 20:27:00 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r6, 0x1277, 0x0) pwritev(r6, &(0x7f0000000b40)=[{&(0x7f0000000180)="271af0dd2674fa15aacec871952f19f5dab49820501b7d35c0644733b6a6a901e96b7f122a47f5a6223ced6f7da4d5a45710fd4f8815b2ef156a9a0c396ac02b87c8403f5417bfc46a37d71b5c334c7bbdf619e9983020619cbb6c3a77c9694b6ffd0f43b12f15e871807880b95a8d63407de29d6b97ef4089a5b4efaa55b35e1106c3437d0369c1b182d98031b21197c24a70a0e9e35aea86894cf761c1d66e3ea5", 0xa2}, {&(0x7f0000000740)="d2aa5f4f5aab3e2080322d0d04aad8d179e79d33a4fd1e40740ee3c8284074d73db70fe87cad56f429123caaac51c8da65acb7ed684923f7938774a85a2cf20d049c5fae07bef5bdbceea109974f31b78885eb5dc1b43156b53a32b6f900575ea8dbf40d3727619f8b227c35c0867325e022daa6d55290fdf40bb07eedf9befb539fa88dea37dc60e835a5e0052135bbf195988084ce2b296db22aa0bcb4049e5101b37daf4c0e22f179bf02", 0xac}, {&(0x7f0000000800)="6e8c9a15b52af65fdd620c167f2580cea66ea128f192ef933196cc65e4323d38b8d763fc284c89a4a8eb394b837814014e6cf16d07c82a7d2283943e432249db143e1e34ba81f541b8c9b166dd568387e06c071adfb87f654dfbf2d926ba5aff3276d9ed49e18ea1db950cc426e16d187b83cd8e0164f55e91c8e3e9699d6dddcbe716e85efe0320a09ceab61116302327069577455f650e83ed14556f71a74c52e66bdff019dc46d4a1cda18cee2262129b519d06be070e4b43100ce17d9c46b97d7f5857edde2c37697700b417c4c72d0d334de7e5e6b670b5f2ab2792f9433d3edbdb5be46e31fb3d1d0a54d6ba34409c22d55b7297", 0xf7}, {&(0x7f0000000900)="ea1db47268bdc92bea1d1868284fc71294a0daf3d2686c68a145e47e9c8b8ff657e6cb1745d1e924a3628c38c5a53ada98b6d06444677fae7d853915bb07487d90905c81c79c17005c06d8a2d463e7e2af1b0784629df2d302", 0x59}, {&(0x7f0000000980)="9c517405456f5df7401bb800cea3d54bf3f62eb74662d735fd0c2e485e4b6dc26148fc68f84d41097fd9b06ac35734b5549fb44427f4ef2de1ebe035a9c86a387e35d2b133ac0081b61a0681f01b009257c6d0595b53fbe6a2531ffc46bb3a9c57fcc706cedaa537c6f3dcfa38844103dd47825927d83421f17383708d68d50544d25649a621ac06e09f2cd9c420b53009dd", 0x92}, {&(0x7f0000000040)="9a0653840647da9d8ae31ad92bede9df27a2a40872bdc5877f960fa4ee0b098ca016b4c9c665a41ff8", 0x29}, {&(0x7f0000000a40)="c8dbe98fc9606067f8498f43481b360f997f9aa7d5d4c4d6412588cc314dc414268e6f8079bbf29a00591446fe0a0740e575fba7304c108565ee18b4dab625b0f65560a2b110487cd02a8de8b7b261f27ab4811bc494ddc5e68a5928bf35c4df248dfa1c2b94146eb6e391448798f7670a3335b47cc5550acd46a2d7cb1f5f32762348836b173908f529fe69644a5f7a37fe84181103840996870e9ccfd480f7a4c1c233820e55e5d5caf9e9909cc83d3292d4caf5bc13504177aa8839e937626e1065439176a2ffbc5b", 0xca}], 0x7, 0x1f74) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000500)={{{@in=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@empty}}, &(0x7f0000000600)=0xe8) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000340)='./file0\x00', 0x80000001, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000380)="8ca793db3d78e5b6c1d0ed24a1ca0f359996f9545d3623d9bd99bae6f5364f955d8dffadb1f7a4c7967c5334de2ac5a33e898b6c9808747215b57426f5dcea55e8506b8b", 0x44, 0x9}, {&(0x7f0000000400)="48602637b053169a6bf12450419035bac32bade64a14f5d1a5271bb0bc17419563d4ad293e1b3938ebe363f94d913857c83c99f485f8e0308ab6ba3e71c52c34d00985dd55dd5560bd7bf51ac6c194cd87a256ce9110f51e35666b2fd840fbabb076c1cb1bc1244c4cf1f5298fd2ab76325cc4f0ee408a869da10f7d3aff504228a495c883efc9fdc044916f5437", 0x8e, 0x80000000}], 0x2a0b400, &(0x7f0000000640)={[{@shortname_winnt='shortname=winnt'}, {@shortname_lower='shortname=lower'}, {@nonumtail='nnonumtail=1'}, {@numtail='nonumtail=0'}, {@utf8='utf8=1'}], [{@fowner_gt={'fowner>', r7}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x23}}, {@dont_hash='dont_hash'}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@obj_role={'obj_role'}}]}) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9}}}, 0x78) fchown(r1, r7, r9) sendfile(r2, r1, 0x0, 0x100000001) r10 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x541382, 0x4) bind$unix(r10, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) 20:27:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x4800) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0xfff, 0x9, 0x4, "20f0a9000000f40e00f30800000000ff0100"}) r3 = semget$private(0x0, 0x2000000010a, 0x0) semop(r3, &(0x7f0000000200)=[{0x0, 0xfffffffffffefffc}], 0x1) semop(r3, &(0x7f0000000000)=[{0x0, 0xffffffff}], 0x1) r4 = semget$private(0x0, 0x2000000010a, 0x0) semop(r4, &(0x7f0000000200)=[{0x0, 0xfffffffffffefffc}], 0x1) semop(r4, &(0x7f0000000000)=[{0x0, 0xffffffff}], 0x1) semctl$IPC_RMID(r4, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) semctl$SEM_STAT(r3, 0x2, 0x12, &(0x7f00000002c0)=""/249) 20:27:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x0, @loopback}], 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0xff9c, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) [ 1493.431654][T12453] Sensor A: ================= START STATUS ================= [ 1493.482304][T12453] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1493.542097][T12453] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1493.595446][T12453] v4l2-ctrls: Sensor A: Horizontal Flip: false 20:27:00 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$inet(0x2, 0xa, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, 0xffffffffffffffff, 0x0, 0x100000001) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000340)={0xa6, 0x29, 0x1, {0x1, [{{0x1, 0x1, 0x3}, 0xffffffffffffbdf0, 0x80, 0x7, './file0'}, {{0x40, 0x4, 0x7}, 0x5, 0x7f, 0x7, './file0'}, {{0x4, 0x0, 0x2}, 0x9, 0x20, 0x7, './file0'}, {{0x0, 0x3, 0x6}, 0x6d30, 0x7, 0x7, './file0'}, {{0x80}, 0x6556000000000000, 0x1b, 0x7, './file0'}]}}, 0xa6) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r5, 0x1277, 0x0) fchdir(r5) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x8955, &(0x7f0000000000)=0x2) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r6, &(0x7f00000017c0), 0x315, 0x800000) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000080)={0x8, 0x4, 0x4, 0x1000, 0x9, {0x77359400}, {0x5, 0x2, 0x2, 0x3, 0x7, 0x40, "4809f189"}, 0x8, 0x3, @planes=&(0x7f0000000040)={0xafe, 0x4, @fd, 0x40}, 0x4, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r7, &(0x7f0000000100)={0x10000000}) [ 1493.670466][T12453] v4l2-ctrls: Sensor A: Brightness: 128 [ 1493.703130][T12453] v4l2-ctrls: Sensor A: Contrast: 128 [ 1493.726377][T12453] v4l2-ctrls: Sensor A: Hue: 0 [ 1493.746537][T12453] v4l2-ctrls: Sensor A: Saturation: 128 [ 1493.768784][T12453] Sensor A: ================== END STATUS ================== 20:27:00 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0, 0x0}) [ 1493.959448][T12491] Sensor A: ================= START STATUS ================= [ 1493.977504][T12491] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1494.003338][T12491] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1494.024273][T12491] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1494.046399][T12491] v4l2-ctrls: Sensor A: Brightness: 128 20:27:01 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x8955, &(0x7f0000000000)=0x2) syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r4, 0x1277, 0x0) preadv(r3, &(0x7f00000017c0), 0x0, 0x8001) [ 1494.066231][T12491] v4l2-ctrls: Sensor A: Contrast: 128 [ 1494.100099][T12491] v4l2-ctrls: Sensor A: Hue: 0 [ 1494.120169][T12491] v4l2-ctrls: Sensor A: Saturation: 128 [ 1494.146149][T12491] Sensor A: ================== END STATUS ================== 20:27:01 executing program 4: 20:27:01 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x0}) 20:27:01 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, 0xf, 0x6, 0x101, 0x0, 0x0, {0xc, 0x0, 0x7}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048800}, 0x4010) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) getsockopt$nfc_llcp(r3, 0x118, 0x2, &(0x7f00000001c0)=""/102, 0x66) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000080)={0x2480000, 0x4, 0x0, 0xd, 0x0, "cf0aea024635ce4400f30806005633c2a70040"}) socket$key(0xf, 0x3, 0x2) [ 1494.505892][T12518] Sensor A: ================= START STATUS ================= [ 1494.624551][T12518] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1494.645298][T12518] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1494.673290][T12518] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1494.714860][T12518] v4l2-ctrls: Sensor A: Brightness: 128 [ 1494.733729][T12518] v4l2-ctrls: Sensor A: Contrast: 128 [ 1494.751195][T12518] v4l2-ctrls: Sensor A: Hue: 0 [ 1494.760445][T12518] v4l2-ctrls: Sensor A: Saturation: 128 [ 1494.772589][T12518] Sensor A: ================== END STATUS ================== [ 1495.339793][ T27] audit: type=1804 audit(1591043222.243:295): pid=12523 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir310235184/syzkaller.KKpbs4/597/cgroup.controllers" dev="sda1" ino=16344 res=1 [ 1495.416514][ T27] audit: type=1804 audit(1591043222.313:296): pid=12523 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir310235184/syzkaller.KKpbs4/597/cgroup.controllers" dev="sda1" ino=16344 res=1 20:27:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x80, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20499, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x970ba90543d1828e) open(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x101000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6c00) creat(0x0, 0x54) r0 = dup(0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, [], 0x3c}, 0x287000}, 0x2e) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(r0) ftruncate(r3, 0x7fff) sendfile(r2, r3, 0x0, 0x8000fffffffe) 20:27:04 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000580)="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", 0xa0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xffffffffffffffc9, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000000)='trusted\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', 0x0, ':chain\x00'}) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) mmap(&(0x7f0000ff1000/0xd000)=nil, 0xd000, 0x2000000, 0x10010, r0, 0x93976000) 20:27:04 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) sendmsg$AUDIT_USER_TTY(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000800)={0x1010, 0x464, 0x432, 0x70bd29, 0x25dfdbfe, "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", ["", "", "", ""]}, 0x1010}, 0x1, 0x0, 0x0, 0x4054014}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x8955, &(0x7f0000000000)=0x2) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') prctl$PR_SET_SECUREBITS(0x1c, 0x10) preadv(r4, &(0x7f00000017c0), 0x315, 0x800000) 20:27:04 executing program 4: 20:27:04 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x300, 0xffffffffffffffff, 0x0, 0x0}) [ 1497.987895][T12539] Sensor A: ================= START STATUS ================= 20:27:05 executing program 4: [ 1498.031427][T12539] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1498.068532][T12539] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1498.108511][T12539] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1498.147672][T12539] v4l2-ctrls: Sensor A: Brightness: 128 [ 1498.172495][T12539] v4l2-ctrls: Sensor A: Contrast: 128 [ 1498.204597][T12539] v4l2-ctrls: Sensor A: Hue: 0 20:27:05 executing program 4: 20:27:05 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x6000, 0x1) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x100000e, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE64(r3, 0x40081271, &(0x7f0000000040)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) r4 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000040)={0x0, 'lo\x00', {}, 0x4888}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x8955, &(0x7f0000000000)=0x2) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r6, &(0x7f00000017c0), 0x315, 0x800000) [ 1498.251096][T12539] v4l2-ctrls: Sensor A: Saturation: 128 [ 1498.282134][T12539] Sensor A: ================== END STATUS ================== 20:27:05 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x500, 0xffffffffffffffff, 0x0, 0x0}) 20:27:05 executing program 4: [ 1498.480007][T12556] 8021q: VLANs not supported on lo 20:27:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r1 = syz_open_pts(r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0xfffffffffffffe6a, &(0x7f0000000100)=0x200baa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x100000001) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x6, 0x1a, 0xf4, 0xff, 0x0, 0x4, 0x3, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x1100, 0x0, 0x8000, 0x6, 0x6, 0xff, 0x9}, r3, 0xf, r4, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r2, 0xc06c4124, &(0x7f0000000000)) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bsg\x00', 0x800000, 0x0) r7 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r7, 0x100, 0x70bd2a, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x4) sendmsg$NET_DM_CMD_START(r6, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r7, 0x8, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000c004}, 0x4008050) [ 1498.597203][T12567] Sensor A: ================= START STATUS ================= 20:27:05 executing program 4: [ 1498.641768][T12561] 8021q: VLANs not supported on lo [ 1498.655447][T12567] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1498.703796][T12567] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1498.730270][T12567] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1498.752488][T12567] v4l2-ctrls: Sensor A: Brightness: 128 [ 1498.772439][ T27] audit: type=1804 audit(1591043225.673:297): pid=12572 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir310235184/syzkaller.KKpbs4/598/cgroup.controllers" dev="sda1" ino=16099 res=1 [ 1498.843193][T12567] v4l2-ctrls: Sensor A: Contrast: 128 [ 1498.876436][T12567] v4l2-ctrls: Sensor A: Hue: 0 [ 1498.896187][T12567] v4l2-ctrls: Sensor A: Saturation: 128 [ 1498.936675][T12567] Sensor A: ================== END STATUS ================== 20:27:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20499, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x970ba90543d1828e) open(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x101000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4c00) creat(0x0, 0x54) dup(0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 20:27:09 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x1ff}) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x8955, &(0x7f0000000000)=0x2) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x3f) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f00000000c0)) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r5, &(0x7f00000017c0), 0x315, 0x800000) 20:27:09 executing program 4: 20:27:09 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x600, 0xffffffffffffffff, 0x0, 0x0}) 20:27:09 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) 20:27:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r3 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) 20:27:09 executing program 4: [ 1502.453261][T12596] Sensor A: ================= START STATUS ================= [ 1502.493107][T12596] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1502.528249][T12596] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1502.559783][T12596] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1502.592127][T12596] v4l2-ctrls: Sensor A: Brightness: 128 [ 1502.633313][T12596] v4l2-ctrls: Sensor A: Contrast: 128 [ 1502.660817][T12596] v4l2-ctrls: Sensor A: Hue: 0 20:27:09 executing program 4: [ 1502.691549][T12596] v4l2-ctrls: Sensor A: Saturation: 128 [ 1502.714814][T12596] Sensor A: ================== END STATUS ================== 20:27:09 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000040)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x18) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8955, &(0x7f0000000000)=0x2) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r5, &(0x7f00000017c0), 0x315, 0x800000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r6, 0x0, 0x100000001) write$P9_RLERRORu(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="3fc571f6d10321a9a65dc6aee9c7349b2130df6fa9c9d5323941af94f0a60d66d7d19033d9621ddba05af04c297cfc184a8f71786c56644f59a02e559625c48f3b04f9c4dbdb180b3ffed20bec89cec72192a6438f88d0d0dd3e8fa3e6835849a1689348969a34b9cffff9b71c6b8e6d3748bc1d00"/126], 0xd) 20:27:09 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x700, 0xffffffffffffffff, 0x0, 0x0}) 20:27:09 executing program 4: [ 1502.995568][T12622] Sensor A: ================= START STATUS ================= [ 1503.019900][ T27] audit: type=1804 audit(1591043229.923:298): pid=12617 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir219748662/syzkaller.WTadAB/1059/cgroup.controllers" dev="sda1" ino=16290 res=1 [ 1503.036791][T12622] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar 20:27:10 executing program 4: [ 1503.088969][T12622] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1503.113668][T12622] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1503.140496][T12622] v4l2-ctrls: Sensor A: Brightness: 128 [ 1503.159731][T12622] v4l2-ctrls: Sensor A: Contrast: 128 [ 1503.183511][T12622] v4l2-ctrls: Sensor A: Hue: 0 [ 1503.213121][T12622] v4l2-ctrls: Sensor A: Saturation: 128 [ 1503.274309][T12622] Sensor A: ================== END STATUS ================== 20:27:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6eb7, 0x20499, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000100), 0x11}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x970ba90543d1820e) open(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x101000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) r0 = creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6c00) creat(0x0, 0x54) dup(0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) r1 = open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000080), 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(r1, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r4, 0x7fff) sendfile(r3, r4, 0x0, 0x8000fffffffe) 20:27:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r1 = syz_open_pts(r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x37ee}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) 20:27:12 executing program 4: 20:27:12 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0xd497a364f6c7fba9, 0x0) sync_file_range(r2, 0xffffffff, 0x7, 0x1) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f0000000000)={0x5, 0x5, 0xcc}) 20:27:12 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0xff00, 0xffffffffffffffff, 0x0, 0x0}) 20:27:12 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x8955, &(0x7f0000000000)=0x2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000040)={0x4, 0x70, 0x5, 0x40, 0xe8, 0x3f, 0x0, 0x5, 0x210, 0xf02d0d20aa88bf82, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x101, 0x4}, 0x0, 0x9, 0x2, 0x8, 0x8c, 0x8c000000}) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r4, &(0x7f00000017c0), 0x315, 0x800000) [ 1505.773950][T12656] Sensor A: ================= START STATUS ================= [ 1505.811526][T12656] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar 20:27:12 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast1, @loopback}, "00006371ae9b1c01"}}}}}, 0x0) [ 1505.843558][T12656] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1505.889746][T12656] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1505.938368][T12656] v4l2-ctrls: Sensor A: Brightness: 128 [ 1505.965721][T12656] v4l2-ctrls: Sensor A: Contrast: 128 [ 1505.995314][T12656] v4l2-ctrls: Sensor A: Hue: 0 20:27:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_getres(0xa, 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r0, 0x4, 0x44800) io_submit(r1, 0x6aa, &(0x7f0000000540)=[&(0x7f00000000c0)={0x400000000812d000, 0x9, 0x3, 0x8, 0x0, r0, &(0x7f0000000000), 0x1e}]) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffff68, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000), 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, &(0x7f0000000100)=0x8000, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) [ 1506.031080][T12656] v4l2-ctrls: Sensor A: Saturation: 128 [ 1506.064784][T12656] Sensor A: ================== END STATUS ================== 20:27:13 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x99800, 0xffffffffffffffff, 0x0, 0x0}) [ 1506.244271][T12678] Sensor A: ================= START STATUS ================= [ 1506.281336][T12678] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar 20:27:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00f\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="000000000700ffff"], 0x24}}, 0x0) [ 1506.313385][T12678] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1506.339820][T12678] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1506.367184][T12678] v4l2-ctrls: Sensor A: Brightness: 128 [ 1506.390457][T12678] v4l2-ctrls: Sensor A: Contrast: 128 [ 1506.413543][T12678] v4l2-ctrls: Sensor A: Hue: 0 [ 1506.437424][T12678] v4l2-ctrls: Sensor A: Saturation: 128 [ 1506.465132][T12678] Sensor A: ================== END STATUS ================== 20:27:13 executing program 4: unshare(0x2a000400) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xa4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000180)='0', 0xd}], 0xd) 20:27:13 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x980001, 0xffffffffffffffff, 0x0, 0x0}) [ 1506.746897][T12694] Sensor A: ================= START STATUS ================= [ 1506.796095][T12694] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1506.818252][T12694] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1506.838751][T12694] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1506.870111][T12694] v4l2-ctrls: Sensor A: Brightness: 128 [ 1506.893396][T12694] v4l2-ctrls: Sensor A: Contrast: 128 [ 1506.917557][T12694] v4l2-ctrls: Sensor A: Hue: 0 [ 1506.938273][T12694] v4l2-ctrls: Sensor A: Saturation: 128 [ 1506.962640][T12694] Sensor A: ================== END STATUS ================== 20:27:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20499, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x970ba90543d1828e) open(&(0x7f0000000080)='./file0\x00', 0x101000, 0x20) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6c00) creat(0x0, 0x54) dup(0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000140)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x7014c3, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 20:27:16 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x4e21, 0xb43, @dev={0xfe, 0x80, [], 0x11}, 0x2}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e20, 0xa6, @private0, 0x90e2}], 0x68) sendfile(r1, r0, 0x0, 0x100000001) ioctl$KVM_SMI(r0, 0xaeb7) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000000)={0x0, 0x81, 0xfffffffe, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r5 = syz_open_pts(r4, 0x0) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$FIBMAP(r6, 0x1, &(0x7f00000001c0)=0x92) 20:27:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xfffffd8a) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000000100)) 20:27:16 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000080)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0x10000}, {0x6}]}, 0x8) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x96a44f1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 20:27:16 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x980900, 0xffffffffffffffff, 0x0, 0x0}) [ 1510.110725][T12718] Sensor A: ================= START STATUS ================= [ 1510.141045][T12718] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1510.158144][T12718] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1510.174416][T12718] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1510.194661][T12718] v4l2-ctrls: Sensor A: Brightness: 128 [ 1510.213284][T12718] v4l2-ctrls: Sensor A: Contrast: 128 [ 1510.231834][T12718] v4l2-ctrls: Sensor A: Hue: 0 [ 1510.248849][T12718] v4l2-ctrls: Sensor A: Saturation: 128 [ 1510.267843][T12718] Sensor A: ================== END STATUS ================== 20:27:17 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x980901, 0xffffffffffffffff, 0x0, 0x0}) [ 1510.475046][T12725] Sensor A: ================= START STATUS ================= [ 1510.506589][T12725] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1510.530052][T12725] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1510.562826][T12725] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1510.592263][T12725] v4l2-ctrls: Sensor A: Brightness: 128 [ 1510.621837][T12725] v4l2-ctrls: Sensor A: Contrast: 128 [ 1510.648672][T12725] v4l2-ctrls: Sensor A: Hue: 0 [ 1510.672101][T12725] v4l2-ctrls: Sensor A: Saturation: 128 [ 1510.700015][T12725] Sensor A: ================== END STATUS ================== 20:27:17 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x980902, 0xffffffffffffffff, 0x0, 0x0}) 20:27:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_getres(0x0, 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r0, 0x4, 0x44800) io_submit(r1, 0x6aa, &(0x7f0000000540)=[&(0x7f00000000c0)={0x400000000812d000, 0x9, 0x3, 0x8, 0x0, r0, &(0x7f0000000000), 0x1e}]) getpgid(0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) [ 1510.972357][T12731] Sensor A: ================= START STATUS ================= [ 1511.014539][T12731] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1511.053804][T12731] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1511.098992][T12731] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1511.147805][T12731] v4l2-ctrls: Sensor A: Brightness: 128 [ 1511.153442][T12731] v4l2-ctrls: Sensor A: Contrast: 128 [ 1511.195437][T12731] v4l2-ctrls: Sensor A: Hue: 0 [ 1511.215367][T12731] v4l2-ctrls: Sensor A: Saturation: 128 [ 1511.248260][T12731] Sensor A: ================== END STATUS ================== 20:27:18 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r1, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x80) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000001) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x4, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x100, 0x0) ioctl$KVM_GET_CLOCK(r5, 0x8030ae7c, &(0x7f00000002c0)) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r6 = syz_open_pts(r2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000200)={0x3, 'tunl0\x00', {0x5}, 0x1}) ioctl$TCSETSF(r6, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) 20:27:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xccf3, 0x0, 0x0, 0x800e00568) read(r0, &(0x7f0000000280)=""/166, 0xa6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r1, &(0x7f0000000a00)=[{&(0x7f0000000040)=""/40, 0x28}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x8164, 0x0, 0x0, 0x800e00552) shutdown(r1, 0x0) shutdown(0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x201, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = getpgid(0x0) fcntl$lock(r4, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x100000001, r5}) fcntl$lock(r3, 0xd, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000300010005}) shutdown(r2, 0x0) 20:27:18 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x980903, 0xffffffffffffffff, 0x0, 0x0}) [ 1511.477266][ T27] audit: type=1804 audit(1591043238.384:299): pid=12740 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir310235184/syzkaller.KKpbs4/602/cgroup.controllers" dev="sda1" ino=16349 res=1 [ 1511.529053][T12745] QAT: Invalid ioctl 20:27:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='pids.events\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x208e24b) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x2, 0x11, r4, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000140)={0x3, 0x5, 0x4, 0x400000, 0xa41, {r5, r6/1000+60000}, {0x2, 0xc, 0x6, 0x3, 0xae, 0x4, "d6f67f6b"}, 0x8001, 0x1, @fd=r7, 0x8, 0x0, 0xffffffffffffffff}) bind$netlink(r8, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r9, r2, 0x0, 0x100000001) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f0000000000)=0x3) [ 1512.948077][T12769] Sensor A: ================= START STATUS ================= [ 1512.968617][T12769] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1512.981969][T12769] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1512.994618][T12769] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1513.007867][T12769] v4l2-ctrls: Sensor A: Brightness: 128 [ 1513.019114][T12769] v4l2-ctrls: Sensor A: Contrast: 128 [ 1513.031175][T12769] v4l2-ctrls: Sensor A: Hue: 0 [ 1513.041593][T12769] v4l2-ctrls: Sensor A: Saturation: 128 [ 1513.052698][T12769] Sensor A: ================== END STATUS ================== 20:27:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x24499, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x970ba90543d1828e) open(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x101000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6c00) creat(0x0, 0x54) dup(0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 20:27:20 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() sched_setscheduler(r3, 0x3, &(0x7f0000000100)=0x6) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x40000100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r5, 0x0, 0x100000001) ioctl$TUNSETLINK(r5, 0x400454cd, 0x312) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0406618, &(0x7f0000000040)={{0x0, 0x0, @identifier="350e9d45ae7c10598445609192e2de6c"}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x8955, &(0x7f0000000000)=0x2) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/wireless\x00') ioctl$DRM_IOCTL_AGP_UNBIND(r8, 0x40106437, &(0x7f0000000180)) preadv(r8, &(0x7f00000017c0), 0x315, 0x800000) 20:27:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000340)=""/4106, 0x100a}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001380)=""/250, 0xfa}, {0x0}], 0x2}, 0x0) recvfrom$inet(r4, 0x0, 0x310, 0x0, 0x0, 0x800e005ad) shutdown(r3, 0x0) read(r0, &(0x7f0000000280)=""/169, 0xa9) shutdown(r4, 0x0) 20:27:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x48, r3, 0x221, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x48}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r3, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000081) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r4 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) 20:27:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x200404, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) openat(r1, &(0x7f0000000000)='./file0\x00', 0x204a42, 0x40) 20:27:20 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x980914, 0xffffffffffffffff, 0x0, 0x0}) [ 1513.370297][T12784] Sensor A: ================= START STATUS ================= [ 1513.396162][T12784] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar 20:27:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x80000, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) [ 1513.422612][T12784] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1513.445029][T12784] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1513.464481][T12784] v4l2-ctrls: Sensor A: Brightness: 128 [ 1513.499625][T12784] v4l2-ctrls: Sensor A: Contrast: 128 [ 1513.524823][T12784] v4l2-ctrls: Sensor A: Hue: 0 [ 1513.551963][T12784] v4l2-ctrls: Sensor A: Saturation: 128 [ 1513.577590][T12784] Sensor A: ================== END STATUS ================== 20:27:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x410000, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r1, 0x1277, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000000)=0x3) 20:27:20 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @private=0xa010102}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x7a, &(0x7f0000000080)={r3, 0x0, 0x0, 0xfffffffffffffffe}, &(0x7f0000000100)=0x18) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=r3, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x8955, &(0x7f0000000000)=0x2) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r7, &(0x7f00000017c0), 0x315, 0x800000) 20:27:20 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x980915, 0xffffffffffffffff, 0x0, 0x0}) [ 1513.828265][T12818] Sensor A: ================= START STATUS ================= [ 1513.855660][T12818] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1513.882697][T12818] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1513.915862][T12818] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1513.922051][T12818] v4l2-ctrls: Sensor A: Brightness: 128 [ 1513.946371][T12818] v4l2-ctrls: Sensor A: Contrast: 128 [ 1513.955794][T12818] v4l2-ctrls: Sensor A: Hue: 0 [ 1513.960613][T12818] v4l2-ctrls: Sensor A: Saturation: 128 20:27:20 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0xf00001, 0xffffffffffffffff, 0x0, 0x0}) [ 1513.988159][T12818] Sensor A: ================== END STATUS ================== [ 1514.120798][T12831] Sensor A: ================= START STATUS ================= [ 1514.158799][T12831] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1514.186530][T12831] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1514.218025][T12831] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1514.264995][T12831] v4l2-ctrls: Sensor A: Brightness: 128 [ 1514.304943][T12831] v4l2-ctrls: Sensor A: Contrast: 128 20:27:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)=""/136, 0x88}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/19, 0x13}], 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000440)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000100)=""/7, 0x7}, {0x0}, {0x0}], 0x7) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xa1720495f3f7edd, 0x0, 0x0, 0x800e0057f) shutdown(r2, 0x0) r4 = dup2(r3, r2) r5 = socket(0x1c, 0x3, 0x0) recvfrom(r5, &(0x7f00000002c0)=""/187, 0xbb, 0x0, 0x0, 0x0) shutdown(r4, 0x0) [ 1514.330702][T12831] v4l2-ctrls: Sensor A: Hue: 0 [ 1514.349881][T12831] v4l2-ctrls: Sensor A: Saturation: 128 [ 1514.376877][T12831] Sensor A: ================== END STATUS ================== 20:27:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20499, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x970ba90543d1828e) open(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x101000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6c00) creat(0x0, 0x54) dup(0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x42) open$dir(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 20:27:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) syz_open_pts(r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000040)) sendfile(r2, r1, 0x0, 0x100000001) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000000)) 20:27:24 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0xf0f000, 0xffffffffffffffff, 0x0, 0x0}) 20:27:24 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0), 0x0, 0x40002100, 0x0) r3 = semget$private(0x0, 0x2000000010a, 0x0) semop(0x0, &(0x7f0000000200), 0x0) semop(r3, &(0x7f0000000000)=[{0x0, 0xffffffff}], 0x1) r4 = shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(0x0, 0xd, 0x0) shmctl$SHM_STAT(r4, 0xd, &(0x7f0000000040)=""/125) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, &(0x7f00000000c0)={0x1, 0x5, 0x3, 0x1, '\x00', 0x8000}) semctl$IPC_RMID(r3, 0x0, 0x0) semctl$IPC_INFO(r3, 0x0, 0x3, &(0x7f00000003c0)=""/206) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) r5 = socket$inet(0x2, 0x4, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x8955, &(0x7f0000000000)=0x2) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='attr/current\x00') preadv(r6, &(0x7f00000017c0), 0x315, 0x800000) 20:27:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) 20:27:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)=""/136, 0x88}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/19, 0x13}], 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000440)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000100)=""/7, 0x7}, {0x0}, {0x0}, {0x0}], 0x8) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xa1720495f3f7edd, 0x0, 0x0, 0x800e0057f) shutdown(r2, 0x0) r4 = dup2(r3, r2) r5 = socket(0x1c, 0x5, 0x0) recvfrom(r5, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r4, 0x0) [ 1517.648135][T12872] Sensor A: ================= START STATUS ================= [ 1517.693021][T12872] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1517.716085][T12872] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1517.733390][T12872] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1517.749614][T12872] v4l2-ctrls: Sensor A: Brightness: 128 [ 1517.767057][T12872] v4l2-ctrls: Sensor A: Contrast: 128 [ 1517.784954][T12872] v4l2-ctrls: Sensor A: Hue: 0 [ 1517.802955][T12872] v4l2-ctrls: Sensor A: Saturation: 128 [ 1517.826917][T12872] Sensor A: ================== END STATUS ================== 20:27:24 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x1000000, 0xffffffffffffffff, 0x0, 0x0}) 20:27:24 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r1, 0x1277, 0x0) r2 = eventfd2(0x20000, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x100000001) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x400440, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x8955, &(0x7f0000000000)=0x2) r8 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r8, &(0x7f00000017c0), 0x315, 0x800000) [ 1518.026963][T12901] Sensor A: ================= START STATUS ================= [ 1518.054183][T12901] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1518.081634][T12901] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1518.102312][T12901] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1518.121931][T12901] v4l2-ctrls: Sensor A: Brightness: 128 [ 1518.141519][T12901] v4l2-ctrls: Sensor A: Contrast: 128 [ 1518.159291][T12901] v4l2-ctrls: Sensor A: Hue: 0 [ 1518.176622][T12901] v4l2-ctrls: Sensor A: Saturation: 128 [ 1518.199284][T12901] Sensor A: ================== END STATUS ================== 20:27:25 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x1009800, 0xffffffffffffffff, 0x0, 0x0}) 20:27:25 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x8955, &(0x7f0000000000)=0x2) syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r4, 0x1277, 0x0) preadv(r4, &(0x7f0000000100), 0x0, 0x3) [ 1518.419202][T12909] Sensor A: ================= START STATUS ================= [ 1518.445352][T12909] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1518.469563][T12909] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1518.495871][T12909] v4l2-ctrls: Sensor A: Horizontal Flip: false 20:27:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)=""/136, 0x88}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/19, 0x13}], 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000440)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000100)=""/7, 0x7}, {0x0}, {0x0}, {0x0}], 0x8) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xa1720495f3f7edd, 0x0, 0x0, 0x800e0057f) shutdown(r2, 0x0) r4 = dup2(r3, r2) r5 = socket(0x1c, 0x3, 0x0) recvfrom(r5, &(0x7f00000002c0)=""/187, 0xbb, 0x0, 0x0, 0x0) shutdown(r4, 0x0) [ 1518.549389][T12909] v4l2-ctrls: Sensor A: Brightness: 128 20:27:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x401, 0x0, 0x0, 0x0, 0x2, "000000e9ffffff00001cc2cf7ab24413f7bc00"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x200000, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000140)={0x1420000, 0x9, 0x1, r2, 0x0, &(0x7f0000000100)={0xa30904, 0x1, [], @p_u8=&(0x7f00000000c0)=0x9}}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x10201, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) [ 1518.590686][T12909] v4l2-ctrls: Sensor A: Contrast: 128 [ 1518.628651][T12909] v4l2-ctrls: Sensor A: Hue: 0 [ 1518.648757][T12909] v4l2-ctrls: Sensor A: Saturation: 128 [ 1518.669350][T12909] Sensor A: ================== END STATUS ================== 20:27:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20499, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x970ba90543d1828e) open(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x101000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6c00) creat(0x0, 0x54) dup(0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x1bc) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 20:27:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) 20:27:26 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x100f000, 0xffffffffffffffff, 0x0, 0x0}) 20:27:26 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x500000, 0x2d4400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRESOCT=r0, @ANYRES64, @ANYRESHEX, @ANYRES16], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x4010, r1, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r3, 0x1277, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9c0000, 0x6, 0xed, r3, 0x0, &(0x7f00000000c0)={0x9f0901, 0x3, [], @p_u8=&(0x7f0000000080)=0x3}}) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000180)=""/57) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) dup(0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x40010000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8955, &(0x7f0000000000)=0x2) syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f0000000340), 0x0, 0x800000) 20:27:26 executing program 4: r0 = eventfd(0xdffffffe) r1 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f00009b1ffc)) write$binfmt_elf32(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) close(r0) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x22001, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x13) 20:27:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0xfffffffe, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r1 = syz_open_pts(r0, 0x818081) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) [ 1519.851019][T12968] Sensor A: ================= START STATUS ================= [ 1519.877053][T12968] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar 20:27:26 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f0000000100)={0x2, 0x0, @local}, 0x10, &(0x7f0000000500)=[{&(0x7f00000001c0)="f1998f012ac32d14f552a50a6732356240e868c5f8033990eaa729f94ba1fed94c206f2dae554fb904484a30", 0x2c}, {0x0, 0x2}], 0x2}, 0x0) [ 1519.905083][T12968] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1519.940126][T12968] v4l2-ctrls: Sensor A: Horizontal Flip: false 20:27:26 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) mmap$binder(&(0x7f000028a000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x7b9) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000000)=0xbd) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[@ANYBLOB="f401000001030500000000000030000000000000000013800600014081000000080003400000000348000b8044000f800800024000000006080002400000040008000240000000050800024000000024080002400000000608000240000000070800034000000004080003400001000196001e0074293c756f9827034f41cee6b5e74c4ed56188c80afdf4acc4077c85c2f4b4b0859aecfd17d4dd83ba50ab4c5b947b1f19827c08f62b9cbdee1a706c6bb3cb2a1ed3e5af7796691c4008b8d8cdd5014220b8a6934b6c4f28f26bf9023f90e0de0d2e4f6ec54fbd36276e4b17032a956a5fecaf2b722b72e53080f93e4353d4ff39267670a7d68aa1a1c3a380528c1efed78420fbf6740000ec000b8014000f800800034000000004080003407fffffffa40001802c00018014000300fe88000000000000000000000000000114000400fe80000000000000000000000000003906000340000200000c00028085000100840008002c00018014100300fe80000000000000000000000000001014000400fe8000000000000000000000000000aa06000340000200002c00018014000300fc010000000000000000000000000001140004000000000000000000000000000000000030000d80080001007f00000108000200ffffffff08000200ffffffff14000500fc010000000000000000000000000000da543942992170713ddfa20999a717af7a80bae80cbfc878bb578a3a75405cd589b335d8a0cbed9d0e5e0ffdb951b963eda21c210c587a3449839b1bbb16a7f1429e48b33b455ccc3cb4b9e6ed3d9e6801356843407b7708e67d5088bf7b38fc46834fbff2ad34f9da91280771ee7579516b7622ef3af3677b72b35b778ad86c5e913a37ad9ba20515ef49dd1eb904756593b767d4cb85975e1e22c0c988c0e62314804bbdb6a23f559ccbde04ffb3c74c6cb4ad664967314c8bb6356ef86dba965cb17b49a93f11f3777a6c0b1e38f4c90e1b81ab30d12b1937fb8c06cc69a475d4876dee669856630a39abf67738149e5cc40b35118c090c9c63b365603b2b1762ea52cb8f3b85916e82f93ae84b2a2c603d6c0fff6d3cd721ca0f733cf668fddfc0de43303ac6e9035f8720090ee06f986b40454760cf2b2dc649214daac776abcd0ebee6ea831449ade429529af6254dbc9aeda26e6eb795bf34a929616ad8ecb01e5935851fc2010c64a84839e46b56860a4eda8f19c481a7ed3db0ee14b9a0d3f260cc012093e771891b6c0da9c9d2894da0349472542cd0fd290ec66936dbf3d1363f266a46d5444c3ea5826a84d05b072dc2b45f3ce5e869b76b1198f61bbb4a4e85c4971153fa28a31b66a2a51db3bb59853142ec8ed6b11a0d323067af3bcf76c8dd98483193ddf66ba5f03d1d8821c0b7139e0e02949a3cc691e674b1343b6c606a4f37c2de06324b0e1ac07ff0d886de516af5a26d38e50001c99eff46cfb208c616bf59dd4634af6fd98e6dbb1c19c2393479bd55053c34717caf5e6f6ddd8d3f020b5922b69efb9425bb7cc489c992a97716e779ffac1041eb7445a822468cac23949c551a2aa42dea7a2eb8dac94caecdba8493c673cc7ab924f44522"], 0x1f4}, 0x1, 0x0, 0x0, 0x88}, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @private=0xa010102}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x7a, &(0x7f0000000080)={r4, 0x0, 0x0, 0xfffffffffffffffe}, &(0x7f0000000100)=0x18) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000140)={r4, 0x401, 0x7, 0x6f1}, 0x10) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000080)) [ 1519.968862][T12968] v4l2-ctrls: Sensor A: Brightness: 128 [ 1519.991331][T12968] v4l2-ctrls: Sensor A: Contrast: 128 [ 1520.034887][T12968] v4l2-ctrls: Sensor A: Hue: 0 [ 1520.058208][T12968] v4l2-ctrls: Sensor A: Saturation: 128 [ 1520.077366][T12968] Sensor A: ================== END STATUS ================== 20:27:27 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x2, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x8983, &(0x7f00000003c0)={r1}) 20:27:27 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x1099800, 0xffffffffffffffff, 0x0, 0x0}) [ 1520.351629][T12986] Sensor A: ================= START STATUS ================= [ 1520.386989][T12986] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar 20:27:27 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x9, 0x100000001, 0x2, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x40) [ 1520.410186][T12986] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1520.430897][T12986] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1520.450784][T12986] v4l2-ctrls: Sensor A: Brightness: 128 [ 1520.486186][T12986] v4l2-ctrls: Sensor A: Contrast: 128 [ 1520.504007][T12986] v4l2-ctrls: Sensor A: Hue: 0 [ 1520.523650][T12986] v4l2-ctrls: Sensor A: Saturation: 128 [ 1520.550064][T12986] Sensor A: ================== END STATUS ================== 20:27:27 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x2000000, 0xffffffffffffffff, 0x0, 0x0}) [ 1520.810599][T12998] Sensor A: ================= START STATUS ================= [ 1520.827028][T12998] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1520.845354][T12998] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1520.865707][T12998] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1520.887166][T12998] v4l2-ctrls: Sensor A: Brightness: 128 [ 1520.915877][T12998] v4l2-ctrls: Sensor A: Contrast: 128 [ 1520.938025][T12998] v4l2-ctrls: Sensor A: Hue: 0 [ 1520.953822][T12998] v4l2-ctrls: Sensor A: Saturation: 128 [ 1520.972033][T12998] Sensor A: ================== END STATUS ================== 20:27:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20499, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x970ba90543d1828e) open(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x101000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6c00) creat(0x0, 0x54) dup(0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @local}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 20:27:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000000)) 20:27:29 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x2, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x8983, &(0x7f00000003c0)={r1}) 20:27:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000000)=0x3b7) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) 20:27:29 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x2099800, 0xffffffffffffffff, 0x0, 0x0}) 20:27:29 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer\x00', 0x100, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x8955, &(0x7f0000000000)=0x2) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x329002, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$netlbl_mgmt(0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="5300005407107f6fd6a8b1dbecdcdf203a41ea389c1257aee5e2ba72751333ca0700000000000000f2689a7795500c374d5e0c2bb658f19c6998f8abf700000039dbe1b73ec9909fa834798427fcbe0600cb7f889d69bed3ac81bbe6ed72f4ef4cf9b4de800528c2ab7aea36e9374a97d31d43ddced909e621fb56eaaaef6e52091bf3f1b9935bcea8a60b6f9e8663f8a726b024a17c8ec73fdb2ccb83a537619e05253d611532f68f5c399462214627886c2860b6ee9f276b07180000c66866", @ANYRES16=r3, @ANYRESOCT], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xc610040}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x60, r6, 0x2e5b1fc4cc8ae6c3, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x29}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xfffffffffffffffc}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, [], 0x39}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x880) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x50200, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r8, 0xc0045009, &(0x7f0000000080)=0x9) preadv(r7, &(0x7f00000017c0), 0x315, 0x800000) 20:27:29 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 20:27:29 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x3000000, 0xffffffffffffffff, 0x0, 0x0}) [ 1522.850308][T13035] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1522.904107][T13035] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up [ 1522.959300][T13041] Sensor A: ================= START STATUS ================= 20:27:29 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) [ 1523.003969][T13041] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar 20:27:29 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0x9) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x8955, &(0x7f0000000000)=0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs_stats_percpu\x00') preadv(r4, &(0x7f00000017c0), 0x315, 0x800000) [ 1523.055902][T13041] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1523.108186][T13041] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1523.141372][T13041] v4l2-ctrls: Sensor A: Brightness: 128 [ 1523.167569][T13041] v4l2-ctrls: Sensor A: Contrast: 128 [ 1523.184294][T13050] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1523.198172][T13041] v4l2-ctrls: Sensor A: Hue: 0 [ 1523.214222][T13041] v4l2-ctrls: Sensor A: Saturation: 128 [ 1523.221382][T13050] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up [ 1523.241539][T13041] Sensor A: ================== END STATUS ================== 20:27:30 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 20:27:30 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x3099800, 0xffffffffffffffff, 0x0, 0x0}) [ 1523.467047][T13069] Sensor A: ================= START STATUS ================= [ 1523.499938][T13071] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1523.501912][T13069] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1523.546403][T13069] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1523.561994][T13071] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up [ 1523.574565][T13069] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1523.608607][T13069] v4l2-ctrls: Sensor A: Brightness: 128 [ 1523.627251][T13069] v4l2-ctrls: Sensor A: Contrast: 128 [ 1523.668421][T13069] v4l2-ctrls: Sensor A: Hue: 0 [ 1523.693501][T13069] v4l2-ctrls: Sensor A: Saturation: 128 [ 1523.717375][T13069] Sensor A: ================== END STATUS ================== 20:27:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20499, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x970ba90543d1828e) open(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x101000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6c00) creat(0x0, 0x54) dup(0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 20:27:31 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffff3a) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) 20:27:31 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r3, 0x1277, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0xc0406618, &(0x7f0000000040)={{0x2, 0x0, @reserved="81b1dc0a6c06dba176feaac23e528cb1d8a17b1e4a015c6b30285dbca045747f"}}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8955, &(0x7f0000000000)=0x2) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r5, &(0x7f00000017c0), 0x315, 0x800000) 20:27:31 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 20:27:31 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x3e0f000) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x101000, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x9, 0x401, 0x2, 0x2, 0xfff, 0x80000000, 0x100000000, 0xc60e, 0x80000000, 0x0, 0x80000001, 0x7fff, 0xfffffffffffffffb, 0x5, 0x2, 0x74], 0x2, 0x10}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x220040, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000080)=0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000001) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) dup2(r6, r5) r7 = socket$nl_audit(0x10, 0x3, 0x9) dup2(0xffffffffffffffff, r7) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}, r8}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000240)={0x16, 0x98, 0xfa00, {&(0x7f0000000200), 0x4, r8, 0x1c, 0x1, @in={0x2, 0x4e22, @multicast2}}}, 0xa0) 20:27:31 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x4000000, 0xffffffffffffffff, 0x0, 0x0}) [ 1524.620250][T13087] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1524.633230][T13089] Sensor A: ================= START STATUS ================= [ 1524.651993][T13087] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up [ 1524.692163][T13089] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar 20:27:31 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) [ 1524.733391][T13089] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1524.768989][T13089] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1524.812617][T13089] v4l2-ctrls: Sensor A: Brightness: 128 [ 1524.840539][T13089] v4l2-ctrls: Sensor A: Contrast: 128 [ 1524.869915][T13107] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1524.870418][T13089] v4l2-ctrls: Sensor A: Hue: 0 [ 1524.896849][T13107] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up [ 1524.923807][T13089] v4l2-ctrls: Sensor A: Saturation: 128 [ 1524.960517][T13089] Sensor A: ================== END STATUS ================== 20:27:31 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 20:27:32 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x5000000, 0xffffffffffffffff, 0x0, 0x0}) 20:27:32 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$inet(0x2, 0xa, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="210200000000000000000100000034000180060001000a0000000a0006006c626c63720000000c0007000000000000000000080800080000000000"], 0x48}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r5, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xdd}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3d}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x81}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x8955, &(0x7f0000000000)=0x2) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r6, &(0x7f00000017c0), 0x315, 0x800000) [ 1525.163499][T13112] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1525.176639][T13114] Sensor A: ================= START STATUS ================= [ 1525.204521][T13114] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1525.210867][T13112] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up [ 1525.225831][T13114] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1525.238442][T13114] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1525.254037][T13114] v4l2-ctrls: Sensor A: Brightness: 128 [ 1525.268683][T13115] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1525.281626][T13114] v4l2-ctrls: Sensor A: Contrast: 128 20:27:32 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) [ 1525.308904][T13114] v4l2-ctrls: Sensor A: Hue: 0 [ 1525.323771][T13114] v4l2-ctrls: Sensor A: Saturation: 128 [ 1525.342932][T13114] Sensor A: ================== END STATUS ================== [ 1525.384084][T13115] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 20:27:32 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x6000000, 0xffffffffffffffff, 0x0, 0x0}) [ 1525.483771][T13128] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1525.539300][T13128] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up [ 1525.588760][T13133] Sensor A: ================= START STATUS ================= [ 1525.639278][T13133] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1525.661559][T13133] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1525.684882][T13133] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1525.698827][T13133] v4l2-ctrls: Sensor A: Brightness: 128 [ 1525.710006][T13133] v4l2-ctrls: Sensor A: Contrast: 128 [ 1525.722135][T13133] v4l2-ctrls: Sensor A: Hue: 0 [ 1525.732451][T13133] v4l2-ctrls: Sensor A: Saturation: 128 [ 1525.743788][T13133] Sensor A: ================== END STATUS ================== [ 1525.777261][T13134] Sensor A: ================= START STATUS ================= [ 1525.816854][T13134] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1525.823463][T13134] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1525.864902][T13134] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1525.878928][T13134] v4l2-ctrls: Sensor A: Brightness: 128 [ 1525.893462][T13134] v4l2-ctrls: Sensor A: Contrast: 128 [ 1525.907259][T13134] v4l2-ctrls: Sensor A: Hue: 0 [ 1525.917941][T13134] v4l2-ctrls: Sensor A: Saturation: 128 [ 1525.932882][T13134] Sensor A: ================== END STATUS ================== 20:27:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20499, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x970ba90543d1828e) open(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200080, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6c00) creat(0x0, 0x54) dup(0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x341042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 20:27:34 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x60, &(0x7f0000000140)={&(0x7f0000000b80)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x300}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x50}}, 0x0) connect$can_j1939(r0, &(0x7f0000000000)={0x1d, r3, 0x1, {0x1, 0xff}, 0xff}, 0x18) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000080)) 20:27:34 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x8955, &(0x7f0000000000)=0x2) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r4, &(0x7f00000017c0), 0x315, 0x800000) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x60, &(0x7f0000000140)={&(0x7f0000000b80)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x300}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x50}}, 0x0) sendmsg$can_raw(r5, &(0x7f0000000380)={&(0x7f0000000100)={0x1d, r8}, 0x10, &(0x7f0000000340)={&(0x7f0000000180)=@can={{0x1, 0x1, 0x1, 0x1}, 0x0, 0x2, 0x0, 0x0, "12c4b47166eef18d"}, 0x10}}, 0x800) 20:27:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x2, 0x80000000, 0x0, 0x13, "20f0a9000000f40e00f30800000000ff0100"}) 20:27:34 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 20:27:34 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x7000000, 0xffffffffffffffff, 0x0, 0x0}) [ 1527.972047][T13158] Sensor A: ================= START STATUS ================= [ 1527.972728][T13160] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1528.013712][T13158] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1528.020683][T13160] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up [ 1528.045660][T13155] device geneve2 entered promiscuous mode [ 1528.052823][T13158] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1528.080924][T13158] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1528.108109][T13158] v4l2-ctrls: Sensor A: Brightness: 128 20:27:35 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) [ 1528.131581][T13158] v4l2-ctrls: Sensor A: Contrast: 128 [ 1528.149281][T13158] v4l2-ctrls: Sensor A: Hue: 0 [ 1528.175185][T13158] v4l2-ctrls: Sensor A: Saturation: 128 [ 1528.198345][T13158] Sensor A: ================== END STATUS ================== 20:27:35 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x8000000, 0xffffffffffffffff, 0x0, 0x0}) [ 1528.324187][T13168] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1528.347948][T13168] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up 20:27:35 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x107, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x101000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x101000, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000080)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockname(r3, &(0x7f0000000100)=@sco={0x1f, @none}, &(0x7f0000000040)=0x80) sendfile(r4, r3, 0x0, 0x100000001) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f0000000000)={0x0, {0x8, 0x48}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r5, 0x0, 0x100000001) ioctl$KVM_NMI(r5, 0xae9a) [ 1528.418469][T13175] Sensor A: ================= START STATUS ================= [ 1528.447411][T13175] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar 20:27:35 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) [ 1528.476177][T13175] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1528.521051][T13179] device geneve2 entered promiscuous mode [ 1528.522535][T13175] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1528.555043][T13175] v4l2-ctrls: Sensor A: Brightness: 128 [ 1528.578369][T13175] v4l2-ctrls: Sensor A: Contrast: 128 [ 1528.603366][T13175] v4l2-ctrls: Sensor A: Hue: 0 [ 1528.621547][T13175] v4l2-ctrls: Sensor A: Saturation: 128 [ 1528.640686][T13175] Sensor A: ================== END STATUS ================== [ 1528.671025][ T27] audit: type=1804 audit(1591043255.575:300): pid=13186 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir377111778/syzkaller.YvCIsr/881/cgroup.controllers" dev="sda1" ino=16099 res=1 20:27:35 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x14099800, 0xffffffffffffffff, 0x0, 0x0}) [ 1528.774374][ T27] audit: type=1804 audit(1591043255.635:301): pid=13188 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir377111778/syzkaller.YvCIsr/881/cgroup.controllers" dev="sda1" ino=16099 res=1 20:27:35 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x3a1002, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) [ 1528.979588][T13197] Sensor A: ================= START STATUS ================= [ 1529.006496][T13187] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1529.018514][T13197] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1529.030902][T13187] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up [ 1529.040277][T13197] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1529.057520][T13197] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1529.096640][T13197] v4l2-ctrls: Sensor A: Brightness: 128 [ 1529.122852][T13197] v4l2-ctrls: Sensor A: Contrast: 128 [ 1529.141676][T13197] v4l2-ctrls: Sensor A: Hue: 0 [ 1529.184350][T13197] v4l2-ctrls: Sensor A: Saturation: 128 [ 1529.194772][T13197] Sensor A: ================== END STATUS ================== [ 1529.227275][T13202] Sensor A: ================= START STATUS ================= [ 1529.254224][T13202] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1529.260775][T13202] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1529.294195][T13202] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1529.300436][T13202] v4l2-ctrls: Sensor A: Brightness: 128 [ 1529.324217][T13202] v4l2-ctrls: Sensor A: Contrast: 128 [ 1529.329619][T13202] v4l2-ctrls: Sensor A: Hue: 0 [ 1529.365867][T13202] v4l2-ctrls: Sensor A: Saturation: 128 [ 1529.388287][T13202] Sensor A: ================== END STATUS ================== 20:27:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20499, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x970ba90543d1828e) open(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x101000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6c00) creat(0x0, 0x54) dup(0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20040008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x80000001, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 20:27:38 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0xfffffffffffffe6a, &(0x7f0000000100)=0x200baa) process_vm_readv(r1, &(0x7f0000000780)=[{&(0x7f00000000c0)=""/144, 0x90}, {&(0x7f00000001c0)=""/192, 0xc0}, {&(0x7f00000002c0)=""/244, 0xf4}, {&(0x7f00000003c0)=""/227, 0xe3}, {&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/157, 0x9d}, {&(0x7f0000000680)=""/193, 0xc1}], 0x7, &(0x7f0000001b00)=[{&(0x7f0000000800)=""/160, 0xa0}, {&(0x7f00000008c0)=""/240, 0xf0}, {&(0x7f00000009c0)=""/243, 0xf3}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/23, 0x17}], 0x5, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r2 = syz_open_pts(r0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001b80)='/dev/btrfs-control\x00', 0x40002, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TUNSETOWNER(r3, 0x400454cc, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) r7 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$IP_SET_OP_VERSION(r7, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000040)=0x8) 20:27:38 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 20:27:38 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x268405, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) 20:27:38 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r3, &(0x7f0000000780)=[{{&(0x7f0000000040)=@l2, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000340)=""/138, 0x8a}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/75, 0x4b}, {&(0x7f0000000280)=""/42, 0x2a}, {&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000500)=""/48, 0x30}, {&(0x7f0000000540)=""/191, 0xbf}, {&(0x7f0000000600)=""/70, 0x46}, {&(0x7f0000000680)=""/42, 0x2a}], 0xa, &(0x7f00000018c0)=""/179, 0xb3}, 0x200}], 0x1, 0x10001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8955, &(0x7f0000000000)=0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r5, 0x0, 0x100000001) ioctl$SCSI_IOCTL_GET_IDLUN(r5, 0x5382, &(0x7f00000002c0)) r7 = syz_open_procfs(0x0, &(0x7f0000001800)='net/arp\x00') preadv(r7, &(0x7f00000017c0), 0x315, 0x800000) 20:27:38 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x15099800, 0xffffffffffffffff, 0x0, 0x0}) [ 1531.280373][T13223] Sensor A: ================= START STATUS ================= [ 1531.326361][T13223] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar 20:27:38 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000000)={0x1, 0x34325258, 0x2, @discrete={0x10000, 0x57c4adc5}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r4, 0x78d}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r4, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x3f}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40011) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000040)=0x4, 0x4) [ 1531.367541][T13223] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1531.402915][T13223] v4l2-ctrls: Sensor A: Horizontal Flip: false 20:27:38 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) [ 1531.421508][T13223] v4l2-ctrls: Sensor A: Brightness: 128 [ 1531.435093][T13223] v4l2-ctrls: Sensor A: Contrast: 128 [ 1531.460328][T13223] v4l2-ctrls: Sensor A: Hue: 0 [ 1531.480181][T13223] v4l2-ctrls: Sensor A: Saturation: 128 [ 1531.495060][T13223] Sensor A: ================== END STATUS ================== 20:27:38 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0xff000000, 0xffffffffffffffff, 0x0, 0x0}) [ 1531.693905][T13253] Sensor A: ================= START STATUS ================= 20:27:38 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 20:27:38 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r1 = syz_open_pts(r0, 0x0) r2 = socket$kcm(0x2, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0) close(r2) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000000)) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$VIDIOC_G_PRIORITY(r3, 0x80045643, 0x2) [ 1531.747929][T13253] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1531.778767][T13253] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1531.808963][T13253] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1531.837939][T13253] v4l2-ctrls: Sensor A: Brightness: 128 [ 1531.862204][T13253] v4l2-ctrls: Sensor A: Contrast: 128 [ 1531.882991][T13253] v4l2-ctrls: Sensor A: Hue: 0 20:27:38 executing program 4: r0 = socket$kcm(0x10, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) [ 1531.911405][T13253] v4l2-ctrls: Sensor A: Saturation: 128 [ 1531.939787][T13253] Sensor A: ================== END STATUS ================== 20:27:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20499, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x970ba90543d1828e) open(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x101000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6c00) creat(0x0, 0x54) dup(0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x101800, 0xd) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 20:27:42 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:27:42 executing program 4: r0 = socket$kcm(0x10, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 20:27:42 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/221, 0xdd}, 0x20}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f00000001c0)=0x200baa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000100)={0x8001, 0x9, 0xe83e, 0x6, 0x4, 0x6, 0x6}, 0xc) write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r2, r3, 0x0, 0x6, &(0x7f0000000040)='#eth1\x00'}, 0x30) ptrace$getregset(0x4204, r4, 0x200, &(0x7f00000000c0)={&(0x7f0000000640)=""/220, 0xdc}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x5e, 0x0, &(0x7f00000004c0)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1ac47d4942d4e7297af8e8d48db5ca4ceca288a7ea485c140beadc093c55f3f45d5717a8c96f4e9364ec63fd6c7f5f002ac9117d9c6fb57df15e1b06cd6d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x8955, &(0x7f0000000000)=0x1) syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1}) 20:27:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)=0xfffffffc) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6, 0x200000) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) getpeername$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x20) ioctl$BLKIOMIN(r1, 0x1277, 0x0) ioctl$FIOCLEX(r1, 0x5451) 20:27:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0x0, "005800e9ffffff90c5252d8d809e1013f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r1 = syz_open_pts(r0, 0x400001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f00000000c0)={0x9c0000, 0x6, 0x7fff, r1, 0x0, &(0x7f0000000080)={0xa2093e, 0x3, [], @p_u32=&(0x7f0000000040)=0x1}}) ioctl$CAPI_GET_SERIAL(r3, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$TCSETSF(r0, 0x5412, &(0x7f0000000000)={0x100000, 0x4, 0xfff, 0xfffbffff, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) [ 1535.307776][T13299] Sensor A: ================= START STATUS ================= [ 1535.315694][T13299] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1535.322288][T13299] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1535.333002][T13299] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1535.340124][T13299] v4l2-ctrls: Sensor A: Brightness: 128 [ 1535.347177][T13299] v4l2-ctrls: Sensor A: Contrast: 128 20:27:42 executing program 4: r0 = socket$kcm(0x10, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) [ 1535.366291][T13299] v4l2-ctrls: Sensor A: Hue: 0 [ 1535.377921][T13299] v4l2-ctrls: Sensor A: Saturation: 128 [ 1535.402483][T13299] Sensor A: ================== END STATUS ================== 20:27:42 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0}) 20:27:42 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 20:27:42 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x8955, &(0x7f0000000000)=0x2) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r5, 0x0, 0x100000001) getsockopt$PNPIPE_HANDLE(r5, 0x113, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) preadv(r4, &(0x7f00000017c0), 0x315, 0x800000) [ 1535.723861][T13322] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1535.729249][T13321] Sensor A: ================= START STATUS ================= [ 1535.750538][T13322] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up [ 1535.775609][T13321] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1535.795569][T13321] v4l2-ctrls: Sensor A: Vertical Flip: false 20:27:42 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) [ 1535.820667][T13321] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1535.845094][T13321] v4l2-ctrls: Sensor A: Brightness: 128 [ 1535.850799][T13321] v4l2-ctrls: Sensor A: Contrast: 128 [ 1535.875451][T13321] v4l2-ctrls: Sensor A: Hue: 0 [ 1535.919255][T13321] v4l2-ctrls: Sensor A: Saturation: 128 [ 1535.949417][T13321] Sensor A: ================== END STATUS ================== [ 1535.968001][T13333] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1535.987376][T13333] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up 20:27:43 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0}) [ 1536.240950][T13343] Sensor A: ================= START STATUS ================= [ 1536.273895][T13343] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1536.280424][T13343] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1536.309748][T13343] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1536.331907][T13343] v4l2-ctrls: Sensor A: Brightness: 128 [ 1536.343356][T13343] v4l2-ctrls: Sensor A: Contrast: 128 [ 1536.360944][T13343] v4l2-ctrls: Sensor A: Hue: 0 [ 1536.376772][T13343] v4l2-ctrls: Sensor A: Saturation: 128 [ 1536.393356][T13343] Sensor A: ================== END STATUS ================== 20:27:44 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000001) ioctl$RTC_EPOCH_SET(r3, 0x4008700e, 0xffffffffffff8001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x8955, &(0x7f0000000000)=0x2) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r6, &(0x7f00000017c0), 0x315, 0x800000) 20:27:44 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 20:27:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) ioctl$TCFLSH(r1, 0x540b, 0x2) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000000)='@&\x00', 0x3) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r3 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) 20:27:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e21, @remote}, {0x2, 0x4e23, @rand_addr=0x64010100}, {0x2, 0x4e20, @rand_addr=0x64010100}, 0x13a, 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000000)='veth0_vlan\x00', 0x70, 0x2, 0x1}) 20:27:44 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0}) 20:27:44 executing program 3: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x40, 0x0, 0x0, 0x41c1, 0x20499, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x970ba90543d1828e) open(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x101000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) creat(0x0, 0x54) dup(0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f00000001c0)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000049, &(0x7f0000000080)={0xa, 0x4e26, 0x0, @initdev={0xfe, 0x88, [], 0x4, 0x0}, 0x8000000}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000100), 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000040)=0x52bdd4750981d349) fdatasync(0xffffffffffffffff) ftruncate(0xffffffffffffffff, 0x7fff) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8000fffffffe) [ 1537.392770][T13357] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1537.401888][T13357] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up [ 1537.425998][T13359] Sensor A: ================= START STATUS ================= 20:27:44 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) [ 1537.450861][T13359] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1537.469969][T13359] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1537.479695][T13359] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1537.490927][T13359] v4l2-ctrls: Sensor A: Brightness: 128 [ 1537.502018][T13359] v4l2-ctrls: Sensor A: Contrast: 128 [ 1537.515861][T13359] v4l2-ctrls: Sensor A: Hue: 0 [ 1537.531157][T13359] v4l2-ctrls: Sensor A: Saturation: 128 [ 1537.566891][T13359] Sensor A: ================== END STATUS ================== 20:27:44 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x94, 0x0, &(0x7f0000000040)="3f006671d7af52f647750500080089ea4b0900000800f109a713f78293c8744e1a28008de7a7789b17d1afe99e7338469da3e77f056ec424221d0e0413e766cb66f8a2a506dbcb985d5e65d19854e22ba6617e7aa7677a1cc7b925674376d27c054331d17550eba66d0fe036fd69fa28913f72727cdc7a5a3bea2cb331f6cf47c554afa8f8f5c93156efc8f7740306a7d8b40dea", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x8955, &(0x7f0000000000)=0x2) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r4, &(0x7f00000017c0), 0x315, 0x800000) [ 1537.621938][T13367] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1537.657543][T13367] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up 20:27:44 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x0}) 20:27:44 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) [ 1537.809254][T13370] Sensor A: ================= START STATUS ================= [ 1537.841532][T13370] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1537.875373][T13370] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1537.889988][T13380] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1537.915279][T13370] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1537.938248][T13380] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up [ 1537.943734][T13370] v4l2-ctrls: Sensor A: Brightness: 128 [ 1537.981005][T13370] v4l2-ctrls: Sensor A: Contrast: 128 [ 1538.008596][T13370] v4l2-ctrls: Sensor A: Hue: 0 20:27:44 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) [ 1538.045123][T13370] v4l2-ctrls: Sensor A: Saturation: 128 [ 1538.065578][T13370] Sensor A: ================== END STATUS ================== [ 1538.134999][T13387] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1538.162481][T13387] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up 20:27:45 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0}) 20:27:45 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000004c0)={0x0, @local, @multicast1}, &(0x7f0000000500)=0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x60, &(0x7f0000000140)={&(0x7f0000000b80)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x300}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000000840)={&(0x7f0000000040), 0xc, &(0x7f0000000800)={&(0x7f0000000540)={0x244, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [{{0x8}, {0x228, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0xfd}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0xc9b}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x80}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0xe0f6}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x7173}}, {0x8, 0x6, r6}}}]}}]}, 0x244}, 0x1, 0x0, 0x0, 0x20000004}, 0x20004000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x8955, &(0x7f0000000000)=0x2) r8 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r8, &(0x7f00000017c0), 0x315, 0x800000) 20:27:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000001) getpeername$ax25(r3, &(0x7f0000000000)={{0x3, @netrom}, [@rose, @bcast, @null, @null, @rose, @netrom, @netrom]}, &(0x7f00000000c0)=0x48) r5 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) 20:27:45 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 20:27:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000040)={0x9f0000, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x9b0970, 0x7, [], @value64=0x2}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000180)={0xf, 0x8, 0xfa00, {r4, 0x2}}, 0x10) [ 1538.352800][T13394] Sensor A: ================= START STATUS ================= [ 1538.388478][T13395] device geneve2 entered promiscuous mode [ 1538.430335][T13394] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1538.461501][T13394] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1538.489495][T13394] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1538.537818][T13394] v4l2-ctrls: Sensor A: Brightness: 128 [ 1538.580266][T13394] v4l2-ctrls: Sensor A: Contrast: 128 [ 1538.605501][T13394] v4l2-ctrls: Sensor A: Hue: 0 [ 1538.630181][T13394] v4l2-ctrls: Sensor A: Saturation: 128 [ 1538.657510][T13394] Sensor A: ================== END STATUS ================== 20:27:45 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0}) [ 1538.726035][T13404] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1538.748143][T13404] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up [ 1538.897139][T13395] device geneve2 entered promiscuous mode [ 1538.938709][T13423] Sensor A: ================= START STATUS ================= [ 1538.967239][T13423] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1538.991960][T13423] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1539.018904][T13423] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1539.046224][T13423] v4l2-ctrls: Sensor A: Brightness: 128 [ 1539.070606][T13423] v4l2-ctrls: Sensor A: Contrast: 128 [ 1539.093765][T13423] v4l2-ctrls: Sensor A: Hue: 0 [ 1539.112951][T13423] v4l2-ctrls: Sensor A: Saturation: 128 [ 1539.137086][T13423] Sensor A: ================== END STATUS ================== 20:27:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20499, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x970ba90543d1828e) open(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x101000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6c00) creat(0x0, 0x54) dup(0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x43a, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x200000e, 0x12, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8000fffffffd) 20:27:48 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 20:27:48 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) r6 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x8955, &(0x7f0000000000)=0x2) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r7, &(0x7f00000017c0), 0x315, 0x800000) 20:27:48 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0}) 20:27:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r1 = syz_open_pts(r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000000)) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) 20:27:48 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) r2 = pidfd_getfd(r0, r1, 0x0) r3 = syz_genetlink_get_family_id$netlbl_calipso(0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='^\x00 \x00', @ANYRES16=r3, @ANYBLOB], 0x3}, 0x1, 0x0, 0x0, 0x4020004}, 0x4000) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r3, 0x10, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x44081) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000080)) [ 1541.928983][T13447] Sensor A: ================= START STATUS ================= [ 1541.948286][T13448] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1541.968555][T13448] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up [ 1541.972007][T13447] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1542.022482][T13447] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1542.047096][T13447] v4l2-ctrls: Sensor A: Horizontal Flip: false 20:27:49 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) [ 1542.074628][T13447] v4l2-ctrls: Sensor A: Brightness: 128 [ 1542.097807][T13447] v4l2-ctrls: Sensor A: Contrast: 128 [ 1542.118667][T13447] v4l2-ctrls: Sensor A: Hue: 0 [ 1542.138819][T13447] v4l2-ctrls: Sensor A: Saturation: 128 [ 1542.169282][T13447] Sensor A: ================== END STATUS ================== [ 1542.217568][T13460] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1542.256296][T13460] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up 20:27:49 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x300, 0x0}) 20:27:49 executing program 4: socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) [ 1542.458369][T13464] Sensor A: ================= START STATUS ================= [ 1542.509238][T13464] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1542.537869][T13464] v4l2-ctrls: Sensor A: Vertical Flip: false 20:27:49 executing program 4: socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) [ 1542.560844][T13464] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1542.588058][T13464] v4l2-ctrls: Sensor A: Brightness: 128 [ 1542.616898][T13464] v4l2-ctrls: Sensor A: Contrast: 128 [ 1542.643641][T13464] v4l2-ctrls: Sensor A: Hue: 0 [ 1542.658737][T13464] v4l2-ctrls: Sensor A: Saturation: 128 [ 1542.683514][T13464] Sensor A: ================== END STATUS ================== 20:27:49 executing program 4: socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 20:27:49 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x500, 0x0}) [ 1542.903200][T13481] Sensor A: ================= START STATUS ================= [ 1542.923827][T13481] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1542.937321][T13481] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1542.960450][T13481] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1542.973381][T13481] v4l2-ctrls: Sensor A: Brightness: 128 [ 1542.973397][T13481] v4l2-ctrls: Sensor A: Contrast: 128 [ 1542.973486][T13481] v4l2-ctrls: Sensor A: Hue: 0 [ 1543.002516][T13481] v4l2-ctrls: Sensor A: Saturation: 128 [ 1543.016344][T13481] Sensor A: ================== END STATUS ================== 20:27:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x241bf, 0x20599, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x2000000000000006, 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x970ba90543d1828e) open(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x101000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6c00) creat(0x0, 0x54) dup(0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x40000, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x2000000, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 20:27:52 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x80000000, 0x0, 0x0, 0x0, 0x12, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r1 = syz_open_pts(r0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2081, 0x0) write$vhost_msg(r2, &(0x7f00000002c0)={0x1, {&(0x7f00000000c0)=""/89, 0x59, &(0x7f00000001c0)=""/173, 0x2, 0x1}}, 0x48) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) 20:27:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='pids.events\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000000)={0x5, 0x80000000, 0x2, 0x4, 0x100}) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) 20:27:52 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f81c571d7af52f647550500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x85) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x8955, &(0x7f0000000000)=0x2) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r6, &(0x7f00000017c0), 0x315, 0x800000) 20:27:52 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, 0x0, 0x0) 20:27:52 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x600, 0x0}) 20:27:52 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, 0x0, 0x0) [ 1545.555514][T13508] Sensor A: ================= START STATUS ================= [ 1545.579741][T13508] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1545.612299][T13508] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1545.640694][T13508] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1545.658155][T13508] v4l2-ctrls: Sensor A: Brightness: 128 [ 1545.671556][T13508] v4l2-ctrls: Sensor A: Contrast: 128 [ 1545.683449][T13508] v4l2-ctrls: Sensor A: Hue: 0 [ 1545.694934][T13508] v4l2-ctrls: Sensor A: Saturation: 128 [ 1545.706287][T13508] Sensor A: ================== END STATUS ================== 20:27:52 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000040)=0x6, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/219, 0xdb}}], 0x1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000001) ioctl$RTC_UIE_OFF(r3, 0x7004) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x8955, &(0x7f0000000000)=0x2) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f00000000c0)) preadv(r6, &(0x7f00000017c0), 0x315, 0x800000) 20:27:52 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x700, 0x0}) 20:27:52 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, 0x0, 0x0) [ 1545.923914][T13530] Sensor A: ================= START STATUS ================= [ 1545.949623][T13530] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1545.972970][T13530] v4l2-ctrls: Sensor A: Vertical Flip: false 20:27:52 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) [ 1546.011577][T13530] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1546.027358][T13530] v4l2-ctrls: Sensor A: Brightness: 128 [ 1546.038635][T13530] v4l2-ctrls: Sensor A: Contrast: 128 [ 1546.057698][T13530] v4l2-ctrls: Sensor A: Hue: 0 20:27:53 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x60302, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x4000058, 0x20, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r3, 0x1277, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0x0, 0x7, 0x4, r3, 0x0, &(0x7f0000000040)={0xa20920, 0x7, [], @value=0x119}}) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f00000000c0), 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x8955, &(0x7f0000000000)=0x2) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r6, &(0x7f00000017c0), 0x315, 0x800000) [ 1546.072961][T13530] v4l2-ctrls: Sensor A: Saturation: 128 [ 1546.112807][T13530] Sensor A: ================== END STATUS ================== 20:27:54 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0xff00, 0x0}) 20:27:54 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 20:27:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = accept4$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0xfffffffffffffcc5, 0x80800) write(r2, &(0x7f00000001c0)="101822ff6b84c3ce1e978f97a5150f9a76a273e23daeef607a79bf1633bcd354567f6054548efad6a823f11415503e3dfeb10d9facc9607553b5f5322e21ab5510f3a13d9d7c82f61f435737e6e43c7282140800000000a32c8a8e90632f2012cdfd33a1ef3a1d9b66ea010022f811f3b11ea207a7b748807ebdbec86cef444c9ca37f9e6f065864344b5f365363bedc2967f44507a6c4cb9a62ae3f0000000000000400094f0fa19a8fb49ee9c085166a28", 0xb2) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x6000, 0x20000) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000100)='selinuxbdevcgroup\x00', &(0x7f0000000140)='./file0\x00', r3) 20:27:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x5749ca9, 0x0, 0x8, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r3 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) 20:27:54 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x80000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$rds(0x15, 0x5, 0x0) recvmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x40000000000001f, 0x2061, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8955, &(0x7f0000000000)=0x2) syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r6, 0x1277, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r7, 0x1277, 0x0) ioctl$LOOP_SET_FD(r6, 0x4c00, r7) ioctl$BLKIOMIN(r5, 0x1277, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f0000000040)=""/128, 0x80}, {&(0x7f00000000c0)=""/45, 0x2d}, {&(0x7f0000000340)=""/60, 0x3c}], 0x3, 0x7ffffe) 20:27:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20499, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) mkdirat(0xffffffffffffffff, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x148) open(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x101000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6c00) creat(0x0, 0x54) dup(0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(0xffffffffffffffff, 0x7fff) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8000fffffffe) [ 1547.186307][T13571] Sensor A: ================= START STATUS ================= [ 1547.218542][T13571] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar 20:27:54 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) [ 1547.250279][T13571] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1547.283200][T13571] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1547.314424][T13571] v4l2-ctrls: Sensor A: Brightness: 128 [ 1547.335826][T13571] v4l2-ctrls: Sensor A: Contrast: 128 [ 1547.360133][T13571] v4l2-ctrls: Sensor A: Hue: 0 20:27:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000002040)='/dev/zero\x00', 0x800, 0x0) accept$nfc_llcp(r1, &(0x7f0000002080), &(0x7f0000002100)=0x60) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x3532a180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x5c, './file0'}, 0x3a}], [], 0x5c}) write(0xffffffffffffffff, &(0x7f0000000040)="a84a7606777d40907dc279f4d29b3c456125c593fed6e29e6d400affb91374ccf250e96dc2f75ed8c01ac2774baa2e9399c6a6d8", 0x34) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) [ 1547.384217][T13571] v4l2-ctrls: Sensor A: Saturation: 128 [ 1547.423196][T13571] Sensor A: ================== END STATUS ================== 20:27:54 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)}, 0x0) 20:27:54 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x8955, &(0x7f0000000000)=0x2) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r4, &(0x7f00000017c0), 0x315, 0x800000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r5, 0x0, 0x100000001) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, 0x9, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x48, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, [], 0x1e}}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xda0}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 20:27:54 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x99800, 0x0}) [ 1547.540206][T13591] overlayfs: unrecognized mount option "lowerdir\./file0:\" or missing value 20:27:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x800, 0x0) write(r1, &(0x7f0000c34fff), 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) 20:27:54 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)}, 0x0) [ 1547.641368][T13603] Sensor A: ================= START STATUS ================= [ 1547.679632][T13603] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1547.697963][T13603] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1547.718739][T13603] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1547.754916][T13603] v4l2-ctrls: Sensor A: Brightness: 128 [ 1547.777923][T13603] v4l2-ctrls: Sensor A: Contrast: 128 [ 1547.798887][T13603] v4l2-ctrls: Sensor A: Hue: 0 20:27:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r1, 0x4161, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) timer_create(0x6, &(0x7f0000000100)={0x0, 0x0, 0x1}, &(0x7f0000000200)=0x0) timer_getoverrun(r3) timer_getoverrun(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000001) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000000)={0xfffffff7, 0x1, 0x0, 0x5, 0x2, "6771bbbeaf9fe4f6df910d371a5591933a2d64"}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000140)={'vlan0\x00', {0x2, 0x4e20, @rand_addr=0x64010101}}) 20:27:54 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)}, 0x0) [ 1547.831787][T13603] v4l2-ctrls: Sensor A: Saturation: 128 [ 1547.855089][T13603] Sensor A: ================== END STATUS ================== [ 1548.009524][ T27] audit: type=1804 audit(1591043274.916:302): pid=13621 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir377111778/syzkaller.YvCIsr/893/cgroup.controllers" dev="sda1" ino=15862 res=1 20:27:55 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000001) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f0000000040)={{0x2c, @private=0xa010102, 0x4e22, 0x4, 'none\x00', 0x4, 0x1, 0x7c}, {@rand_addr=0x64010101, 0x4e20, 0x1, 0x4, 0x226, 0x1}}, 0x44) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffeeb) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x8955, &(0x7f0000000000)=0x2) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r6, &(0x7f00000017c0), 0x0, 0x80009) 20:27:55 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x980001, 0x0}) [ 1548.185826][T13633] Sensor A: ================= START STATUS ================= [ 1548.216459][T13633] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1548.240679][T13633] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1548.261144][T13633] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1548.280384][T13633] v4l2-ctrls: Sensor A: Brightness: 128 [ 1548.292002][T13633] v4l2-ctrls: Sensor A: Contrast: 128 [ 1548.305900][T13633] v4l2-ctrls: Sensor A: Hue: 0 [ 1548.350609][T13633] v4l2-ctrls: Sensor A: Saturation: 128 [ 1548.374362][T13633] Sensor A: ================== END STATUS ================== 20:27:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x10, 0x0, 0x0, 0x41c1, 0x20499, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0001, 0x1, @perf_config_ext={0xfff}, 0x40240}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x970ba90543d1828e) open(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x101000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6c00) r0 = creat(0x0, 0x54) dup(0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r3, 0x7fff) sendfile(r2, r3, 0x0, 0x8000fffffffe) 20:27:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f00800000000ff0100"}) 20:27:57 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) 20:27:57 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x980900, 0x0}) 20:27:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500c3ec190f170000030000060003003f000000060011004e24690005001600020000000500170000000000050008000000000008000600ac141419"], 0xd4}}, 0x0) r1 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x40000000000024a, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) 20:27:57 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000400)={0x9f0000, 0xf6, 0x8001, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x9c0001, 0x1f, [], @value64}}) recvmmsg(r3, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x2f, &(0x7f00000001c0)=""/207, 0xffffff15}, 0x7d}], 0x1, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r2, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="67f762e590cfeecd874f30324672a241a79644ff8200baa8b9f1813a81b7b181ae3df3aaedf97aba32f2dd2dc30d040e4a004c8854a46bc3bf4bb87219f55963312a89ace7fbe51be98a56568d4f10271ef74fab6d95f0b91b1627f03d9980749595078f3d913637c716d614bed9523ebbb3d200d2bfd6c1f52207ad471fed375fe30106dfe923b9a218ec549067df8b7d86de52ecd71e60a8ea812c2c23de46bed3f42cfbdec84cc92356202cd3b4b0123d83abb88acce3973b4a64ff0777ee67fc79ab0437299172f35b0b70002a8dde63e0bfae7a8a4f", @ANYRES16=r4, @ANYBLOB="000229bd7000fbdbdf251000000008000600810000000800040000000100"], 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x50) write$vhost_msg(r2, &(0x7f0000000080)={0x1, {&(0x7f0000000800)=""/4096, 0x1000, &(0x7f0000000040)=""/2, 0x1, 0x3}}, 0x48) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x8955, &(0x7f0000000000)=0x2) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r6, &(0x7f00000017c0), 0x315, 0x800000) [ 1550.421844][T13664] Sensor A: ================= START STATUS ================= [ 1550.449123][T13664] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar 20:27:57 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) [ 1550.470528][T13664] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1550.487911][T13664] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1550.513355][T13664] v4l2-ctrls: Sensor A: Brightness: 128 [ 1550.532031][T13664] v4l2-ctrls: Sensor A: Contrast: 128 [ 1550.549939][T13664] v4l2-ctrls: Sensor A: Hue: 0 [ 1550.571488][T13664] v4l2-ctrls: Sensor A: Saturation: 128 [ 1550.599970][T13664] Sensor A: ================== END STATUS ================== 20:27:57 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) 20:27:57 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x980901, 0x0}) 20:27:57 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'ip6_vti0\x00', 0x2}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x100000001) ioctl$CAPI_GET_PROFILE(r4, 0xc0404309, &(0x7f00000000c0)=0x40) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f0000000040)={0x6, "d8075ae6b618aca773d8746d698fd6befcc5a42eb9fc6367e10ef844b5b07ffc", 0x4, 0x80, 0x5, 0x3, 0x2, 0x3, 0x2, 0x3}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x8955, &(0x7f0000000000)=0x2) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r6, &(0x7f00000017c0), 0x315, 0x800000) 20:27:57 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x1}, 0x0) [ 1550.880846][T13688] Sensor A: ================= START STATUS ================= [ 1550.932582][T13688] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1550.970712][T13688] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1550.996574][T13688] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1551.020323][ T27] audit: type=1804 audit(1591043277.926:303): pid=13689 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir219748662/syzkaller.WTadAB/1086/cgroup.controllers" dev="sda1" ino=15800 res=1 20:27:58 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x1}, 0x0) [ 1551.050960][T13688] v4l2-ctrls: Sensor A: Brightness: 128 [ 1551.068129][T13688] v4l2-ctrls: Sensor A: Contrast: 128 [ 1551.087890][T13688] v4l2-ctrls: Sensor A: Hue: 0 [ 1551.125679][T13688] v4l2-ctrls: Sensor A: Saturation: 128 [ 1551.150313][T13688] Sensor A: ================== END STATUS ================== 20:27:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20499, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x970ba90543d1828e) open(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x101000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x108) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6c00) creat(0x0, 0x54) dup(0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x5, @local, 0x2}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 20:27:59 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x980902, 0x0}) 20:27:59 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$inet(0x2, 0xa, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x100000001) sendmsg$NFNL_MSG_CTHELPER_DEL(r4, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x98, 0x2, 0x9, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0x50, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xa9}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0x10000}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x40}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x9554}}, @NFCTH_STATUS={0x8}]}, 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x20000001) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x8955, &(0x7f0000000000)=0x2) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r6, &(0x7f00000017c0), 0x315, 0x800000) 20:27:59 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x1}, 0x0) 20:27:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000000)=0x7) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r3 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) 20:27:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x5c180, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)) 20:27:59 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c0000", 0x17}], 0x1}, 0x0) [ 1552.998611][T13721] Sensor A: ================= START STATUS ================= [ 1553.039352][T13721] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1553.075743][T13721] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1553.107686][T13721] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1553.128693][T13721] v4l2-ctrls: Sensor A: Brightness: 128 [ 1553.150966][T13721] v4l2-ctrls: Sensor A: Contrast: 128 [ 1553.176332][T13721] v4l2-ctrls: Sensor A: Hue: 0 20:28:00 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c0000", 0x17}], 0x1}, 0x0) [ 1553.206108][T13721] v4l2-ctrls: Sensor A: Saturation: 128 [ 1553.231791][T13721] Sensor A: ================== END STATUS ================== 20:28:00 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x8955, &(0x7f0000000000)=0x2) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r4, &(0x7f00000017c0), 0x315, 0x800000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0xe000000000000000) 20:28:00 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x980903, 0x0}) 20:28:00 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c0000", 0x17}], 0x1}, 0x0) [ 1553.495611][T13747] Sensor A: ================= START STATUS ================= [ 1553.536987][T13747] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1553.562660][T13747] v4l2-ctrls: Sensor A: Vertical Flip: false 20:28:00 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a", 0x23}], 0x1}, 0x0) [ 1553.591819][T13747] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1553.617695][T13747] v4l2-ctrls: Sensor A: Brightness: 128 [ 1553.637067][T13747] v4l2-ctrls: Sensor A: Contrast: 128 [ 1553.659383][T13747] v4l2-ctrls: Sensor A: Hue: 0 [ 1553.678556][T13747] v4l2-ctrls: Sensor A: Saturation: 128 [ 1553.700434][T13747] Sensor A: ================== END STATUS ================== [ 1557.671179][ T27] audit: type=1800 audit(1591043284.576:304): pid=13775 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=15828 res=0 20:28:06 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a", 0x23}], 0x1}, 0x0) 20:28:06 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x980914, 0x0}) 20:28:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) 20:28:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000001) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000000)=0x80000001) 20:28:06 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x8955, &(0x7f0000000000)=0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) sendmsg$unix(r4, &(0x7f0000000480)={&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000180)=[{&(0x7f00000000c0)="eaef519e3cd2e5f1712749d5e9255f7896183a768801b059920af7f231ff0e98881c7354781c21552038d68c9b3848498621c78965fd0b", 0x37}, {&(0x7f0000000340)="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", 0xfa}, {&(0x7f0000000100)}], 0x3, &(0x7f0000000440)=[@rights={{0x10}}], 0x10, 0x24008030}, 0x41) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r5, &(0x7f00000017c0), 0x315, 0x800000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, 0xffffffffffffffff, 0x0, 0x100000001) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f00000004c0)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000500)={0x0, r7}) 20:28:06 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a", 0x23}], 0x1}, 0x0) [ 1559.468407][T13786] Sensor A: ================= START STATUS ================= [ 1559.492605][T13786] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1559.540442][T13786] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1559.564126][T13786] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1559.588269][T13786] v4l2-ctrls: Sensor A: Brightness: 128 20:28:06 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x4}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x40000, 0x166) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x970ba90543d1828e) open(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x101000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) llistxattr(&(0x7f0000000080)='./file1\x00', &(0x7f00000001c0)=""/208, 0xd0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0xa7, @mcast2, 0xfffffeff}, {0xa, 0x4e20, 0xffff, @loopback, 0x1}, 0xffffffffffffffff, 0x5}}, 0x48) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44c00) creat(0x0, 0x54) dup(0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e21, 0x0, @local}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r2, 0x7fff) sendfile(0xffffffffffffffff, r2, 0x0, 0x8000fffffffe) [ 1559.613769][T13786] v4l2-ctrls: Sensor A: Contrast: 128 [ 1559.645258][T13786] v4l2-ctrls: Sensor A: Hue: 0 20:28:06 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a001000000002", 0x29}], 0x1}, 0x0) [ 1559.676781][T13786] v4l2-ctrls: Sensor A: Saturation: 128 [ 1559.696653][T13786] Sensor A: ================== END STATUS ================== 20:28:06 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x980915, 0x0}) 20:28:06 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a001000000002", 0x29}], 0x1}, 0x0) 20:28:06 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) openat(r4, &(0x7f0000000080)='./file0\x00', 0x2be1f764375ae412, 0x4) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x8955, &(0x7f0000000000)=0x2) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r6, &(0x7f00000017c0), 0x315, 0x800000) [ 1559.924969][T13808] Sensor A: ================= START STATUS ================= [ 1559.959392][T13808] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1559.990736][T13808] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1560.010034][T13808] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1560.036559][T13808] v4l2-ctrls: Sensor A: Brightness: 128 [ 1560.062074][T13808] v4l2-ctrls: Sensor A: Contrast: 128 [ 1560.086997][T13808] v4l2-ctrls: Sensor A: Hue: 0 20:28:07 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a001000000002", 0x29}], 0x1}, 0x0) [ 1560.107176][T13808] v4l2-ctrls: Sensor A: Saturation: 128 [ 1560.130014][T13808] Sensor A: ================== END STATUS ================== 20:28:07 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0xf00001, 0x0}) 20:28:07 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a001000000002800000", 0x2c}], 0x1}, 0x0) [ 1560.363851][T13823] Sensor A: ================= START STATUS ================= [ 1560.399821][T13823] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar 20:28:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a90000f9ff0700f3030c000000ff010001"}) 20:28:07 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) uname(&(0x7f0000000340)=""/165) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f00000000c0)=0xf277, 0x4) r4 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8955, &(0x7f0000000000)=0x2) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x80000, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000100)=0x5, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000080)='\x00') r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r6, &(0x7f00000017c0), 0x315, 0x800000) [ 1560.435194][T13823] v4l2-ctrls: Sensor A: Vertical Flip: false 20:28:07 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x800) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000000)={0x2, "a86c68"}, 0x6) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000280)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @private=0xa010102}]}, &(0x7f0000000180)=0x10) execveat(r1, &(0x7f0000000300)='./file0\x00', &(0x7f0000000480)=[&(0x7f0000000340)='bdev,%#{\x00', &(0x7f0000000380)=':\x00', &(0x7f00000003c0)='{}\x00', &(0x7f0000000400)='cgroup.controllers\x00', &(0x7f0000000440)='cgroup.controllers\x00'], &(0x7f0000000500)=[&(0x7f00000004c0)='/dev/ptmx\x00'], 0x800) mmap(&(0x7f0000491000/0x2000)=nil, 0x2000, 0x2, 0x12, r2, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000540)={r2, 0x40, 0x3f, "480a86749d656b09fdcb62c4ba425152c7223aa426374a90"}) r3 = socket$inet(0x2, 0x80001, 0x84) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000002c0)=r1, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x7a, &(0x7f0000000080)={r4, 0x4, 0x20, 0xfffffffffffffffe}, &(0x7f00000005c0)=0x18) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={r4, 0x9, 0x400}, &(0x7f0000000140)=0x8) [ 1560.481089][T13823] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1560.524496][T13823] v4l2-ctrls: Sensor A: Brightness: 128 20:28:07 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a001000000002800000", 0x2c}], 0x1}, 0x0) [ 1560.584946][T13823] v4l2-ctrls: Sensor A: Contrast: 128 [ 1560.623587][T13823] v4l2-ctrls: Sensor A: Hue: 0 [ 1560.670864][T13823] v4l2-ctrls: Sensor A: Saturation: 128 [ 1560.711490][T13823] Sensor A: ================== END STATUS ================== 20:28:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20499, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={&(0x7f0000000080), 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x970ba90543d1828e) open(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x101000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6c00) creat(0x0, 0x54) dup(0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 20:28:10 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0xf0f000, 0x0}) 20:28:10 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a001000000002800000", 0x2c}], 0x1}, 0x0) 20:28:10 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000180)={0x7, &(0x7f00000011c0)=[{}, {}, {}, {}, {}, {}, {}]}) keyctl$clear(0x7, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) r1 = dup(0xffffffffffffffff) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000000c0)={0x0, 'vlan0\x00'}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001140)={&(0x7f0000e83000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000c2000/0x9000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000f13000/0x3000)=nil, &(0x7f0000909000/0x2000)=nil, &(0x7f0000e53000/0x1000)=nil, &(0x7f0000e0b000/0x4000)=nil, &(0x7f0000ec0000/0x3000)=nil, 0x0}, 0x68) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='environ\x00') read$FUSE(r2, &(0x7f0000000140), 0xfffffefa) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x400, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x8955, &(0x7f0000000000)=0x2) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r4, &(0x7f00000017c0), 0x315, 0x800000) 20:28:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r1, 0x1277, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) r2 = timerfd_create(0x4, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000100)={0x1, 0x3, 0x4, 0x0, 0x0, [{{r2}, 0x85}, {{r0}, 0xffff}, {{r0}, 0x9f5}, {{r0}, 0x3}]}) 20:28:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) modify_ldt$read_default(0x2, &(0x7f00000002c0)=""/17, 0x11) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xcf, 0x8000) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x3f7, 0x20, 0x70bd2a, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x804) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r2, 0x1277, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x4) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x701000, 0x0) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$VIDIOC_S_AUDIO(r4, 0x40345622, &(0x7f0000000240)={0x800, "01a94dc6ecf17220880897e4c510de410b263f836afb472be58909052cb6254c", 0x2}) r5 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) [ 1564.115166][T13863] Sensor A: ================= START STATUS ================= 20:28:11 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a00100000000280000012", 0x2d}], 0x1}, 0x0) [ 1564.156515][T13863] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1564.189291][T13863] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1564.212588][T13863] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1564.248796][T13863] v4l2-ctrls: Sensor A: Brightness: 128 [ 1564.278879][T13863] v4l2-ctrls: Sensor A: Contrast: 128 [ 1564.303620][T13863] v4l2-ctrls: Sensor A: Hue: 0 [ 1564.325559][T13863] v4l2-ctrls: Sensor A: Saturation: 128 20:28:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r3, 0x1277, 0x0) r4 = dup3(r3, 0xffffffffffffffff, 0x80000) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x48003, 0x0) dup(r5) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0xfffffffe, 0x0, 0x1, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r6 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r6, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) [ 1564.357069][T13863] Sensor A: ================== END STATUS ================== 20:28:11 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a00100000000280000012", 0x2d}], 0x1}, 0x0) 20:28:11 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x218040, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) 20:28:11 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r5, 0x0, 0x100000001) ioctl$TUNSETLINK(r5, 0x400454cd, 0x668) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x8955, &(0x7f0000000000)=0x2) r8 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r8, &(0x7f00000017c0), 0x315, 0x800000) 20:28:11 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1000000, 0x0}) [ 1564.650111][T13900] Sensor A: ================= START STATUS ================= [ 1564.683519][T13900] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1564.701347][T13900] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1564.726792][T13900] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1564.753040][T13900] v4l2-ctrls: Sensor A: Brightness: 128 [ 1564.766454][T13900] v4l2-ctrls: Sensor A: Contrast: 128 [ 1564.780336][T13900] v4l2-ctrls: Sensor A: Hue: 0 [ 1564.807094][T13900] v4l2-ctrls: Sensor A: Saturation: 128 [ 1564.841158][T13900] Sensor A: ================== END STATUS ================== 20:28:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20499, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x970ba90543d1828e) open(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x101000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6c00) creat(0x0, 0x54) dup(0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2000c008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 20:28:12 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a00100000000280000012", 0x2d}], 0x1}, 0x0) 20:28:12 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x10800, 0x0) write(r0, &(0x7f00000001c0)="b56735a1a391259317329aad7eca5cf171ec4bb4d33655f2e7a94c549f2095eb3d5434e6d3c3cd7db44fe5856b6d875c0927934ab60614a7925a566da62d9d46240553f9df6b7487ca5203526f67124e448209e0cb1b71f403107e4f03e7a3fe1e54144b375648206e675e583349d52113876cfb65193d9005f27714d84a6c49e4d2cf7b19ebd9c49e3aeebc37ffff217724a585932e9d7ed6eabaae3cf7f52435e2e7657f66dcb43d13f643249a95b6777e661e9aa50cd57647ec", 0xbb) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) 20:28:12 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$inet(0x2, 0xa, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x8955, &(0x7f0000000000)=0x2) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r4, &(0x7f00000017c0), 0x315, 0x800000) 20:28:12 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1009800, 0x0}) 20:28:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x1) ioctl$TIOCGPKT(r3, 0x80045438, &(0x7f0000000000)) 20:28:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0xd, 0x9, 0x1b, &(0x7f0000000100)}) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) [ 1566.019816][T13930] Sensor A: ================= START STATUS ================= [ 1566.051727][T13930] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar 20:28:13 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86, @fixed}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x7, 0x0, 0x21000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="0500000023002f0000068908ac14140de20000093c31b47d0510c147885b6e765e30637ec921f605aba9880b", 0x2c}], 0x5, 0x0, 0x0, 0x50}, 0x0) [ 1566.105976][T13930] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1566.143635][T13930] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1566.196393][T13930] v4l2-ctrls: Sensor A: Brightness: 128 [ 1566.225326][T13930] v4l2-ctrls: Sensor A: Contrast: 128 [ 1566.238969][T13930] v4l2-ctrls: Sensor A: Hue: 0 [ 1566.250432][T13930] v4l2-ctrls: Sensor A: Saturation: 128 [ 1566.263844][T13930] Sensor A: ================== END STATUS ================== 20:28:13 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x100f000, 0x0}) 20:28:13 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f00000003c0)) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000001) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000dfcd712474318edfdc108db2b32bbba56aaa499a47d830d32543b0d02f945055ba1d0ec496dbef4964add1319df48e1c284563e6e5c32070674e1b", @ANYRES16=r6, @ANYBLOB="fa2cf5612e607cbf7ec1aa7c3524a3ccf0ffd3667206200230b5bb541b001a3cb6723a2b379dc08adc2658b1f877eb8c2103ecdae5d3d216fef4c1dbcc526c8568ea96bd4d162bdc56a51c67e2523d044e4a4418db8342f3f35e5d5c663f019f1bd7f916111e407754184ea972af"], 0x14}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r6, 0x800, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x24004000) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x8955, &(0x7f0000000000)=0x2) r8 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r8, &(0x7f00000017c0), 0x315, 0x800000) 20:28:13 executing program 4: [ 1566.514164][T13959] Sensor A: ================= START STATUS ================= [ 1566.560085][T13959] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1566.591249][T13959] v4l2-ctrls: Sensor A: Vertical Flip: false 20:28:13 executing program 4: [ 1566.623353][T13959] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1566.659860][T13959] v4l2-ctrls: Sensor A: Brightness: 128 [ 1566.708834][T13959] v4l2-ctrls: Sensor A: Contrast: 128 [ 1566.732441][T13959] v4l2-ctrls: Sensor A: Hue: 0 [ 1566.759975][T13959] v4l2-ctrls: Sensor A: Saturation: 128 [ 1566.790239][T13959] Sensor A: ================== END STATUS ================== 20:28:17 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @private=0xa010102}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x0, 0x0, 0xfffffffffffffffe}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={r5, 0x3f}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={r6, 0x1}, &(0x7f0000000100)=0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x321) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x8955, &(0x7f0000000000)=0x2) r8 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r8, &(0x7f00000017c0), 0x315, 0x800000) 20:28:17 executing program 4: 20:28:17 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1099800, 0x0}) 20:28:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x2b0000, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x1, 0x250002) read$midi(r1, &(0x7f0000000040)=""/21, 0x15) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000001) ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000100)={0x5c, 0x4c314356, 0x1, @stepwise={0x73ae, 0x2, 0x40800, 0x9, 0x1, 0x5}}) 20:28:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) io_uring_enter(r1, 0x1ff, 0x6, 0x3, &(0x7f0000000000)={[0x6]}, 0x8) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x300, 0x0) bind$nfc_llcp(r2, &(0x7f00000001c0)={0x27, 0x1, 0x1, 0x7, 0x5, 0x0, "d3819fc0b4aef8ae3e817796aa9a3382aa8b53e8a7c1c1c7329e6ececa76929740dd316238e890807e68fd612def42cefca0b061cdf71e66bbae4ef058ab40", 0x14}, 0x60) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x2ce7, 0x0, 0xd8bd, 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000140)={r4}) 20:28:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20499, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext, 0x0, 0x0, 0x4, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x970ba90543d1830f) open(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x101000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6c00) creat(0x0, 0x54) dup(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0xf2) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x52) r0 = socket$inet6(0xa, 0x4, 0x4) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) [ 1571.012189][T13994] Sensor A: ================= START STATUS ================= [ 1571.043385][T13994] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar 20:28:18 executing program 4: [ 1571.067074][T13994] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1571.111233][T13994] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1571.123879][T13994] v4l2-ctrls: Sensor A: Brightness: 128 [ 1571.137297][T13994] v4l2-ctrls: Sensor A: Contrast: 128 [ 1571.149654][T13994] v4l2-ctrls: Sensor A: Hue: 0 [ 1571.160187][T13994] v4l2-ctrls: Sensor A: Saturation: 128 [ 1571.182014][T13994] Sensor A: ================== END STATUS ================== 20:28:18 executing program 4: 20:28:18 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2000000, 0x0}) 20:28:18 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x8955, &(0x7f0000000000)=0x2) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r4, &(0x7f00000017c0), 0x315, 0x800000) [ 1571.457938][T14016] Sensor A: ================= START STATUS ================= 20:28:18 executing program 4: [ 1571.508090][T14016] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1571.537909][T14016] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1571.566175][T14016] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1571.580067][T14016] v4l2-ctrls: Sensor A: Brightness: 128 [ 1571.600818][T14016] v4l2-ctrls: Sensor A: Contrast: 128 [ 1571.625134][T14016] v4l2-ctrls: Sensor A: Hue: 0 20:28:18 executing program 4: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000140)='pkcs7_test\x00', 0x0, &(0x7f0000000280)='\x00\xe5R\x80 DP2\x93S\x92u#\xff\x86\xc1>\xaa/\xc5]\"\xfd,\xf5\x87\x9e\xbb\xbev\xa8\xe1c})\xcc\xf6\xb1\x81%\xa4\x82\x18\x87\x9f\xdd\x05\xb7\xeaA\xf6`\x01\xd2\x89(\xecj \xd6: \xe7\xe2,\x1a\xc6\xddV\xc7\xba.9\xa2?d\xadPz\xd4[1\x01\xad\xc6\x9f\xa4\x95\xddJzp\xeb0\xa5\x88\x18\xd9 6\xa1}\x06\xef8P\x18-\b\xd4\x9b\x19\xc8\x93\xf3\xfa[\xea\xf6,!\xa3\x95,_\x00\xd1(\xa3\x06-\xa6\x80n\x05\xef\xfa\xfey\xb6\xf9\xa5\x8c\xc5\xee\xa97<\x93\xed\xc9\xac\x95m\xa6\x95\xbb\x15_\f;\x81\xe2-\xc5c\xe7\xd0\feu|\xa1\x96\xe4\xd0\x15\xf5\x98\xe5\x01L', r0) request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)='\x00', r0) dup(0xffffffffffffffff) readv(0xffffffffffffffff, &(0x7f0000001700)=[{&(0x7f0000001600)=""/210, 0xd2}], 0x1) [ 1571.651874][T14016] v4l2-ctrls: Sensor A: Saturation: 128 [ 1571.676644][T14016] Sensor A: ================== END STATUS ================== 20:28:18 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2099800, 0x0}) 20:28:18 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000180), &(0x7f0000000340)=0x4) r4 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8955, &(0x7f0000000000)=0x2) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000040)=""/133, &(0x7f0000000100)=0x85) preadv(r5, &(0x7f00000017c0), 0x315, 0x800000) 20:28:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r1, 0x1277, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000000)={0x0, 0x7}) [ 1571.919135][T14042] Sensor A: ================= START STATUS ================= 20:28:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r1 = shmget(0x0, 0x2000, 0x400, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f00000002c0)=""/251) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) socket$inet(0x2, 0x6, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0xd05d) 20:28:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000), 0x10) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x8) [ 1571.969761][T14042] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1572.024911][T14042] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1572.080874][T14042] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1572.115169][T14042] v4l2-ctrls: Sensor A: Brightness: 128 [ 1572.152168][T14042] v4l2-ctrls: Sensor A: Contrast: 128 [ 1572.228718][T14042] v4l2-ctrls: Sensor A: Hue: 0 [ 1572.269985][T14042] v4l2-ctrls: Sensor A: Saturation: 128 [ 1572.298678][T14042] Sensor A: ================== END STATUS ================== 20:28:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x8, 0x0, 0x41c1, 0x20499, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xa5}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x970ba90543d1828e) open(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x101000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6c00) creat(0x0, 0x54) dup(0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 20:28:21 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x8955, &(0x7f0000000000)=0x2) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r4, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/14, 0xe}, {&(0x7f0000000340)=""/252, 0xfc}, {&(0x7f0000000440)=""/221, 0xdd}, {&(0x7f0000000080)}, {&(0x7f00000000c0)=""/55, 0x37}, {&(0x7f0000000540)=""/234, 0xea}, {&(0x7f0000000640)=""/109, 0x6d}, {&(0x7f0000000100)=""/20, 0x14}, {&(0x7f0000000180)=""/21, 0x15}], 0x9, 0x800003) 20:28:21 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3000000, 0x0}) 20:28:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x50f006, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r2 = syz_open_dev$vivid(0x0, 0x3, 0x2) r3 = dup3(r1, r2, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETKEYCODE(r4, 0x4b4d, &(0x7f0000000000)={0x7ff, 0x1}) write(r0, &(0x7f0000000400)="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", 0x1a0) ioctl$TIOCGLCKTRMIOS(r4, 0x5456, &(0x7f0000000040)={0x9, 0xad, 0x8, 0x9, 0x1, "9128c2fd61482af4dcb042326cccb1d309cdc4"}) syslog(0x1, &(0x7f0000000100)=""/160, 0xa0) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x7, 0x8, 0x4, 0x2000000, 0x7c0, {0x0, 0x2710}, {0x2, 0x0, 0x86, 0x9, 0x9, 0xfb, "e9ba188b"}, 0x1, 0x1, @fd, 0xe2b, 0x0, r0}) recvfrom$l2tp6(r5, &(0x7f0000000300)=""/149, 0x95, 0x40001003, &(0x7f00000003c0)={0xa, 0x0, 0x0, @initdev}, 0x20) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) 20:28:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x770d8193, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r1 = syz_open_pts(r0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x10002, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) [ 1574.645547][T14090] Sensor A: ================= START STATUS ================= [ 1574.671357][T14090] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1574.693329][T14090] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1574.713100][T14090] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1574.728589][T14090] v4l2-ctrls: Sensor A: Brightness: 128 20:28:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) dup2(r4, r3) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}, r5}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x1ff, @mcast2, 0x1f}, {0xa, 0x4e24, 0x1000, @private2, 0x5}, r5, 0x1}}, 0x48) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) [ 1574.760380][T14090] v4l2-ctrls: Sensor A: Contrast: 128 [ 1574.775074][T14090] v4l2-ctrls: Sensor A: Hue: 0 [ 1574.792114][T14090] v4l2-ctrls: Sensor A: Saturation: 128 [ 1574.810930][T14090] Sensor A: ================== END STATUS ================== 20:28:21 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3099800, 0x0}) 20:28:21 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000300)={'nr0\x00', 0x800}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000040)) r6 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x8955, &(0x7f0000000000)=0x2) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x315, 0x800000) [ 1575.058517][T14114] Sensor A: ================= START STATUS ================= [ 1575.066384][T14114] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1575.074220][T14114] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1575.080625][T14114] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1575.107719][T14114] v4l2-ctrls: Sensor A: Brightness: 128 [ 1575.123894][T14114] v4l2-ctrls: Sensor A: Contrast: 128 [ 1575.139620][T14114] v4l2-ctrls: Sensor A: Hue: 0 [ 1575.151300][T14114] v4l2-ctrls: Sensor A: Saturation: 128 20:28:22 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4000000, 0x0}) [ 1575.160401][T14114] Sensor A: ================== END STATUS ================== [ 1575.183017][ T27] audit: type=1804 audit(1591043302.098:305): pid=14116 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir219748662/syzkaller.WTadAB/1100/cgroup.controllers" dev="sda1" ino=16226 res=1 [ 1575.240469][ T27] audit: type=1804 audit(1591043302.118:306): pid=14118 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir219748662/syzkaller.WTadAB/1100/cgroup.controllers" dev="sda1" ino=16226 res=1 20:28:22 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8983, &(0x7f0000000080)={0x8, 'geneve1\x00', {'veth1_to_batadv\x00'}, 0x98}) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8955, &(0x7f0000000000)=0x2) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r6, 0xc0105303, &(0x7f0000000040)={0xf8, 0x1, 0x9}) preadv(r5, &(0x7f00000017c0), 0x315, 0x800000) [ 1575.316340][T14121] Sensor A: ================= START STATUS ================= [ 1575.324415][T14121] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1575.332165][T14121] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1575.345714][T14121] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1575.356363][T14121] v4l2-ctrls: Sensor A: Brightness: 128 [ 1575.367704][T14121] v4l2-ctrls: Sensor A: Contrast: 128 [ 1575.380167][T14121] v4l2-ctrls: Sensor A: Hue: 0 [ 1575.392435][T14121] v4l2-ctrls: Sensor A: Saturation: 128 [ 1575.407743][T14121] Sensor A: ================== END STATUS ================== 20:28:22 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5000000, 0x0}) 20:28:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85) [ 1575.705790][T14146] Sensor A: ================= START STATUS ================= [ 1575.746921][T14146] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1575.794294][T14146] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1575.818663][T14146] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1575.846568][T14146] v4l2-ctrls: Sensor A: Brightness: 128 [ 1575.868956][T14146] v4l2-ctrls: Sensor A: Contrast: 128 [ 1575.894031][T14146] v4l2-ctrls: Sensor A: Hue: 0 [ 1575.915497][T14146] v4l2-ctrls: Sensor A: Saturation: 128 [ 1575.938557][T14146] Sensor A: ================== END STATUS ================== 20:28:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20499, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x970ba90543d1828e) open(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x101000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6c00) creat(0x0, 0x54) dup(0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x41) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 20:28:25 executing program 4: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14}, &(0x7f0000000200)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000000005fd, 0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 20:28:25 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000001) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x8955, &(0x7f0000000000)=0x2) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x62580, 0x0) ioctl$TUNGETDEVNETNS(r7, 0x54e3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f00000000c0)) preadv(r6, &(0x7f00000017c0), 0x315, 0x800000) 20:28:25 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6000000, 0x0}) 20:28:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) socket$packet(0x11, 0x2, 0x300) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) [ 1578.544172][T14169] Sensor A: ================= START STATUS ================= [ 1578.588251][T14169] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1578.606112][T14169] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1578.634059][T14169] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1578.640243][T14169] v4l2-ctrls: Sensor A: Brightness: 128 [ 1578.666842][T14169] v4l2-ctrls: Sensor A: Contrast: 128 20:28:25 executing program 4: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14}, &(0x7f0000000200)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000000005fd, 0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 1578.684352][T14169] v4l2-ctrls: Sensor A: Hue: 0 [ 1578.728022][T14169] v4l2-ctrls: Sensor A: Saturation: 128 [ 1578.748639][T14169] Sensor A: ================== END STATUS ================== 20:28:25 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7000000, 0x0}) 20:28:25 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000000c0)={0x0, 0x8, 0x4, 0x400, 0x8, {r4, r5/1000+60000}, {0x5, 0x1, 0x1, 0x2, 0x8, 0x8, "fbb562bc"}, 0x8, 0x4, @userptr=0x8, 0x3}) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x8955, &(0x7f0000000000)=0x2) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r7, &(0x7f00000017c0), 0x315, 0x800000) [ 1578.979667][T14192] Sensor A: ================= START STATUS ================= [ 1579.015103][T14192] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1579.049748][T14192] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1579.072695][T14192] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1579.096902][T14192] v4l2-ctrls: Sensor A: Brightness: 128 [ 1579.116172][T14192] v4l2-ctrls: Sensor A: Contrast: 128 20:28:26 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) [ 1579.140872][T14192] v4l2-ctrls: Sensor A: Hue: 0 20:28:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xff, 0x90800) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800040}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r4, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0xb681aa0821707165}, 0x24008040) syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r4, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xe21}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000088}, 0x20004841) write(r0, &(0x7f0000c34fff), 0xffffff0b) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x288140, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) [ 1579.188811][T14192] v4l2-ctrls: Sensor A: Saturation: 128 [ 1579.219580][T14192] Sensor A: ================== END STATUS ================== 20:28:26 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8000000, 0x0}) 20:28:26 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8850}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c0000001200020000007300fddbdf2500000000cfa77eda2f0fa7e84028aad4200120a27b61b251d279cb495bfda65a7cb5d768a7904cea6f1b02a26bb6f53a754080ec0fe57c8914c39fe01b8d04cd235c9174f1f64dc27fb513fca81cf38a20f22f5ff70dd4c92902f861dbd0c87191b5c1bf173428b767c978f51fa653a6d5e8cc4cefd37d0c097cb4472b9c60333fcc66c34cc7e7d64f1f42f5f8179d7c5cce9ce9ba08abfe6251d7d0b13938022a70dd3616", @ANYRES32=0x0, @ANYBLOB="08090000022000003c001280090001007866726d000000002c000280080001000200000008000100000000000800010001000040080001000200000008000100fdffffff"], 0x5c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg1\x00', r4}) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg0\x00'}) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x8955, &(0x7f0000000000)=0x2) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r6, &(0x7f00000017c0), 0x315, 0x800000) [ 1579.545566][T14222] Sensor A: ================= START STATUS ================= [ 1579.593795][T14222] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1579.613035][T14222] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1579.626124][T14222] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1579.640604][T14222] v4l2-ctrls: Sensor A: Brightness: 128 [ 1579.653309][T14222] v4l2-ctrls: Sensor A: Contrast: 128 [ 1579.665287][T14222] v4l2-ctrls: Sensor A: Hue: 0 [ 1579.677142][T14222] v4l2-ctrls: Sensor A: Saturation: 128 [ 1579.708863][T14222] Sensor A: ================== END STATUS ================== 20:28:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20499, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x970ba90543d1828e) r0 = open(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x101000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6c00) creat(0x0, 0x54) dup(0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = open$dir(0x0, 0x0, 0x0) r2 = dup(0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x10000016}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r3, 0x7fff) sendfile(r2, r3, 0x0, 0x8000fffffffe) 20:28:28 executing program 4: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000480)=@abs={0x1}, 0x6e) 20:28:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000181b46, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) syz_open_pts(r0, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) r2 = socket$kcm(0x2, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0) rt_sigaction(0x23, &(0x7f0000000140)={&(0x7f00000000c0)="c401b5ecb00000000066450f3a20ab050000000dc42108585300c4c35948ac770a0000000ac4217d285fc7470f38f1b6210000000f1738c482b1df4929263e7d05c421d55e30", 0xc0000000, &(0x7f0000000040)="6542dd8f0000802083ba000000000066660f38085200c482e9dd10c4c1f17668fe45a7f30f2bae00f0ffff8f2910011a5a4f0f38f6b1ad8e0000"}, &(0x7f0000000240)={&(0x7f00000001c0)="430f01eec4016d61af0a000080c46225904cea02c4817166ead78f4978e29000000000c4e179e72ef0f796259d0000c4c2791ccac443fd008024c20000fc", 0x0, &(0x7f0000000200)="8185000000000742d87dc4c248f31146dff2c4e225aecb2a42008f293899f0660f383f9e00000080c422f924b98f5708733e8c970800000047dfc6"}, 0x8, &(0x7f00000002c0)) close(r2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000000)) 20:28:28 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x81) read(0xffffffffffffffff, &(0x7f0000000340)=""/168, 0xa8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f00000000c0)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x8955, &(0x7f0000000000)=0x2) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r6, &(0x7f00000017c0), 0x315, 0x800000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='\x00', r1}, 0x10) 20:28:28 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x14099800, 0x0}) 20:28:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x80, 0x0) write$dsp(r2, &(0x7f0000000180)="0464d089eb6c24526d810fc27d5cbe029d98af75bf4f98b8ee36e7ffbe854f96489b05f043eed058c0d451", 0x2b) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) getpeername$netrom(r3, &(0x7f0000000000)={{}, [@netrom, @bcast, @null, @netrom, @netrom, @netrom, @remote, @netrom]}, &(0x7f0000000100)=0x48) [ 1581.915098][T14252] Sensor A: ================= START STATUS ================= [ 1581.968486][T14252] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1582.007756][T14252] v4l2-ctrls: Sensor A: Vertical Flip: false 20:28:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x52988d5a, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) syz_open_pts(r0, 0x0) [ 1582.043749][T14252] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1582.092966][T14252] v4l2-ctrls: Sensor A: Brightness: 128 [ 1582.111533][T14252] v4l2-ctrls: Sensor A: Contrast: 128 [ 1582.130373][T14252] v4l2-ctrls: Sensor A: Hue: 0 20:28:29 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8000000, 0x0}) [ 1582.163712][T14252] v4l2-ctrls: Sensor A: Saturation: 128 [ 1582.195780][T14252] Sensor A: ================== END STATUS ================== 20:28:29 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) recvmmsg(0xffffffffffffffff, &(0x7f0000000380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/204, 0xcc}, 0x400000}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'team_slave_0\x00', 0xc205}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="2a022bbd7000fcdbdf250700000008000300", @ANYRES32=0x0, @ANYBLOB="08000100ffffffff080005000a00000008000500140000000800010001000000a43755105b0a8341616c6c65723000000000000008000300", @ANYRES32=0x0, @ANYBLOB="080005000b0000000800050002000000"], 0x68}, 0x1, 0x0, 0x0, 0x60000080}, 0x8844) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000340)={'bond0\x00', 0x1000}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x8955, &(0x7f0000000000)=0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000040)={0x6, 0xb, 0x4, 0x4000000, 0x4, {}, {0x1, 0x1, 0x1f, 0x1, 0x7, 0x5, "37f9a918"}, 0xfffff015, 0x1, @fd, 0x9, 0x0, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000005c0)=ANY=[@ANYBLOB="94587ac1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a2d62d73dab1ace01c1016225f59bc1a6a4b24e72dfb1e9962c917d59408f9604d74ea90a590dfa4561cf0851943439d5b6661a13e5b5608205c2ea1b9b6d3ae7ee3f32a16fcdd0fd1b820994f5e433f64402f11321a9ad9e5f584f5b56a1448c837710b05c4cfb8377ed3ed551e83953399df86ab9ecfbac833be08f1990cb9ee91bbd01984b302d96193b31226fcbb3b628b43f1d92cb75c5fd2c662341aa966b7942a369e4e7c3e5b0315aeda774b2463779142cb845ff6d061679278f68af240bc164cb822c44181e127af2d4d5cec4ebbec71edcae69ec60172ad52176b996cdc08fa650acb1f4db3ddaa957f83605cbe3d508ea5"], &(0x7f0000000100)=0x14) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000000180)={r6, 0x3}, 0x8) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r7, &(0x7f00000017c0), 0x315, 0x800000) 20:28:29 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x15099800, 0x0}) [ 1582.435984][T14273] Sensor A: ================= START STATUS ================= [ 1582.445776][T14274] Sensor A: ================= START STATUS ================= [ 1582.469585][T14273] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1582.502339][T14273] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1582.526763][T14273] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1582.546382][T14273] v4l2-ctrls: Sensor A: Brightness: 128 [ 1582.559002][T14273] v4l2-ctrls: Sensor A: Contrast: 128 [ 1582.571752][T14273] v4l2-ctrls: Sensor A: Hue: 0 [ 1582.583953][T14273] v4l2-ctrls: Sensor A: Saturation: 128 [ 1582.596659][T14273] Sensor A: ================== END STATUS ================== [ 1582.596700][T14274] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1582.648211][T14274] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1582.663460][T14274] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1582.676998][T14274] v4l2-ctrls: Sensor A: Brightness: 128 20:28:29 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x100}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8955, &(0x7f0000000000)=0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000080)={r7, 0x0, 0x0, 0xfffffffffffffffe}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000002c0)={r7, @in6={{0xa, 0x4e22, 0x218, @private1={0xfc, 0x1, [], 0x1}, 0x3}}, 0x7, 0x30000, 0x7, 0x1, 0x100}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000100)={r8, 0x204, 0x5, [0x731e, 0x0, 0x200, 0x3, 0x1]}, &(0x7f0000000180)=0x12) preadv(r5, &(0x7f00000017c0), 0x315, 0x800000) 20:28:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) signalfd4(r0, &(0x7f0000000000)={[0x9]}, 0x8, 0x80000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000040)) [ 1582.708812][T14274] v4l2-ctrls: Sensor A: Contrast: 128 [ 1582.715168][T14274] v4l2-ctrls: Sensor A: Hue: 0 [ 1582.720129][T14274] v4l2-ctrls: Sensor A: Saturation: 128 [ 1582.726831][T14274] Sensor A: ================== END STATUS ================== 20:28:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x62499, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x0, 0x100000}}, 0x0, 0xa, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x108) open(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x101000, 0x18) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6c00) creat(0x0, 0x54) r0 = dup(0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x3}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r3, 0x7fff) sendfile(r2, r3, 0x0, 0x8000fffffffe) 20:28:30 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0xff000000, 0x0}) 20:28:30 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7000000, 0x0}) 20:28:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x25, &(0x7f0000000100)={@rand_addr, @remote, @multicast2}, &(0x7f0000000140)=0xc) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r2, 0x1277, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r2], 0xffffff3a) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r3, 0x1277, 0x0) r4 = dup2(r1, r3) ioctl$SNDRV_PCM_IOCTL_DROP(r4, 0x4143, 0x0) 20:28:30 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x8955, &(0x7f0000000000)=0x2) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xe00, &(0x7f0000000180)={&(0x7f0000000600)={0xa4, r5, 0x23f, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x88, 0x14, 'broadcast-link\x00'}}}, 0xa4}, 0x1, 0xfffffff0}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r5, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0xff, 0x100, 0x80000001, 0x180}}}, ["", ""]}, 0x30}}, 0x20028090) preadv(r4, &(0x7f00000017c0), 0x315, 0x800000) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000340)) [ 1583.450968][T14305] Sensor A: ================= START STATUS ================= [ 1583.474854][T14308] Sensor A: ================= START STATUS ================= [ 1583.487541][T14305] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1583.508796][T14305] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1583.524930][T14305] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1583.537799][T14305] v4l2-ctrls: Sensor A: Brightness: 128 [ 1583.550107][T14305] v4l2-ctrls: Sensor A: Contrast: 128 [ 1583.564307][T14305] v4l2-ctrls: Sensor A: Hue: 0 [ 1583.573568][T14305] v4l2-ctrls: Sensor A: Saturation: 128 [ 1583.595885][T14305] Sensor A: ================== END STATUS ================== [ 1583.595910][T14308] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1583.616201][T14308] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1583.633711][T14308] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1583.650594][T14308] v4l2-ctrls: Sensor A: Brightness: 128 [ 1583.667517][T14308] v4l2-ctrls: Sensor A: Contrast: 128 20:28:30 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'vlan1\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x8955, &(0x7f0000000000)=0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r7, 0x3a, 0x1, &(0x7f00000000c0)="bb", 0x1) r8 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r8, &(0x7f00000017c0), 0x315, 0x800000) [ 1583.693156][T14308] v4l2-ctrls: Sensor A: Hue: 0 [ 1583.713155][T14308] v4l2-ctrls: Sensor A: Saturation: 128 [ 1583.744864][T14308] Sensor A: ================== END STATUS ================== 20:28:30 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x94, 0xa0000) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:28:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 20:28:30 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0xff000000, 0x0}) [ 1583.920936][T14325] Sensor A: ================= START STATUS ================= [ 1583.937764][T14325] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1583.948823][T14325] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1583.957680][T14325] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1583.972220][T14330] Sensor A: ================= START STATUS ================= [ 1583.981470][T14325] v4l2-ctrls: Sensor A: Brightness: 128 [ 1583.987170][T14325] v4l2-ctrls: Sensor A: Contrast: 128 [ 1583.992731][T14325] v4l2-ctrls: Sensor A: Hue: 0 [ 1583.997897][T14325] v4l2-ctrls: Sensor A: Saturation: 128 [ 1584.006314][T14330] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1584.013399][T14325] Sensor A: ================== END STATUS ================== [ 1584.024428][T14330] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1584.032006][T14330] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1584.038376][T14330] v4l2-ctrls: Sensor A: Brightness: 128 20:28:31 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x980902, 0x0}) 20:28:31 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfffffffffffffffd, 0x402081) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1584.065788][T14330] v4l2-ctrls: Sensor A: Contrast: 128 [ 1584.091522][T14330] v4l2-ctrls: Sensor A: Hue: 0 [ 1584.107548][T14330] v4l2-ctrls: Sensor A: Saturation: 128 [ 1584.130601][T14330] Sensor A: ================== END STATUS ================== [ 1584.172106][T14337] Sensor A: ================= START STATUS ================= [ 1584.193917][T14337] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar 20:28:31 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0xff00, 0x0}) [ 1584.218743][T14337] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1584.239606][T14337] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1584.271985][T14337] v4l2-ctrls: Sensor A: Brightness: 128 [ 1584.308000][T14337] v4l2-ctrls: Sensor A: Contrast: 128 [ 1584.326707][T14337] v4l2-ctrls: Sensor A: Hue: 0 [ 1584.342400][T14337] v4l2-ctrls: Sensor A: Saturation: 128 [ 1584.365629][T14337] Sensor A: ================== END STATUS ================== [ 1584.375701][T14344] Sensor A: ================= START STATUS ================= [ 1584.401156][T14344] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1584.422017][T14344] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1584.442647][T14344] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1584.463416][T14344] v4l2-ctrls: Sensor A: Brightness: 128 [ 1584.482873][T14344] v4l2-ctrls: Sensor A: Contrast: 128 [ 1584.509482][T14344] v4l2-ctrls: Sensor A: Hue: 0 [ 1584.525357][T14344] v4l2-ctrls: Sensor A: Saturation: 128 [ 1584.537744][T14344] Sensor A: ================== END STATUS ================== 20:28:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200041c1, 0x20499, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x970ba90543d1828e) open(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x101000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000) creat(0x0, 0x54) dup(0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x240800, 0x1f1) write$P9_RSTAT(0xffffffffffffffff, &(0x7f00000001c0)={0x65, 0x7d, 0x2, {0x0, 0x5e, 0x2, 0x80000000, {0x2, 0x4, 0x5}, 0x23480000, 0x1f84d3c8, 0x9, 0x26d5c243, 0x1, '\x00', 0x20, 'securityposix_acl_accessselinux/', 0x1, '\x00', 0x9, 'mime_type'}}, 0x65) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x1a1301, 0x84) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 20:28:32 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000100)=0x4a9, 0x4) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x3) r3 = syz_open_dev$video4linux(0x0, 0x0, 0x0) getsockopt$inet_dccp_int(r1, 0x21, 0x6, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$VIDIOC_LOG_STATUS(r3, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0xa00000, 0x0, 0x80000, 0xffffffffffffffff, 0x0, 0x0}) 20:28:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x241bf, 0x20599, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x2000000000000006, 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x970ba90543d1828e) open(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x101000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6c00) creat(0x0, 0x54) dup(0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x40000, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x2000000, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 20:28:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) syz_open_pts(r0, 0x0) 20:28:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20499, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x970ba90543d1828e) open(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200080, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6c00) creat(0x0, 0x54) dup(0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x341042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 20:28:32 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) read(r0, &(0x7f0000000000)=""/93, 0x5d) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) [ 1585.148938][T14359] Sensor A: ================= START STATUS ================= [ 1585.201472][T14359] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1585.258489][T14359] v4l2-ctrls: Sensor A: Vertical Flip: false 20:28:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x24499, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x970ba90543d1828e) open(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x101000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6c00) creat(0x0, 0x54) dup(0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) [ 1585.334145][T14359] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1585.359635][T14359] v4l2-ctrls: Sensor A: Brightness: 128 [ 1585.379052][T14359] v4l2-ctrls: Sensor A: Contrast: 128 [ 1585.396073][T14359] v4l2-ctrls: Sensor A: Hue: 0 [ 1585.413471][T14359] v4l2-ctrls: Sensor A: Saturation: 128 [ 1585.437372][T14359] Sensor A: ================== END STATUS ================== 20:28:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000580)="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", 0xa0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xffffffffffffffc9, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000000)='trusted\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', 0x0, ':chain\x00'}) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) mmap(&(0x7f0000ff1000/0xd000)=nil, 0xd000, 0x2000000, 0x10010, r0, 0x93976000) 20:28:32 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$SIOCAX25DELFWD(r2, 0x89eb, &(0x7f00000000c0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null}) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, {0x1f, 0x0, 0x2}}) socketpair(0x23, 0x800, 0x6, &(0x7f0000000000)={0xffffffffffffffff}) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000040)) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1585.728380][T14377] Sensor A: ================= START STATUS ================= [ 1585.772951][T14377] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1585.809378][T14377] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1585.842252][T14377] v4l2-ctrls: Sensor A: Horizontal Flip: false 20:28:32 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0}) [ 1585.884942][T14377] v4l2-ctrls: Sensor A: Brightness: 128 [ 1585.928318][T14377] v4l2-ctrls: Sensor A: Contrast: 128 [ 1585.987748][T14377] v4l2-ctrls: Sensor A: Hue: 0 [ 1586.028922][T14389] Sensor A: ================= START STATUS ================= [ 1586.039316][T14377] v4l2-ctrls: Sensor A: Saturation: 128 20:28:33 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) [ 1586.091105][T14377] Sensor A: ================== END STATUS ================== [ 1586.101505][T14389] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1586.130400][T14389] v4l2-ctrls: Sensor A: Vertical Flip: false 20:28:33 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x121946, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x4000, 0x0) write$evdev(r3, &(0x7f0000000100)=[{{0x77359400}, 0x4, 0x288, 0x1}], 0x18) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000000)=0x1) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) [ 1586.195564][T14389] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1586.229008][T14389] v4l2-ctrls: Sensor A: Brightness: 128 [ 1586.253711][T14389] v4l2-ctrls: Sensor A: Contrast: 128 [ 1586.286364][T14389] v4l2-ctrls: Sensor A: Hue: 0 [ 1586.307949][T14389] v4l2-ctrls: Sensor A: Saturation: 128 [ 1586.322608][T14389] Sensor A: ================== END STATUS ================== 20:28:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20499, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x970ba90543d1828e) open(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x101000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6c00) creat(0x0, 0x54) dup(0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0x5}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 20:28:33 executing program 5: syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0445624, &(0x7f0000000040)={0x4, 0x0, 0x80000, r0, 0x0, 0x0}) 20:28:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) r1 = socket$kcm(0x2, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0) close(r1) getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f0000000180)=""/95, &(0x7f0000000200)=0x5f) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000040)={0x10001, 0x6, 0x65, &(0x7f0000000100)="46548d9d61e7cdfd10e93ffc555f3c3fbcfb3fd21207a5015f6e41e9c85ef4058b400aecf3de65bfa34b6cbabd66f74354acf6d8d086dc5dcd2fe6067229c20114ef64ae6162e37a0a2c682770523bb42fa32dce63bbb683b007024558fa45d45e4741bec7"}) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) 20:28:33 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) ioctl$SOUND_MIXER_READ_DEVMASK(r1, 0x80044dfe, &(0x7f0000000000)) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) 20:28:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20499, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x970ba90543d1828e) open(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x101000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6c00) creat(0x0, 0x54) dup(0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r1, 0x7fff) sendfile(0xffffffffffffffff, r1, 0x0, 0x8000fffffffe) [ 1586.903075][T14410] Sensor A: ================= START STATUS ================= [ 1586.938016][T14410] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1586.967676][T14410] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1586.974751][T14410] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1586.984760][T14410] v4l2-ctrls: Sensor A: Brightness: 128 [ 1587.011386][T14410] v4l2-ctrls: Sensor A: Contrast: 128 [ 1587.026688][T14410] v4l2-ctrls: Sensor A: Hue: 0 [ 1587.039036][T14410] v4l2-ctrls: Sensor A: Saturation: 128 20:28:34 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x1099800, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1587.055870][T14410] Sensor A: ================== END STATUS ================== 20:28:34 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:28:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x8200, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) [ 1587.229341][T14418] Sensor A: ================= START STATUS ================= [ 1587.258741][T14419] Sensor A: ================= START STATUS ================= [ 1587.267960][T14418] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1587.277345][T14418] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1587.284206][T14418] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1587.290467][T14418] v4l2-ctrls: Sensor A: Brightness: 128 [ 1587.298199][T14418] v4l2-ctrls: Sensor A: Contrast: 128 [ 1587.305762][T14418] v4l2-ctrls: Sensor A: Hue: 0 [ 1587.311272][T14418] v4l2-ctrls: Sensor A: Saturation: 128 [ 1587.316932][T14419] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1587.324438][T14418] Sensor A: ================== END STATUS ================== [ 1587.332213][T14419] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1587.345212][T14419] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1587.361726][T14419] v4l2-ctrls: Sensor A: Brightness: 128 [ 1587.378374][T14419] v4l2-ctrls: Sensor A: Contrast: 128 [ 1587.385743][T14419] v4l2-ctrls: Sensor A: Hue: 0 [ 1587.391294][T14419] v4l2-ctrls: Sensor A: Saturation: 128 [ 1587.397167][T14419] Sensor A: ================== END STATUS ================== 20:28:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/wireless\x00') r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) preadv(r1, &(0x7f00000017c0), 0x199, 0x300000000000000) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r4 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) 20:28:34 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x8) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0xe6e, 0x8, 0xffffffffffffffff, 0x0, 0x0}) 20:28:34 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r5, 0x0, 0x100000001) ioctl$VIDIOC_G_SELECTION(r5, 0xc040565e, &(0x7f0000000180)={0x1, 0x101, 0x2, {0x7f, 0xffffd66f, 0xfe24, 0x8}}) sendfile(r4, r3, 0x0, 0x100000001) ioctl$VIDIOC_SUBDEV_G_EDID(r3, 0xc0285628, &(0x7f0000000040)={0x0, 0xc6c, 0x4efa, [], &(0x7f0000000000)=0x82}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r2, 0x0, 0x100000001) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f00000000c0)=ANY=[@ANYBLOB="80ffffffffffffff2f9b776ed6efc8b64428aa53cda92ec3a3aaeb6705b2464ca8a7c0f706a27704d8aed910d2428a5af5b571f4cbe783f5f5ebadda91eb8bf8c12f0b385ac670eee2d54e6e4925a53665d6883e7b7fc35f32aab75203a94cadfae71cc5565d662c26c284101c8e54651ea0d20f15a2bf3b5e168fb98439b34201e717e0"]) 20:28:34 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1587.880328][T14437] Sensor A: ================= START STATUS ================= [ 1587.936036][T14440] Sensor A: ================= START STATUS ================= [ 1587.947908][T14437] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1587.985167][T14437] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1588.015727][T14437] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1588.037524][T14437] v4l2-ctrls: Sensor A: Brightness: 128 [ 1588.058724][T14437] v4l2-ctrls: Sensor A: Contrast: 128 [ 1588.082161][T14437] v4l2-ctrls: Sensor A: Hue: 0 [ 1588.099293][T14437] v4l2-ctrls: Sensor A: Saturation: 128 [ 1588.122547][T14437] Sensor A: ================== END STATUS ================== [ 1588.122553][T14440] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1588.170189][T14440] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1588.196628][T14440] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1588.226398][T14440] v4l2-ctrls: Sensor A: Brightness: 128 [ 1588.253315][T14440] v4l2-ctrls: Sensor A: Contrast: 128 [ 1588.273344][T14440] v4l2-ctrls: Sensor A: Hue: 0 [ 1588.291860][T14440] v4l2-ctrls: Sensor A: Saturation: 128 [ 1588.314915][T14440] Sensor A: ================== END STATUS ================== 20:28:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20499, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x970ba90543d1828e) open(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x101000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6c00) r0 = creat(0x0, 0x54) r1 = dup(0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x365d7000) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r4, 0x7fff) sendfile(r3, r4, 0x0, 0x8000fffffffe) 20:28:37 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000000100)="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", 0x1ca) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$midi(&(0x7f0000001640)='/dev/midi#\x00', 0xcdf, 0x82) sendfile(r2, r2, 0x0, 0x80000003) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r3, 0x1277, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000040)={0x9e0000, 0x100, 0x10001, r3, 0x0, &(0x7f0000000000)={0x9909c8, 0x9, [], @p_u8=&(0x7f0000000400)}}) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r4, 0x80184151, &(0x7f00000003c0)={0x0, &(0x7f0000000300)="d86c3962fe41e93c4d3bb0599839839f60feccc0ba9cf138c9c1cec1d776f1a38ef7aba72ab56b20958f0ee33f513e0ce3c0051922d93484ecec8da3a459f18635c88efde0944ae5d34a00ff78eba042f2bc671e8eff485c223a8983ed5a4c1be60e9e9182d539ca3753ce839ae94bbc4ed5cc09d480563d241e68bf0cec14aa975686e65adca0e711cbfb2a1601eb12", 0x90}) 20:28:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) syz_open_pts(r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x18, 0xff, "20f0a9000000f40e00f30800000000ff0100"}) 20:28:37 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)=0x0) rt_sigqueueinfo(r2, 0x4, &(0x7f0000000100)={0x6, 0xc037, 0x5}) r3 = syz_open_dev$video4linux(0x0, 0x0, 0xc0) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x7ff, 0xffff, 0x1011, 0x9, 0x7, 0x0, 0x1}}) ioctl$VIDIOC_LOG_STATUS(r3, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:28:37 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)=0x6000000) 20:28:37 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)=0x4000) 20:28:37 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000001) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000140)=0x3, 0x4) r5 = syz_open_dev$vcsu(&(0x7f0000000100)='/dev/vcsu#\x00', 0x8, 0x1) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) setsockopt$netlink_NETLINK_RX_RING(r6, 0x10e, 0x6, &(0x7f0000000000)={0x1, 0x5}, 0x10) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) 20:28:38 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x215, 0x7, 0x6001, 0x9, 0x8, 0x1, 0x1, 0x3}}) r2 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1591.413529][T14479] Sensor A: ================= START STATUS ================= [ 1591.431097][T14479] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1591.452433][T14479] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1591.473248][T14479] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1591.493048][T14479] v4l2-ctrls: Sensor A: Brightness: 128 [ 1591.517608][T14479] v4l2-ctrls: Sensor A: Contrast: 128 [ 1591.543521][T14479] v4l2-ctrls: Sensor A: Hue: 0 [ 1591.559244][T14479] v4l2-ctrls: Sensor A: Saturation: 128 [ 1591.576128][T14479] Sensor A: ================== END STATUS ================== 20:28:38 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000000)=0x3, 0x4) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:28:38 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:28:38 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1591.828436][T14486] Sensor A: ================= START STATUS ================= [ 1591.869974][T14486] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1591.911842][T14486] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1591.947166][T14486] v4l2-ctrls: Sensor A: Horizontal Flip: false 20:28:38 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040)) r3 = syz_open_pts(r0, 0x141082) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x100000001) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x307d01, 0x0) ioctl$sock_ax25_SIOCDELRT(r6, 0x890c, &(0x7f00000000c0)={@null, @bcast, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) ioctl$DRM_IOCTL_AGP_INFO(r4, 0x80386433, &(0x7f00000002c0)=""/194) [ 1591.965356][T14494] Sensor A: ================= START STATUS ================= [ 1591.975843][T14495] Sensor A: ================= START STATUS ================= [ 1591.987973][T14486] v4l2-ctrls: Sensor A: Brightness: 128 [ 1592.005981][T14486] v4l2-ctrls: Sensor A: Contrast: 128 [ 1592.025217][T14486] v4l2-ctrls: Sensor A: Hue: 0 [ 1592.044218][T14486] v4l2-ctrls: Sensor A: Saturation: 128 [ 1592.068615][T14495] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1592.076154][T14486] Sensor A: ================== END STATUS ================== [ 1592.085004][T14495] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1592.111815][T14495] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1592.159919][T14495] v4l2-ctrls: Sensor A: Brightness: 128 [ 1592.196835][T14495] v4l2-ctrls: Sensor A: Contrast: 128 [ 1592.228261][T14495] v4l2-ctrls: Sensor A: Hue: 0 [ 1592.247496][T14495] v4l2-ctrls: Sensor A: Saturation: 128 [ 1592.276641][T14494] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1592.276655][T14495] Sensor A: ================== END STATUS ================== [ 1592.317914][T14494] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1592.345284][T14494] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1592.358268][T14494] v4l2-ctrls: Sensor A: Brightness: 128 [ 1592.370726][T14494] v4l2-ctrls: Sensor A: Contrast: 128 [ 1592.386149][T14494] v4l2-ctrls: Sensor A: Hue: 0 [ 1592.400869][T14494] v4l2-ctrls: Sensor A: Saturation: 128 [ 1592.420216][T14494] Sensor A: ================== END STATUS ================== 20:28:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20499, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x970ba90543d1828e) open(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x101000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6c00) creat(0x0, 0x54) dup(0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 20:28:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x7, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x8, 0xd414, 0x1ff, 0x9, 0x1, "0f5ce9626117894c8e8190247b2cc68a0a88bb"}) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) 20:28:42 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x6000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r5, @ANYBLOB="9c87e3deba9bdff77e1e84b40be0d2ee8be2e96fccbd49dee52ac5b16da50128a901bfddaf6f61b446cb6f52e97b5c1ff0f3461f2537922c1aa9aa7c195604f1dbf0de42d994a847a4311b61bb03e30fafd592d9b75e5092"], 0x3c}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="10002cbd7000ffdbdf25070000000600020001000000080019000000000005001300030000000c0016000900cbff8d393a74b14609000300000006000e0009000000"], 0x48}, 0x1, 0x0, 0x0, 0x850}, 0x8000) sendfile(r2, r1, 0x0, 0x100000001) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)={0x3}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r6, 0x1277, 0x0) fsetxattr$trusted_overlay_redirect(r6, &(0x7f0000000340)='trusted.overlay.redirect\x00', &(0x7f0000000380)='./file0\x00', 0x8, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:28:42 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:28:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) 20:28:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r1 = syz_open_pts(r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @broadcast}]}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x100000001) ioctl$VT_SETMODE(r4, 0x5602, &(0x7f0000000100)={0x7f, 0x0, 0x8, 0x8, 0x3f}) [ 1595.915187][T14527] Sensor A: ================= START STATUS ================= [ 1595.956614][T14527] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar 20:28:42 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:28:42 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x101001) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x208e24b) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDCTL_DSP_GETTRIGGER(r2, 0x80045010, &(0x7f0000000000)) sendfile(r4, r3, 0x0, 0x100000001) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0485661, &(0x7f00000001c0)={0x2, 0x2, @start={0x3f, 0x1}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) r6 = getpgrp(0x0) sched_setaffinity(r6, 0xfffffffffffffe6a, &(0x7f0000000100)=0x200baa) sendmsg$AUDIT_SET(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x3e9, 0x200, 0x70bd2c, 0x25dfdbfb, {0x1, 0x0, 0x0, r6, 0x800, 0x9, 0x6, 0xd2ef, 0x0, 0x8}, ["", "", "", "", "", "", "", "", "", ""]}, 0x38}}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1596.008743][T14527] v4l2-ctrls: Sensor A: Vertical Flip: false 20:28:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000000100)="8077f8e4b533ff321d7807f772151554964eba1e47185bff4efc4aa01994de41cf189fb37e517b65320dfae10529b63d68f8f05d5400e4145ae11b2bfc5a2a1030da36231e4a2919b4a6b6d779f1db739fa07b1589e0346a54652e0f5d1e5fca146823d6df938d8099f6a999f7", 0x6d) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)=0x100) [ 1596.061046][T14527] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1596.088415][T14527] v4l2-ctrls: Sensor A: Brightness: 128 [ 1596.112553][T14536] Sensor A: ================= START STATUS ================= [ 1596.120268][T14527] v4l2-ctrls: Sensor A: Contrast: 128 [ 1596.145129][T14527] v4l2-ctrls: Sensor A: Hue: 0 [ 1596.159744][T14538] Sensor A: ================= START STATUS ================= [ 1596.167423][T14527] v4l2-ctrls: Sensor A: Saturation: 128 [ 1596.193102][T14527] Sensor A: ================== END STATUS ================== [ 1596.200791][T14536] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1596.207302][T14536] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1596.239005][T14536] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1596.296698][ T27] audit: type=1804 audit(1591043323.209:307): pid=14543 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir771465118/syzkaller.HI2jxB/1195/cgroup.controllers" dev="sda1" ino=16101 res=1 20:28:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000000)=0x2) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) [ 1596.360539][ T27] audit: type=1804 audit(1591043323.249:308): pid=14540 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir771465118/syzkaller.HI2jxB/1195/cgroup.controllers" dev="sda1" ino=16101 res=1 [ 1596.421564][T14536] v4l2-ctrls: Sensor A: Brightness: 128 [ 1596.443949][T14536] v4l2-ctrls: Sensor A: Contrast: 128 [ 1596.466259][T14536] v4l2-ctrls: Sensor A: Hue: 0 20:28:43 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1596.486078][T14536] v4l2-ctrls: Sensor A: Saturation: 128 [ 1596.513527][T14536] Sensor A: ================== END STATUS ================== [ 1596.513533][T14538] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1596.546870][T14538] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1596.569546][T14538] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1596.587341][T14538] v4l2-ctrls: Sensor A: Brightness: 128 [ 1596.605071][T14538] v4l2-ctrls: Sensor A: Contrast: 128 20:28:43 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r1, 0x1277, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r3, 0x1277, 0x0) fcntl$notify(r3, 0x402, 0x2) ioctl$BLKIOMIN(r2, 0x1277, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x1141}, {r1, 0x8}, {r2, 0x20}], 0x3, &(0x7f0000000040)={0x77359400}, &(0x7f00000000c0), 0x8) r4 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r4, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1596.626327][T14553] Sensor A: ================= START STATUS ================= [ 1596.634024][T14538] v4l2-ctrls: Sensor A: Hue: 0 [ 1596.645208][T14538] v4l2-ctrls: Sensor A: Saturation: 128 [ 1596.657758][T14553] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1596.666805][T14538] Sensor A: ================== END STATUS ================== [ 1596.702614][T14553] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1596.749254][T14553] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1596.782614][T14553] v4l2-ctrls: Sensor A: Brightness: 128 [ 1596.814893][T14553] v4l2-ctrls: Sensor A: Contrast: 128 [ 1596.858385][T14553] v4l2-ctrls: Sensor A: Hue: 0 [ 1596.888523][T14553] v4l2-ctrls: Sensor A: Saturation: 128 [ 1596.919278][T14553] Sensor A: ================== END STATUS ================== 20:28:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20499, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x970ba90543d1828e) open(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x101000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6c00) creat(0x0, 0x54) dup(0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(0xffffffffffffffff) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 20:28:44 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:28:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000001) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f00000001c0)={0x7, 0x2, 'client0\x00', 0xffffffff80000000, "e6cf0fc2061ca76e", "019866aa60d042a4e6c40dd665c288694f3700f4b312633f10f383e07ce3261c", 0x9, 0x3f}) read$char_usb(r1, &(0x7f00000000c0)=""/153, 0x99) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r5 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) 20:28:44 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:28:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x2000, 0x0) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000080)) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETXF(r1, 0x5434, &(0x7f0000000140)={0x2, 0xff, [0x4, 0x0, 0x1, 0x6, 0x10], 0x1}) open(&(0x7f0000000100)='./file0\x00', 0x200000, 0x80) r2 = socket$kcm(0x2, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0) close(r2) recvmsg(r2, &(0x7f0000002400)={&(0x7f0000000180)=@in={0x2, 0x0, @local}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/134, 0x86}, {&(0x7f00000012c0)=""/223, 0xdf}], 0x3, &(0x7f0000001400)=""/4096, 0x1000}, 0xd751fe145cbf7ba9) creat(&(0x7f0000000000)='./file0\x00', 0x19) 20:28:44 executing program 5: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1598.008245][T14582] Sensor A: ================= START STATUS ================= [ 1598.023441][T14584] Sensor A: ================= START STATUS ================= [ 1598.026735][T14585] Sensor A: ================= START STATUS ================= [ 1598.031545][T14582] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1598.049042][T14582] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1598.052457][T14586] QAT: Invalid ioctl [ 1598.056312][T14582] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1598.071018][T14582] v4l2-ctrls: Sensor A: Brightness: 128 [ 1598.083680][T14582] v4l2-ctrls: Sensor A: Contrast: 128 [ 1598.089155][T14582] v4l2-ctrls: Sensor A: Hue: 0 [ 1598.099211][T14582] v4l2-ctrls: Sensor A: Saturation: 128 [ 1598.123910][T14584] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1598.124269][T14591] QAT: Invalid ioctl [ 1598.131819][T14582] Sensor A: ================== END STATUS ================== [ 1598.144181][T14584] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1598.165916][T14584] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1598.195417][T14584] v4l2-ctrls: Sensor A: Brightness: 128 [ 1598.212198][T14584] v4l2-ctrls: Sensor A: Contrast: 128 [ 1598.223715][T14584] v4l2-ctrls: Sensor A: Hue: 0 [ 1598.235229][T14584] v4l2-ctrls: Sensor A: Saturation: 128 [ 1598.247420][T14584] Sensor A: ================== END STATUS ================== [ 1598.247483][T14585] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1598.282094][T14585] v4l2-ctrls: Sensor A: Vertical Flip: false 20:28:45 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1598.314136][T14585] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1598.343793][T14585] v4l2-ctrls: Sensor A: Brightness: 128 20:28:45 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1598.368315][T14585] v4l2-ctrls: Sensor A: Contrast: 128 [ 1598.390301][T14585] v4l2-ctrls: Sensor A: Hue: 0 [ 1598.409749][T14585] v4l2-ctrls: Sensor A: Saturation: 128 [ 1598.442535][T14585] Sensor A: ================== END STATUS ================== 20:28:45 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:28:45 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000500)={{{@in=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@empty}}, &(0x7f0000000600)=0xe8) ioctl$VIDIOC_S_PARM(r4, 0xc0cc5616, &(0x7f0000000880)={0x5, @raw_data="3f8b265a70b69f85f2b8e85cdfc4473265699cb211582a020bd1930e2140427933d922027b9627ebdd448b15789b7ad6694a19350c715bcb8185481ba1a1a2b5561c604690d16de950c2c111327559cd76ac443131304fa0468112a3de22e4a2dced71de60f52ffaba499a1228b26cd2d2ea09b4351ea6bde503a246557598932b90d9f0fbc95ebf864e65b2af67803ac580bccd60df5979f2ab882d04f3665574c789cd6caefdbfb0211ff1fb61811f7dae8198999d9b98420628c34bf3bd33a0fd157699286d42"}) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000340)='./file0\x00', 0x80000001, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000380)="8ca793db3d78e5b6c1d0ed24a1ca0f359996f9545d3623d9bd99bae6f5364f955d8dffadb1f7a4c7967c5334de2ac5a33e898b6c9808747215b57426f5dcea55e8506b8b", 0x44, 0x9}, {&(0x7f0000000400)="48602637b053169a6bf12450419035bac32bade64a14f5d1a5271bb0bc17419563d4ad293e1b3938ebe363f94d913857c83c99f485f8e0308ab6ba3e71c52c34d00985dd55dd5560bd7bf51ac6c194cd87a256ce9110f51e35666b2fd840fbabb076c1cb1bc1244c4cf1f5298fd2ab76325cc4f0ee408a869da10f7d3aff504228a495c883efc9fdc044916f5437", 0x8e, 0x80000000}], 0x2a0b400, &(0x7f0000000640)=ANY=[@ANYBLOB='shortname=winnt,shortname=lower,nnonumtail=1,nonumtail=0,utf8=1,fowner>', @ANYRESDEC=r5, @ANYBLOB="2c646566636f6e7465785c3c572c3b81005e05743d73797374656d5f752c66736d616769633d3078303030303030303030303030303032332c646f6e745f686173682c6d61736b3d5e4d41595f57524954452c66756e633d3949524d574152a9dda7f6f1b25c04f15f"]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000500)={{{@in=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@empty}}, &(0x7f0000000600)=0xe8) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000340)='./file0\x00', 0x80000001, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000380)="8ca793db3d78e5b6c1d0ed24a1ca0f359996f9545d3623d9bd99bae6f5364f955d8dffadb1f7a4c7967c5334de2ac5a33e898b6c9808747215b57426f5dcea55e8506b8b", 0x44, 0x9}, {&(0x7f0000000400)="48602637b053169a6bf12450419035bac32bade64a14f5d1a5271bb0bc17419563d4ad293e1b3938ebe363f94d913857c83c99f485f8e0308ab6ba3e71c52c34d00985dd55dd5560bd7bf51ac6c194cd87a256ce9110f51e35666b2fd840fbabb076c1cb1bc1244c4cf1f5298fd2ab76325cc4f0ee408a869da10f7d3aff504228a495c883efc9fdc044916f5437", 0x8e, 0x80000000}], 0x2a0b400, &(0x7f0000000640)={[{@shortname_winnt='shortname=winnt'}, {@shortname_lower='shortname=lower'}, {@nonumtail='nnonumtail=1'}, {@numtail='nonumtail=0'}, {@utf8='utf8=1'}], [{@fowner_gt={'fowner>', r9}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x23}}, {@dont_hash='dont_hash'}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@obj_role={'obj_role'}}]}) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000040)='./file0\x00', 0x4, 0x7, &(0x7f00000006c0)=[{&(0x7f00000000c0)="3884e01173200389b7adcda3e5e3257bdb2acadb0f5e061fdb5854fd50af642013c776c4273638c0ceb6597ec5566b22a40b0339700590c3c79884b31b0230f1b15b3117c8f4276a8d6f66a77573457d4958116d078009425d", 0x59, 0xd32}, {&(0x7f0000000140)="f34be3776193c06585c9cf307687451416b574209b42ebbc2845b559eb502e7ede517a3251fa507677d53e6df3282bdcd917f6259f72696773e46075488f8b7ad68d23d10ee361025a6f71ade22313f7e77b683dc3f51a5c963a204460e45e125471c313f18edfb7f984658186ecab84fc", 0x71, 0xe3}, {&(0x7f00000001c0)="1b5032d3e249752c7f60258d40eb33749091cde0d31876a39a653da2b16183f48529ce823bc7a2d58324ff0e40c41e1dbb9e95cc5d752f2f635ea515b7ee8979b45f5788c04d875502377418b59766739cc0d4a7120b8f3f77a48d6233bda378d5d2f17acea4c6873a907b44f37a0b057b08fddf79bda5eba9f767a3aec1d21db6bfaef4d31a3aef113114310030055c2e2e4995f1d0fdba748700d0ceddc1353d4dcc0e48fe9dded266c60c6d976d4a72b6d759180f77b30e0e6338421c9fbef4f71d752e94356dd79e147bbaba1ebedd20e3599c151f61cce214a38b1dd275cda0ee29f01b27f34c9b7f7b089ccbe92f16c3", 0xf3, 0xfffffffffffffe67}, {&(0x7f00000002c0)="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", 0xff, 0x9}, {&(0x7f00000003c0)="60e6d8ec1f7abd4a57a3d4cae593258d0d3da888f9f8fb9a8be105539a5bb3cf3f64ed59c5254021eba7c144e31615a6ce6b4b4031dc219576891cda931ba8127d98a6d11cc17d6827a60e4f3c2d6c6e89b4104df0878d0905ba6815fd10408178a3e04ba75b54542ea871f72ea52ce1a81c8c5996a1a2c2841d7b6d56622effe83352f9baa5c6e7ff90691e50e3a19ff7eeba952495476603facb5a159ab95b2747042ccf6a48c204ed711d7595f6541c9bf56ed980968974cdc577ea92dac17cd808aa34e9da21d99c262e777943e0f0301c8064421c4b94710748d2b3671491c08bace78b4bfb740f6fbb8597e67addc8", 0xf2, 0xc947}, {&(0x7f00000004c0)="72527032dbe5a402daf54b02a57b54371a748001d799e6fa82b20067f762c9c20308542243aa80270e73b654a99fe2737eb44fe55ec5b93bd9c8cb3fbd1d8fe5d14006c2f55e98dcb1582a3242734bf157fcb099ee84cf9516a2a868b31eae4d9e5dd0ff1b8869d621abfb2af7df7a3941d5cee1ae97f6a86744a1a602dea6eac17cb0b17f10a58411bb95a43e6b36310bcd7234f63c22e743157371ea4b109d13e859c3051105e2108748dbfca7aac8b5c9e80ff38e3bf3e4aebdbf6b8a496983249b3ddbcc586fe9a330105bfa5923aeb36c3ef26eae62da244c6d3c4e7403b9fb026a21f60cb213578d9d3b2749", 0xef, 0x23}, {&(0x7f00000005c0)="f4f8d2f9f5c4300ac7a8f330d4fc3d09e190279153e2e685e14a64f1a17f533b3039866db514f7b99e4dfeb1d844755f975651eaf90a663b037a8eefbdf9219922517dc9e100ed34fc8b7fde46619fe6b2aed1dc265fc3d30e047e0d94917280ba1c8f5b14c3b767594a5c9671daa3495361fa4c3c7e0442732c6b0ea8a48262d1bb36dd304b7ad5ec111432cf075d1ce8892f496747c1bdff684b1bfdc04282a5a7321fc019ff51d91e4b0adbc859e464ab3d197f39873d0a81720ed453028d6f198c024312a4bb0937428bef3f36964738dd663062b8ef9564cdb7", 0xdc, 0x6}], 0x400, &(0x7f0000000780)={[{@acl='acl'}, {@norecovery='norecovery'}, {@usrjquota={'usrjquota'}}, {@nodiscard='nodiscard'}, {@noacl='noacl'}, {@usrjquota={'usrjquota', 0x3d, '/dev/v4l-subdev#\x00'}}], [{@permit_directio='permit_directio'}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@uid_lt={'uid<', r5}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_gt={'euid>', r9}}]}) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1598.538698][T14596] Sensor A: ================= START STATUS ================= [ 1598.568453][T14596] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1598.600797][T14596] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1598.617236][T14596] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1598.631426][T14596] v4l2-ctrls: Sensor A: Brightness: 128 [ 1598.648520][T14596] v4l2-ctrls: Sensor A: Contrast: 128 [ 1598.665825][T14596] v4l2-ctrls: Sensor A: Hue: 0 [ 1598.682279][T14596] v4l2-ctrls: Sensor A: Saturation: 128 [ 1598.701666][T14596] Sensor A: ================== END STATUS ================== 20:28:45 executing program 4: ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0445624, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:28:45 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1598.808537][T14602] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1598.821044][T14602] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1598.838133][T14602] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1598.838572][T14613] QAT: Invalid ioctl [ 1598.854005][T14602] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 1598.926118][T14618] Sensor A: ================= START STATUS ================= [ 1598.967428][T14618] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1598.996366][T14618] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1599.018192][T14618] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1599.035868][T14618] v4l2-ctrls: Sensor A: Brightness: 128 [ 1599.048188][T14618] v4l2-ctrls: Sensor A: Contrast: 128 [ 1599.061807][T14618] v4l2-ctrls: Sensor A: Hue: 0 [ 1599.074902][T14618] v4l2-ctrls: Sensor A: Saturation: 128 [ 1599.087337][T14618] Sensor A: ================== END STATUS ================== 20:28:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x41c1, 0x60499, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x0, 0x2}, 0x604, 0x0, 0x0, 0x4}, 0x0, 0xb, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x970ba90543d1828e) open(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x101000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6c00) creat(0x0, 0x54) dup(0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 20:28:46 executing program 4: ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0445624, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:28:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r2, 0x1277, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r3, 0x1277, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r4, 0x1277, 0x0) sendfile(r4, r2, 0x0, 0x180000002) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000000)) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r5 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) 20:28:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f00000001c0)="ffff00040000000000000020f99450adca4d1434e020945684ded72a1395d014eb3404812df888d989e74316c084526fb10c2de97af70012dba47890681311ddabb0c0d7b3e3de2a31472931005604534edf79ce863d0d574384f3c57091fb0528e4d9a9efefe8c23d2f0e90d9868f056a5f6c0cc0070ab5736152defa0cccd5879a52ef5103137e518ddbd740a016b16253053be71d8bc396a0a01de1df46fd3539bc83acbebec889002b2a23c5412d", 0xb0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000080)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x100000001) getsockopt$inet6_int(r4, 0x29, 0x76, &(0x7f0000000000), &(0x7f0000000040)=0x4) 20:28:46 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:28:46 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r2, 0xc0305616, &(0x7f0000000000)={0x0, {0x0, 0xff}}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r3, 0x1277, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0xa10000, 0x5c90, 0x847b, r3, 0x0, 0x0}) [ 1599.893164][T14647] Sensor A: ================= START STATUS ================= [ 1599.917656][T14647] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1599.948538][T14647] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1599.972008][ T27] audit: type=1804 audit(1591043326.889:309): pid=14646 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir377111778/syzkaller.YvCIsr/919/cgroup.controllers" dev="sda1" ino=16363 res=1 [ 1599.976391][T14647] v4l2-ctrls: Sensor A: Horizontal Flip: false 20:28:46 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:28:46 executing program 4: ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0445624, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1600.029148][T14647] v4l2-ctrls: Sensor A: Brightness: 128 [ 1600.051922][T14647] v4l2-ctrls: Sensor A: Contrast: 128 [ 1600.083792][T14647] v4l2-ctrls: Sensor A: Hue: 0 [ 1600.087463][ T27] audit: type=1804 audit(1591043326.939:310): pid=14650 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir377111778/syzkaller.YvCIsr/919/cgroup.controllers" dev="sda1" ino=16363 res=1 [ 1600.105207][T14647] v4l2-ctrls: Sensor A: Saturation: 128 [ 1600.139853][T14647] Sensor A: ================== END STATUS ================== 20:28:47 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:28:47 executing program 4: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:28:47 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) write$vhost_msg(r1, &(0x7f0000000000)={0x1, {&(0x7f0000000100)=""/4096, 0x1000, &(0x7f0000001100)=""/139, 0x3, 0x1}}, 0x48) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) 20:28:47 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000334000/0x3000)=nil, 0x3000, 0x100000c, 0x20010, 0xffffffffffffffff, 0xa00c1000) sendfile(r3, r2, 0x0, 0x100000001) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000100)) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r0, r1, 0x4, r2}, 0x10) r4 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r5 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r5, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r6, 0x0, 0x100000001) ioctl$EVIOCGKEYCODE(r6, 0x80084504, &(0x7f00000000c0)=""/27) 20:28:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20499, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x970ba90543d1828e) open(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x101000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6c00) creat(0x0, 0x54) dup(0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x185000, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x131000, 0x21) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e1f, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 20:28:49 executing program 4: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:28:49 executing program 2: syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0445624, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:28:49 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x1000, 0x4441) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:28:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r1, 0x1277, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x3) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000040)={0x9c0000, 0x1, 0x8, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x98090c, 0x2, [], @value64=0x1}}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000100)={0x10000, 0x7, 0x4, 0x100000, 0x7, {}, {0x4, 0x0, 0x0, 0x1, 0xfe, 0x46, "0c6b7395"}, 0x38d, 0x2, @userptr=0x8001, 0x401}) r3 = syz_open_pts(r0, 0x0) write$FUSE_INIT(r2, &(0x7f00000001c0)={0x50, 0x0, 0x4, {0x7, 0x1f, 0x3ff, 0x180204, 0x1, 0x7, 0x1f, 0xfffffffa}}, 0x50) write$P9_RCREATE(r2, &(0x7f0000000240)={0x18, 0x73, 0x2, {{0x20, 0x1, 0x8}, 0x1}}, 0x18) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) 20:28:49 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$BLKIOMIN(r1, 0x1277, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000000)={0x2, 0xfffffffffffffa1f}) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) 20:28:49 executing program 2: syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0445624, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:28:49 executing program 4: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:28:49 executing program 2: syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0445624, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:28:49 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept4(r2, &(0x7f0000000000)=@caif=@dgm, &(0x7f00000000c0)=0x80, 0x800) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @private=0xa010102}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x7a, &(0x7f0000000080)={r6, 0x0, 0x0, 0xfffffffffffffffe}, &(0x7f0000000100)=0x18) sendmsg$inet_sctp(r3, &(0x7f0000000640)={&(0x7f00000006c0)=@in6={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, [], 0x3e}, 0x2}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000140)="493e051a8ec59dd263cf5e69c66ac82c14967798a17306a6da42f2bce05e768fa9931feb1dad19964e720d4dd2c38d1d60d6225fd64d236588489a69bdafecc4767d9f1ad66ef03d65d158088d1ac8e31ff6b547a073a338bb97a9f62156b13b9d4db636d4f5fd439332cc43a4a5a1f2e3a24ec598e5b19debc9a898d750cddc6ea7333be4ebb8b1fd82e9ef689a41fd38760ec119924ce82ded7ba9723a4cf1d00df521f67c58968b2d491828e5cf600fc40b36e811a1e571b3a1bf7c8462a014a351ba9d8708bd3546f5e615b3f5bdcb8f49c6f61bc81475f439be08be2e9d124d917b17c2c87a", 0xe8}, {&(0x7f0000000240)="5efba16a715aa3e6970f4754f54994b2babee10101a31330821181b0576c862cd33ef649a6e1cf0f800901de2f86836538117522531fd433c46b002a764f8f3f539427e2804083e67faea2132ef2e4090422fda430725350d31477301ff8b6100ca043f20f1490dc62db56a83aad86aed9234402c021", 0x76}, {&(0x7f00000002c0)="ab4f622ca57f1e1ea976e02866a1d16b40de362ba703c9289cbf4f22502f8b007e2724dff6007da197f5c7ec6990193689f6682b7695d0d6312e59622603585a4dca39dfbe79cb9759e570399daa6e1aa50a3a2a5382d2e2e40d20d8ac85c7df28d103f2d18eb09c9b6321740c55d8c5095701119aebae9226431d0babacabb3452ea083b34a907a49b5e341b4ce9d748811f5cfdd59dcb1c0f030a9f5", 0x9d}, {&(0x7f0000000380)="33391a67d0cf5596d731ee558fc4baeb819fc2495fd1058c6fa0ba90d9c450f4e89f7fdb835a5ccaa9a9d777e4d18a591b29df34c2ccd924fc76729d3012c60cc525dffa086a01020be2534e382977193f5fce60ac173d59e33997edd046560f864e2b0da9a3172c3c4e1aaa6b2878290c0a0bef7444eb71165699a1ba11b2f63d6e983cff7d1f058abb858def185975859eb5509bec29dcaff8728e624da18dad2791693b5083b93e6908abefa47934cdfdcf9d5df1fa127959dc4af8cdf103f577676fecee0a210d8654e14210a34dce5c1fc577888500037a", 0xda}, {&(0x7f0000000480)="3f91bdb0c208fe9384da172d68415581b16dc4459216ce712ef402", 0x1b}, {&(0x7f00000004c0)="b44faaf094f0e0a880fd2672059790503f6e00d2d9ebd51e8b1b728ed21a3ad102f8e07e57728a5df79055b71a40655e8520228a4610b0b4f5d0bc186588d747eac4754da11cdb409d2a9c3ef5aad4725caec9ea5e7f7d6c62d411881f8d193ffdf66a1aff52f6ad7b0d7bff4c9fecbe0d0b5e9ab46c06a8af8f704400ea663f91eb8a5d0dbb3c2845ccaeebd12760a0450da2053b912c886769a8b9729991594e034946a3d97e", 0xa7}], 0x1000012b, &(0x7f0000000600)=[@init={0x18, 0x84, 0x0, {0x0, 0x8001, 0xfff, 0x7}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0x204, 0x1ff, 0x7fff, r6}}], 0x38}, 0x4000000) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) r7 = getpgrp(0x0) sched_setaffinity(r7, 0xfffffffffffffe6a, &(0x7f0000000100)=0x200baa) syz_open_procfs(r7, &(0x7f0000000680)='net/kcm\x00') ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000080)={r8, 0x0, 0x0, 0xfffffffffffffffe}, &(0x7f0000000100)=0x18) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000006080)=[{&(0x7f0000000700)=@in6={0xa, 0x6, 0x40, @private0={0xfc, 0x0, [], 0x1}, 0x641f}, 0x1c, &(0x7f00000029c0)=[{&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)="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", 0x1000}, {&(0x7f0000002740)="22c1f23e8d77d62c73ef9830d5444d08314eab4a89c60fafa9e88e6e83e082f11f877f2f4d94b01a39528c105557e4c19af108e648d38256a94977d9145a9868cdf5171bc4f055b263507dac3dc0f1004ecd0b596c4dce8f6293d6db5b1ae775792a09f6ed3450d8c1f45e488376b37e14ff2c66947c94c271b5b702bbd78ebdc74a6fcdd0b4ef05beed33206bc16c53cba452561f09ad624d760ae69b00a6bf8cf5c671affdc71585eb26db8aa4a7ecf15a31320066b251e6e0bf4115410972b0363efd78e3fe9d0e0434221781448d674480a989093c26b2a454bedd148e8dfcbf824b195d3f7e271266f714a49db6e5adfc12", 0xf4}, {&(0x7f0000002840)="6b499855d329f88c9accb57d9a639591e18c88016ab50a2930e702856e86e46abe11e30ce98b176c1a2d7b45466ae678174689bf0151488e1908fd2f426578943be978dfa4b43474d8be5db0555008c745b42d6f19e7de6c955a4191c0fa3d90f432b3d2e57127d9b219b9b7e7b0a620dac5cf3d29830b7d5702b90e6f3d4ce5c40a06f088e0e9c0f0ed0fe56f9e1ca02aa64aff0b73acb7a831674476f64f226bb5b7be1622208aaeeaf42eecf0b654b79f873099111092bc672469f09cec2c695409a7e733c4a3dd82ed7e654bd66d0ce40a8abe736d6fea91cbf5df7341693ec7", 0xe2}, {&(0x7f0000002940)="81ee0aacce08845e836b20de2cee7784fc069112dd19b8bc083bfea007302d5e7b05be5a9bd72d5a905e0d966ff422aa48f92b39985d48cafe158f4f108ef826e81c1cad0563fff8e8c4be85a91b28d78e5a099b563e16904ca225a3c7", 0x5d}], 0x5}, {&(0x7f0000002a40)=@in6={0xa, 0x4e20, 0x6, @private2, 0x5}, 0x1c, &(0x7f0000002a80), 0x0, &(0x7f0000002ac0)=[@sndinfo={0x20, 0x84, 0x2, {0xfffd, 0x8202, 0x101}}, @init={0x18, 0x84, 0x0, {0x362, 0x4, 0x9, 0x3ff}}, @authinfo={0x18}, @sndrcv={0x30, 0x84, 0x1, {0x6d, 0x1c69, 0x8001, 0x6, 0x4, 0x39, 0x80, 0x3f}}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}], 0xa0}, {&(0x7f0000002b80)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000004140)=[{&(0x7f0000002bc0)="dab7e60ed0e588da26d8e63030d150478b86c2ba6c5fdb46045c7e4083ed686c42881cda090afc16c6d0824caf6256c8fbdf0c120be7dc1380a0e8a0a8e69b2fb6a24b77143ef23363e9ede2ce66ea4b417d9e1736c44e984570daa594f47c77fcdf12d1dbb0a13c043b6ca72ac4a6140dbf934ff849ec10f07928cd074fb9ca8259407f2364579628604c64e1859394c03139e4ceed2330c12f955461cf4459051fcea4d3d1d4575279fa3aea323293817dad6453e735d5bc60408227f7c728ec5c15939fce4cb22004bcda208083b0073b81a97805825ef1d839cc0d712aa78719df580c0b", 0xe6}, {&(0x7f0000002cc0)="7073f0dd6e42070d452bd6f1c8c8fdb77746a499cdb157fa7efaed77dc7f47a06bd991d703190dcb9eb5780525f323f34a4308597ceff01108ba634a7fe87a0afea92fa393f7b6fb112182b823c18575ffe9ae8ee5", 0x55}, {&(0x7f0000002d40)="17c5d97cae206f7f40a896dda1671ece5a793df6c6ef8ea0c44b285cf1e9cc00e234ed0df7a73c31446584409ee9859101e37ca73ba7bf173bbfc69ac9a14ed9e7cfa3cc7e6ea9696eda217565f7aa1b16bd391467ae1e909091d6e69f1f8fcf6af2cf1dca558ede431f609bdf26822af50cce121178d90c3dfee9d4d1211d5d510d9572ce46a61956ccb5ba9ba45c2906abad87a537329caff91fea1c297882363dd44643831855fe0e67cdcdf91bdba9a93b2bc5f245bd507cbc778412b54924e2598a875231a27cd56860597b724fad2520296826964853c033ed34aa959a92548115d144e9781de63757624c4f571887f852", 0xf4}, {&(0x7f0000002e40)="a9a4b6cc8505e2771ca057a0913b8245e23a476e4eb1671ad4128b7ba0d690f4c0bd92d446548742d6b5694a237fa1166687f5", 0x33}, {&(0x7f0000002e80)="397452c39da04ce83eac98af84e872a90a2c0eaedced87a3526e8f99876f29f0929c2de6f9da8ba991ef49510e82081095ad4d678ed277069a12077d72603dd1ea600d6e8128936b639bffb8e8b454175723623cc6e87eb44e7d1578e429ad7ae52fddf1a105de5edf361f4223d404736627b56986ce11de3c6093e913dba47db1e9aabb1b0bc269744547ea5370371127fe3baa4e7d0cff1c44beb78a67efaa179332f6893540bf5c0e91e2", 0xac}, {&(0x7f0000002f40)="288167ce6441c5ef751a479a052ee1b370e5b1d11c3ccd87973035c2b1eaf3a88209d369367194039c7655a41d95933ac70defbc487749685a3839bd28dee03bff086198cfff03571f1d3160994f6ad75f6153e08c2d6e6f17a39460aa8f4ef8e99c4a7d0d26e720346348aa42df277b695f053d303195114928c76e794816554b2b86b4f3bf7589ac191130f2e8ec23702f6407c6a5859967943bd653a6ce52279eeb43415b8f203ba794df653c29523e9de92545b96d23267365b8d43f7ef24ec9bf16ac956d834d0848a5fa649939fb1e823e73a29a35bffcccf025c0fa7ac30d80539c8b38d617f85288674aee4f5e9351f34778608e85d92982bda05e3811c875e43f8cfb04866676645d97b9980485aa6d7a11c96a27a7b6f6942418fddde967e80ef182100ab08534d119b7c1a29ee57d12729c59f5e233a521da0d184c7c56139fa101d0bb8bdbb692903f39b672580fbdef296b7eb5668521cd3c9f82f5fce5340d423fb4011bb146e2e6b14439f463050579fa20680dec610e642d5ee07ba695d0c2d0938e0b01b5e796c7bc65ff983f6e604c1aa0d9cfc2c72e40abb206197011c9043a7dfbc2cbd0a07b8b9cf1afe0e2a7785ee74044644dafd25d6aab9701324011759502ff4044686f84ebf7a510872017153d519ab37d6ca9cfa86be9cc461aa1d0d1044a6385fdcb65241aeed5c51ea439b3f80a711b9f06a781f58eba2ff715dc02eea166e64ed91e40a56786456b5ae3bd86b888329c2cfe2c3b14f44923a7a6873a9f0a70c996aec79323031ab3ec844ff870874150c8e9a0d98fcb8f7f9b763aa0ea3088c9b730e0af4d9dd4e1c12dca1cbeb48ff067bb1e41bc5182df9e86c5506bb30281ac8534c619210195da70eac3cd9c3a8b69ba18a22bd499081670760d2a82f4492b3a4d9dc31dde391d09cd4c33e0962396d01efdce9843c680694b01731e2d9f8ea2fe929246df81e0a8cedea6511ac98917d619fed5c703dbdca69282238bc9183262a8dcc896438a3a3d037c475699b39a0b9fea658610cc30266d4482a0a1dcd933b0318f51df82350ca758f032d8246950675b4965e55a4cce935d479a6ddda390a73b4828531e8842bac3e1e5d99ca2dd5752fcf3c9b9622b62801c216b984a806aaeb78e7fe2a47378605f04eb8ca32f1b30ae3cf0cbe5d6d85fba7591af5b3a9421082c1e04749fbc5e8b8ec0da7fa6c5efd998d86827a32f7a566d27f5ed668cbbce1aed06463cbce590ccff5e96ed1cd40aa4129f8af51e95e653fc2d07a095b59d70f2fef8a41c2e048f0d95a890613c641faff5a8e583dec41fd0d908282dbbbec1af4536cfd122405acc21839fe4c7a0881f35e1c480258838cb0dc30b391e034fc12344e993f39187b928f9ad093dac8b67d718453fb963de1e55189aa3df58c6d22b6d09f52f0cb0e14c8edf4c2143585619ff31ce732891ad63c05bff473ef1dd44428c12f7abf66cca474e28a86d883ac9b38b41fb0749545e88998368d91c0adef6b4c516fd89cb3a40b56a37f4d22f4fb4a9bddbe55dcf50b1bd1ef0f6cde12a7edde0497a597b383151c94f50ff41fb0663412344d967df1b250d4b3545f2bc26ad5cb8acf29a2622287b8004f1c2938e81dcc6555962ae252a1020efbe9096ef8265a5d6371ce5cee02f60441c0c6939998f4cb6ce473d7657defe1146e0dcc0c4a3386eb5878bf84ae57f3d9e60350a863b8524c207525549b806c835638f20a5911d5f14a1862566360db70c65329a511415e8dab3f3769771271ce6a871a56479204f8675ef7416693c231e463c776e7d145dab3e834b20729200c438fee8ded7208df11ac53ada59d50f41cdbaead40f3583750e9e2def2af03eb1127407b6078952a0fcef692883e9eeeae83b0563f847b79e65a46ef1e7f988d454655b5c01ae0ebd8239a118196856dc282df9123b28e3e8371fc9d88c1178a41eca3dc12622081d760abc7377093ffefe54e7892d78d9188ae5a68dd6320e83d4660706e13cca40e505de405abf5ce089756dc7e2201b68e678206302388c63208108f6f71ada77a9c7e33b47b897eaaf0780f03efaa596ab74f28405b3992ba5a672c66ccb5124209d3f721ec3aadbd5ed853e3a77705c41a926bb1bd47eaa0b5ed6b67f19a5f5705b84d7d4d646cbdc505629433e3f1f607e17a2d128fdd2637c0b4890bd6e2accc12230e7131b1ffa1ac26903605858ffded173f85d24d16511a47ec8a0bd3c9d084c372dd77ca6892bba466f6b6770f6158a0d08dcafc1155544fb9305f898ebf384ba122b51deee54972acf2a3fbb214394a160575934206aba0b09e71e50b37e6df180fa9ab26dd1567fbc2e6b5d7cffa440db50254adcf508ada02b01a453cb9b10c4cb053ed38810c4e2c6999a9196c3fc31508d3d0b08534d105c7a97a018c9eab25238ce5e27e449193cf44256c5edf1877cfd89a7d5b4dca8ebed40bccd9c6d040aa55bbe33274e8dc124b4d346c850920d813b71c470eae411af8c41108a561b60f18a1344f7650236e8ed33e6b262d6e61d26a89d15fa61b2f3c7ab58c8fc210fc65e086e0346cdb57f757c220adb37b0487eae1ac053866274fade25440881b06a8a030062b994b07b702f149fbe5e4abe25172e903466bff1dd5f6a2cf3492cfbf6fd8cc4c10ff1b0361c3714f74d13ef8addd7326e4a5c1c5a815b1dee766f9926ee0b3fc9418c5c2defe06e98e2bfabad2774885e080ece684ce527282aca3b0e85e25801f557ca6749c1bd82094ca05aa42fe51173f1841bd432afdc64882cb56b041a8e76f444b1b66af055fb2af756999ce90b6c215a6a4d133864fac67afcde8f5fe25581037725635a73a0138e79c2c63a088a57020abab1862210efed0ab1de8b520bff79960561738c8ea8c3120c1b3bef80ddae91b41722f91a6dd0cc2d288d54f407489f3b9edccdb0bb3a6c047a356f121fdaa013bb94289ee18b1d6c3359fbcbf7bfb6a304e060dcff5a75e9dab6e2d339a6ebcbb4eb7395a4169b756e58d473a6df525b770cfd1b47ff5f7209d4547f7e1b7cf83f68fc0a6932eaa59f4035cfa3b51c3852cf164b9b40ff379289076affc9fa353c189c705e6635d9e2bbf7c9707fc57dd6f23004d98c5063c9ddec06edf0b65bce7ccfae5b2b8eae3b59b53cb2ada65e68d40f34bebc4d1f251024759444f830245b715096dd6427ef1ba639d77fd66af15414b5201057f1e73cff0e57265643c0731e3fa5516102d28a1dcf23f193a07daeb8739d2df813042c9caf85961aaece4b26dfc7772239f165542b74200457a209a97618f778a2e205353fe247046cd80be0d75516f99f2cc9c23036d3ade6db0c27361f1dfde2dd1e3d0d7b8400c62e5bfcc0cd8a6ebae140b918bb27dad27e16c259b2cbbe388b69b986666d8aaa23742e0de2a507ce7550a10afff3989f031a9fad53e8e10465f3c698449e94427d5a50c6b52644ff9a4b1db7e66ff80ed5fa76e62f847d646a1722b7bb4ddf2fa9ca3b5c00d089dc288bedddb7240dee6fc6c9e29de50865e1aaa412590d2e027c574a7fcee5aa585eef52b1d2c234d89ebd3e31fc4404d9af4e24b40840cbbb91197edff02e95394ae83257d8be701700437d6bdffff691e8e4fd0e543fc6c650591340a05398fd2e93a290f4364d859e244751d61d11be23fcd17685df6d188f060370f014d50701c55ab743596c67c74babf465cfd9bfd935531a32408d5f6dfe1c16232acfdc6d302a3c861189623abae9a584df968af5d0c196c64ddcf2f57831302a7ff9e7c5df5ec0ce06a92886f024e9484eaa8204e462c1e49f0754342bb981397155155e60bfbe57fa429823dd3650212b0f1fb67c1e575ed13bacfa48901bfccaf9ecbc3e8ac8960da8563ca7e6835c5f4293b07c0b6bf9331d4c566cd03315878aa8a5177947c7754580d292a3e6c0cd1d3de26659517acdf870f13b2d9d97311de795a7179534cdbea2adc21e586b41925f1737ef20488e193f94d0f1d8976dae31eb9d20b0bbfb9e2f9a5f8dd1fced73be0d520937d5ec6771e11074de2e3b4500dac936a9f55b495f6ca4bc24804706bc4301d3b1dd999d2ddbe68b5145c7d1ab4af605770cc6e10a0d2671b9441c3dd40809e0afd3a1bf57ae6099b01da61988ef4afb36b7cba47efb9eee4927a222dbecfa1f4008d372813467c87a0042eed64bc61599949186e2605b62d89f365332349b6e3a4258c170f41f9e04db90e6f05f6f94da7e38a4b9c3bca242e7bb03855575c4f03621b7cbcb6bb5c928632db8e352860a5e91d32067f519241cf68cf09b6cb0bde55bb7c3db2359580c04cdb789001e3fc172dccd6b67215d21149587feb75ed2e213fd676ce91f1e28f51dbaea0414a645557c89055db38fbe9fd290db8faf7abde9fe1a86e5df5bb7a746d2ad5f03dbf909c5052e1f4170223314f54efe7e3ee9c116db78eb83ad53158151a57658ab6f4eb19e7058526a513c58b98f48055ab7d28c31642066120cdc196c67ab9ad4e620265e7cf6b16fce2e643c84c1c1801525e43485fe0edf5efca924a047b1629a743a3acde05b2e49d902c80b9fe148d921f0f4e07c7285036e12c1635ed7f44bcbbafb2addc522e3711adbc021065b275b2b9932f4eccdc2e0a3c865b33693f7df4a3ebcef54fe17d3e6319d46136baa66e5074c20775395710cea515b2a07b828f4daa011737a841c248333a8587c11fc1fd616fb831e281b0051c5887ff5df8b6a3a0f536d7b7d6b88ce37f66f0dda62a2d3f5d691c817484778a755d777ef036ad0ac29cb9f29d4e5293806b07da9f17ab6405cbdd8a23f1aaa9d6693b20ba764c49e9744efeee57598889596a03a898d456e6231e9d7006d4456b0f8c05555012791f1f263007f9a27be71e36fc14d92076ef1d4e0aa132f3f05bb6ab7dc5f8450d841238f2765b9ed2573f88ffc37a216205831a1f61a854dbf1117ed0fbb2cfd1a5235b6a240421bca430eab960b23695bc38ee2c8fcfa0926bc57bd27cbd92638203e1470e4bc90c384f33e6669617ea6856a554106a931f8b3dfa8fc30484562aef91689e9a44085bf956d5f7998e8fa3e164e0a6a0d84f2c882d7b5b5b6e293b93e6bd92ba056c78a79b616975735a5c51c95dfab236c21be00ce9fad820ac90ffaadbfa338e3e55713bdd3a7c645f30582d8a4f78c6e29564672f085bfe51e62badeed37c71861fb3876c6090fd1aebdb56ce40ba0609d9d3bdcf6b71292a321f1ef88aa9048d3062ab6aa5370880c704da90b47514786c24ddc798653c127af61f613bf097d3d84fa5479f23afd3c5cef76a5a8b75f647e1f68ddaed6126e72c283dd4fd41495c46bcec09cec901e81644292bbacaac76418f4ccbd699f5f0d335d102d397ecbe73d6ce30bff5e2546009d1119095cd775e78db3a1a32e5f02b4b32e43ceb5d1dafbb9c9ed2529c1d434fc849caa089f5db3e1391a74c2c6bf61f9c02446cea5f924a932e04fe8d78086004b7df30509fd1d709660d51425fac33468c5ddc0b23529ab3484b5ce2a4063901fcb8e893e105fcbe5c7816757678006f5c87abf1681d2586e105bd5e0a280e2f9ee898da1e1f1180131431f241b3833d86cdad8560cab163e988b086935ea0837d023389eaa7d1ab914241cb1d80f777ef1708a4e3740f6cef33d941de48704362e69a6e4d13605fbddb7d894804cdd5c1a4140f4fa1f5af16af44474a05b9a834b932bc58e84c023c2c37e8210e565c22de36b1baad4d9425ec5d790", 0x1000}, {&(0x7f0000003f40)="703f6d3f3a369f19cb675cd8a048d62703ca072fd0d004e4c555b7c48791a4aaceb3908dc6e8c70b74f6eb3f7cf78ad63dc6b8754bad094aec5c83d08655a22af6ba2e6c8afcb64b750b0687091694f6e5070db78afd3c83daf7df7c998f4f043a12f7d57391dd26dc7dca177d2456ec79c30c1448d47dbf457db07ca66db68b71024c6d889959880e25f3ef8e1e0d5a0d9a4450171a9707b05967e8e440b117defbd8fb9756db4ac4c1a2541863e3a9ac70b40890b16851c18059182234b0b46e0a5f9ae095a9307b8ed85cf6d7c3743cfd47cba21d48fd0f0baf6596", 0xdd}, {&(0x7f0000004040)="e9fd7adedd30d6161204fd9866668fe44514946732ef452e14934acfeed0baf1ac1475692d68874d5f961fec87f22a00", 0x30}, {&(0x7f0000004080)="abc3348a180c066598358fbe7bd0ba2a6badf038e2939b6826374a1482faa2c8265131b688a7608609c1e03a1d92ea717fd963a2d50755fce3ddb9b2b2583039fa54c7699a56756a2bce09b4a510ee64e42c718aef257e263e7e4e437e4808c8c8af6f4aa71301a78becb120da8923cbab72fcb5b6dab93f773b076776afb7d1f266ac438b685d0ecb6f151f59d701a04d4e358a2d68866d8de3a8751addbbbc8b30c00110ce7990cd947bf302743afaf319ef7d4d1843e7b07fa23ba6", 0xbd}], 0x9, &(0x7f0000004200)=ANY=[@ANYBLOB="180000000000000084000000000000000500070004000800180000000000000084000000060004000600000000000000180000000000000084000000060000002000000000000000"], 0x48, 0x4c000}, {&(0x7f0000004280)=@in={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f00000044c0)=[{&(0x7f00000042c0)="b0fca7fe4738e21c9ec4a16e5f56409d2a3dd10ef7602f071fa17cf93a86f6c3dffa19816c1b9611fa1f66cd4b2a4d87e0dcc692e498cd8ece", 0x39}, {&(0x7f0000004300)="f2da4a6adf081aa646fc4b75558c29ae3ce433cc2d8d16ca9723f2c56f7330f4e13501b24e0a74a430b770171d35b430565044dc42adcf22f91132d9958eb0777abe9dff40238377875ea1419817587b47a1135d8ac6ccde315d31de245cee1df8b9976fe517e1040b0560e4b82a4b8ab864254702071d32acaf2cd491301c0de7dd8d98910df1ea686dc6804f43c797afc2cac9bf8d1d352eaca8c9565210753bfc3d34c7f2d80cd0c757a716a103449ae6a3963b0e1432e75bc176be6c27c7d20bd651f126cab1fa1a386a71dde37a01cb7e9c51d3", 0xd6}, {&(0x7f0000004400)="b64241b67e5a4b9fdbe419f920159483335d76d2c1bec5f74991a529764407b2561810f0d74f3de35d2e4a20474356772aac61f5007dfa05076e9539ced9d597f211c0df83f5b0fb9c7a53b9b48040cb359caf7032a8ba0ced3b674b8499332000719b83cb25ed12e9ebac0279f8e4a4f3b4faffe7c06700211f23080104be94194812c1727bfa514ef60f40677f7e90898d6bd9792357b74e2e019bb32195aa1bf3c5c9e49cd579dee24c85805560b0f5b7", 0xb2}], 0x3, &(0x7f0000004500)=[@dstaddrv4={0x18, 0x84, 0x7, @private=0xa010101}, @init={0x18, 0x84, 0x0, {0x4, 0x5, 0x1, 0x1}}, @dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @authinfo={0x18}, @sndrcv={0x30, 0x84, 0x1, {0x2, 0x20, 0x3, 0x81, 0x800, 0x2746, 0xd2a, 0x101}}], 0xa8, 0x4004000}, {&(0x7f00000045c0)=@in={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000004700)=[{&(0x7f0000004600)="a33c916a4ffdcf67cd1915e5688a43443436376e7f3c780c5fc8e04ed7c904aa727e1b4a2984d70cffe5a69ddcbdcee0ce83963d44df40f3a8e534d1070ee56d007910", 0x43}, {&(0x7f0000004680)="23bd1c396e63917e95bbf594cd1b83f3a691861903d53783cf05fd3835", 0x1d}, {&(0x7f00000046c0)="21d3e6a5adee3608945b72afd4a5f64933a582ac126b529722959d31ba8c9024294ac69aa93def64d3877ab7787f13514458", 0x32}], 0x3, &(0x7f0000004800)=[@init={0x18, 0x84, 0x0, {0x1, 0x8, 0x0, 0x7f}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast2}, @sndinfo={0x20, 0x84, 0x2, {0x8, 0x3, 0x81, 0x7d}}, @sndinfo={0x20, 0x84, 0x2, {0x8, 0xb, 0xfffff58b, 0x10000, r8}}, @dstaddrv6={0x20, 0x84, 0x8, @remote}, @authinfo={0x18}, @authinfo={0x18, 0x84, 0x6, {0x1bbd}}], 0xc8, 0x80c0}, {&(0x7f0000004900)=@in={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000004b80)=[{&(0x7f0000004940)="88c6bf79f01eab22b23c4ae1c75b09bb7b73241b1bfa2b0aa79f7731bf9aaab3b99a1fefca8bbd0ef059561c6e05036b9dae10b314d044b787347072acf26e25ab4bf595af95ac929593197440b94fa0cdce14dbe31b1249e4b20e757ed39f3cb4b627c5798a6dbe0003bc2b76b081d684db2ef56fdf1b6f180d46297fa8c225abbf7900a8b3d03aa910f8d23074b1210e2811b6a46fe9a1d47a7954f3268d74df5533f75072f0fb214c21d14338bb5d14ee72ce58f9", 0xb6}, {&(0x7f0000004a00)="ca3433700c88dcd1b5dc5ead422def6d6512b20ff0eedf7856fca094cde128cb3f027e3654cd493ba8ba629796c439d16245b46ed47e", 0x36}, {&(0x7f0000004a40)="7dd72f6e97e735fc64b20b4f0d4ac04ee3bedae45ce5e73adefaa559a45432d6e70aac", 0x23}, {&(0x7f0000004a80)="b99e9fa55755dae6550ca5fbd878964809223e2c249099b84d520f670c773d8a07ee650bf51d9edf3f19e44273f01b481dc36a0c2cacbcec5ed02119c5907817f4ba793134f58e3debeee123ef6b159d2518c335040ba93c33463175d08a1bc4a0c73136aed42c01ff40c0e0c5decc986ed6c149ca003a38523c04dfa3138169a6279efa368b2181daade3de07cc9b4a15f52bcb48623213d9be0bc4f1af33b83a963c687e44eae8", 0xa8}, {&(0x7f0000004b40)="25f2a378c27b6351c98620699d5c1d0fe3fe2fd0c303cc1c1ad97354cdd0c18edeb9d617ea0c234dd5b0240b46439460f93c8236943206", 0x37}], 0x5, 0x0, 0x0, 0x40}, {&(0x7f0000004c00)=@in6={0xa, 0x4e21, 0x0, @local, 0x1}, 0x1c, &(0x7f0000006000)=[{&(0x7f0000004c40)="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", 0x1000}, {&(0x7f0000005c40)="405c32f64a0e56c8b700fc911c2e50a5e5153c706069dcc61010ec1b5c584257b37f09c43c11f34d7aef96803a991433eebc033d93e2715b562adc6f7b2adf9640f501c65fa49b180359c0a8b8350af91ae8e9f94b02a307c66247415d502221a6a2ac145d1490c30a07cbc533f253a991c3f7bb3cfb37edc2776d30c90c506c36f25183dcae717711289d748d16101d06a9fe81e4fd1d8efb38a0ca981689ef3aac0fb94bca6230f971b39e1f9a3689e1bef6d03475b678265815e1db76178647eca3225b29", 0xc6}, {&(0x7f0000005d40)="78e78f", 0x3}, {&(0x7f0000005d80)="1f95f0ea0dd670739dce33fddf1851dc7ed5c8a9e5a2f071652d23161d805cafaa2320d46a31d89647029f56f024cdf6aee2c846f8b581cfa868f92dc1f5f0b0cae608e4591d780956039766a08a97cdfed5ec91b4ba6ed274a633be0287ffc584ecba4a475cb54238771bf9071af9461f76f35c16fc6993f188f4770f4517da02d31f64d18e9dceb93312386d8188ee87017c2b8bf540522c7f970bccd115581835e59707a4ec3c7b89491a4b0cb7329a21d716f4fcf0f7d3f58cc63f950deb175feedf7a5bc2", 0xc7}, {&(0x7f0000005e80)="23a1558bfdfb83d44dc3613486", 0xd}, {&(0x7f0000005ec0)="9f741229dfe2658ae584fbe7a551f8ab4db13f48718832bc89ecac532a8aded7e76ed7618fe15d623ca32065cf29973dd65a5a1f74e67de4a43c39679c72fb1310bcf67f4727d838c6c36b1a8e88810d2ef3de08c0441ce21f0655055ae507908fb1d1c651f4c7ffbbd9fd6ada771d0d11c0444b7a871dd76b0a4116bfed82009ee2b97c945c6d39008a96f8c3ca4c03e82451865127a71215aabee0257c0014137a13a2a3e2449976fc833dc75459774e22b64c16dd1a5f0615aee0e56685b930a4559cd12dd39c3eed8bf5d207633d6b", 0xd1}, {&(0x7f0000005fc0)="136c0b983fa9d319983ab76a20ca54e420eb21572514a9d76e4c4efed2fb416a74a42c0d", 0x24}], 0x7}], 0x7, 0x20008000) 20:28:49 executing program 4: syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0445624, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1602.705827][T14707] Sensor A: ================= START STATUS ================= 20:28:49 executing program 2: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1602.771684][T14707] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1602.802262][T14707] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1602.836558][T14707] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1602.869219][T14707] v4l2-ctrls: Sensor A: Brightness: 128 [ 1602.899935][T14707] v4l2-ctrls: Sensor A: Contrast: 128 [ 1602.929442][T14707] v4l2-ctrls: Sensor A: Hue: 0 [ 1602.954188][T14707] v4l2-ctrls: Sensor A: Saturation: 128 [ 1602.986683][T14707] Sensor A: ================== END STATUS ================== 20:28:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20499, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext, 0x0, 0x5}, 0x0, 0x6, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x970ba90543d1828e) open(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x101000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6c00) creat(0x0, 0x54) dup(0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 20:28:51 executing program 4: syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0445624, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:28:51 executing program 2: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:28:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f0000000140)={0x5, 0x2, 0x2}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x13) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r3 = syz_open_pts(r0, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r4, 0x4008ae48, &(0x7f0000000040)=0x100000) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f00000000c0)=""/55, &(0x7f0000000100)=0x37) 20:28:51 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) sendmsg$AUDIT_USER_AVC(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40041000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xe4, 0x453, 0x126, 0x70bd2d, 0x25dfdbfb, "dfd777f92ef12d61f67ae22819c62a367153ebbab61d173eeff980e92776eb25426b8f351b1ea4b38eb4529aeff5a644db84918905d3e7a0e7bd17103113994159c8251ea1969408bea88b0fce083137c26139783f4e36da30c5f1d54b762f34926224927c7e0df20c8dc65c776400a19d83c02734dd7880ef6fcabd2f69a04e9c18657566c018f2517524be6e8cd9ddab94ec030df1bc7883f88f0a099709aa9fe186187ae9d7ab863b6086fc9229983e10fb1e7fd6f13bb2848806fb8a523a5b9e4afb6f32c553e2bd5867f59b8e3aa1", ["", "", "", ""]}, 0xe4}, 0x1, 0x0, 0x0, 0x1}, 0x40000) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:28:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x7a, &(0x7f0000000080)={r4, 0x0, 0x0, 0xfffffffffffffffe}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000300)={r4, @in6={{0xa, 0x4e24, 0x5, @remote, 0x1f}}, 0x400, 0xff}, &(0x7f0000000000)=0x90) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={r5, 0x3ff}, 0x8) write(r0, &(0x7f0000000140)="5efd32f19a5f9525e4adfcdee113bab83fca6291baa3eb12e1f2a9017045c039fb29dce459af6e1ba3343c3f6aa428d47334e4c1dc920cdb07bac2798a", 0x3d) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000003c0)=ANY=[@ANYRES64=r4, @ANYBLOB="f12d9ec6a9737f3fca7f448cf0fb84805be3d1c5a48a58293164a028a14a8ecd2b2a04bd68d9b05b1cf3e1ca783bffa44762d1a90e315bbed52dc34df7b588468685eb70146be967cfb79282476eb137aa6cf9dca212ddfcc3f8bf4315d9c8e4c118c77c922d3d4a51c4193af1d24f3b593e4cca2f57c7903eeb53ee0d0857584c96dba0ed0b36bbb9be7883215fdfd29503b6759be155b302ca253ea0b6e430ae4ad638833d7d754d6626e81b77e84ed1eec79581e07b79d0fb5e15017ed59ab0fe2cf53cf0ee3cbf83f73d781fac37a5a953956438c79d8cd0254fbe2e87a7", @ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYBLOB="e7615e50624564500da260e8c864125a011a7335c396b1fb3c55102ad53d4717ef55bc53554b633a30c94bd85eb5a3e1ad755481945b90dda929f28188", @ANYRES32, @ANYRESOCT], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@private0}}, &(0x7f0000000280)=0xfffffffffffffeb5) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f00000002c0)={@dev={0xfe, 0x80, [], 0x15}, 0x39, r7}) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) [ 1604.827564][T14736] Sensor A: ================= START STATUS ================= [ 1604.856752][T14736] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar 20:28:51 executing program 4: syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0445624, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1604.888827][T14736] v4l2-ctrls: Sensor A: Vertical Flip: false 20:28:51 executing program 2: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1604.930292][T14736] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1604.951438][T14736] v4l2-ctrls: Sensor A: Brightness: 128 [ 1604.974051][T14736] v4l2-ctrls: Sensor A: Contrast: 128 [ 1605.002049][T14736] v4l2-ctrls: Sensor A: Hue: 0 [ 1605.020651][T14736] v4l2-ctrls: Sensor A: Saturation: 128 20:28:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x4422c0, 0x0) recvfrom$l2tp(r2, &(0x7f0000000200)=""/204, 0xcc, 0x40010100, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x800, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f0000000140)) [ 1605.046109][T14736] Sensor A: ================== END STATUS ================== [ 1605.102606][T14742] Sensor A: ================= START STATUS ================= [ 1605.121853][T14742] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar 20:28:52 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, 0x0) 20:28:52 executing program 2: syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0445624, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1605.155270][T14742] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1605.180152][T14742] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1605.223206][T14742] v4l2-ctrls: Sensor A: Brightness: 128 [ 1605.244318][T14742] v4l2-ctrls: Sensor A: Contrast: 128 [ 1605.267392][T14742] v4l2-ctrls: Sensor A: Hue: 0 20:28:52 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, 0x0) [ 1605.285420][T14742] v4l2-ctrls: Sensor A: Saturation: 128 [ 1605.315545][T14742] Sensor A: ================== END STATUS ================== [ 1605.631994][ T27] audit: type=1804 audit(1591043332.549:311): pid=14744 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir310235184/syzkaller.KKpbs4/642/cgroup.controllers" dev="sda1" ino=16136 res=1 [ 1605.735727][ T27] audit: type=1804 audit(1591043332.620:312): pid=14763 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir310235184/syzkaller.KKpbs4/642/cgroup.controllers" dev="sda1" ino=16136 res=1 20:28:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20499, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x970ba90543d1828e) open(&(0x7f0000000140)='./file1\x00', 0x400000, 0x8d) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6c00) creat(0x0, 0x54) dup(0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8, &(0x7f00008d4fe4)={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, [], 0x1}}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 20:28:53 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, 0x0) 20:28:53 executing program 2: syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0445624, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:28:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000220106, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) 20:28:53 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x32000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r3, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$netlbl_mgmt(0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r5, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x30, r5, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, [], 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x20044055) r6 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r6, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:28:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000500)={{{@in=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@empty}}, &(0x7f0000000600)=0xe8) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000340)='./file0\x00', 0x80000001, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000380)="8ca793db3d78e5b6c1d0ed24a1ca0f359996f9545d3623d9bd99bae6f5364f955d8dffadb1f7a4c7967c5334de2ac5a33e898b6c9808747215b57426f5dcea55e8506b8b", 0x44, 0x9}, {&(0x7f0000000400)="48602637b053169a6bf12450419035bac32bade64a14f5d1a5271bb0bc17419563d4ad293e1b3938ebe363f94d913857c83c99f485f8e0308ab6ba3e71c52c34d00985dd55dd5560bd7bf51ac6c194cd87a256ce9110f51e35666b2fd840fbabb076c1cb1bc1244c4cf1f5298fd2ab76325cc4f0ee408a869da10f7d3aff504228a495c883efc9fdc044916f5437", 0x8e, 0x80000000}], 0x2a0b400, &(0x7f0000000640)={[{@shortname_winnt='shortname=winnt'}, {@shortname_lower='shortname=lower'}, {@nonumtail='nnonumtail=1'}, {@numtail='nonumtail=0'}, {@utf8='utf8=1'}], [{@fowner_gt={'fowner>', r6}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x23}}, {@dont_hash='dont_hash'}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@obj_role={'obj_role'}}]}) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}}}, 0x78) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f0000000500)={{{@in=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@empty}}, &(0x7f0000000600)=0xe8) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000340)='./file0\x00', 0x80000001, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000380)="8ca793db3d78e5b6c1d0ed24a1ca0f359996f9545d3623d9bd99bae6f5364f955d8dffadb1f7a4c7967c5334de2ac5a33e898b6c9808747215b57426f5dcea55e8506b8b", 0x44, 0x9}, {&(0x7f0000000400)="48602637b053169a6bf12450419035bac32bade64a14f5d1a5271bb0bc17419563d4ad293e1b3938ebe363f94d913857c83c99f485f8e0308ab6ba3e71c52c34d00985dd55dd5560bd7bf51ac6c194cd87a256ce9110f51e35666b2fd840fbabb076c1cb1bc1244c4cf1f5298fd2ab76325cc4f0ee408a869da10f7d3aff504228a495c883efc9fdc044916f5437", 0x8e, 0x80000000}], 0x2a0b400, &(0x7f0000000640)=ANY=[@ANYBLOB='shortname=winnt,shortname=lower,nnonumtail=1,nonumtail=0,utf8=1,fowner>', @ANYRESDEC=r12, @ANYBLOB="2c646566636f6e746578743d73797374656d5f752c66736d616769633d307830303030303030303033c8bfddf215e8e3646f6e745f686173682c6d61736b3d5e4d41595f57524954452c66756e633d4649524d574152455f434845434b2c6f626a5f726fb0653d2c00"]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x40, &(0x7f0000000900)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r8}, 0x2c, {[{@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x400}}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x6}}, {@max_read={'max_read', 0x3d, 0xa2e}}, {@max_read={'max_read', 0x3d, 0x6}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x3000}}, {@max_read={'max_read', 0x3d, 0x1}}], [{@smackfsdef={'smackfsdef', 0x3d, 'vmnet0vboxnet1vmnet1)'}}, {@fowner_gt={'fowner>', r12}}]}}) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) 20:28:53 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:28:53 executing program 2: syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0445624, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:28:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) r1 = socket$kcm(0x2, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0) close(r1) r2 = accept(r1, &(0x7f0000000000)=@tipc, &(0x7f00000000c0)=0x80) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0xc) [ 1606.789780][T14789] fuse: Bad value for 'fd' 20:28:53 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:28:53 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, 0x0) 20:28:53 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@local}}, &(0x7f0000000000)=0xe8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000500)={{{@in=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@empty}}, &(0x7f0000000600)=0xe8) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000340)='./file0\x00', 0x80000001, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000380)="8ca793db3d78e5b6c1d0ed24a1ca0f359996f9545d3623d9bd99bae6f5364f955d8dffadb1f7a4c7967c5334de2ac5a33e898b6c9808747215b57426f5dcea55e8506b8b", 0x44, 0x9}, {&(0x7f0000000400)="48602637b053169a6bf12450419035bac32bade64a14f5d1a5271bb0bc17419563d4ad293e1b3938ebe363f94d913857c83c99f485f8e0308ab6ba3e71c52c34d00985dd55dd5560bd7bf51ac6c194cd87a256ce9110f51e35666b2fd840fbabb076c1cb1bc1244c4cf1f5298fd2ab76325cc4f0ee408a869da10f7d3aff504228a495c883efc9fdc044916f5437", 0x8e, 0x80000000}], 0x2a0b400, &(0x7f0000000640)={[{@shortname_winnt='shortname=winnt'}, {@shortname_lower='shortname=lower'}, {@nonumtail='nnonumtail=1'}, {@numtail='nonumtail=0'}, {@utf8='utf8=1'}], [{@fowner_gt={'fowner>', r6}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x23}}, {@dont_hash='dont_hash'}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@obj_role={'obj_role'}}]}) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}}}, 0x78) r9 = getpgrp(0x0) sched_setaffinity(r9, 0xfffffffffffffe6a, &(0x7f0000000100)=0x200baa) r10 = getpgrp(0x0) sched_setaffinity(r10, 0xfffffffffffffe6a, &(0x7f0000000100)=0x200baa) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, r2, 0xee00, r6, r8, 0x10, 0x101}, 0x0, 0x0, 0x0, 0xa0, 0x7fff, 0x8, 0x101, 0x2, 0x6, 0x0, r9, r10}) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1607.047914][T14812] Sensor A: ================= START STATUS ================= [ 1607.084882][T14812] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1607.124730][T14812] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1607.146648][T14812] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1607.174722][T14812] v4l2-ctrls: Sensor A: Brightness: 128 [ 1607.196719][T14812] v4l2-ctrls: Sensor A: Contrast: 128 [ 1607.215718][T14812] v4l2-ctrls: Sensor A: Hue: 0 [ 1607.227849][T14812] v4l2-ctrls: Sensor A: Saturation: 128 [ 1607.242178][T14812] Sensor A: ================== END STATUS ================== [ 1607.477192][T14826] fuse: Bad value for 'fd' 20:28:55 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, 0x0) 20:28:55 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:28:55 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000000)=0x2de) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x2, 0x22000) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f00000000c0)={'mangle\x00', 0x3, [{}, {}, {}]}, 0x58) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:28:55 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r0, 0x711, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xd8a4}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x86090) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000180)=0x3f, 0x4) write(r4, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000000080)) 20:28:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r1 = syz_open_pts(r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nullb0\x00', 0x480000, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r7, 0x1277, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000340)={0x0, 0x3, 0x7f, 0x80000001}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r6, @ANYBLOB="9c87e3deba9bdff77e1e84b40be0d2ee8be2e96fccbd49dee52ac5b16da50128a901bfddaf6f61b446cb6f52e97b5c1ff0f3461f2537922c1aa9aa7c195604f1dbf0de42d994a847a4311b61bb03e30fafd592d9b75e5092"], 0x3c}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, r5, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7ff}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x42}, 0x20000005) recvmsg(r4, &(0x7f00000005c0)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/157, 0x9d}], 0x2, &(0x7f0000000540)=""/88, 0x58}, 0x300) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) 20:28:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20499, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x970ba90543d1828e) open(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x101000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6c00) creat(0x0, 0x54) dup(0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x59) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 20:28:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20499, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x970ba90543d1828e) open(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x101000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6c00) creat(0x0, 0x54) dup(0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) [ 1608.787257][T14851] Sensor A: ================= START STATUS ================= [ 1608.808530][T14851] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar 20:28:55 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, 0x0) [ 1608.842098][T14851] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1608.891442][T14851] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1608.926707][T14851] v4l2-ctrls: Sensor A: Brightness: 128 [ 1608.953913][T14851] v4l2-ctrls: Sensor A: Contrast: 128 [ 1608.979789][T14851] v4l2-ctrls: Sensor A: Hue: 0 [ 1609.000256][T14851] v4l2-ctrls: Sensor A: Saturation: 128 [ 1609.028637][T14851] Sensor A: ================== END STATUS ================== 20:28:56 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:28:56 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000040)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) r1 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x4000000, 0xf001) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r2, 0x1277, 0x0) ioctl$FICLONE(r2, 0x40049409, r1) r3 = syz_open_dev$video4linux(0x0, 0x0, 0x0) r4 = getpgrp(0x0) sched_setaffinity(r4, 0xfffffffffffffe6a, &(0x7f0000000100)=0x200baa) r5 = getpgid(r4) syz_open_procfs(r5, &(0x7f0000000100)='net/rt_cache\x00') ioctl$VIDIOC_LOG_STATUS(r3, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:28:56 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0xff00, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:28:56 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1609.380553][T14870] Sensor A: ================= START STATUS ================= [ 1609.408323][T14868] RGB/YUV Input: ================= START STATUS ================= [ 1609.421996][T14870] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1609.443595][T14868] v4l2-ctrls: RGB/YUV Input: Test Pattern: 75% Colorbar [ 1609.449429][T14870] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1609.470048][T14868] v4l2-ctrls: RGB/YUV Input: Vertical Flip: false [ 1609.478875][T14870] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1609.497426][T14868] v4l2-ctrls: RGB/YUV Input: Horizontal Flip: false [ 1609.503274][T14870] v4l2-ctrls: Sensor A: Brightness: 128 [ 1609.524706][T14870] v4l2-ctrls: Sensor A: Contrast: 128 [ 1609.525930][T14868] v4l2-ctrls: RGB/YUV Input: Brightness: 128 [ 1609.543804][T14870] v4l2-ctrls: Sensor A: Hue: 0 [ 1609.550982][T14868] v4l2-ctrls: RGB/YUV Input: Contrast: 128 [ 1609.563209][T14870] v4l2-ctrls: Sensor A: Saturation: 128 [ 1609.573602][T14868] v4l2-ctrls: RGB/YUV Input: Hue: 0 [ 1609.584322][T14870] Sensor A: ================== END STATUS ================== [ 1609.623918][T14868] v4l2-ctrls: RGB/YUV Input: Saturation: 128 20:28:56 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1609.668077][T14868] RGB/YUV Input: ================== END STATUS ================== 20:28:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0xc4, r3, 0x2, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8040}, 0x20000001) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x422000, 0x0) r4 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) 20:28:56 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x600, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:28:56 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000200)=[@register_looper], 0x2c, 0x0, &(0x7f0000000240)="f30f21439fda98035eda586cb52d04a9addd8aea5fba69211a0311ae8474d33b022781c5ce480e3f28b3ec3e"}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r1, 0x0, 0x100000001) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f00000001c0)=0x1) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="00fbb0058047e32b6e22fb157e72401066fd3f09dc5ee5dde3af9978b5a59ccc124ad41aa0a629c4823b732da25deacf4c8e991c56ec76a4fc7bf17e0a22fd8522e4e652884dd8a8610dcb64e1d92c434795d9913216d99dfbca27f96e1188691d255c161a60ba39b4108c752aea4e24bcdc4e3870060000004483754986c3cb3739ad349c4a2d1eb7853d298020f82104ffaf2b41e824b6454048cff982e20624198cb24b7da7acb1e495bac0"], 0xb0, 0x3) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r5, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f0000000080)) 20:28:56 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x300, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1609.970182][T14889] Sensor A: ================= START STATUS ================= [ 1609.988479][T14889] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1610.008482][T14889] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1610.015216][T14890] Sensor A: ================= START STATUS ================= [ 1610.033766][T14889] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1610.047782][T14889] v4l2-ctrls: Sensor A: Brightness: 128 [ 1610.059955][T14889] v4l2-ctrls: Sensor A: Contrast: 128 [ 1610.073346][T14889] v4l2-ctrls: Sensor A: Hue: 0 [ 1610.085101][T14889] v4l2-ctrls: Sensor A: Saturation: 128 [ 1610.099888][T14890] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1610.106728][T14889] Sensor A: ================== END STATUS ================== [ 1610.116774][T14890] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1610.145263][T14890] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1610.198096][T14890] v4l2-ctrls: Sensor A: Brightness: 128 [ 1610.234861][T14890] v4l2-ctrls: Sensor A: Contrast: 128 [ 1610.261871][T14890] v4l2-ctrls: Sensor A: Hue: 0 [ 1610.279018][T14890] v4l2-ctrls: Sensor A: Saturation: 128 [ 1610.298528][T14890] Sensor A: ================== END STATUS ================== 20:28:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20499, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x970ba90543d1828c) open(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x101000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6c00) creat(0x0, 0x54) dup(0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 20:28:59 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r4, 0x1277, 0x0) sendfile(r4, r3, 0x0, 0x100000004) write$hidraw(r2, &(0x7f00000000c0)="c8400367d70244d9160228bbb30760895de79be33af25575a12e3ab146993440c4e553bfa11bbc1ef868023277043cf18a3dcf3c7d9cc16889ac487fc37fb65806fa97b1f109546565c34e4ab2c6f797531b65a25d0ba49a294bd3ce8053613553e686cf70f6ecec5caaed8e1c18cc5c4026a166cf13bcb5c61ecfa599455fb0097b71e90a998f0a4f98d36654f4113987e14e147f03836fa7198e5b6b4f504d5296d777c48ed4", 0xa7) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:28:59 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:28:59 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r2, 0x10d, 0xb, &(0x7f00000000c0)="a7cd92c2", 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x5, 0x6d70, 0x7f, 0x200, 0x7ff}, 0x14) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x100000001) write$P9_RREADLINK(r4, &(0x7f0000000100)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000040)='./file0\x00', 0xffdfffff, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a0090040300001af5c97824", 0x12, 0x400}], 0x0, 0x0) ftruncate(r2, 0x7) 20:28:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000340)=@nat={'nat\x00', 0x1b, 0x5, 0x388, 0xa8, 0x150, 0xffffffff, 0xa8, 0xa8, 0x2f0, 0x2f0, 0xffffffff, 0x2f0, 0x2f0, 0x5, &(0x7f00000000c0), {[{{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xd, @multicast2, @rand_addr=0x64010102, @gre_key=0x4, @icmp_id=0x68}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @empty, @loopback, @icmp_id=0x68, @port=0x4e22}}}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0xb}, 0x0, 0x0, 'vlan1\x00', 'team0\x00', {}, {0xff}, 0x73, 0x1, 0x28}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}, {0x40, 0xb2}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x7, @dev={0xac, 0x14, 0x14, 0x14}, @local, @icmp_id=0x66, @port=0x4e21}}}}, {{@ip={@local, @empty, 0xff, 0xffffff00, 'bridge_slave_1\x00', 'bond_slave_0\x00', {}, {0xff}, 0x84, 0x1}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1c, @remote, @loopback, @gre_key, @port=0x4e20}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e8) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r3, 0x1277, 0x0) ioctl$FITHAW(r3, 0xc0045878) r4 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9249}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r5 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x60, &(0x7f0000000140)={&(0x7f0000000b80)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x300}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000001740)={0x60, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x49f297ac}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="ea7ca661145a"}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffffffff}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000804}, 0x20000895) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000740)=""/4096) 20:28:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) [ 1612.205962][T14917] Sensor A: ================= START STATUS ================= [ 1612.218001][T14917] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1612.244160][T14917] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1612.257261][T14918] Sensor A: ================= START STATUS ================= [ 1612.260311][T14917] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1612.282311][T14917] v4l2-ctrls: Sensor A: Brightness: 128 [ 1612.294696][T14917] v4l2-ctrls: Sensor A: Contrast: 128 [ 1612.316110][T14917] v4l2-ctrls: Sensor A: Hue: 0 [ 1612.340552][T14917] v4l2-ctrls: Sensor A: Saturation: 128 [ 1612.379800][T14918] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1612.389584][T14917] Sensor A: ================== END STATUS ================== [ 1612.398801][T14918] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1612.431041][T14918] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1612.446312][ T27] audit: type=1804 audit(1591043339.360:313): pid=14919 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir974568076/syzkaller.AbVOfh/1224/cgroup.controllers" dev="sda1" ino=16099 res=1 [ 1612.493503][T14918] v4l2-ctrls: Sensor A: Brightness: 128 [ 1612.514383][T14918] v4l2-ctrls: Sensor A: Contrast: 128 [ 1612.532982][T14918] v4l2-ctrls: Sensor A: Hue: 0 20:28:59 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x5, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1612.561336][T14918] v4l2-ctrls: Sensor A: Saturation: 128 [ 1612.582864][T14918] Sensor A: ================== END STATUS ================== [ 1612.642034][T14927] Sensor A: ================= START STATUS ================= [ 1612.666340][T14927] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1612.702508][T14927] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1612.709422][T14929] Sensor A: ================= START STATUS ================= [ 1612.723581][T14927] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1612.736688][T14927] v4l2-ctrls: Sensor A: Brightness: 128 [ 1612.749061][T14927] v4l2-ctrls: Sensor A: Contrast: 128 [ 1612.762295][T14927] v4l2-ctrls: Sensor A: Hue: 0 [ 1612.772555][T14927] v4l2-ctrls: Sensor A: Saturation: 128 [ 1612.782835][T14929] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1612.789840][T14927] Sensor A: ================== END STATUS ================== 20:28:59 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1612.797576][T14929] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1612.811313][T14929] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1612.838321][T14929] v4l2-ctrls: Sensor A: Brightness: 128 20:28:59 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10000, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000001) ioctl$VIDIOC_G_MODULATOR(r3, 0xc0445636, &(0x7f0000000140)={0x0, "a65645d8de9e970f19b6d82405db2020eaea0e0524a9f1c148c5cf459815720f", 0x40, 0x7fff, 0x25, 0x1, 0x5}) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000100)={0x1}) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f00000000c0)) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1612.860475][T14929] v4l2-ctrls: Sensor A: Contrast: 128 [ 1612.880561][T14929] v4l2-ctrls: Sensor A: Hue: 0 [ 1612.901579][T14929] v4l2-ctrls: Sensor A: Saturation: 128 [ 1612.925368][T14929] Sensor A: ================== END STATUS ================== [ 1612.993143][T14935] Sensor A: ================= START STATUS ================= [ 1613.046666][ T27] audit: type=1804 audit(1591043339.960:314): pid=14938 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir310235184/syzkaller.KKpbs4/647/bus" dev="sda1" ino=16156 res=1 [ 1613.073906][T14935] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar 20:29:00 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc040563e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1613.100530][T14935] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1613.128031][T14935] v4l2-ctrls: Sensor A: Horizontal Flip: false 20:29:00 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x101002) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1613.167072][T14935] v4l2-ctrls: Sensor A: Brightness: 128 [ 1613.215746][T14935] v4l2-ctrls: Sensor A: Contrast: 128 [ 1613.245326][T14935] v4l2-ctrls: Sensor A: Hue: 0 [ 1613.266948][T14946] Sensor A: ================= START STATUS ================= [ 1613.297810][T14935] v4l2-ctrls: Sensor A: Saturation: 128 20:29:00 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x10, r1, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r2, 0x711, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, r2, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20020080}, 0x8010) socket$nl_netfilter(0x10, 0x3, 0xc) recvfrom$packet(r0, &(0x7f00000000c0)=""/188, 0xbc, 0x40, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r6, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r7 = syz_open_pts(r6, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r8, 0xffffffffffffffff, 0x0, 0x100000001) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$TCSETSF(r7, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) [ 1613.325894][T14947] Sensor A: ================= START STATUS ================= [ 1613.333176][T14935] Sensor A: ================== END STATUS ================== [ 1613.334211][T14946] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1613.370658][T14946] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1613.390142][T14946] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1613.416394][T14946] v4l2-ctrls: Sensor A: Brightness: 128 [ 1613.440929][T14946] v4l2-ctrls: Sensor A: Contrast: 128 [ 1613.460763][T14946] v4l2-ctrls: Sensor A: Hue: 0 [ 1613.476594][T14946] v4l2-ctrls: Sensor A: Saturation: 128 [ 1613.496686][T14947] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1613.503995][T14946] Sensor A: ================== END STATUS ================== [ 1613.512770][T14947] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1613.542017][T14947] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1613.568929][T14947] v4l2-ctrls: Sensor A: Brightness: 128 [ 1613.594981][T14947] v4l2-ctrls: Sensor A: Contrast: 128 [ 1613.615924][T14947] v4l2-ctrls: Sensor A: Hue: 0 [ 1613.660306][T14947] v4l2-ctrls: Sensor A: Saturation: 128 [ 1613.665883][T14947] Sensor A: ================== END STATUS ================== [ 1614.216855][ T27] audit: type=1800 audit(1591043341.130:315): pid=14952 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="cgroup.controllers" dev="sda1" ino=16050 res=0 [ 1614.276414][ T27] audit: type=1800 audit(1591043341.130:316): pid=14953 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="cgroup.controllers" dev="sda1" ino=16050 res=0 [ 1614.345181][ T27] audit: type=1804 audit(1591043341.140:317): pid=14952 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir310235184/syzkaller.KKpbs4/648/cgroup.controllers" dev="sda1" ino=16050 res=1 [ 1614.425156][ T27] audit: type=1800 audit(1591043341.160:318): pid=14952 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="cgroup.controllers" dev="sda1" ino=16050 res=0 20:29:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20499, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x970ba90543d1828e) open(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x101000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6c00) creat(0x0, 0x54) dup(0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 20:29:01 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x20006, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0) close(r1) setsockopt$sock_void(r1, 0x1, 0x24, 0x0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x9, 0x1, 0x9, 0x80000, 0x1, "1e0b24d30c395c177f53dbf0d6a2ceea650c76"}) 20:29:01 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) read$usbfs(r2, &(0x7f00000000c0)=""/174, 0xae) 20:29:01 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0305616, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:01 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0045878, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:01 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) [ 1615.011294][T14973] Sensor A: ================= START STATUS ================= [ 1615.018893][T14972] Sensor A: ================= START STATUS ================= [ 1615.018905][T14972] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1615.018920][T14972] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1615.018933][T14972] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1615.019017][T14972] v4l2-ctrls: Sensor A: Brightness: 128 [ 1615.062863][T14970] Sensor A: ================= START STATUS ================= 20:29:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x81, 0x0, 0x41c1, 0x20499, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffee, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x970ba90543d1828e) open(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x101000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6c00) creat(0x0, 0x54) dup(0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x4, 0x110, 0xffffffffffffffff, 0x35017000) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 20:29:02 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @private=0xa010102}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x0, 0x0, 0xfffffffffffffffe}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000000)={r5}, &(0x7f0000000040)=0x8) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r6 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r6, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) [ 1615.225828][T14972] v4l2-ctrls: Sensor A: Contrast: 128 [ 1615.244324][T14972] v4l2-ctrls: Sensor A: Hue: 0 [ 1615.253371][T14972] v4l2-ctrls: Sensor A: Saturation: 128 [ 1615.259219][T14973] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1615.266100][T14972] Sensor A: ================== END STATUS ================== [ 1615.273929][T14973] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1615.280511][T14973] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1615.286912][T14973] v4l2-ctrls: Sensor A: Brightness: 128 [ 1615.299014][T14973] v4l2-ctrls: Sensor A: Contrast: 128 [ 1615.315290][T14973] v4l2-ctrls: Sensor A: Hue: 0 [ 1615.329035][T14973] v4l2-ctrls: Sensor A: Saturation: 128 [ 1615.342222][T14970] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1615.349273][T14973] Sensor A: ================== END STATUS ================== [ 1615.358063][T14970] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1615.375799][T14970] v4l2-ctrls: Sensor A: Horizontal Flip: false 20:29:02 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x80086301, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1615.412518][T14970] v4l2-ctrls: Sensor A: Brightness: 128 [ 1615.432960][T14970] v4l2-ctrls: Sensor A: Contrast: 128 [ 1615.447510][T14970] v4l2-ctrls: Sensor A: Hue: 0 20:29:02 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x4020940d, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1615.465790][T14970] v4l2-ctrls: Sensor A: Saturation: 128 [ 1615.483055][T14970] Sensor A: ================== END STATUS ================== [ 1615.499022][T14991] Sensor A: ================= START STATUS ================= [ 1615.506799][T14991] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1615.529751][T14991] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1615.537613][T14991] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1615.555780][T14991] v4l2-ctrls: Sensor A: Brightness: 128 [ 1615.568229][T14991] v4l2-ctrls: Sensor A: Contrast: 128 20:29:02 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0xcb8d00) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1615.586855][T14991] v4l2-ctrls: Sensor A: Hue: 0 [ 1615.601975][T14991] v4l2-ctrls: Sensor A: Saturation: 128 [ 1615.626405][T14994] Sensor A: ================= START STATUS ================= [ 1615.634157][T14991] Sensor A: ================== END STATUS ================== [ 1615.649589][T14994] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1615.669281][T14994] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1615.687009][T14994] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1615.701373][T14994] v4l2-ctrls: Sensor A: Brightness: 128 [ 1615.714602][T14998] Sensor A: ================= START STATUS ================= [ 1615.724411][T14994] v4l2-ctrls: Sensor A: Contrast: 128 20:29:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff010007"}) [ 1615.736703][T14994] v4l2-ctrls: Sensor A: Hue: 0 [ 1615.743135][T14994] v4l2-ctrls: Sensor A: Saturation: 128 [ 1615.757863][T14998] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1615.764841][T14994] Sensor A: ================== END STATUS ================== [ 1615.772635][T14998] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1615.787579][T14998] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1615.808964][T14998] v4l2-ctrls: Sensor A: Brightness: 128 [ 1615.821556][T14998] v4l2-ctrls: Sensor A: Contrast: 128 20:29:02 executing program 2 (fault-call:2 fault-nth:0): r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1615.833586][T14998] v4l2-ctrls: Sensor A: Hue: 0 [ 1615.846686][T14998] v4l2-ctrls: Sensor A: Saturation: 128 [ 1615.858785][T14998] Sensor A: ================== END STATUS ================== 20:29:02 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000100)=""/53) 20:29:02 executing program 5: syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x40000) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r0, 0x1277, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000000)) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x151a00, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r2, &(0x7f0000006500)=[{{&(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000200)=""/119, 0x77}, {&(0x7f0000000280)=""/103, 0x67}, {&(0x7f0000000300)=""/236, 0xec}, {&(0x7f0000000400)=""/167, 0xa7}, {&(0x7f00000004c0)=""/252, 0xfc}], 0x5, &(0x7f0000000640)=""/230, 0xe6}, 0x80007fff}, {{&(0x7f0000000740)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private0}}, 0x80, &(0x7f0000002a80)=[{&(0x7f00000007c0)=""/220, 0xdc}, {&(0x7f00000008c0)=""/142, 0x8e}, {&(0x7f0000000980)=""/151, 0x97}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/34, 0x22}], 0x6, &(0x7f0000002b00)=""/130, 0x82}, 0x7d6}, {{&(0x7f0000002bc0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000006080)=[{&(0x7f0000002c40)=""/83, 0x53}, {&(0x7f0000002cc0)=""/4096, 0x1000}, {&(0x7f0000003cc0)=""/170, 0xaa}, {&(0x7f0000003d80)=""/29, 0x1d}, {&(0x7f0000003dc0)=""/20, 0x14}, {&(0x7f0000003e00)=""/4096, 0x1000}, {&(0x7f0000004e00)=""/204, 0xcc}, {&(0x7f0000004f00)=""/251, 0xfb}, {&(0x7f0000005000)=""/107, 0x6b}, {&(0x7f0000005080)=""/4096, 0x1000}], 0xa, &(0x7f0000006140)=""/24, 0x18}, 0x3}, {{&(0x7f0000006180)=@l2, 0x80, &(0x7f0000006480)=[{&(0x7f0000006200)=""/104, 0x68}, {&(0x7f0000006280)=""/124, 0x7c}, {&(0x7f0000006300)=""/56, 0x38}, {&(0x7f0000006340)=""/54, 0x36}, {&(0x7f0000006380)=""/255, 0xff}], 0x5}, 0x10001}], 0x4, 0x40, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$BLKIOMIN(r3, 0x1277, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0445624, &(0x7f0000000080)={0x9d0000, 0x0, 0x0, r3, 0x0, 0x0}) [ 1616.000804][T15006] FAULT_INJECTION: forcing a failure. [ 1616.000804][T15006] name failslab, interval 1, probability 0, space 0, times 0 [ 1616.060132][T15006] CPU: 1 PID: 15006 Comm: syz-executor.2 Not tainted 5.7.0-rc1-syzkaller #0 [ 1616.068840][T15006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1616.078893][T15006] Call Trace: [ 1616.082203][T15006] dump_stack+0x11d/0x187 [ 1616.086545][T15006] should_fail.cold+0x5/0xf [ 1616.091124][T15006] __should_failslab+0x82/0xb0 [ 1616.095961][T15006] should_failslab+0x5/0xf [ 1616.100387][T15006] __kmalloc+0x54/0x640 [ 1616.104550][T15006] ? tomoyo_realpath_from_path+0x85/0x3d0 [ 1616.110278][T15006] tomoyo_realpath_from_path+0x85/0x3d0 [ 1616.115848][T15006] tomoyo_path_number_perm+0xff/0x360 [ 1616.121304][T15006] ? _parse_integer+0x12f/0x150 [ 1616.126360][T15006] ? __fget_files+0xa2/0x1c0 [ 1616.131014][T15006] tomoyo_file_ioctl+0x28/0x40 [ 1616.135784][T15006] security_file_ioctl+0x69/0xa0 [ 1616.140801][T15006] ksys_ioctl+0x5a/0x150 [ 1616.145049][T15006] __x64_sys_ioctl+0x47/0x60 [ 1616.149647][T15006] do_syscall_64+0xc7/0x3b0 [ 1616.154173][T15006] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1616.160117][T15006] RIP: 0033:0x45ca69 [ 1616.164017][T15006] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1616.183622][T15006] RSP: 002b:00007f64f5c35c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1616.192088][T15006] RAX: ffffffffffffffda RBX: 00000000004f1740 RCX: 000000000045ca69 [ 1616.200085][T15006] RDX: 0000000020000080 RSI: 00000000c0445624 RDI: 0000000000000003 [ 1616.208058][T15006] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1616.216063][T15006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1616.224079][T15006] R13: 0000000000000623 R14: 00000000004c90c5 R15: 00007f64f5c366d4 20:29:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) syz_open_pts(0xffffffffffffffff, 0x8000) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) 20:29:03 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @private=0xa010102}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x0, 0x0, 0xfffffffffffffffe}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={r5, 0x2}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000180)={r6, 0x4d4, 0x5}, 0xfffffffffffffe7e) r7 = syz_open_dev$video4linux(0x0, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r9, r8, 0x0, 0x100000001) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r8, 0xc0945662, &(0x7f00000000c0)={0xfff, 0x0, [], {0x0, @reserved}}) ioctl$VIDIOC_LOG_STATUS(r7, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1616.559982][T15020] Sensor A: ================= START STATUS ================= [ 1616.594096][T15020] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1616.625986][T15020] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1616.646280][T15020] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1616.670322][T15020] v4l2-ctrls: Sensor A: Brightness: 128 [ 1616.709946][T15020] v4l2-ctrls: Sensor A: Contrast: 128 [ 1616.741868][T15020] v4l2-ctrls: Sensor A: Hue: 0 20:29:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x20006, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0) close(r1) setsockopt$sock_void(r1, 0x1, 0x24, 0x0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x9, 0x1, 0x9, 0x80000, 0x1, "1e0b24d30c395c177f53dbf0d6a2ceea650c76"}) [ 1616.768993][T15020] v4l2-ctrls: Sensor A: Saturation: 128 [ 1616.802344][T15020] Sensor A: ================== END STATUS ================== [ 1617.031058][T15006] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1618.511601][ T27] audit: type=1800 audit(1591043345.430:319): pid=15040 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16033 res=0 20:29:06 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0xb09d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x970ba90543d1828e) open(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x101000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6c00) creat(0x0, 0x54) dup(0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 20:29:06 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) accept4$rose(r2, &(0x7f0000000000)=@full={0xb, @dev, @null, 0x0, [@rose, @null, @netrom, @remote, @default, @null]}, &(0x7f0000000040)=0x40, 0x800) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:06 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:06 executing program 1: write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x78d}, 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x60, &(0x7f0000000140)={&(0x7f0000000b80)=ANY=[@ANYBLOB="5000000000e7d7f48d2cac99218ea90000000000", @ANYRES32=0x0, @ANYBLOB="2b03000000000000200012800b00010067656e65766500001000028006000500030000000400060008000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB], 0x50}}, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="732325bd7000fddbdf25010000000c009900090000000400000008000300", @ANYRES32=r3, @ANYBLOB="0800010003000000080001000200000008000100040000000c0099000200000003000000080003002a104342d908809ebc856371598434754fe9d8e65d071e0d3897cb7cde16f389fd8aa497b7fd148575e2f8390abd7bf668308fb47a1512f82fa74b3e84b2b7e6aa3516e5b355ec26fd81e0a37017d5396c03f11cd63b7c86f301ef392763256bac476cc6704db9afc855e76c", @ANYRES32=r5, @ANYBLOB="0c00990002000000040000000c00990057000000030000000800010004000000"], 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x40) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r6, 0x1277, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r6, 0xc0046686, &(0x7f00000000c0)={0x1, 0xac, "5ab44f299a8bd0bb8227c26db87bf5bf345ce834494eced8a325dbb34417461eda465b1927e16f7bfa15ffe82078e76b576cd509b218c4d28ac5bc6cd404bf4bf530bd5338a76db5e98b0044adff3180d5263b6a8986816159fe66e4d150b251a4e6b70515fe1d61e2777c2d70a2dcb3816d84d6cff8fa7185835e638115dd373efff1bc1a267221df42a8f85f3a528fef743dc661c23aa9bd0c0d4e583bb860eab33092e2f614a1262749da"}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r0, 0x0, 0x100000001) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x1ecc00000000) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000000)=[{{0x3, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x1}}], 0xffffff28) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000080)) 20:29:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x9, 0x0, 0x0, 0xc19, 0xa, "000000e9ffffff000000c2cf7ac24413f7bc00"}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x165280, 0x0) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0xffffffff) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000080)={0x63, 0xff, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) 20:29:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x20006, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0) close(r1) setsockopt$sock_void(r1, 0x1, 0x24, 0x0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x9, 0x1, 0x9, 0x80000, 0x1, "1e0b24d30c395c177f53dbf0d6a2ceea650c76"}) [ 1620.031331][T15044] Sensor A: ================= START STATUS ================= [ 1620.062416][T15044] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar 20:29:07 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x2, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1620.111953][T15044] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1620.117952][T15044] v4l2-ctrls: Sensor A: Horizontal Flip: false 20:29:07 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, r0, 0x0, 0x100000001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @private=0xa010102}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x0, 0x0, 0xfffffffffffffffe}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000000)={0x9, 0x7, 0x8000, 0x1, 0x2, 0x2a, 0xfffffffb, 0x7, r5}, &(0x7f0000000040)=0x20) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={r6, 0x2, 0x0, 0x800, 0x80000001, 0x80}, 0x14) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r7, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r7, 0x541a, &(0x7f0000000080)) [ 1620.161930][T15044] v4l2-ctrls: Sensor A: Brightness: 128 [ 1620.174179][T15044] v4l2-ctrls: Sensor A: Contrast: 128 [ 1620.188770][T15044] v4l2-ctrls: Sensor A: Hue: 0 [ 1620.200851][T15044] v4l2-ctrls: Sensor A: Saturation: 128 [ 1620.212946][T15044] Sensor A: ================== END STATUS ================== 20:29:07 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x4f, 0x523000) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:07 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x10, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:07 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000040)) 20:29:07 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x4c00, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1620.592191][T15071] Sensor A: ================= START STATUS ================= [ 1620.609817][T15071] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1620.635443][T15071] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1620.656264][T15071] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1620.676074][T15071] v4l2-ctrls: Sensor A: Brightness: 128 [ 1620.690926][T15071] v4l2-ctrls: Sensor A: Contrast: 128 [ 1620.709011][T15071] v4l2-ctrls: Sensor A: Hue: 0 [ 1620.726050][T15071] v4l2-ctrls: Sensor A: Saturation: 128 [ 1620.746694][T15071] Sensor A: ================== END STATUS ================== [ 1621.085958][ T27] audit: type=1804 audit(1591043348.000:320): pid=15061 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir377111778/syzkaller.YvCIsr/931/cgroup.controllers" dev="sda1" ino=16214 res=1 [ 1621.167375][ T27] audit: type=1804 audit(1591043348.010:321): pid=15061 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir377111778/syzkaller.YvCIsr/931/cgroup.controllers" dev="sda1" ino=16214 res=1 20:29:10 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0xf9, 0x0, 0x0, 0x0, 0x0, 0x100000041c1, 0x20499, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffbfe, 0x1, @perf_config_ext={0xe52, 0x4}}, 0xffffffffffffffff, 0x4000000000010, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x970ba90543d1828e) open(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x101000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6c00) creat(0x0, 0x54) dup(0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfdc7) open$dir(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 20:29:10 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x4c01, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:10 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, r0, 0x0, 0x100000001) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000000)) r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r3 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r3, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:10 executing program 4 (fault-call:1 fault-nth:0): r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:10 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x2, 0x6, 0x7fff, 0x6, 0xfffffffeffffffff, 0x2, 0x5, 0xfff, 0x18, 0xae, 0x4, 0xece, 0x6, 0x19]}, &(0x7f0000000000)=0x100) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={r3, 0xbdd, 0x80000001, 0x8ce}, &(0x7f00000000c0)=0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r5 = syz_open_pts(r4, 0x0) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) 20:29:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)=0x1) [ 1623.610801][T15099] FAULT_INJECTION: forcing a failure. [ 1623.610801][T15099] name failslab, interval 1, probability 0, space 0, times 0 [ 1623.628033][T15099] CPU: 0 PID: 15099 Comm: syz-executor.4 Not tainted 5.7.0-rc1-syzkaller #0 [ 1623.636712][T15099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1623.646762][T15099] Call Trace: [ 1623.650059][T15099] dump_stack+0x11d/0x187 [ 1623.654460][T15099] should_fail.cold+0x5/0xf [ 1623.658995][T15099] __should_failslab+0x82/0xb0 [ 1623.663756][T15099] should_failslab+0x5/0xf [ 1623.668181][T15099] __kmalloc+0x54/0x640 [ 1623.672352][T15099] ? tomoyo_realpath_from_path+0x85/0x3d0 [ 1623.678078][T15099] tomoyo_realpath_from_path+0x85/0x3d0 [ 1623.684171][T15099] tomoyo_path_number_perm+0xff/0x360 [ 1623.689546][T15099] ? _parse_integer+0x12f/0x150 [ 1623.694416][T15099] ? __fget_files+0xa2/0x1c0 [ 1623.699010][T15099] tomoyo_file_ioctl+0x28/0x40 [ 1623.703803][T15099] security_file_ioctl+0x69/0xa0 [ 1623.708797][T15099] ksys_ioctl+0x5a/0x150 [ 1623.713077][T15099] __x64_sys_ioctl+0x47/0x60 [ 1623.716040][T15104] Sensor A: ================= START STATUS ================= [ 1623.717670][T15099] do_syscall_64+0xc7/0x3b0 [ 1623.717692][T15099] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1623.717713][T15099] RIP: 0033:0x45ca69 [ 1623.739524][T15099] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1623.742560][T15104] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1623.759221][T15099] RSP: 002b:00007efd4fdcec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1623.759238][T15099] RAX: ffffffffffffffda RBX: 00000000004f1740 RCX: 000000000045ca69 [ 1623.759248][T15099] RDX: 0000000020000080 RSI: 00000000c0445624 RDI: 0000000000000003 [ 1623.759259][T15099] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1623.759268][T15099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1623.759287][T15099] R13: 0000000000000623 R14: 00000000004c90c5 R15: 00007efd4fdcf6d4 [ 1623.827960][T15104] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1623.855152][T15104] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1623.892074][T15104] v4l2-ctrls: Sensor A: Brightness: 128 20:29:10 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x541b, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1623.916509][T15104] v4l2-ctrls: Sensor A: Contrast: 128 [ 1623.938318][T15104] v4l2-ctrls: Sensor A: Hue: 0 [ 1623.959834][T15104] v4l2-ctrls: Sensor A: Saturation: 128 [ 1623.983070][T15104] Sensor A: ================== END STATUS ================== 20:29:11 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x3, 0x200000) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x400040, 0x0) r3 = socket$kcm(0x2, 0x2, 0x0) sendmsg$sock(r3, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0) close(r3) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0xc) write$cgroup_pid(r2, &(0x7f0000000100)=r4, 0x12) 20:29:11 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x5421, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1624.217412][T15117] Debayer B: ================= START STATUS ================= [ 1624.253603][T15117] v4l2-ctrls: Debayer B: Debayer Mean Window Size: 3 [ 1624.282808][T15117] Debayer B: ================== END STATUS ================== 20:29:11 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x5450, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:11 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x401, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:11 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x503000, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) [ 1624.550977][T15099] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1624.568070][T15128] Sensor A: ================= START STATUS ================= [ 1624.591070][T15128] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1624.605890][T15128] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1624.624293][T15128] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1624.637539][T15128] v4l2-ctrls: Sensor A: Brightness: 128 [ 1624.661435][T15128] v4l2-ctrls: Sensor A: Contrast: 128 [ 1624.677887][T15128] v4l2-ctrls: Sensor A: Hue: 0 [ 1624.691470][T15128] v4l2-ctrls: Sensor A: Saturation: 128 [ 1624.744962][T15128] Sensor A: ================== END STATUS ================== 20:29:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20499, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x74c03, 0x3) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x970ba90543d1828e) open(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x101000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6c00) creat(0x0, 0x54) dup(0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 20:29:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x4000000, 0xfd, "00010000004413f7aa00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) 20:29:12 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x5451, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:12 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:12 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, &(0x7f0000000100)="d1d88278d6b09212771d8e17c46dbc93e8b0eb81baf5a2996cb1286a29ce47a0489de563c8eb653ff6b470157dec4e166fd461a2d34e7403072b53bf03636ad7ab8e32046314b84cd65e0e51e0d72f6eccbc67d060c83c116f84c0b13355e25a8834647bdf019c56caa80e18835a720155bc31e8f714ba77be4bb13bdaba9cf818feb44eca83a0c3b5a6a84e2e4c49f4bd340679b1818975c96ada23f246578afe83ccf302f3d7623e9dbd03e88525265fba455437dae0a8073039994f1ad255553da86fcf2c7854fccebbe396a570b20d7ec7cff7bee9b440c0cd2a8791864621723e", &(0x7f0000000040)=""/4, 0x4}, 0x20) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) 20:29:12 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f0000000000)) r2 = syz_open_dev$video4linux(0x0, 0x0, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$HIDIOCGRDESCSIZE(r3, 0x80044801, &(0x7f00000001c0)) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000000300)={'veth1_to_team\x00', 0x8, 0x1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x100000001) getsockopt$netrom_NETROM_T1(r4, 0x103, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0xc0605345, &(0x7f0000000280)={0x7ff, 0x2, {0xffffffffffffffff, 0x0, 0x2, 0x0, 0x2}, 0x5}) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x777, 0x10001, 0x9e], 0x4, 0x6, 0x1, 0x101, 0xfffffffe, 0x3, 0x14000000, {0xffff, 0x0, 0x2, 0x7ff, 0xfff9, 0x48, 0xffff, 0x8000, 0x7702, 0x4, 0x8000, 0x4, 0x2, 0x7, "a9735c65f85db1eb8621881b1acad30a9d254837972d4194355d588cc8970013"}}) 20:29:12 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x5452, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:12 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x2, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1625.672065][T15153] Sensor A: ================= START STATUS ================= [ 1625.697510][T15153] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1625.716541][ T27] audit: type=1804 audit(1591043352.631:322): pid=15157 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir771465118/syzkaller.HI2jxB/1221/cgroup.controllers" dev="sda1" ino=16267 res=1 [ 1625.733197][T15153] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1625.795664][T15153] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1625.832528][T15153] v4l2-ctrls: Sensor A: Brightness: 128 20:29:12 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x5460, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1625.869909][T15153] v4l2-ctrls: Sensor A: Contrast: 128 [ 1625.900133][T15153] v4l2-ctrls: Sensor A: Hue: 0 [ 1625.912843][T15153] v4l2-ctrls: Sensor A: Saturation: 128 20:29:12 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x10, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1625.942583][T15153] Sensor A: ================== END STATUS ================== [ 1626.050638][T15157] Sensor A: ================= START STATUS ================= [ 1626.076773][T15157] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar 20:29:13 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x4c01, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:13 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x5646, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1626.099736][T15157] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1626.120107][T15157] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1626.140592][T15157] v4l2-ctrls: Sensor A: Brightness: 128 [ 1626.158212][T15157] v4l2-ctrls: Sensor A: Contrast: 128 [ 1626.178145][T15157] v4l2-ctrls: Sensor A: Hue: 0 [ 1626.197254][T15157] v4l2-ctrls: Sensor A: Saturation: 128 [ 1626.213467][T15176] Sensor A: ================= START STATUS ================= [ 1626.221449][T15157] Sensor A: ================== END STATUS ================== [ 1626.253885][T15176] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1626.271718][T15176] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1626.285550][T15176] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1626.304811][T15176] v4l2-ctrls: Sensor A: Brightness: 128 [ 1626.349380][T15176] v4l2-ctrls: Sensor A: Contrast: 128 [ 1626.362068][T15176] v4l2-ctrls: Sensor A: Hue: 0 [ 1626.373526][T15176] v4l2-ctrls: Sensor A: Saturation: 128 [ 1626.385924][T15176] Sensor A: ================== END STATUS ================== [ 1626.436075][T15181] Sensor A: ================= START STATUS ================= [ 1626.497560][T15181] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1626.505773][T15181] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1626.518637][T15181] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1626.538167][T15181] v4l2-ctrls: Sensor A: Brightness: 128 [ 1626.548129][T15181] v4l2-ctrls: Sensor A: Contrast: 128 [ 1626.560088][T15181] v4l2-ctrls: Sensor A: Hue: 0 [ 1626.569741][T15181] v4l2-ctrls: Sensor A: Saturation: 128 [ 1626.594002][T15181] Sensor A: ================== END STATUS ================== 20:29:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20499, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x970ba90543d1828e) open(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x101000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6c00) creat(0x0, 0x54) dup(0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xe6f8b8fb621bad12) open$dir(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 20:29:15 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x5412, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:15 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r2, 0x1277, 0x0) fcntl$setlease(r2, 0x400, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r1 = syz_open_pts(r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) 20:29:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r2, 0x1277, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x2010, r1, 0xb745f000) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) 20:29:15 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x6364, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1628.676497][T15197] Sensor A: ================= START STATUS ================= [ 1628.708989][T15197] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar 20:29:15 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x8912, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1628.752253][T15197] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1628.782140][T15197] v4l2-ctrls: Sensor A: Horizontal Flip: false 20:29:15 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x541b, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1628.816323][T15197] v4l2-ctrls: Sensor A: Brightness: 128 [ 1628.863629][T15197] v4l2-ctrls: Sensor A: Contrast: 128 [ 1628.889295][T15197] v4l2-ctrls: Sensor A: Hue: 0 [ 1628.914289][T15197] v4l2-ctrls: Sensor A: Saturation: 128 [ 1628.946892][T15197] Sensor A: ================== END STATUS ================== 20:29:15 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x5421, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:16 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x8914, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:16 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0xd1c, 0x101202) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000000)={0xfffffffe, 0x0, 0x0, 0x1000, 0x62, 0x5e90, 0x80000000, 0x1}) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:16 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x5450, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1629.298901][T15220] Sensor A: ================= START STATUS ================= [ 1629.348862][T15220] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1629.376607][T15220] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1629.401824][T15220] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1629.441266][T15220] v4l2-ctrls: Sensor A: Brightness: 128 [ 1629.467169][T15220] v4l2-ctrls: Sensor A: Contrast: 128 [ 1629.497313][T15220] v4l2-ctrls: Sensor A: Hue: 0 [ 1629.527366][T15220] v4l2-ctrls: Sensor A: Saturation: 128 [ 1629.558068][T15220] Sensor A: ================== END STATUS ================== 20:29:18 executing program 3: perf_event_open(&(0x7f000001d000)={0xf, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20499, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x970ba90543d1828e) open(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x101000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6c00) creat(0x0, 0x54) dup(0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x29) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 20:29:18 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x8933, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:18 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x5451, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) modify_ldt$write2(0x11, &(0x7f0000000000)={0x1, 0x100000, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000040)=0x5) 20:29:18 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r2 = msgget$private(0x0, 0x0) msgrcv(r2, &(0x7f0000000500)={0x0, ""/108}, 0x74, 0x0, 0x0) msgsnd(r2, &(0x7f0000000780)={0x3}, 0x8, 0x0) msgrcv(r2, &(0x7f0000000000)={0x0, ""/107}, 0x73, 0x2, 0x2800) 20:29:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f0000000040)={0x10001, "6692559c109318496d4bb3b92287cc65005e6d499eec0bfffc4985115695d61c", 0x2}) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) 20:29:18 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x5452, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1631.995451][T15253] Sensor A: ================= START STATUS ================= [ 1632.020170][T15253] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1632.048273][T15253] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1632.075230][T15253] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1632.097058][T15253] v4l2-ctrls: Sensor A: Brightness: 128 20:29:19 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x400445a0, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1632.122080][T15253] v4l2-ctrls: Sensor A: Contrast: 128 [ 1632.159726][T15253] v4l2-ctrls: Sensor A: Hue: 0 [ 1632.187666][T15253] v4l2-ctrls: Sensor A: Saturation: 128 [ 1632.217127][T15253] Sensor A: ================== END STATUS ================== 20:29:19 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x5460, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:19 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @private=0xa010102}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x7a, &(0x7f0000000080)={r3, 0x0, 0x0, 0xfffffffffffffffe}, &(0x7f0000000100)=0x18) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x100000001) ioctl$SOUND_MIXER_WRITE_RECSRC(r4, 0xc0044dff, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000200)={0xffffffffffffffff, r4}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000000c0)={r3, @in6={{0xa, 0x4e22, 0x80, @mcast2, 0x71}}, [0x9, 0x1ff, 0x1000, 0x4, 0x1, 0x9, 0x8, 0xb8b, 0x1f7, 0x4, 0x9, 0xa, 0x80, 0x80, 0xffffffffffffffff]}, &(0x7f0000000000)=0x100) r6 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r7 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r7, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:19 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x400454c8, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:19 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x5646, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1632.595067][T15276] Sensor A: ================= START STATUS ================= [ 1632.611391][ T27] audit: type=1804 audit(1591043359.521:323): pid=15271 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir771465118/syzkaller.HI2jxB/1225/cgroup.controllers" dev="sda1" ino=16292 res=1 [ 1632.653709][T15276] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1632.666955][T15275] Sensor A: ================= START STATUS ================= [ 1632.675703][T15276] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1632.696428][T15276] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1632.716027][T15276] v4l2-ctrls: Sensor A: Brightness: 128 [ 1632.734300][T15276] v4l2-ctrls: Sensor A: Contrast: 128 [ 1632.750501][T15276] v4l2-ctrls: Sensor A: Hue: 0 [ 1632.796589][T15276] v4l2-ctrls: Sensor A: Saturation: 128 [ 1632.837135][T15276] Sensor A: ================== END STATUS ================== [ 1632.837141][T15275] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1632.888847][T15275] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1632.915835][T15275] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1632.938075][T15275] v4l2-ctrls: Sensor A: Brightness: 128 [ 1632.957345][T15275] v4l2-ctrls: Sensor A: Contrast: 128 [ 1632.981456][T15275] v4l2-ctrls: Sensor A: Hue: 0 [ 1632.998697][T15275] v4l2-ctrls: Sensor A: Saturation: 128 [ 1633.031188][T15275] Sensor A: ================== END STATUS ================== 20:29:22 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r2 = msgget$private(0x0, 0x0) msgrcv(r2, &(0x7f0000000500)={0x0, ""/108}, 0x74, 0x0, 0x0) msgsnd(r2, &(0x7f0000000780)={0x3}, 0x8, 0x0) msgrcv(r2, &(0x7f0000000000)={0x0, ""/107}, 0x73, 0x2, 0x2800) 20:29:22 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x400454ca, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:22 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, r0, 0x0, 0x100000001) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f00000000c0)={0x7f, 0x1f}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x200003, 0xfffffffd, 0xffffffff, 0x0, 0x1a, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f0000000000)) 20:29:22 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x6364, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000040)={0x4, 0xff, 0x0, 0xb45b, 0x7, 0x140}) r2 = socket$kcm(0x2, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0) close(r2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000100)='veth1_virt_wifi\x00', 0x10) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x3f) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) 20:29:22 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x10ba40) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1635.479691][T15300] Sensor A: ================= START STATUS ================= 20:29:22 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x8912, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1635.523884][T15300] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1635.587948][T15300] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1635.616734][T15300] v4l2-ctrls: Sensor A: Horizontal Flip: false 20:29:22 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x400454cd, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:22 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x8933, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1635.636274][T15300] v4l2-ctrls: Sensor A: Brightness: 128 [ 1635.655135][T15300] v4l2-ctrls: Sensor A: Contrast: 128 [ 1635.672772][T15300] v4l2-ctrls: Sensor A: Hue: 0 [ 1635.700959][T15300] v4l2-ctrls: Sensor A: Saturation: 128 [ 1635.720907][T15300] Sensor A: ================== END STATUS ================== 20:29:22 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x40049409, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:22 executing program 5: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(0x0, &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1a", 0xe, 0x400}, {&(0x7f0000000640)="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", 0x2fd, 0x34f6}], 0x0, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@abs={0x1}, 0x6e) listen(r0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000001c0)=@ethtool_gstrings={0x1b, 0x0, 0x16, "3a04d00fe292cb1f667f8df4a419a07bf2b4ee6b1c57"}}) statx(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x4000, 0x800, &(0x7f0000000240)) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000240)="57ed66", 0x3}, {&(0x7f0000000180)="e84a", 0x2}, {&(0x7f0000000500)="0bbbc314bc463eee4eb29545b239d811b883b54a4b223c656463919a10", 0x1d}], 0x3) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x30, 0x140e, 0x400, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x980}, 0x6048010) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x2e7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x1, 0x0, 0x0) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, 0x0, &(0x7f0000000180)) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x0) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000180)}, {&(0x7f0000000500)="0bbbc314bc463eee4eb29545b239d811b883b54a4b223c656463919a10", 0x1d}], 0x2) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000380)=0x8001, &(0x7f00000003c0)=0x4) sendfile(r1, r1, &(0x7f0000000480), 0xa198) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) 20:29:22 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xae01, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1635.953243][ T27] audit: type=1800 audit(1591043362.861:324): pid=15318 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16316 res=0 [ 1636.242961][ T27] audit: type=1804 audit(1591043363.151:325): pid=15304 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir310235184/syzkaller.KKpbs4/657/cgroup.controllers" dev="sda1" ino=16315 res=1 [ 1636.366644][ T27] audit: type=1804 audit(1591043363.241:326): pid=15304 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir310235184/syzkaller.KKpbs4/657/cgroup.controllers" dev="sda1" ino=16315 res=1 [ 1636.570728][ T27] audit: type=1800 audit(1591043363.391:327): pid=15318 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="file0" dev="sda1" ino=16316 res=0 [ 1636.623785][T15339] Sensor A: ================= START STATUS ================= [ 1636.631422][T15339] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1636.638341][T15339] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1636.644343][T15339] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1636.651234][T15339] v4l2-ctrls: Sensor A: Brightness: 128 [ 1636.656813][T15339] v4l2-ctrls: Sensor A: Contrast: 128 [ 1636.663235][T15339] v4l2-ctrls: Sensor A: Hue: 0 [ 1636.668556][T15339] v4l2-ctrls: Sensor A: Saturation: 128 [ 1636.675282][T15339] Sensor A: ================== END STATUS ================== 20:29:25 executing program 3 (fault-call:3 fault-nth:0): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 20:29:25 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x40085618, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:25 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xae41, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:25 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x800, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x48a846, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x77359400}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000001c0)={0x3f}) capset(&(0x7f0000000240)={0x19980330}, &(0x7f0000000200)={0x1000, 0x7, 0xfa, 0xfffffffe, 0x7, 0x8}) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000080)) r3 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x8, 0xc0) write$FUSE_POLL(r3, &(0x7f0000000180)={0x18, 0xffffffffffffffda, 0x6, {0x8}}, 0x18) 20:29:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x3, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) 20:29:25 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x10000, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000040)={0x4, "a699d5"}, 0x6) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) rmdir(&(0x7f0000000000)='./file0\x00') 20:29:25 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x40186366, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:25 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xae60, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1638.385072][T15355] capability: warning: `syz-executor.1' uses 32-bit capabilities (legacy support in use) 20:29:25 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0xfffffffffffffffc, 0x12001) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f00000000c0)) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000000ac0)='cpuacct.stat\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r4, 0xc01864b0, &(0x7f0000000b00)={0x68b, 0x7fffffff, 0x1, 0x1, 0x1}) ioctl$BLKIOMIN(r3, 0x1277, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r5, 0x1277, 0x0) r6 = dup3(r3, r5, 0x0) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000900)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r6, &(0x7f0000000a80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a40)={&(0x7f0000000940)=ANY=[@ANYBLOB="bd000000", @ANYRES16=r7, @ANYBLOB="020029bd7000fcdbdf25020000000c00028004000400040004002c00098008000200ff070000080001000008000008000200030000000800010005000000080002000300000014000980080002000800000008000100ff00000098000580340002800800040001000000080001001a00000008000200400000000802010000000000080001001c000000080001000f000000340002800800020000000000080004006285000008000200ae000000080004000900000008000400b000000008000300050000002c000280080003000900000008000300b50c000008000300010100000800020000000080080004003f000000"], 0xf8}, 0x1, 0x0, 0x0, 0xa1}, 0x8000) 20:29:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x50bbc7, 0x0) ioctl$BLKIOMIN(r1, 0x1277, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nullb0\x00', 0xe8b8dd7cd0548cea, 0x0) ioctl$BLKIOMIN(r2, 0x1277, 0x0) write(r2, &(0x7f0000000000)="520ec4c315955205f45a809ddf", 0xd) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x28011, r5, 0x0) ioctl$KVM_SMI(r5, 0xaeb7) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000180)=0x1ff) sendfile(r4, r3, 0x0, 0x100000001) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000140)=0x7fff) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuset.effective_mems\x00', 0xb00000000065808, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r6, 0x0, 0x100000001) ioctl$TIOCGISO7816(r6, 0x80285442, &(0x7f0000000100)) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) 20:29:25 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x4020565a, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:25 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x40045431, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1641.105980][T15395] FAULT_INJECTION: forcing a failure. [ 1641.105980][T15395] name failslab, interval 1, probability 0, space 0, times 0 [ 1641.118685][T15395] CPU: 1 PID: 15395 Comm: syz-executor.3 Not tainted 5.7.0-rc1-syzkaller #0 [ 1641.127360][T15395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1641.137404][T15395] Call Trace: [ 1641.140703][T15395] dump_stack+0x11d/0x187 [ 1641.145102][T15395] should_fail.cold+0x5/0xf [ 1641.149630][T15395] __should_failslab+0x82/0xb0 [ 1641.154400][T15395] should_failslab+0x5/0xf [ 1641.158915][T15395] kmem_cache_alloc_node+0x35/0x680 [ 1641.164153][T15395] __alloc_skb+0x8d/0x360 [ 1641.168501][T15395] netlink_sendmsg+0x662/0x8a0 [ 1641.173281][T15395] ? netlink_unicast+0x4c0/0x4c0 [ 1641.178270][T15395] sock_sendmsg+0x98/0xc0 [ 1641.182641][T15395] ____sys_sendmsg+0x493/0x4c0 [ 1641.187421][T15395] ___sys_sendmsg+0xb5/0x100 [ 1641.192022][T15395] ? _kstrtoull+0xfc/0x130 [ 1641.196454][T15395] ? __fget_files+0xa2/0x1c0 [ 1641.201097][T15395] ? __fget_light+0xc0/0x1a0 [ 1641.205764][T15395] ? __fdget+0x29/0x30 [ 1641.209943][T15395] ? sockfd_lookup_light+0xa5/0x100 [ 1641.215153][T15395] __sys_sendmsg+0x9b/0x150 [ 1641.219670][T15395] __x64_sys_sendmsg+0x4c/0x60 [ 1641.224473][T15395] do_syscall_64+0xc7/0x3b0 [ 1641.229148][T15395] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1641.235033][T15395] RIP: 0033:0x45ca69 [ 1641.239152][T15395] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1641.258805][T15395] RSP: 002b:00007f4ba691ac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1641.267279][T15395] RAX: ffffffffffffffda RBX: 0000000000500dc0 RCX: 000000000045ca69 [ 1641.275264][T15395] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1641.283229][T15395] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1641.291195][T15395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1641.299162][T15395] R13: 00000000000009fd R14: 00000000004ccd99 R15: 00007f4ba691b6d4 20:29:29 executing program 3 (fault-call:3 fault-nth:1): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 20:29:29 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x3b}}, 0x1}, {0xa, 0x4e23, 0x10001, @private1, 0x20}, 0x4, [0x8, 0x3, 0x14212235, 0xfffffff7, 0xae0e, 0xd0800000, 0x800, 0x2f10]}, 0x5c) 20:29:29 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x4020565b, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:29 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x400454ca, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) 20:29:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x1) [ 1642.573964][T15404] Sensor A: ================= START STATUS ================= [ 1642.589713][T15404] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1642.611364][T15404] v4l2-ctrls: Sensor A: Vertical Flip: false 20:29:29 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x4020940d, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:29 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x40049409, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1642.638133][T15404] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1642.663319][T15404] v4l2-ctrls: Sensor A: Brightness: 128 [ 1642.689327][T15404] v4l2-ctrls: Sensor A: Contrast: 128 20:29:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000)='NET_DM\x00') [ 1642.717489][T15404] v4l2-ctrls: Sensor A: Hue: 0 [ 1642.742003][T15404] v4l2-ctrls: Sensor A: Saturation: 128 [ 1642.759800][T15404] Sensor A: ================== END STATUS ================== 20:29:29 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x40085618, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:29 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x9b0000, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:29 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x80085617, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1642.967595][T15423] Sensor A: ================= START STATUS ================= [ 1643.020128][T15423] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1643.049230][T15423] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1643.067850][T15423] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1643.088912][T15423] v4l2-ctrls: Sensor A: Brightness: 128 [ 1643.113641][T15423] v4l2-ctrls: Sensor A: Contrast: 128 [ 1643.137997][T15423] v4l2-ctrls: Sensor A: Hue: 0 [ 1643.161408][T15423] v4l2-ctrls: Sensor A: Saturation: 128 [ 1643.186025][T15423] Sensor A: ================== END STATUS ================== [ 1644.001675][T15441] FAULT_INJECTION: forcing a failure. [ 1644.001675][T15441] name failslab, interval 1, probability 0, space 0, times 0 [ 1644.016759][T15441] CPU: 1 PID: 15441 Comm: syz-executor.3 Not tainted 5.7.0-rc1-syzkaller #0 [ 1644.025446][T15441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1644.035496][T15441] Call Trace: [ 1644.038799][T15441] dump_stack+0x11d/0x187 [ 1644.043137][T15441] should_fail.cold+0x5/0xf [ 1644.047726][T15441] __should_failslab+0x82/0xb0 [ 1644.052497][T15441] should_failslab+0x5/0xf [ 1644.056921][T15441] kmem_cache_alloc_node_trace+0x37/0x610 [ 1644.062640][T15441] ? __should_failslab+0x8a/0xb0 [ 1644.067627][T15441] ? debug_smp_processor_id+0x3f/0x129 [ 1644.073094][T15441] ? kmem_cache_alloc_node+0x26d/0x680 [ 1644.078557][T15441] __kmalloc_reserve.isra.0+0x43/0xd0 [ 1644.083936][T15441] __alloc_skb+0xbe/0x360 [ 1644.088281][T15441] netlink_sendmsg+0x662/0x8a0 [ 1644.093081][T15441] ? netlink_unicast+0x4c0/0x4c0 [ 1644.098013][T15441] sock_sendmsg+0x98/0xc0 [ 1644.102348][T15441] ____sys_sendmsg+0x493/0x4c0 [ 1644.107201][T15441] ___sys_sendmsg+0xb5/0x100 [ 1644.111795][T15441] ? _kstrtoull+0xfc/0x130 [ 1644.116302][T15441] ? __fget_files+0xa2/0x1c0 [ 1644.120910][T15441] ? __fget_light+0xc0/0x1a0 [ 1644.125509][T15441] ? __fdget+0x29/0x30 [ 1644.129583][T15441] ? sockfd_lookup_light+0xa5/0x100 [ 1644.134910][T15441] __sys_sendmsg+0x9b/0x150 [ 1644.139440][T15441] __x64_sys_sendmsg+0x4c/0x60 [ 1644.144264][T15441] do_syscall_64+0xc7/0x3b0 [ 1644.148768][T15441] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1644.154742][T15441] RIP: 0033:0x45ca69 [ 1644.158652][T15441] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1644.178310][T15441] RSP: 002b:00007f4ba691ac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1644.186796][T15441] RAX: ffffffffffffffda RBX: 0000000000500dc0 RCX: 000000000045ca69 [ 1644.194767][T15441] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1644.202738][T15441] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1644.210708][T15441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1644.218676][T15441] R13: 00000000000009fd R14: 00000000004ccd99 R15: 00007f4ba691b6d4 20:29:32 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x8008563f, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0xffffffe0, 0x200000, 0x0, 0xc, 0x0, "0400000000000000000000007ac20452f7b800"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) 20:29:32 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x4008ae89, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:32 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r3, 0x1277, 0x0) sendfile(r3, r2, &(0x7f00000000c0), 0x11e) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$KDGKBLED(r4, 0x4b64, &(0x7f0000000000)) 20:29:32 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 20:29:32 executing program 1: removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)=@known='security.apparmor\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000000100)="dabc6221033cd91b21b4a4811660ae9d9ae06391423317d5027eafbea17e0b345bed06a5532099a64d8da5f938f702e03a58cfcae29f7f15494f8210899e233dcc6a6280c9ff45afe068320f1e7337c001ae5fd3f12ab2000eb1bf870fdc2eea9faf7f22d1e71ce8ac2aee2c8efad3eabb5395c5de128e02bad1884eb26069f02ee3fe82689a307143925cd46ab60a173e2f552ac786228f87e68a4b0a0efeb2ea1a056d82185a4a0ca60215b31f8fe4cb19a1acad3977e40adfa1fd0c3cab868157275d9f11", 0xc6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000480)=@urb_type_iso={0x0, {0x5}, 0x1, 0x1, &(0x7f0000000340)="dbd13729165acc8b6e70d7a80b6468e157512c849f576f83bf84f208b7a9c94656fd8f7960f60b7343b9af3d1bbf7131bf8ee69118fea0c226d731fa4cb059eef33a051dae2423ae2be4a3c7ec70ec56ed38d239530bb8cda0c7f68c5ec411677402c8531506f021d2f42f57d2a66c2209101ae636cd6cd659c4776feb3e2d0e8dd16a037d0b0875d931ec144493da57a0f74dae199f1ef5ffd67319aad3f1ad3f3a9fb384853c054ea48f34c96dda45d9ddbdb3a20cc71db413cc98ec514df12d3b398432ee02efb1f663659dde1ffa69799626a3ae474b15", 0xd9, 0x4, 0x3, 0x3b, 0x10000, 0x6, &(0x7f0000000440)="1e2dd76ad764c225198c9ece16e00923353b903ca788848df34ce2e0a9f8779297510e072a8e0c5c51bbd00718aa0f", [{0xff, 0x13, 0x6}, {0x0, 0x4, 0x20}, {0x6, 0x100000, 0x7}, {0x5, 0x8000, 0x8}, {0x3, 0x7, 0x7}, {0x6, 0x7}, {0x1f, 0x2f0, 0x400}, {0xdeb, 0xffffff80, 0x1}, {0x40, 0x981, 0x4}, {0x4, 0x1000, 0x7}, {0x1000, 0x4, 0x8}, {0x4, 0x3, 0x9}, {0x0, 0x448, 0x1f}, {0x4, 0x69, 0xfffffff9}, {0x4, 0x4, 0x3}, {0xf6b, 0x100}, {0x80000001, 0x4, 0x6cf5da45}, {0x5, 0x3, 0x2}, {0xfff, 0x7fff, 0xe79e}, {0x9, 0x9, 0xfffffffd}, {0x9, 0x2, 0x2}, {0x200, 0x1f, 0x7}, {0x7fffffff, 0x9, 0x20000000}, {0x401, 0x0, 0x4}, {0xfffffffe, 0x0, 0x8}, {0x3f, 0x0, 0x4}, {0x1, 0x1, 0x3c}, {0x0, 0x7, 0x100}, {0x3, 0x4, 0x3}, {0x583d, 0x2, 0x6}, {0x26d99700, 0x3, 0x5}, {0x800, 0x2, 0x7}, {0x577, 0x4}, {0x9, 0x7, 0x8}, {0xf574, 0x6, 0x9}, {0x6, 0x0, 0x8}, {0x5, 0x0, 0x80000000}, {0x1, 0x5, 0x24ca1641}, {0x0, 0x401, 0x8}, {0x7, 0x9, 0x7fff}, {0x10000, 0x5, 0x3f}, {0x1, 0x1, 0x5a}, {0x4, 0x80}, {0x9, 0x6}, {0x1, 0x6, 0x5}, {0x53e, 0x6, 0x7}, {0xd5, 0xfff, 0x4}, {0x1, 0x6, 0x52}, {0x1, 0x6, 0x6}, {0x4, 0x0, 0x49}, {0x2, 0x5, 0xd6}, {0xa920, 0x101, 0x80000001}, {0x60, 0x795c8395}, {0x2, 0x401}, {0x3, 0x5, 0x6ef}, {0x4, 0x8001, 0xe2}, {0x8, 0x9, 0x200}, {0x8001, 0x6, 0x100}, {0xfff, 0x4, 0x6}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) r5 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000780)) sendfile(r3, r1, 0x0, 0x100000001) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000000c1400032dbd7000fcdbdfde6208cd2ae906ca834a1199b6fd5a212508003d0002000000080001000200000008000100a0020046680969c4e0123e03fa9601000000"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4000) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) [ 1646.124863][T15449] Sensor A: ================= START STATUS ================= [ 1646.153867][T15449] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar 20:29:33 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x4008ae90, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1646.170790][T15449] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1646.181956][T15449] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1646.199138][T15449] v4l2-ctrls: Sensor A: Brightness: 128 [ 1646.211762][T15449] v4l2-ctrls: Sensor A: Contrast: 128 [ 1646.229400][T15449] v4l2-ctrls: Sensor A: Hue: 0 [ 1646.251161][T15449] v4l2-ctrls: Sensor A: Saturation: 128 [ 1646.269661][T15449] Sensor A: ================== END STATUS ================== 20:29:33 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x80086301, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1646.280472][ T27] audit: type=1804 audit(1591043373.192:328): pid=15457 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir377111778/syzkaller.YvCIsr/941/cgroup.controllers" dev="sda1" ino=16257 res=1 20:29:33 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x40186366, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1646.391530][ T27] audit: type=1804 audit(1591043373.212:329): pid=15459 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir377111778/syzkaller.YvCIsr/941/cgroup.controllers" dev="sda1" ino=16257 res=1 20:29:33 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)) 20:29:33 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000007c0)={{{@in=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@empty}}, &(0x7f0000000600)=0xff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000340)='./file0\x00', 0x80000001, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000380)="8ca793db3d78e5b6c1d0ed24a1ca0f359996f9545d3623d9bd99bae6f5364f955d8dffadb1f7a4c7967c5334de2ac5a33e898b6c9808747215b57426f5dcea55e8506b8b", 0x44, 0x9}, {&(0x7f0000000400)="48602637b053169a6bf12450419035bac32bade64a14f5d1a5271bb0bc17419563d4ad293e1b3938ebe363f94d913857c83c99f485f8e0308ab6ba3e71c52c34d00985dd55dd5560bd7bf51ac6c194cd87a256ce9110f51e35666b2fd840fbabb076c1cb1bc1244c4cf1f5298fd2ab76325cc4f0ee408a869da10f7d3aff504228a495c883efc9fdc044916f5437", 0x8e, 0x80000000}], 0x2a0b400, &(0x7f0000000640)={[{@shortname_winnt='shortname=winnt'}, {@shortname_lower='shortname=lower'}, {@nonumtail='nnonumtail=1'}, {@numtail='nonumtail=0'}, {@utf8='utf8=1'}], [{@fowner_gt={'fowner>', r3}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x23}}, {@dont_hash='dont_hash'}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@obj_role={'obj_role'}}]}) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000100)="c37f3bf6d8f5a71b8b573c570aa5bcff772fa51a337b52e5b8546107107c387aa272c8157fb6f85f9d34c1b84af5926db54b241cab5d5f65f7b4b2b5f7126ad4fc85f271e090ded295e3f1e3c94b74ddbbed9cf512b3598084750d5c6256482d4d7f4ec0019b8724385eb08ca6baa5675abc69f8192a40b202d5292644bac3bb23721873eb6be558c46c8f4379", 0x8d, 0x8000}], 0x80000, &(0x7f0000000200)={[{@dots='dots'}, {@fat=@errors_continue='errors=continue'}], [{@hash='hash'}, {@context={'context', 0x3d, 'root'}}, {@permit_directio='permit_directio'}, {@uid_gt={'uid>', r3}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x30, 0x32, 0x34, 0x62, 0x3, 0x36, 0x62], 0x2d, [0x34, 0x30, 0x64, 0x35], 0x2d, [0x39, 0x34, 0x30, 0x61], 0x2d, [0x63, 0x37, 0x63, 0x33], 0x2d, [0x62, 0x65, 0x34, 0x30, 0x64, 0x62, 0x65, 0x36]}}}]}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r4, &(0x7f0000c34fff), 0xffffff0b) r5 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000580)="f2dbb0b18566ad53ab406dd15a800b4115132910c2501108781025cc3662f191247141ab622c1cd570e069d70000221ec5189d072a7e1296a40442ff049643e5b005e34b33cca62860fcdb89937fc2c7f928764d0d9187a4216c7a6eb5394f2ffcc8dbd38df76ca97ac348a3898ae72bf4c4b5322458418e5740a70184cbb58ee4d90000000000000000006b4d000000009f19275c858752499b76176a199e0a4f5c6eed72542a7896ed8184e0f895136f818acc2faf93e828f8a6eb54af823952f93c92965555e8f75eae38a70924d9bc3ecefa3e952fafca9780233feea136374f864fe08f7156d24382eb2acecf75467367990bfb9630da8ea11ec5d04c6a530859e10532f9f9e6e9b3fd5b7b8a008b93358f258d4e8467a94c510112855baeb13f9a54734d16dcd74d3a0ebba1c1833f2abfe19c93442ea34b41bc39c4088e52d53fe0dc34e00e3474d9b7448f01ea3cc90e8c7907a16989660a2ebe1428adccc96a07a7ff937936073b692e76450d03f6ab83c10130", 0xa0, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xffffffffffffffc9, 0x0) r7 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000380)='F', 0xfffff, r7) keyctl$unlink(0x9, r5, r7) ioctl$GIO_FONT(r4, 0x4b60, &(0x7f0000000980)=""/4096) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000000080)) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000740)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000800000300"/88], 0x58) 20:29:33 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x80805659, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1646.552635][T15473] Sensor A: ================= START STATUS ================= [ 1646.583100][T15473] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1646.613698][T15473] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1646.659514][T15473] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1646.706630][T15473] v4l2-ctrls: Sensor A: Brightness: 128 [ 1646.742723][T15473] v4l2-ctrls: Sensor A: Contrast: 128 [ 1646.765327][T15473] v4l2-ctrls: Sensor A: Hue: 0 [ 1646.779310][T15473] v4l2-ctrls: Sensor A: Saturation: 128 [ 1646.796396][T15473] Sensor A: ================== END STATUS ================== [ 1648.146105][T15506] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1648.155730][T15506] team0: Device ipvlan1 failed to register rx_handler 20:29:38 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="0a00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 20:29:38 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x4020565a, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:38 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) 20:29:38 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r1 = dup2(r0, 0xffffffffffffffff) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) 20:29:38 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x80845663, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:38 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x100400, 0x0) write$P9_RFSYNC(r1, &(0x7f0000000040)={0x7, 0x33, 0x1}, 0x7) [ 1651.853429][T15510] Sensor A: ================= START STATUS ================= [ 1651.895079][T15510] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1651.932649][T15510] v4l2-ctrls: Sensor A: Vertical Flip: false 20:29:38 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x80885659, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1651.954481][T15510] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1651.985206][T15510] v4l2-ctrls: Sensor A: Brightness: 128 20:29:38 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x4020565b, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1652.002341][T15510] v4l2-ctrls: Sensor A: Contrast: 128 [ 1652.021362][T15510] v4l2-ctrls: Sensor A: Hue: 0 [ 1652.035241][T15510] v4l2-ctrls: Sensor A: Saturation: 128 [ 1652.066608][T15510] Sensor A: ================== END STATUS ================== 20:29:39 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x4020940d, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:39 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, r0, 0x0, 0x100000001) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000040)=@fragment={0x2f, 0x0, 0x0, 0x0, 0x0, 0x2, 0x64}, 0x8) r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r3 = syz_open_dev$video4linux(0x0, 0x0, 0x2) ioctl$VIDIOC_DBG_G_REGISTER(r3, 0xc0385650, &(0x7f0000000000)={{0x3, @name="0832c3a84ed22644baacf687a618afbf25ea9602c99c0fd0cbc98df616255dfd"}, 0x8, 0x2, 0x558e}) ioctl$VIDIOC_LOG_STATUS(r3, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:39 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x4020ae76, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1652.327919][T15531] Sensor A: ================= START STATUS ================= [ 1652.367360][T15531] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1652.397129][T15531] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1652.422982][T15531] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1652.450431][T15531] v4l2-ctrls: Sensor A: Brightness: 128 [ 1652.478698][T15531] v4l2-ctrls: Sensor A: Contrast: 128 20:29:39 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x4090ae82, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1652.498421][T15531] v4l2-ctrls: Sensor A: Hue: 0 [ 1652.515190][T15531] v4l2-ctrls: Sensor A: Saturation: 128 [ 1652.543107][T15531] Sensor A: ================== END STATUS ================== 20:29:42 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x4138ae84, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:42 executing program 5: syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x600000, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r1, 0xc0385650, &(0x7f0000000040)={{0x2, @addr=0x9}, 0x8, 0x3, 0xffff}) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) r2 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x3, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0445624, &(0x7f0000000080)={0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:42 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="0f00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 20:29:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x100000001, 0x254040) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000040)) ioctl$TCSETSF(r1, 0x5412, &(0x7f00000000c0)={0x0, 0x1000001, 0x4, 0xffffffff, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) 20:29:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2000, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x8c0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_disconnect={0x8000}) 20:29:42 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0045878, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:42 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0045878, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:42 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x80045430, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1655.822712][T15565] Sensor A: ================= START STATUS ================= [ 1655.862305][T15565] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar 20:29:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000001) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000000)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r6, 0x1277, 0x0) write$binfmt_script(r5, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX=r1, @ANYRESOCT=r6, @ANYRES32, @ANYRESOCT=r3, @ANYBLOB="a6d6eca3893d8c9279c36efac14dd28b58e96c0ab74d31a19ef954a0c9214ff841a0b7250735c388425f861ad21ee422fe28fe9f192973a8dd7d039b468d0d76772e5e2ed21eeb47b4e941b30a047f96406e135a3351619df7b0e65d4bfa57113d7faa33a86f70e2dd400cbcf67e92c20b6720c818728182086e27d98603cdb8ebcf451b9250ceaf5f0c35e74f3bea963c2e3d8721bcf37a511c5e796a05c5981e0291b1cfce8c054c73b4039f16ec7f36d5bc90fea86efd94e5392ffe442ecf5466b79d59e36d373d79022a7a7cddf2ddd05682612ba7b149ac1883c17eaeef29ba3d6ce8bcd0bb51ecdc3154be3120835566e8c2f7e8f07f25b6585f2cfd59ee197d2db56e566c135dcc236dc3dbaf614c5d91b5b485f70c8ff8d909ca3f9c6c2cd6e34870316d81d570c07ce9e9ecb4d2dece91aeb167cb5ec081ab2a454c496274d904a5c1d3c877b0abf4d19e47d2065ac6be3bc77ada98f18b4c2f50062c53af867e6ea20ff763e34fa68c6270f8f345108361cfbe9b03ca0a6817e92640a2220b12ee720488c9ba01bd9525ae66fb88b11291ce9ba48c5978d94ab9caf4040d1b8673105e368af8518ff2554f24e2af43df00fc17da4da1351ab4e2428d9bf46551f2cb93f2b135ee988139351d17aa472fab9a1e7cc6c812c2ea27ebab41ed7f042276fbcefd58fcd1e61a48ea1c3907d30f9f664ab62818c5b03bfd01deb98731e78b3b116ec99c1e91c3e78627a8b2d78ff81be745e2a5a500f93ffc978a9b4faef4b3354cc5625657643f1e9711b624645a79d8573cb22fc0916dfcd51b673e99d69adfb25d4249c149800f5f3a4956029271c99f62c547e6d4451ebfaae4034bce413d4993b2d91fbaa8f0995e66d4af1041094b03ac71f584a310b0194d4646e9121e211e9c284d39e84f3f423c3586974f828b65018fca0b9cdcc52a5bcffed98384e63f647c59e0f938085e416ce711070f1de8444be70492cece1557b24fe2da58e60a97b4ac76eda9ae630dd8d375d402198bbcf26639250463323c97fd5bf92bb2ad184eac816319e9c90f3cf89dc8182c77c301967e394b7bcd08d66014ebdaffb9c82eb22f72d3be6eb830a0e420214a9dc8e14c60174d3dc5019644c63695e9705c2183f3d610531aecc6f75f3d604dd086e104478efa5c04fa73f420ab65b489907160e114c262bede5e268a56c0960abc6e461a389a8c8cefb7ac6fa5ce96c2d089239635917c505f988943dad035239d7c19bb26d5c67ca6d7051d9116790c80965ae23876ef7faafbf7aeb570dea2c9c66e99824ac31847e1f7595fc6333759d32d12dea3378be8969779b41c75728b93cd5f0d4de78eddb00ef7086af36d8fd0ae57fd8614df99b9810d7ddd22f072ae9ed3b790ccba76fc4ad8fe9dbc1b49511714a0218d1445ce66990085842b87620776766827044f834c57d353117e07b557e5a21cfabeac08d277ef387b35d47c10f5bd0dc724c0abfc33d7d2563836491b817d2ef885f4ad306343fc5dfc3247496e9e18fdd21f0f3df22d3bb94aa16dfc4d31aa3363d80a135b6b618ecd4f41ad5ee3f37ceaefc5ea629bc58932284e312ea15f423f647fb0c856ebb03b68d1826293cd1c179f0d8d3d7827969879f5e159d9bee77da10b317ef5e9532c3b4127c7de0d9257bd44d2918e67cd20ec8a10eea9e2850c6f4a736823fe29f87e3fa773319d4d1c8f3464d8b6fdaf284caa4e764fa6ab4e638dc05001546e9fde85555268ad9f6125e0a2932b9ffbbe19bfe88722f6d309effc93995b8903beaa145db3f1654ce8e443a7e91ee7c4e9a8e04201af7ec6697037955366f13b56caeeb9e9b471315271fbebaccfd54312ea80f3fe9f6c70d5fc9421d035f15d132a9c834086e161341df2082a8ef6aa754adec8ac8887e10d0f17ac050b5ab37c4c37eb3598ad783b3a381ffe356a1b56fb01711f31a262341b90aa0a83e662521375ae497bde2444d5a845e65d405b0d5debc45972e6e708de966dcb9dc6f71c797e3c6f5336c3e1f1962cdce4aa73e39e9b233c8941cc70b6e4ce295124728a8f32a54888356f75c41cb91937bac0f981a2d6dd04adeeadb518773fa8ec204ca56566754b1623512668aa52677b60ee3638678dc9582d4a5d1d8e58040942c48587596ad2e50f1aebe756f3608ec05c91d8273c5728f0347e7bbc5b059459507c75404f4e960da4197f2f9dbe5a5ecb267846b670c950cb0bf309688af1c6b5c18853aa8f6c26e7d1466d1f6ef20ca76542b1236213f5a602838b09b0132131d852553e14b08b31915b6e80591dd9ba31a31d8e51926c25440caf0e37b1a0efd30cf72f2cf9c622df17c381dcd91f999b2ef62c77746418f1060b89e3bb3c8d54a65a627270b906171c899b075710988975cb6e1a879a9beb04f1973e7277c2244bfa062f052cbb36a04669eedb579ad8c16046a8cb75d3f474e41004e8f629cb040469aa20c58ebb4255ef663e859a4187be3f333294c45c58e79f3cbaa79c2f5eff469b5cb0eb8e30ae1dc0d12a2e4f9576024d57f27f645f507af28a873f9c384b58daa4447f69e2537359b5bda5fbcaeb90f6f9e57031dad030f22dfa3c507bcbae64102b76abae87350885b0e075a90f76a0627516e365e0c8a871b1b7bbc3f5a288aefcd9e9aa6daaf074fcc9121a5304bddb19fc6826afd5719473a3a8eb8dd2ff83e5dd212fb97fe47ac38a6fc60b969b9dcfc2b700e7f97339ed4a351f6f7d0dd9a8810afa319a7f8d30876c1c53e2ea547dc81ec42295f6bad35cd075ab631b92c3d4d40a0226025ac973c4966a2ba8913a474be0abc950512d6a0f860adc25cc0f4b7c395b415160f553148f5d764f9229a425290df3b65e5bff187ef61276f714855a8834cc4aaf9e4638529a898867cd66cf5c590042325bb961f5deff38bdccb69b1e788734b38408e172155006c852fa97e022fc5f7901630b613f37a61a4a0cd9db2c37ab521b3074b8099407925a89933a068b3f4b4a3567ce14e15baf7d60fd3959405769cd428fe2ff4dca79e37a55a605733f49c5783e526aa19bca7f337b97c46d2fcf5f991beea2fd9b504ef0d12b984371aa308512c3709a02c184a009242055eb80e0528ce742d191037fab059603e1ada0bf09d9c15b689376850f238c447bb2cf7405ffed03fdf688b807e084193ad8a2499d80bbc597256fb4195e0f6287a36feac99906b3825089e4015288c33efc8eed4afa6ef2cfe7099841c1afc4144ac6f7e575e3ec109a109200894c20733fc171c3913259ca8fb423030716c648db99cd337bc23c86cbad90c02b7f2f7d702adc4f0de6dcc070cc560d3cedd0883be51443eacaa173693bdfa764c17b68f153ee4b8f74fea5f1b77de9ba4257c75c6a799acbded162394e2ee1c04db34bcadea9697bdb3bd9f10ff94c5da9195e28fcefc0432ae2619a803bb10d4cc8b69b290caf15e69d060dc7c7f99f5860a0c9218ba52e223911fd78d86706e9ecc9c79d379c158289cb808ddd69557240f356a96ad1242cc51944ac73ee35d362b51025721df18dbf0381dc66d9369a03fdb59c2db9638b526034f4316b1a4608d5c190b920e80883c05bf90beffb832242cc2d155a664e51dd2365d1b705e344bbcf1d23c75b204708a35de4660b8c7323cd08353559fc5d025bc9fb6fe4b2df17990904ddba859f6152daf90dfa86c180dd667df0df6a5d2c529a707c364ae086e797e42cc2e0dd176a7ec03a30998dc5179099269e29fd870cbe1d4d46144299f9b824db8faade0a1f0604ca0038d5e7fe4fe78bdc912b41a24409902c80a679d82a5ffb228362897be58c148c39837308b75a80681f7ba49868515a33a6e3a0eb1457f374430495c17ad9d5a15f2a433294dfc77e14cf54456408320f5be57f3c1b21a9248ece60e3c4dfef86f940918570bf8e0c938a5b54cfcc3704cedd75a8e5213f7dd4255522b9943b8f3a9cf456a2e245072bda14c4dba41086fe64cfe38c36ee1bc2b7e454a974f543495ff78a442323b55f1e3e915b64c5ea24c74bc617a6b5f11e93827110e35a7f4639838684d29de36e07f0eb37db4b95bec5be0fcbb0785ed23a4435ebdb312bfb5f2a4dde7d5910aff17727fd7e4a86510ccc8789532a59f8f38c3c30c125630d5c1e33c7ec9f9dcb30a9b7b0c72f4a30b64511da9ef471b8529c0df951467efd08e15eec6d49c5c3f7ccc45a8df1d607a275c6f702e9f567c46c5c16510b9c8b6d400a65ae23d146a53de3f05c992254abf522dcfe5ba3baeec1643eb066db29ba0e7c2cdc65d306f069e11e75ed3b4eafdcbb9120d575aa9998231bc96c8f656fa796338b5062b6e522cdfa219b257c0463918d3ef7c790f75ba2a144fa82c7f2bb784d5e5a1be1dbfb91c798aac8a5ff701cfd6114b075639f1af7349b5fee217ce7f3d10940437ec877a37bfea0871cfb1340a4baa6672f63e9f627d7ceb70092eb242517c6afaf5ea906a2e0156fb62e4870a5d97958b794d40c6489d6f974dad5bcbeac27b6fa4f5638a0a5d74224f62737a4a7243d2d8383b1bdc2b60bb193ac8fcb7d5fcee4a4367e7588905e83f07942192f2aa2db614a8594be8a63cdba05601ea113f2eed12a7a63971fdf2567f82e403ecdaf50c443e8ba5cd2f83ca9440a67daedcefc91056ecfdde681a29238db27fee835906b4e6e330226bec2b893151288f4f14f32007476fd1272055bbbee260093664ca69da6cfc2fb50c036f77155bd0c96e43cbfabd3545568462fd79af682e9e942bfc070b61ea3093785e0dc8b6ea73bd1b76ee72e396a3d63c96208334ede6698a1810cdf0b393c7c729df685ace6817cf33e8e07add63386e41e221340da7d9403081efbe62a756641726c945b38989749f039d14fae9d443af27b72b0caba396c5f39921fec11c5ab7af9d587152b2d18bb5ffc52807bcac05f5c082a4f9a12199012b0a083f089d0cef69b2adf1b1a025fc8cf1b0f97305443588b7799067f2a01ec9fc6a47cfe582ee4cdde09fe5808740a18048d883d4e84e3fed8933f6b0a8a56b44ddaef63017fa624ecc2df0154c6dc5f0909c93489b095ff07efb95dab48528013897fb210c06911f74738a42f96f940f217a645e213f5cdf877fb57497a7011af7d0f76c35bb3ffca88d95223de365df16c53e5f21600b1011841d4f4d33853bd9edae4fafded599505c489669ba2a704883da00e00dbed4d3ddddd1e9482898974c8efff317c7d2e22b57925cba0c8c48c29e5833ed48044d09b37b24025d5313ecf1a2c2dc385b2f44983b010db3733a7090cd9eb1eb47bef448f170fe337cb0a810db5e58474cedafff8bc2033f2c510391ed14174cf158397b0ee0fc452a514837105110204b22e9456d563a2917709c9722590d28bf21b3782dcb931ccce103e1ceade4f605ea778e4a288ffde45ab5edfdc4399d64f8f9d414cd95b9ae96dd78339e9ce3712fadd8a8825ace9a0f3aee6ab3f01a7dfa797fde818515612ea544f8aec7ad0bac7748c5cb7494df83120a2ae9e82b2e8ff1845a192123884af2f0b78082988a6f26874d5694a366530a4359fe923eeecfc516a260d6b65a2554874977f5599fae3221a9cc968d6dff2bbf7c69928fe66176475399681be6ccdc4aec55fca432880a153a6996e5e406ea1997c35601163198ceb05bcefe67170237caacf70cb9afd6b38cda616900dff91652bd8f8c54e4c6e0301da1c191c3b767a913dd5cf08ad1ae0a028e113004359bd638183b3cf6d6800b50f"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r8, r7, 0x0, 0x100000001) mmap$dsp(&(0x7f0000691000/0x3000)=nil, 0x3000, 0x1000002, 0x11, r7, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f0000000080)=0xcb2) [ 1655.926414][T15565] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1655.960517][T15565] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1655.990116][T15565] v4l2-ctrls: Sensor A: Brightness: 128 [ 1656.015692][T15565] v4l2-ctrls: Sensor A: Contrast: 128 20:29:42 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc008561b, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1656.045270][T15565] v4l2-ctrls: Sensor A: Hue: 0 20:29:43 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x80085617, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1656.077108][T15565] v4l2-ctrls: Sensor A: Saturation: 128 [ 1656.102270][T15565] Sensor A: ================== END STATUS ================== 20:29:43 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7f, 0x2) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000000c0)={[0xfff, 0x200000000000201, 0x5, 0x5, 0x3, 0x7, 0x80000000, 0x2ef, 0x20000000f8, 0x4, 0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0x7, 0x2], 0x4, 0x80}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000040)={0x1000, 0xff, 0x9, 0x100, 0x6, 0x4e}) r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r3 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r3, 0x5646, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000180)="689f65f46ba6ba8cc5f15ee1dc", &(0x7f00000001c0)="f030af9adbcf757d6df3a02f95fdff1a5d4d9f7b7150e6318618f9b8ecc6124097a198b5", 0x2}, 0x20) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:43 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc008561c, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1656.249354][ T27] audit: type=1804 audit(1591043383.163:330): pid=15577 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir377111778/syzkaller.YvCIsr/945/cgroup.controllers" dev="sda1" ino=16361 res=1 20:29:43 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x8008563f, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1656.529488][T15588] Sensor A: ================= START STATUS ================= [ 1656.554829][T15588] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1656.595372][T15588] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1656.619920][T15588] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1656.642672][T15588] v4l2-ctrls: Sensor A: Brightness: 128 [ 1656.661646][T15588] v4l2-ctrls: Sensor A: Contrast: 128 [ 1656.716274][T15588] v4l2-ctrls: Sensor A: Hue: 0 [ 1656.736252][T15588] v4l2-ctrls: Sensor A: Saturation: 128 [ 1656.756243][T15588] Sensor A: ================== END STATUS ================== [ 1656.870983][ T27] audit: type=1804 audit(1591043383.783:331): pid=15583 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir377111778/syzkaller.YvCIsr/945/cgroup.controllers" dev="sda1" ino=16361 res=1 [ 1656.956922][ T27] audit: type=1804 audit(1591043383.823:332): pid=15583 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir377111778/syzkaller.YvCIsr/945/cgroup.controllers" dev="sda1" ino=16361 res=1 [ 1657.076542][ T27] audit: type=1804 audit(1591043383.833:333): pid=15600 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir377111778/syzkaller.YvCIsr/945/cgroup.controllers" dev="sda1" ino=16361 res=1 [ 1657.146899][ T27] audit: type=1804 audit(1591043383.873:334): pid=15602 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir377111778/syzkaller.YvCIsr/945/cgroup.controllers" dev="sda1" ino=16361 res=1 20:29:46 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="1000000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 20:29:46 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0189436, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:46 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x80086301, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000000)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) 20:29:46 executing program 5: syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4, 0x0) r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000140)={0x0, 0x4, 0x1007}) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000000)={0x3, {0xfffffffe, 0x10000, 0x9, 0x200}}) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r3, 0x14}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x100000001) ioctl$VIDIOC_G_SLICED_VBI_CAP(r4, 0xc0745645, &(0x7f00000000c0)={0xfffe, [0xffff, 0x1, 0x101, 0x467, 0x9b, 0x7, 0x56, 0x3d, 0x55bb, 0x0, 0xe07, 0xffe1, 0x3, 0x7, 0x9, 0x2, 0x101, 0xff, 0x7, 0x774, 0x2, 0x2, 0x2, 0x18, 0x2, 0xe8, 0xfffb, 0x1, 0x8, 0x7, 0xff, 0x81, 0x0, 0x6, 0x7fff, 0x7ffd, 0xe1ca, 0x2, 0x16, 0x7f, 0x0, 0x2e, 0xfffd, 0x3, 0xe04, 0x7, 0x6, 0x7], 0xa}) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') ioctl$TIOCSPTLCK(r6, 0x40045431, &(0x7f00000001c0)) 20:29:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000003c0)) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) epoll_create1(0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$netlink(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x405}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000980)="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") [ 1659.296611][T15620] RGB/YUV Input: ================= START STATUS ================= 20:29:46 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:46 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x80805659, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1659.354565][T15620] v4l2-ctrls: RGB/YUV Input: Test Pattern: 75% Colorbar [ 1659.428281][T15620] v4l2-ctrls: RGB/YUV Input: Vertical Flip: false [ 1659.450466][T15620] v4l2-ctrls: RGB/YUV Input: Horizontal Flip: false [ 1659.491041][T15620] v4l2-ctrls: RGB/YUV Input: Brightness: 128 [ 1659.533050][T15620] v4l2-ctrls: RGB/YUV Input: Contrast: 128 [ 1659.557081][T15620] v4l2-ctrls: RGB/YUV Input: Hue: 0 [ 1659.577225][T15620] v4l2-ctrls: RGB/YUV Input: Saturation: 128 20:29:46 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1659.592683][T15620] RGB/YUV Input: ================== END STATUS ================== 20:29:46 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r2, 0x1277, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x4, 0x5b, 0x5c50, r2, 0x0, 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) 20:29:46 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1659.870656][T15642] Sensor A: ================= START STATUS ================= [ 1659.903375][T15642] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1659.925578][T15642] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1659.944764][T15642] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1659.967017][T15642] v4l2-ctrls: Sensor A: Brightness: 128 [ 1659.983605][T15642] v4l2-ctrls: Sensor A: Contrast: 128 [ 1660.001268][T15642] v4l2-ctrls: Sensor A: Hue: 0 [ 1660.024124][T15642] v4l2-ctrls: Sensor A: Saturation: 128 [ 1660.042147][T15642] Sensor A: ================== END STATUS ================== 20:29:47 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc020660b, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:49 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="2500000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 20:29:49 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x8, 0x20a00) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/handlers\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) getpeername$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000040)=0x20) r3 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) 20:29:49 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) write$binfmt_aout(r0, &(0x7f0000000100)={{0x10b, 0x3, 0x3, 0x276, 0x81, 0x3, 0x8d, 0x100}, "0ac42949113bdffe13f42012437c465ae603fba4e88502dd096490784a2194124f690db01edf5561ed8a9d12e333502a192330f6e850558ceebad3c32536adae4b52df7c08d77dd8a72624ceb743f8c2f03c07fae1ed936320bdb6f62c80cfd542f44f9410643dd07a8e7c78e1f0490fb0ccdbe8017cd34672d2f221a2db7fe1a3c56a7eac8ae1d1a6d28ae9043bfa86d155a2675f13e87bee18d076081e7bffc288c1c499c069c1425ec275ad44901b498df96b1e", [[]]}, 0x1d5) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) 20:29:49 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x80845663, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:49 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0285628, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1662.448102][T15672] Sensor A: ================= START STATUS ================= [ 1662.455817][T15672] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1662.462856][T15672] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1662.469540][T15672] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1662.479166][T15672] v4l2-ctrls: Sensor A: Brightness: 128 20:29:49 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x80885659, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:49 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0285629, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1662.528721][T15672] v4l2-ctrls: Sensor A: Contrast: 128 [ 1662.562737][T15672] v4l2-ctrls: Sensor A: Hue: 0 [ 1662.609116][T15672] v4l2-ctrls: Sensor A: Saturation: 128 [ 1662.635492][T15672] Sensor A: ================== END STATUS ================== 20:29:49 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f00000000c0)={0xc, @raw_data="c6c51876dc3c10df466e84638ef1c7c228cf4765cd6a07ec68e6adbd4814793950acd22eaeefd10f4b2b12836a3db1fc27f48e8befb3329d6a2177a8e2cb14f786fccdb7c5602a01b24ce28168ad6015879856abd0f02e6b3e680c92efc6a9b35f21ba080716a6f75d4565f83363be8547032f31ecd2a9d20e8706e7162d4d08723b5887227cccf651e0d22f41973fbc4959eefba74166de71f4b21c23037a6b598abb1c8fd5f9cd08adc5717141e00c80fa03a6047f680e60228dd0d92a7e55d8e1347d4fa7ed5d"}) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:49 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc02c5625, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1662.931875][T15691] Sensor A: ================= START STATUS ================= 20:29:49 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0305602, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1662.977975][T15691] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1663.036286][T15691] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1663.042416][T15691] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1663.106548][T15691] v4l2-ctrls: Sensor A: Brightness: 128 [ 1663.131761][T15691] v4l2-ctrls: Sensor A: Contrast: 128 [ 1663.182023][T15691] v4l2-ctrls: Sensor A: Hue: 0 20:29:50 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0305615, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1663.214968][T15691] v4l2-ctrls: Sensor A: Saturation: 128 [ 1663.243532][T15691] Sensor A: ================== END STATUS ================== 20:29:50 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="4b00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 20:29:50 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0305616, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) write(r2, &(0x7f0000000100)="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", 0x12d) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) 20:29:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x440000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) 20:29:50 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00', 0x10}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup3(r2, r1, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r6 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r6, 0x8982, &(0x7f0000000000)={0x8, 'vcan0\x00', {'ip6_vti0\x00'}, 0x6da}) r7 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r7, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1663.469371][T15709] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.3'. 20:29:50 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x8138ae83, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1663.596121][T15719] input: syz0 as /devices/virtual/input/input21 20:29:50 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc038563b, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r1 = syz_open_pts(r0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r2, 0x1277, 0x0) fchmod(r2, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) 20:29:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3, 0x800) setsockopt$inet_tcp_int(r1, 0x6, 0x5, &(0x7f0000000100)=0xbd9c, 0x4) ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000000040)=0x9ef) socket$can_bcm(0x1d, 0x2, 0x2) r2 = semget(0x0, 0x3, 0x140) semop(r2, &(0x7f0000000240)=[{0x2, 0xff, 0x1800}, {0x0, 0x80, 0x1000}], 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000180)={0x100, {0x7, 0x8001, 0x8, 0xffffffff, 0xda1, 0x100}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, 0xffffffffffffffff, 0x0, 0x100000001) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000280)=0xff, 0x2) sendfile(r4, r3, 0x0, 0x100000001) connect$llc(r3, &(0x7f0000000140)={0x1a, 0x204, 0x1, 0x1c, 0x30, 0x9, @remote}, 0x10) fremovexattr(r3, &(0x7f0000000200)=@known='trusted.overlay.origin\x00') r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCSIFBR(r6, 0x8941, &(0x7f00000001c0)=@generic={0x3, 0x3, 0x100000000}) 20:29:50 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x1, 0x64e041) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:50 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc004500a, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:50 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc038563c, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1663.996526][T15744] Sensor B: ================= START STATUS ================= [ 1664.013882][T15744] v4l2-ctrls: Sensor B: Test Pattern: 75% Colorbar [ 1664.030432][T15744] v4l2-ctrls: Sensor B: Vertical Flip: false [ 1664.062103][T15744] v4l2-ctrls: Sensor B: Horizontal Flip: false [ 1664.080398][T15744] v4l2-ctrls: Sensor B: Brightness: 128 [ 1664.099641][T15744] v4l2-ctrls: Sensor B: Contrast: 128 [ 1664.120925][T15744] v4l2-ctrls: Sensor B: Hue: 0 [ 1664.137044][T15744] v4l2-ctrls: Sensor B: Saturation: 128 [ 1664.156112][T15744] Sensor B: ================== END STATUS ================== 20:29:52 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="5b00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 20:29:52 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x1f, 0xff, 0x0, 0x2, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) 20:29:52 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc040563d, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:52 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0045878, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:52 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000040)) r2 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r3, 0x1277, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) socket$xdp(0x2c, 0x3, 0x0) 20:29:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000180)) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x341002, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000200)) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r5, 0x1277, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[r5]}, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x2010, r6, 0x0) ioctl$TCSETX(r6, 0x5433, &(0x7f0000000000)={0x7c3c, 0x4, [0x1, 0x3, 0x0, 0x8000, 0x402], 0x2}) 20:29:52 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0045878, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1665.355309][T15773] Sensor A: ================= START STATUS ================= [ 1665.394855][T15773] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar 20:29:52 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc040563e, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1665.431897][T15773] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1665.472816][T15773] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1665.501444][T15773] v4l2-ctrls: Sensor A: Brightness: 128 [ 1665.527248][T15773] v4l2-ctrls: Sensor A: Contrast: 128 [ 1665.542159][ T27] audit: type=1804 audit(1591043392.453:335): pid=15777 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir377111778/syzkaller.YvCIsr/950/cgroup.controllers" dev="sda1" ino=16346 res=1 [ 1665.554258][T15773] v4l2-ctrls: Sensor A: Hue: 0 20:29:52 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc008561b, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1665.613746][T15773] v4l2-ctrls: Sensor A: Saturation: 128 [ 1665.641527][T15773] Sensor A: ================== END STATUS ================== 20:29:52 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc040564a, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1665.676142][ T27] audit: type=1804 audit(1591043392.493:336): pid=15777 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir377111778/syzkaller.YvCIsr/950/cgroup.controllers" dev="sda1" ino=16346 res=1 20:29:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000240)=0xc03) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) write$P9_RREAD(r2, &(0x7f0000000100)={0xda, 0x75, 0x1, {0xcf, "f3510841b392741199da806ef9745e52e374170c0f3d2ccd29a2ee77a12354e61bc4bbc00dff83fe687510d2a0f8222b515e4b2cba055f94841881509223bc206cad6f7b6ffdbcc2e194aa2c8195b58f0cbe16ae153bcb731b400c27ff2dc72eca5b78ee3ed77a2f74a26b11a2b11dba5abbba6f8668490be9df2276a98ab3f418350856e637772ce217a8e389c4aa03e901b693f3f255063dbf92784f961c108b007a158db1d9943638742eddb4652ab1078f4e11bf15d6485eb01a3bcce1f41118c2e58eb8c2a21eca2aaa89de13"}}, 0xda) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) utimensat(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x77359400}, {0x0, 0x2710}}, 0x100) ioctl$SIOCX25SCAUSEDIAG(0xffffffffffffffff, 0x89ec, &(0x7f0000000200)={0x20, 0x7}) 20:29:52 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x3}) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @bt={0x6b, 0xfffffffc, 0x101, 0x2, 0xffffffffffffff1d, 0xffffffffffffaeb9, 0xa, 0x8}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1665.912759][T15795] Sensor A: ================= START STATUS ================= [ 1665.975585][T15795] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1666.039138][T15795] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1666.045195][T15795] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1666.133286][T15795] v4l2-ctrls: Sensor A: Brightness: 128 [ 1666.146413][T15795] v4l2-ctrls: Sensor A: Contrast: 128 [ 1666.151825][T15795] v4l2-ctrls: Sensor A: Hue: 0 [ 1666.205741][T15795] v4l2-ctrls: Sensor A: Saturation: 128 [ 1666.211329][T15795] Sensor A: ================== END STATUS ================== 20:29:56 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="c000000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 20:29:56 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc008561c, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:56 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc040564b, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) 20:29:56 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) clone3(&(0x7f00000005c0)={0x1000000, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0x2e}, &(0x7f0000000340)=""/188, 0xbc, &(0x7f0000000400)=""/25, &(0x7f00000004c0)=[0x0], 0x1, {r1}}, 0x58) r3 = syz_open_dev$video4linux(0x0, 0x0, 0x0) r4 = getpgrp(0x0) sched_setaffinity(r4, 0xfffffffffffffe6a, &(0x7f0000000100)=0x200baa) migrate_pages(r4, 0x5, &(0x7f0000000000)=0xfff, &(0x7f0000000040)=0x7fffffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000240)) sendfile(r6, r5, 0x0, 0x100000001) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="9b07000000ff0500000000000000684d488e1e06eaabde8673a01f3cc1cd64fb9d12b59e8c92c54db32a994b84bf3abd604f8175e33f862938f639ecf4061c2235aad72ad41fc50d878655465d6dd4df89788135b87c77c890a0b2745ff935267e940daba527c8a3ceb1c64278d61111515429d6aab04dc3d6a4e468dacf54325ca8b63d5560244170b52739f6e728c8a9f77176657079f55009a2950c5c632d854ea88c38990ceed858174f70e51a13a71ab48d38f668da77324bec430e11df3f048b42d6406ac95df4aafd00"/217], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r8, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x7fc0000, 0x4}}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xe, 0xbd, [0x7ff, 0x65, 0x865a, 0x8000, 0x3f]}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7fff}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x11}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x5f}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x2b4}]}, 0x68}, 0x1, 0x0, 0x0, 0x20044800}, 0x8001) ioctl$VIDIOC_LOG_STATUS(r3, 0x5646, 0x0) socket$inet(0x2, 0x80000, 0xda54) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0xf000000, 0x0, 0x248, r3, 0x0, 0x0}) 20:29:56 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, r0, 0x0, 0x100000001) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x303}, "4ca7c3f676db20d7", "9c403d420e517e317ac2ec39b04b31ee", "f539bf52", "a2effa055d35a64e"}, 0x28) prctl$PR_GET_THP_DISABLE(0x2a) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x46, 0x0) write(r2, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000080)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r3, 0xc040563d, &(0x7f0000000100)={0x1, 0x0, 0x102, 0x2, {0x4, 0x9, 0x1, 0x3d}}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000000c0)=0x3f) 20:29:57 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc008ae05, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:57 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445667, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1670.333253][T15826] Sensor A: ================= START STATUS ================= [ 1670.347745][T15826] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar 20:29:57 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0145608, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1670.376506][T15826] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1670.414379][T15826] v4l2-ctrls: Sensor A: Horizontal Flip: false 20:29:57 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0485619, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1670.443492][T15826] v4l2-ctrls: Sensor A: Brightness: 128 [ 1670.472392][T15826] v4l2-ctrls: Sensor A: Contrast: 128 [ 1670.494026][T15826] v4l2-ctrls: Sensor A: Hue: 0 20:29:57 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0189436, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1670.516219][T15826] v4l2-ctrls: Sensor A: Saturation: 0 [ 1670.534091][T15826] Sensor A: ================== END STATUS ================== 20:29:57 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xffffffff, 0x8a81) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r2, 0x1277, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0x0, 0x0}) [ 1670.730164][T15847] Scaler: ================= START STATUS ================= [ 1670.738886][T15847] Scaler: ================== END STATUS ================== 20:29:57 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="b601000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 20:29:57 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0505609, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:57 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1670.787671][T15851] Scaler: ================= START STATUS ================= [ 1670.795065][T15851] Scaler: ================== END STATUS ================== [ 1670.881950][ T27] audit: type=1804 audit(1591043397.793:337): pid=15828 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir377111778/syzkaller.YvCIsr/952/cgroup.controllers" dev="sda1" ino=16350 res=1 20:29:57 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc050560f, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:57 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0xfffffffffffffe6a, &(0x7f0000000100)=0x200baa) ptrace$setregset(0x4205, r2, 0x2, &(0x7f0000000000)={&(0x7f00000000c0)="aea6d73b9dd00c3c52533e60cd30c6376894ae212fbc92b9d3742720a50b6884d6d7537e30bab65004b799e479561a08f1cc6d24180f9861bbbb8bad11537e99193c02da54b7639fae09da2d5aa55a44fb345d9116b150690e2752d084fbd84abd2dfbea45e1f5354b3f1ca42e50921ecc4afb53fe48be58faaba78eb19e7f4f7af627a097d8f4561e7e2095a7a7b448ef70001b1e2f4a96ca1eccc442cd2a305d695e2e34e202253354c67e07914b91e978db5f54bc5feff1633cff0710c4939ab41ef1fcafb6db6ab46fde412bae0fb8de0892883879649d1423249bde820c62eeac500dddf530", 0xe8}) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:29:57 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r0, 0x1277, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x565080, 0x0) ioctl$BLKIOMIN(r1, 0x1277, 0x0) write(r1, &(0x7f00000001c0)="bc27000000000000000000000000000057dc6491f906c9a772048b7a0954e3bd77ea43d1a99623b3c677ad07304d3bf5eae2a5420aa736a4f2f4b7987395b4698c79fcdbee6203c347f7eadeab8d73a2ea8d9597dae414fcfa2cf665c249f4bcef97837db4decbee412a348ecdda686b4c627b37ee420e3ef6f7a99e9d9f47862f3e3779eb16df4e692bf1e325673257ca2085d92caef825e1883a4537dd68a0b6266a", 0xa3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x100000001) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000080)=0xfe) 20:29:57 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1671.041320][ T27] audit: type=1804 audit(1591043397.823:338): pid=15830 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir377111778/syzkaller.YvCIsr/952/cgroup.controllers" dev="sda1" ino=16350 res=1 20:29:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) dup2(r4, r3) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}, r5}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r5, 0x1f}}, 0x10) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r6, 0x1277, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r7, 0x1277, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[@ANYRESDEC=r6, @ANYBLOB="9d8aa22d4d970edd264c3543d13bd2bfdeb6633dcb68661cfccd3fef64b7424c26b1a553abd16c1c71d0188272dd19076602069398698c7e8236e3190d4ebcbf7c0402e8df66339d1aaa8008dce7e43cdf33c7cfc751f2ddd35aff8a4552444556cf4690312c", @ANYRES16=r7], 0xffffff3a) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000000104010200008c000000000100010001040000000100000008000540000000401e3e68c7ee3e69c8234eac82139516fd67206a028aefbbbf9bf6bbd52e382c3cccff070000000000005b30ce622881326ad184fbf40128c2ce2c5a98f387ff00adc477b0efd2249a2b987b726bf004d7c576bea4b099d43a06e82db653030000006165f69268975d39fd7f88effea17e1f5cd47430b9ee558014f60900000000000000d4a70d97638b8e84350b4f3a90f878f8ad00a1eb0f1b13313f52a660ad4fc960355de7fa26789b4eb6d82fd87b40c48b317170f85dcfb9eaae2637b588a982c899a74c148a0ab32a7287a391"], 0x24}}, 0x0) r9 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r9, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) [ 1671.126952][T15864] Sensor A: ================= START STATUS ================= [ 1671.134515][T15864] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1671.217367][T15864] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1671.225001][T15864] v4l2-ctrls: Sensor A: Horizontal Flip: false 20:29:58 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0505611, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1671.286735][T15864] v4l2-ctrls: Sensor A: Brightness: 128 [ 1671.292309][T15864] v4l2-ctrls: Sensor A: Contrast: 128 [ 1671.320198][T15879] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 20:29:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000100)=""/91) [ 1671.357729][T15864] v4l2-ctrls: Sensor A: Hue: 0 [ 1671.362515][T15864] v4l2-ctrls: Sensor A: Saturation: 0 20:29:58 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1671.425982][T15864] Sensor A: ================== END STATUS ================== 20:29:58 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0) close(r1) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)='vlan0\x00') r2 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1671.724952][T15894] Sensor A: ================= START STATUS ================= [ 1671.776055][T15894] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1671.804462][T15894] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1671.818853][T15894] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1671.835807][T15894] v4l2-ctrls: Sensor A: Brightness: 128 [ 1671.848284][T15894] v4l2-ctrls: Sensor A: Contrast: 128 [ 1671.871041][T15894] v4l2-ctrls: Sensor A: Hue: 0 [ 1671.889844][T15894] v4l2-ctrls: Sensor A: Saturation: 0 [ 1671.910349][T15894] Sensor A: ================== END STATUS ================== [ 1672.050019][T15899] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1672.264859][ T27] audit: type=1804 audit(1591043399.174:339): pid=15889 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir377111778/syzkaller.YvCIsr/954/cgroup.controllers" dev="sda1" ino=15889 res=1 [ 1672.355811][ T27] audit: type=1804 audit(1591043399.174:340): pid=15892 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir377111778/syzkaller.YvCIsr/954/cgroup.controllers" dev="sda1" ino=15889 res=1 20:30:02 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="c00e000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 20:30:02 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc050565d, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:02 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc020660b, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:02 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x741, &(0x7f00000002c0)={{0x12, 0x1, 0x56ce9c84678ed86f, 0x6c, 0xf6, 0xeb, 0x40, 0x573, 0x4d25, 0xc2b6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72f, 0x2, 0xc0, 0xce, 0x20, 0xfb, [{{0x9, 0x4, 0x8f, 0x0, 0x9, 0xa8, 0x92, 0xbd, 0x9, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "db310e"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x10000, 0x3f, 0x7f, 0x4}, {0x6, 0x24, 0x1a, 0xfbff, 0xe}, [@dmm={0x7, 0x24, 0x14, 0x8, 0x5}, @mdlm_detail={0xdf, 0x24, 0x13, 0x6, "ac2cd3cdcbf449ebab575feb42dca7280fdadd6a4789865f60745321d932297415e42253a8f0c70f570f76f8b032602b0e954ccb3d162f3235f362a0ef6add8a7707c154085ffbd5aade61bf025d0b0d5c97ec4f44b79c9ee2c0afe2ea5446458684582178733bbb0dac19dbe73fc93dffe893b69cb558fcc0303f04b892321c2dfb55b76a6b468a11c6b87dc0222cae0687dc88efe27c833927d04f5fde12e1374cefcfa958e8fd66c0e5b16530474676d7f924b3de0b60ec5c6588f301468cee8daa90e83770e542c60923f023fa5da4b68aa55a9890352144a9"}]}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x7, 0x0, 0x40}, {0x6, 0x24, 0x1a, 0x67, 0x7}}], [{{0x9, 0x5, 0x2, 0x2, 0x10, 0x2, 0x80, 0x40, [@generic={0x9c, 0xf, "59fd7515bc5b13208769bfc31401636fdc0df87b9036dc9888ad3802308c78bfd94b375479973f6679c0d352ad332d38f21b6f2bb5a9998422ee99f2647060ecf1fbbffc1519af849627bf4dba2addf6b699bdb8c3377aca88c16a4cb7b54c12d28b374a249f8f84deee1073f624a00a84f3b3913f2314567e5112fc290bddf31d0e2a69b0bcd41fcd9e336392ddd239446ef546e33e6b7190a8"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x3ff, 0x81, 0x4, 0x40}}, {{0x9, 0x5, 0x8, 0xc, 0x200, 0x0, 0x8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x1ff}, @generic={0x41, 0xe, "c18bdbb8ae28bdf8a78837ba5b0cfb5c46c6959c50d028f617badaef817cbae4c1e18c35379e67cfe286beca37a88f6f8b2331e2304617979c4dae9454cd60"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x5, 0x51, 0x6}}, {{0x9, 0x5, 0xd, 0x4, 0x20, 0x1, 0x0, 0x3}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0x5, 0x79, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x3b}]}}, {{0x9, 0x5, 0x3, 0xc, 0x248, 0x1, 0x3f, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x1}]}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0xbd, 0x3f, 0x80}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0xb3, 0x0, 0x80}}]}}, {{0x9, 0x4, 0x26, 0x1, 0xf, 0xff, 0x4, 0x78, 0x9, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "8010"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x2bc, 0x401, 0x8000}, [@mbim={0xc, 0x24, 0x1b, 0x57, 0x0, 0xc0, 0x7f, 0xee, 0x4}, @obex={0x5, 0x24, 0x15, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0xe5, 0x9, 0x81}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x8, 0x1, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x7, 0x3, 0x65}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x8, 0xfff8}]}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "733927c85d"}, {0x5, 0x24, 0x0, 0xffc1}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x2, 0x3, 0xe3}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x6}, @mdlm={0x15, 0x24, 0x12, 0x3e8}]}], [{{0x9, 0x5, 0xb, 0xc, 0x400, 0x8, 0x7f, 0x4, [@generic={0x82, 0xb, "4ff2cbfb8428d708aff42064aa5dee5d4c568f3b05ce71d9c71e6736f2b14cfa490820f1d4f52fa5f0cfef088c80aea4df7751a36334386290937b9980c0d2bc0f0738d637df76e5f1888e2acb60944077fd9a9bdbdd9a651fdfbc860f28091653aa513ee5335f43f92244858e494644de0e5c1f2183af05df94d7384d7241c7"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0xc7, 0xc1, 0x1, [@generic={0xaa, 0xa, "c21b7d537532fb4663aaddf9871a3d374dc35b1f0bfd38cd22a7c07ed81de806c4d9ec98b83892bc4c77c89581f576bb2cb4bb47570d2e385cc7d14a0fbbaf39e0370da4ab376b4618a67904ef5e0071264d7d08591b2f933e0d96daa84454f5daede4811bd4b0c094902e6e1296a2b29c0504c300913ef7f0c54cff13fa051b5023084a6a7bc3f03b9360417d22d93a9da79aca1202263f66901580b3438525700d64256fbd9a2f"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x200, 0x8, 0x0, 0x40}}, {{0x9, 0x5, 0x1, 0x10, 0x20, 0x3, 0x6d, 0x8, [@generic={0x8c, 0x21, "8148dee088a27ff2ede50619bafba8af77209f085c26bf2a47cc70063ead123a669a1ba33f00a3889f15a3f81fd84dbf02fb971840dcd8e625f55293e53d9d8a63510a824d4d2f1d0bd156b4f84df50680814969afe3f511653d3dd31297bfe6fce71e5b38e0a9d2f2149e167abfe2704471b059941ede3d9b3c514716a083a7b3cdc78adcbff903b5c8"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0x2, 0x0, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x4a}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0x7}]}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0x8, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0xa000}, @generic={0x77, 0x2c, "b6c6cd36b3a91caefdc044298f1af7fc5ac30c398ee3d764992aa1ab4e738e114f149acc34bd15a0fa381738f1fae1dcf22c249549a547bd3da01fd6abd7e7a50c68c2a6fd0348de08804d689c37481e99363f9d7b3bd7250eca7313c3baf5bc18745ca322824b8f691d535dfc482410e479259ddb"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0xfd, 0x3, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x8}]}}, {{0x9, 0x5, 0xb, 0x3, 0x40, 0x7, 0x3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1f, 0x7ff}]}}, {{0x9, 0x5, 0x4, 0x8, 0x68, 0x1, 0x80, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x20, 0xcf1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x5}]}}, {{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x5, 0x2, 0x40}}, {{0x9, 0x5, 0x1, 0x0, 0x48, 0x1f, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x77, 0x6}, @generic={0x80, 0x23, "63cafa2212767e2fc4f18625701e2d3b4136c50eae7ecf756fd22cce4b954b59d6736773a045a769442c7ce114ce5509850d8770c66bdf1ec993f4869a1a596552dc512b0f6ef17fe31dfe13eb42f9f178bbc799c23922461dc09ff10352dadde29da7c57eff9e867af46de79cffe34adb414f2613bdbf6dc3cc5d73c138"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0x7, 0x1, 0x4, [@generic={0x96, 0x30, "bacda5fe9b6e2d96c270938cc603cc5abddb50b05e79e5c6e773cc77a6dff23744f4dfe8abd48f594d7e9825e5ce6dd2ec00740a23e1d712e9a17a109591bb541f5d9827e6a2b3d6deefde4954521089e794cd180e9b2b168698a9941d03054b0c3293d350831a0aff82acd8929eb8e8193872956e35d53174ebdc65e3c893a179caaa53196babc6f385544b516b278daa08bf19"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x15, 0x0, 0x2}}, {{0x9, 0x5, 0xe, 0x4, 0x3ff, 0x4, 0x1, 0x5, [@generic={0x1e, 0xf, "b0375faed1abf183ecba849489d9bc65f68c0eb75069905732506adf"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x20}]}}, {{0x9, 0x5, 0xd, 0x2, 0x400, 0x4b, 0x3, 0x1}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x7, 0x7, 0x0, 0x8, 0x1f}, 0xc, &(0x7f0000000140)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x5e993af1098fb96f, 0x6, 0x9}]}, 0x3, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xc04}}, {0x43, &(0x7f0000000200)=@string={0x43, 0x3, "192c367051d3ab2b4b2d35983fd38fd99c48615b41b781b454c4f9bba81f0c91665d6fe6a1ed7ad2513f68991414f568bdb210b51112350bfe1d22f78599ff8c91"}}, {0x42, &(0x7f0000000a40)=@string={0x42, 0x3, "83076ad979c26eda10d2bc3a6fcd7e19488a3f9885aab30b2dc331b9007a973f55737ba70a43b46ef0459979b024fa755943444f6817aafff3781435af689c98"}}]}) ioctl$BLKIOMIN(r1, 0x1277, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r2, 0x1277, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r3, 0x1277, 0x0) write$binfmt_aout(r0, &(0x7f0000000b80)=ANY=[@ANYRES64=r1, @ANYRESHEX=r1, @ANYRESOCT, @ANYRESHEX=r1, @ANYBLOB="05f9bab85a72b809e71dd56a5beb0bd18431c998cca1bfa925345f43e93a75e57f98382a96c84dcb7d630f46742e84356a755041c7e9e1e4a2741a40a054b19a2b2da468f854ec1bcd2d7b7fe9d466dea854e7ca49d7ccaab80942f186e6b35e31f703f259e45e58efc774f9f6289deb7177ff7e0c5c50ba8d5b98978df9ad1730c6e26f3f0c1d441463e9271be087400f2454a1553903df89f71e7a07d77f7b33a8cff2aed7907fb6c7cb47ac91590a6422bff293eb3a0620c4151229d3ff56c3a4cf149c6d4c12f2f51bd23ee647601dd231a4780b1b", @ANYRES32=r1, @ANYRES64], 0xffffff3a) r4 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) 20:30:02 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) syz_open_dev$ttys(0xc, 0x2, 0x0) 20:30:02 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x3f, 0x501) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x208e24b) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r3, 0x1277, 0x0) mmap(&(0x7f00006ad000/0x1000)=nil, 0x1000, 0x2, 0x28011, r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r6, 0x1277, 0x0) ioctl$BLKPBSZGET(r6, 0x127b, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r5, 0xc01064c7, &(0x7f00000005c0)={0x7, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000600)={r7}) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r8, 0x1277, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x200, 0x81, 0xb9], 0x3, 0x800, r7, r8}) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:02 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0585604, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:02 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0285628, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:02 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_THP_DISABLE(0x29, 0x1) sendfile(r1, r0, 0x0, 0x100000001) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0xfffffffd, 0x5, 0x4, 0x40000000, 0x6, {0x0, 0x2710}, {0x4, 0x0, 0x0, 0x3, 0x8, 0x81, 'wMen'}, 0x80000000, 0x2, @fd=r0, 0x5, 0x0, 0xffffffffffffffff}) ioctl$TIOCEXCL(r3, 0x540c) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) lsetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'user.', '/dev/nullb0\x00'}, &(0x7f0000000240)='/dev/nullb0\x00', 0xc, 0x0) write(r4, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000000080)) r5 = mq_open(&(0x7f0000000100)='/dev/ptmx\x00', 0x41, 0x11, &(0x7f0000000140)={0x0, 0xabc, 0xfffffffffffffff7, 0xfff}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r6, 0x1277, 0x0) poll(&(0x7f0000000180)=[{r5, 0x99}, {r6, 0x860a}], 0x2, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x482080, 0x0) [ 1675.316061][T15924] Debayer B: ================= START STATUS ================= [ 1675.370668][T15924] v4l2-ctrls: Debayer B: Debayer Mean Window Size: 3 [ 1675.402707][T15924] Debayer B: ================== END STATUS ================== 20:30:02 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0585605, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1675.495231][T12192] usb 1-1: new high-speed USB device number 2 using dummy_hcd 20:30:02 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0285629, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:02 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0585609, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1675.785886][T12192] usb 1-1: config 192 has an invalid interface number: 143 but max is 1 [ 1675.794250][T12192] usb 1-1: config 192 has an invalid interface number: 38 but max is 1 [ 1675.846232][T12192] usb 1-1: config 192 has no interface number 0 [ 1675.872451][T12192] usb 1-1: config 192 has no interface number 1 [ 1675.900764][T12192] usb 1-1: config 192 interface 143 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 16 [ 1675.942624][T12192] usb 1-1: config 192 interface 143 altsetting 0 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 1676.015151][T12192] usb 1-1: config 192 interface 143 altsetting 0 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 1676.035195][T12192] usb 1-1: config 192 interface 143 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 1676.065228][T12192] usb 1-1: config 192 interface 143 altsetting 0 endpoint 0x3 has invalid maxpacket 584, setting to 64 [ 1676.095209][T12192] usb 1-1: config 192 interface 143 altsetting 0 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 1676.143268][T12192] usb 1-1: config 192 interface 143 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 1676.169101][T12192] usb 1-1: config 192 interface 38 altsetting 1 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1676.217320][T12192] usb 1-1: config 192 interface 38 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 1676.245428][ T27] audit: type=1804 audit(1591043403.164:341): pid=15933 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir377111778/syzkaller.YvCIsr/956/cgroup.controllers" dev="sda1" ino=16257 res=1 [ 1676.256247][T15933] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 1676.282428][T12192] usb 1-1: config 192 interface 38 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 1676.284745][T15933] File: /root/syzkaller-testdir377111778/syzkaller.YvCIsr/956/cgroup.controllers PID: 15933 Comm: syz-executor.1 [ 1676.345126][T12192] usb 1-1: config 192 interface 38 altsetting 1 has a duplicate endpoint with address 0xB, skipping [ 1676.394704][ T27] audit: type=1804 audit(1591043403.224:342): pid=15945 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir377111778/syzkaller.YvCIsr/956/cgroup.controllers" dev="sda1" ino=16257 res=1 [ 1676.395094][T12192] usb 1-1: config 192 interface 38 altsetting 1 has a duplicate endpoint with address 0xF, skipping [ 1676.511236][T12192] usb 1-1: config 192 interface 38 altsetting 1 has a duplicate endpoint with address 0xB, skipping [ 1676.545063][T12192] usb 1-1: config 192 interface 38 altsetting 1 endpoint 0x4 has invalid maxpacket 104, setting to 64 [ 1676.585137][T12192] usb 1-1: config 192 interface 38 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 1676.615102][T12192] usb 1-1: config 192 interface 38 altsetting 1 has a duplicate endpoint with address 0x1, skipping [ 1676.655067][T12192] usb 1-1: config 192 interface 38 altsetting 1 has a duplicate endpoint with address 0x5, skipping [ 1676.685086][T12192] usb 1-1: config 192 interface 38 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 1676.725066][T12192] usb 1-1: config 192 interface 38 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1676.755070][T12192] usb 1-1: config 192 interface 38 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 1676.778051][T12192] usb 1-1: config 192 interface 38 has no altsetting 0 [ 1676.938331][T12192] usb 1-1: New USB device found, idVendor=0573, idProduct=4d25, bcdDevice=c2.b6 [ 1676.954159][T12192] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1676.977233][T12192] usb 1-1: Product: ރ쉹íˆãª¼ìµ¯á¥¾è©ˆé ¿êª…ள쌭뤱稀㾗ç•ê»äŒŠæº´ä—°ç¦™â’°ç—ºä™ä½„á¨ï¾ªç£³ã””梯颜 [ 1676.999181][T12192] usb 1-1: Manufacturer: Ⱉ瀶í‘⮫ⵋ頵팿䢜孡ëë’쑔믹ᾨ鄌嵦퉺㽑饨á”棵늽ë”ሑଵ᷾馅賿 [ 1677.025046][T12192] usb 1-1: SerialNumber: syz [ 1677.035882][T12192] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 1677.044825][T12192] usb 1-1: no configuration chosen from 1 choice 20:30:04 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="e03f030010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 20:30:04 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc02c5625, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:04 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc058560f, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f00000000c0)={0x2, 0x0, [], {0x0, @reserved}}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) r3 = syz_open_pts(r1, 0x80) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0xfffffffd, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x100000001) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="04002dbd7000fddbdf250600000006000100040000001400080076657468305f766972745f7769666900060001000400000005000d00000000000c007f0000060001000000000008001800ac1414aa93a34593d9f347017f304a7952d62716b89820b7d8139e0c66dd07b37ad2fd3353b48cd9f2e7f69ee9c71ba38610b3eb1da6f070d61dc87345d21c6d1648619800cb13812f3840c07f5635c9362833aa6857"], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000001) 20:30:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000000)) write(r0, &(0x7f00000001c0), 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x100000001) syz_open_pts(r4, 0x10d000) r6 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000500)={{{@in=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@empty}}, &(0x7f0000000600)=0xe8) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000340)='./file0\x00', 0x80000001, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000380)="8ca793db3d78e5b6c1d0ed24a1ca0f359996f9545d3623d9bd99bae6f5364f955d8dffadb1f7a4c7967c5334de2ac5a33e898b6c9808747215b57426f5dcea55e8506b8b", 0x44, 0x9}, {&(0x7f0000000400)="48602637b053169a6bf12450419035bac32bade64a14f5d1a5271bb0bc17419563d4ad293e1b3938ebe363f94d913857c83c99f485f8e0308ab6ba3e71c52c34d00985dd55dd5560bd7bf51ac6c194cd87a256ce9110f51e35666b2fd840fbabb076c1cb1bc1244c4cf1f5298fd2ab76325cc4f0ee408a869da10f7d3aff504228a495c883efc9fdc044916f5437", 0x8e, 0x80000000}], 0x2a0b400, &(0x7f0000000640)={[{@shortname_winnt='shortname=winnt'}, {@shortname_lower='shortname=lower'}, {@nonumtail='nnonumtail=1'}, {@numtail='nonumtail=0'}, {@utf8='utf8=1'}], [{@fowner_gt={'fowner>', r7}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x23}}, {@dont_hash='dont_hash'}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@obj_role={'obj_role'}}]}) r8 = getgid() write$P9_RGETATTR(r1, &(0x7f0000000100)={0xa0, 0x19, 0x2, {0x801, {0x20, 0x0, 0x2}, 0x181, r7, r8, 0x0, 0x100000000000000, 0x100000001, 0x9000, 0x5, 0x9, 0x401, 0x7, 0x1, 0x5, 0x7, 0x5, 0x81, 0x0, 0x81}}, 0xa0) 20:30:05 executing program 5: syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x214, 0x2, 0x2, 0x801, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_MASK={0x100, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, [], 0x1c}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @ipv4={[], [], @empty}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast2}}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_HELP_NAME={0x5, 0x6, '\x00'}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @empty}}}]}, @CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASTER={0x48, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @empty}}}]}, @CTA_EXPECT_MASK={0x44, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x8005}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0445624, &(0x7f0000000080)={0x980000, 0x6, 0x1, 0xffffffffffffffff, 0x0, 0x0}) 20:30:05 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0305602, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:05 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0585611, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1678.190369][T12192] usb 1-1: USB disconnect, device number 2 [ 1678.285347][T15983] Sensor A: ================= START STATUS ================= [ 1678.311491][T15983] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar 20:30:05 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc058565d, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1678.342781][T15983] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1678.375606][T15983] v4l2-ctrls: Sensor A: Horizontal Flip: false 20:30:05 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0305615, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1678.397355][T15983] v4l2-ctrls: Sensor A: Brightness: 128 [ 1678.398692][ T27] audit: type=1804 audit(1591043405.314:343): pid=15985 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir377111778/syzkaller.YvCIsr/957/cgroup.controllers" dev="sda1" ino=16356 res=1 [ 1678.414976][T15983] v4l2-ctrls: Sensor A: Contrast: 128 [ 1678.465391][T15983] v4l2-ctrls: Sensor A: Hue: 0 [ 1678.482794][T15983] v4l2-ctrls: Sensor A: Saturation: 0 [ 1678.502944][T15983] Sensor A: ================== END STATUS ================== 20:30:05 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0845657, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:05 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r2, 0x1277, 0x0) ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000580)=0x4) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r4, 0x1277, 0x0) sendfile(r4, r1, 0x0, 0x10100000001) ioctl$KVM_ASSIGN_PCI_DEVICE(r3, 0x8040ae69, &(0x7f0000000000)={0x8, 0x4, 0xffff, 0x2, 0x6}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r5, 0x0, 0x100000001) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, 0xffffffffffffffff, 0x0, 0x100000001) ioctl$SIOCAX25CTLCON(0xffffffffffffffff, 0x89e8, &(0x7f00000005c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x2, 0x7ff, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x3f8, 0xffffffff, 0x0, 0x0, 0x2c8, 0xffffffff, 0xffffffff, 0x360, 0x360, 0x360, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@ip={@multicast1, @multicast1, 0xffffff00, 0xff000000, 'veth0_macvtap\x00', 'ipvlan0\x00', {}, {}, 0x84, 0x0, 0x5}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@dscp={{0x28, 'dscp\x00'}, {0x0, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x1a8, 0x208, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x4, 0x1, 0x2, 0x0, 0x93e1e4d5107823be}}, @common=@inet=@recent1={{0x108, 'recent\x00'}, {0x1018, 0x4, 0x0, 0x0, 'syz1\x00', 0x2, [0xffffffff, 0x0, 0xffffffff, 0xff000000]}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast, 0x1000, 0x5, [0x35, 0x0, 0x8, 0x11, 0x2b, 0x23, 0x36, 0x9, 0x33, 0x1b, 0x38, 0x5, 0xb, 0x29, 0xb, 0x2e], 0x0, 0x4}}}, {{@ip={@local, @empty, 0xff000000, 0xffffffff, 'hsr0\x00', 'macsec0\x00', {0xff}, {0xff}, 0x16, 0x1, 0x49}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1678.753942][T16004] Sensor A: ================= START STATUS ================= [ 1678.793498][T16004] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1678.816579][T16004] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1678.829264][T16004] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1678.857002][T16004] v4l2-ctrls: Sensor A: Brightness: 128 [ 1678.874784][T16004] v4l2-ctrls: Sensor A: Contrast: 128 [ 1678.893660][T16004] v4l2-ctrls: Sensor A: Hue: 0 [ 1678.910824][T16004] v4l2-ctrls: Sensor A: Saturation: 0 [ 1678.931381][T16004] Sensor A: ================== END STATUS ================== [ 1678.967503][T16004] Sensor A: ================= START STATUS ================= [ 1678.999301][T16004] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1679.018897][T16004] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1679.031472][T16004] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1679.044268][T16004] v4l2-ctrls: Sensor A: Brightness: 128 [ 1679.057021][T16004] v4l2-ctrls: Sensor A: Contrast: 128 [ 1679.068964][T16004] v4l2-ctrls: Sensor A: Hue: 0 [ 1679.078556][T16004] v4l2-ctrls: Sensor A: Saturation: 0 [ 1679.097134][T16004] Sensor A: ================== END STATUS ================== 20:30:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x25b6, 0x7, 0x8, 0xa0, 0x1, "2f5ccfdf193ee62bf70844dc86d7529ebc59c0"}) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) 20:30:06 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="ee00002010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 20:30:06 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0305616, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:06 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0845658, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:06 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000000)={0x8, 0x0, 0x3, 0x9b, &(0x7f00000000c0)=""/155, 0x1000, &(0x7f0000000180)=""/4096, 0x9a, &(0x7f0000001180)=""/154}) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "000000e9ffffff000000c2cf7ac24413f7bc00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff3a) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000000c0)={0x7, 0x4, 0x4, 0x200000, 0x1, {}, {0x2, 0x1, 0x8, 0x6, 0x6, 0xc0, "df8be4a8"}, 0x0, 0x3, @planes=&(0x7f0000000000)={0x81, 0x1, @fd, 0x4}, 0x10000, 0x0, 0xffffffffffffffff}) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x6) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "20f0a9000000f40e00f30800000000ff0100"}) [ 1679.474052][T16022] Sensor A: ================= START STATUS ================= [ 1679.522131][T16022] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar 20:30:06 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc038563b, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:06 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0905664, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1679.571510][T16022] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1679.607497][T16022] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1679.657290][T16022] v4l2-ctrls: Sensor A: Brightness: 128 [ 1679.688176][T16022] v4l2-ctrls: Sensor A: Contrast: 128 [ 1679.715777][T16022] v4l2-ctrls: Sensor A: Hue: 0 20:30:06 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc038563c, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1679.737591][T16022] v4l2-ctrls: Sensor A: Saturation: 0 [ 1679.760560][T16022] Sensor A: ================== END STATUS ================== 20:30:06 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0945662, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:06 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f0000000000)={0xfa4, 0x2, 0x200}) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r2, 0x1277, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000040)) 20:30:06 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc040563d, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1680.036142][T16043] Sensor A: ================= START STATUS ================= [ 1680.043705][T16043] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1680.094906][T16043] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1680.116436][T16043] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1680.136124][T16043] v4l2-ctrls: Sensor A: Brightness: 128 [ 1680.155261][T16043] v4l2-ctrls: Sensor A: Contrast: 128 [ 1680.176745][T16043] v4l2-ctrls: Sensor A: Hue: 0 [ 1680.197942][T16043] v4l2-ctrls: Sensor A: Saturation: 0 [ 1680.218670][T16043] Sensor A: ================== END STATUS ================== 20:30:07 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0e85667, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:07 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="00f0ff7f10008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 20:30:07 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc040563e, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:07 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@empty}}, &(0x7f0000000040)=0xe8) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000340)='./file0\x00', 0x80000001, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000380)="8ca793db3d78e5b6c1d0ed24a1ca0f359996f9545d3623d9bd99bae6f5364f955d8dffadb1f7a4c7967c5334de2ac5a33e898b6c9808747215b57426f5dcea55e8506b8b", 0x44, 0x9}, {&(0x7f0000000400)="48602637b053169a6bf12450419035bac32bade64a14f5d1a5271bb0bc17419563d4ad293e1b3938ebe363f94d913857c83c99f485f8e0308ab6ba3e71c52c34d00985dd55dd5560bd7bf51ac6c194cd87a256ce9110f51e35666b2fd840fbabb076c1cb1bc1244c4cf1f5298fd2ab76325cc4f0ee408a869da10f7d3aff504228a495c883efc9fdc044916f5437", 0x8e, 0x80000000}], 0x2a0b400, &(0x7f0000000640)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e000094416f72746e612c6e6e6f0700000000000000312c6e6f6e756d7461696c3d302c75746638f7722c666f776e65723e", @ANYRESDEC=r7, @ANYBLOB=',defcontext=system_u,fsmagic=0x0000000000000023,dont_hash,mask=^MAY_WRITE,func=FIRMWARE_CHECK,obj_role=,\x00']) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(r2, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, r9}}}, 0x78) fchownat(r2, &(0x7f0000000000)='./file0\x00', r7, r9, 0x1000) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) setsockopt$CAN_RAW_ERR_FILTER(r10, 0x65, 0x2, &(0x7f0000000500)=0x101, 0x4) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000002c0)={0xa10000, 0xfffffff8, 0x800, r6, 0x0, &(0x7f0000000240)={0x980923, 0x3ff, [], @p_u16=&(0x7f0000000200)=0x2}}) 20:30:07 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:07 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0xa2402, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x100000001) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f0000000100)={0x7, 0x2036315a, 0x3f, 0x2, 0x3, @discrete={0x3, 0x1}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r3, 0x0, 0x100000001) r7 = openat$cgroup_ro(r3, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$TIOCSBRK(r7, 0x5427) ioctl$BLKIOMIN(r2, 0x1277, 0x0) pidfd_getfd(r1, r2, 0x0) rmdir(&(0x7f0000000180)='./file0\x00') 20:30:07 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980003, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:07 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc008561c, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1681.025840][T16075] Sensor A: ================= START STATUS ================= [ 1681.033401][T16075] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar 20:30:08 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc040564a, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1681.069571][T16075] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1681.085409][T16075] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1681.091583][T16075] v4l2-ctrls: Sensor A: Brightness: 128 [ 1681.182385][T16075] v4l2-ctrls: Sensor A: Contrast: 128 [ 1681.206159][ T27] audit: type=1804 audit(1591043408.124:344): pid=16080 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir377111778/syzkaller.YvCIsr/959/cgroup.controllers" dev="sda1" ino=16363 res=1 [ 1681.212512][T16075] v4l2-ctrls: Sensor A: Hue: 0 [ 1681.320203][ T27] audit: type=1804 audit(1591043408.154:345): pid=16080 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir377111778/syzkaller.YvCIsr/959/cgroup.controllers" dev="sda1" ino=16363 res=1 [ 1681.342306][T16075] v4l2-ctrls: Sensor A: Saturation: 0 20:30:08 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc040564b, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1681.379382][T16075] Sensor A: ================== END STATUS ================== 20:30:08 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x80805659, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:08 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980005, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:08 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445667, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:08 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000001008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 20:30:08 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x60, &(0x7f0000000140)={&(0x7f0000000b80)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x300}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x60, &(0x7f0000000140)={&(0x7f0000000b80)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x300}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x60, &(0x7f0000000140)={&(0x7f0000000b80)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x300}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x50}}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x110, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKSTATE_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x40}, 0x4008801) r10 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r10, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:08 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980010, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:08 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0485619, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:08 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1682.057200][T16115] Sensor A: ================= START STATUS ================= [ 1682.083690][T16115] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar 20:30:09 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0505609, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:09 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980300, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1682.112337][T16115] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1682.147613][T16115] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1682.172885][T16115] v4l2-ctrls: Sensor A: Brightness: 128 [ 1682.199137][T16115] v4l2-ctrls: Sensor A: Contrast: 128 [ 1682.228340][T16115] v4l2-ctrls: Sensor A: Hue: 0 20:30:09 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc050560f, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1682.249006][T16115] v4l2-ctrls: Sensor A: Saturation: 0 [ 1682.269222][T16115] Sensor A: ================== END STATUS ================== 20:30:09 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x50bbc7, 0x0) ioctl$BLKIOMIN(r1, 0x1277, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nullb0\x00', 0xe8b8dd7cd0548cea, 0x0) ioctl$BLKIOMIN(r2, 0x1277, 0x0) write(r2, &(0x7f0000000000)="520ec4c315955205f45a809ddf", 0xd) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x28011, r5, 0x0) ioctl$KVM_SMI(r5, 0xaeb7) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000180)=0x1ff) sendfile(r4, r3, 0x0, 0x100000001) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000140)=0x7fff) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuset.effective_mems\x00', 0xb00000000065808, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r6, 0x0, 0x100000001) ioctl$TIOCGISO7816(r6, 0x80285442, &(0x7f0000000100)) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) 20:30:09 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x98ff00, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:09 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x220c00) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1682.585088][T16140] Sensor A: ================= START STATUS ================= [ 1682.618965][T16140] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1682.646601][T16140] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1682.673612][T16140] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1682.698732][T16140] v4l2-ctrls: Sensor A: Brightness: 128 [ 1682.721799][T16140] v4l2-ctrls: Sensor A: Contrast: 128 [ 1682.744830][T16140] v4l2-ctrls: Sensor A: Hue: 0 [ 1682.765049][T16140] v4l2-ctrls: Sensor A: Saturation: 0 [ 1682.788218][T16140] Sensor A: ================== END STATUS ================== 20:30:10 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000002008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 20:30:10 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0505611, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0xfffffffffffffc5b, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="ff000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010800000000a16b5aa81ca8b336", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a8018000a8014000700fe"], 0x3c}}, 0x0) 20:30:10 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:10 executing program 5: syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r0 = syz_open_dev$video4linux(0x0, 0x0, 0x101880) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000001) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @private=0xa010102}]}, &(0x7f0000000180)=0x10) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x7a, &(0x7f0000000080)={r7, 0x0, 0x0, 0xfffffffffffffffe}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000040)={r7, 0x7, 0x6, 0xe7e}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r8, 0x94190bb}, 0x8) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r9, 0x1277, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x81, r9, 0x0, 0x0}) 20:30:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x50bbc7, 0x0) ioctl$BLKIOMIN(r1, 0x1277, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nullb0\x00', 0xe8b8dd7cd0548cea, 0x0) ioctl$BLKIOMIN(r2, 0x1277, 0x0) write(r2, &(0x7f0000000000)="520ec4c315955205f45a809ddf", 0xd) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x28011, r5, 0x0) ioctl$KVM_SMI(r5, 0xaeb7) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000180)=0x1ff) sendfile(r4, r3, 0x0, 0x100000001) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000140)=0x7fff) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuset.effective_mems\x00', 0xb00000000065808, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r6, 0x0, 0x100000001) ioctl$TIOCGISO7816(r6, 0x80285442, &(0x7f0000000100)) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) 20:30:10 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc050565d, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1683.809478][T16162] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1683.814955][T16163] Sensor A: ================= START STATUS ================= 20:30:10 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980001, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1683.893327][T16162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1683.907613][T16163] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1683.914168][T16163] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1683.948573][T16163] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1683.992719][T16163] v4l2-ctrls: Sensor A: Brightness: 128 [ 1684.042700][T16163] v4l2-ctrls: Sensor A: Contrast: 128 [ 1684.084717][T16163] v4l2-ctrls: Sensor A: Hue: 0 20:30:11 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0585604, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1684.111457][T16162] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1684.135127][T16163] v4l2-ctrls: Sensor A: Saturation: 0 [ 1684.140759][T16163] Sensor A: ================== END STATUS ================== 20:30:11 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980001, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1684.212371][T16162] 8021q: adding VLAN 0 to HW filter on device bond2 20:30:11 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980001, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:11 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x1, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000200)={0x9c0000, 0x7ff, 0x7fff, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0xa2093e, 0x0, [], @string=&(0x7f0000000180)=0x5f}}) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x80, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x464}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, [], 0x1}, 0xff}, @in6={0xa, 0x4e20, 0x1, @ipv4={[], [], @remote}, 0x8}], 0x74) write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000000)={0x7, 0xb487}) [ 1684.609106][T16257] Sensor A: ================= START STATUS ================= [ 1684.627583][T16257] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1684.634133][T16257] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1684.666598][T16258] QAT: Invalid ioctl [ 1684.674567][T16257] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1684.680765][T16257] v4l2-ctrls: Sensor A: Brightness: 128 [ 1684.694805][T16257] v4l2-ctrls: Sensor A: Contrast: 128 [ 1684.704892][T16257] v4l2-ctrls: Sensor A: Hue: 0 [ 1684.715183][T16257] v4l2-ctrls: Sensor A: Saturation: 0 [ 1684.730114][T16257] Sensor A: ================== END STATUS ================== [ 1684.813174][T16258] Sensor A: ================= START STATUS ================= [ 1684.845309][T16258] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1684.851859][T16258] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1684.859275][T16259] QAT: Invalid ioctl [ 1684.900876][T16258] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1684.922686][T16258] v4l2-ctrls: Sensor A: Brightness: 128 [ 1684.934634][T16258] v4l2-ctrls: Sensor A: Contrast: 128 [ 1684.940030][T16258] v4l2-ctrls: Sensor A: Hue: 0 [ 1684.944878][T16258] v4l2-ctrls: Sensor A: Saturation: 0 [ 1684.954925][T16258] Sensor A: ================== END STATUS ================== 20:30:12 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000003008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 20:30:12 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980001, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:12 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0585605, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:12 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980001, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x50bbc7, 0x0) ioctl$BLKIOMIN(r1, 0x1277, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nullb0\x00', 0xe8b8dd7cd0548cea, 0x0) ioctl$BLKIOMIN(r2, 0x1277, 0x0) write(r2, &(0x7f0000000000)="520ec4c315955205f45a809ddf", 0xd) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x28011, r5, 0x0) ioctl$KVM_SMI(r5, 0xaeb7) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000180)=0x1ff) sendfile(r4, r3, 0x0, 0x100000001) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000140)=0x7fff) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuset.effective_mems\x00', 0xb00000000065808, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r6, 0x0, 0x100000001) ioctl$TIOCGISO7816(r6, 0x80285442, &(0x7f0000000100)) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) 20:30:12 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r4, 0x1277, 0x0) preadv(r4, &(0x7f0000001640)=[{&(0x7f0000000240)=""/168, 0xa8}, {&(0x7f0000000300)=""/159, 0x9f}, {&(0x7f00000003c0)=""/217, 0xd9}, {&(0x7f00000004c0)=""/91, 0x5b}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/240, 0xf0}], 0x6, 0xe33) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f00000001c0)={0x800, "f68391"}, 0x6) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r5, 0x1277, 0x0) ftruncate(r5, 0xffffffffffff0001) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x218, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4880}, 0x20000000) write$FUSE_WRITE(r3, &(0x7f0000000200)={0x18, 0x0, 0x7, {0xcf900}}, 0x18) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000000)=0xffffffff) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1686.128361][T16280] Sensor A: ================= START STATUS ================= 20:30:13 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0585609, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:13 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980001, 0x6, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1686.186767][T16280] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1686.240160][T16280] v4l2-ctrls: Sensor A: Vertical Flip: false 20:30:13 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0xcb676, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x81, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xff) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x743000, 0x0, 0x0, [0x0, 0xeca7020000000000, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, 0x2c) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x800000000000}}, 0x78) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}}}, 0x78) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}}}, 0x78) r5 = socket$kcm(0x2, 0x2, 0x0) sendmsg$sock(r5, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0) close(r5) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}}}, 0x78) setgroups(0xa, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, r4, r6, r8]) [ 1686.281633][T16280] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1686.298444][T16280] v4l2-ctrls: Sensor A: Brightness: 128 [ 1686.313986][T16280] v4l2-ctrls: Sensor A: Contrast: 128 20:30:13 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc058560f, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1686.335506][T16280] v4l2-ctrls: Sensor A: Hue: 0 [ 1686.352066][T16280] v4l2-ctrls: Sensor A: Saturation: 0 [ 1686.373507][T16280] Sensor A: ================== END STATUS ================== 20:30:13 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980001, 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:13 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) r2 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0xffff, 0x101080) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @bt={0x0, 0xe70, 0x2, 0x2, 0xffff, 0x2, 0xc, 0x1}}) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1686.742703][T16305] Sensor A: ================= START STATUS ================= [ 1686.762818][T16305] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1686.781129][T16305] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1686.798145][T16305] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1686.813980][T16305] v4l2-ctrls: Sensor A: Brightness: 128 [ 1686.829211][T16305] v4l2-ctrls: Sensor A: Contrast: 128 [ 1686.841507][T16305] v4l2-ctrls: Sensor A: Hue: 0 [ 1686.853460][T16305] v4l2-ctrls: Sensor A: Saturation: 0 [ 1686.865723][T16305] Sensor A: ================== END STATUS ================== [ 1686.906256][T16307] vivid-000: ================= START STATUS ================= [ 1686.937754][T16307] v4l2-ctrls: vivid-000: Generate PTS: true [ 1686.958115][T16307] v4l2-ctrls: vivid-000: Generate SCR: true [ 1686.971911][T16307] tpg source WxH: 640x360 (Y'CbCr) [ 1686.984504][T16307] tpg field: 1 [ 1686.992420][T16307] tpg crop: 640x360@0x0 [ 1687.004868][T16307] tpg compose: 640x360@0x0 [ 1687.013869][T16307] tpg colorspace: 8 [ 1687.030340][T16307] tpg transfer function: 0/0 [ 1687.042901][T16307] tpg Y'CbCr encoding: 0/0 [ 1687.051876][T16307] tpg quantization: 0/0 [ 1687.064470][T16307] tpg RGB range: 0/2 [ 1687.071734][T16307] vivid-000: ================== END STATUS ================== 20:30:16 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000004008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 20:30:16 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0585611, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:16 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0xcb676, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x81, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xff) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x743000, 0x0, 0x0, [0x0, 0xeca7020000000000, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, 0x2c) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x800000000000}}, 0x78) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}}}, 0x78) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}}}, 0x78) r5 = socket$kcm(0x2, 0x2, 0x0) sendmsg$sock(r5, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0) close(r5) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}}}, 0x78) setgroups(0xa, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, r4, r6, r8]) 20:30:16 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980001, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:16 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x2}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f0000000240)={{0x1, 0x5, 0x1000, 0x1, 'syz0\x00', 0x9}, 0x6, 0x2, 0x6, r3, 0x2, 0x5, 'syz0\x00', &(0x7f0000000180)=['B#\x00', 'cgroup.controllers\x00'], 0x16, [], [0x9, 0x2, 0x429, 0x81]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r1, 0x0, 0x100000001) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000000)) socket$key(0xf, 0x3, 0x2) 20:30:16 executing program 5: syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) getsockname$unix(r0, &(0x7f00000000c0)=@abs, &(0x7f0000000000)=0x6e) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvme-fabrics\x00', 0x8040, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x2b}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r4, 0x1277, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0445624, &(0x7f0000000140)={0x0, 0x0, 0x0, r4, 0x0, 0x0}) 20:30:16 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc058565d, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1689.422037][ T27] audit: type=1804 audit(1591043416.335:346): pid=16322 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir771465118/syzkaller.HI2jxB/1262/cgroup.controllers" dev="sda1" ino=16351 res=1 20:30:16 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x25) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000500)=ANY=[], 0x191) keyctl$set_timeout(0xf, 0x0, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x8001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x4161, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x4, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) close(r1) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000340)=@v2, 0x14, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f00000000c0)={{0x89, @remote, 0x4e24, 0x2, 'sh\x00', 0x1, 0xfffffffb, 0x31}, {@rand_addr=0x64010102, 0x4e23, 0x0, 0x90e, 0x7, 0x1}}, 0x44) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, 0xffffffffffffffff, 0x40, 0x10) 20:30:16 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980001, 0xe7, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:16 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0845657, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1689.558122][ T27] audit: type=1804 audit(1591043416.475:347): pid=16331 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir310235184/syzkaller.KKpbs4/680/cgroup.controllers" dev="sda1" ino=16349 res=1 20:30:16 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:16 executing program 1: r0 = socket$inet(0x2b, 0x801, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) close(r0) [ 1689.716490][ T27] audit: type=1804 audit(1591043416.505:348): pid=16323 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir310235184/syzkaller.KKpbs4/680/cgroup.controllers" dev="sda1" ino=16349 res=1 [ 1689.811107][T16346] Sensor A: ================= START STATUS ================= [ 1689.832465][T16346] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1689.846879][T16346] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1689.862098][T16346] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1689.869317][T16346] v4l2-ctrls: Sensor A: Brightness: 128 [ 1689.889799][T16346] v4l2-ctrls: Sensor A: Contrast: 128 [ 1689.895970][ T27] audit: type=1800 audit(1591043416.625:349): pid=16336 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="file0" dev="sda1" ino=16361 res=0 [ 1689.900215][T16346] v4l2-ctrls: Sensor A: Hue: 0 [ 1689.944306][T16346] v4l2-ctrls: Sensor A: Saturation: 0 [ 1689.958477][T16346] Sensor A: ================== END STATUS ================== [ 1689.974459][T16346] Sensor A: ================= START STATUS ================= [ 1689.987152][T16346] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1690.001316][T16346] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1690.015312][T16346] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1690.028169][T16346] v4l2-ctrls: Sensor A: Brightness: 128 [ 1690.040340][T16346] v4l2-ctrls: Sensor A: Contrast: 128 [ 1690.051383][T16346] v4l2-ctrls: Sensor A: Hue: 0 [ 1690.061714][T16346] v4l2-ctrls: Sensor A: Saturation: 0 [ 1690.072743][T16346] Sensor A: ================== END STATUS ================== 20:30:17 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000005008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 20:30:17 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x2}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f0000000240)={{0x1, 0x5, 0x1000, 0x1, 'syz0\x00', 0x9}, 0x6, 0x2, 0x6, r3, 0x2, 0x5, 'syz0\x00', &(0x7f0000000180)=['B#\x00', 'cgroup.controllers\x00'], 0x16, [], [0x9, 0x2, 0x429, 0x81]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r1, 0x0, 0x100000001) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000000)) socket$key(0xf, 0x3, 0x2) 20:30:17 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980001, 0x300, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:17 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0845658, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) socket$nl_audit(0x10, 0x3, 0x9) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sched_yield() r6 = dup3(r3, r1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r6, 0x10e, 0x8, &(0x7f0000000000), 0x4) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 20:30:17 executing program 5: syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect(r1, &(0x7f0000000000)=@caif=@rfm={0x25, 0x6, "bad430836a510da9deb0cb4675378608"}, 0x80) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x107140, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000100)=r2, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000001) ioctl$VIDIOC_G_TUNER(r3, 0xc054561d, &(0x7f0000000140)={0x4, "64730b7f11aa740783d712322d7344b5d31712e3bae2ff70c8b718497dcbd870", 0x3, 0x20, 0x2000, 0x2400, 0x10, 0x1, 0x3, 0xbb3}) [ 1691.038848][T16365] Sensor A: ================= START STATUS ================= [ 1691.100946][T16365] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar 20:30:18 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0905664, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:18 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980001, 0x500, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1691.148651][T16365] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1691.185850][T16365] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1691.214363][T16365] v4l2-ctrls: Sensor A: Brightness: 128 [ 1691.246870][T16365] v4l2-ctrls: Sensor A: Contrast: 128 [ 1691.275148][T16365] v4l2-ctrls: Sensor A: Hue: 0 20:30:18 executing program 1: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$cgroup_type(r3, &(0x7f00000000c0)='threaded\x00', 0x9) writev(r1, &(0x7f0000001900)=[{&(0x7f0000000880)="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", 0xfb}, {&(0x7f0000000380)="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", 0xfd}, {&(0x7f00000009c0)="c384a235c07e956b29b267882cfb178ce04249deacee3abfac8f28ae462fb6194d2f3aa45c47f460f355269a3a64677c88bea56e51f0430f966e6d04a53b1b08fc5078250e8552cf4741c9cb0d637bf35b12c12a9b93507ca951ea11d3ec305a2c0f2b4b5784550e15b7a00b6d51ed5bfe50a63002b993f7b8676258a966ade2643976713293611c05f4839a36f8e3ed150481df4d7a5a75dcf11304449f402c7149ef0eb79e04d74e3324822e", 0xad}], 0x3) write$P9_RVERSION(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="405894865d2103c45097d6f3a8b45d0835ecd359059948a6831225b5ff62bf5be066f1041559e3e2a649729f9d7cbdc07feda8"], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xe00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) [ 1691.302318][T16365] v4l2-ctrls: Sensor A: Saturation: 0 [ 1691.328794][T16365] Sensor A: ================== END STATUS ================== 20:30:18 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0945662, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:18 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x2, 0x141080) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000000)=0xf5e, 0x4) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:18 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980001, 0x600, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1691.551961][T16401] Debayer A: ================= START STATUS ================= [ 1691.559900][T16401] v4l2-ctrls: Debayer A: Debayer Mean Window Size: 3 [ 1691.567287][T16401] Debayer A: ================== END STATUS ================== [ 1691.626754][T16408] Debayer A: ================= START STATUS ================= [ 1691.634998][T16408] v4l2-ctrls: Debayer A: Debayer Mean Window Size: 3 [ 1691.642566][T16408] Debayer A: ================== END STATUS ================== 20:30:18 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000006008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 20:30:18 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0e85667, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:18 executing program 1: r0 = syz_usb_connect$hid(0x6, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x80, 0x0) syz_usb_ep_write(r0, 0x0, 0x41, &(0x7f0000000380)="893c8aa1ee053808af2832ceee000078c49e310d03aa681f22c978513cff7ea9f8acda0beb40acb0a0144599798c41fcd369917835b2005a9ef3ac676b84c6dbc2") syz_usb_ep_read(r0, 0x0, 0x0, 0x0) syz_usb_ep_read(r0, 0x2, 0x49, &(0x7f0000000000)=""/73) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000100)=""/5) 20:30:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, &(0x7f00000000c0)="ffb10c10ba4300b0c8ee660f38826f3cf30f01e80f69e866f20f38f015650f01c883dd000f0131baf80c66b87aa1cc8b66efbafc0ced", 0x36}], 0x28d, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x10001, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x200000000000203, 0x0, 0x4ca]}) r3 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000380)='F', 0xfffff, r3) r4 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000300)="3e3e8f060f0b3fd53eecfc0ac3d65669b346d7580841619c9725e18b8a2feec3db2eaaddfd75d8eb0b66d98093f7d40c07a6d7273266b109394832635765afd2eb1b61fb70b774f8d47b72f325548a4e04268852a8b68b38846112aa3fdb7434b6c42d71c61795c4544e7d24f084dc11a758aa021d8782f6da0c1a80ebaaef39abd21f56f849c4946061791cacbb98150ffb32fbf956a98b2b7ef0e9b402011440ab7be495b48bfc5376", 0xaa, r3) keyctl$describe(0x6, r4, &(0x7f00000003c0)=""/236, 0xec) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f00000004c0)=""/227) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:30:18 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000180)={0x3f, 0x7fff, 0x5, 0x4672}, 0x8) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r5, 0x1277, 0x0) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttynull\x00', 0x200000, 0x0) ppoll(&(0x7f00000000c0)=[{r3, 0x3219}, {r2, 0x2}, {r4, 0x20}, {r5, 0x9}, {r6}, {r2}], 0x6, &(0x7f0000000100), &(0x7f0000000140)={[0x5]}, 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r5, 0x0, 0xffc) ioctl$SIOCRSSL2CALL(r3, 0x89e2, &(0x7f0000000000)=@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}) 20:30:18 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980001, 0x700, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1691.890310][T16419] Sensor A: ================= START STATUS ================= [ 1691.918083][T16419] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1691.949257][T16419] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1691.974430][T16419] v4l2-ctrls: Sensor A: Horizontal Flip: false 20:30:18 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980001, 0xe7ff, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:18 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980903, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1692.006459][T16419] v4l2-ctrls: Sensor A: Brightness: 128 [ 1692.026017][T16419] v4l2-ctrls: Sensor A: Contrast: 128 [ 1692.043647][T16419] v4l2-ctrls: Sensor A: Hue: 0 [ 1692.054129][T16419] v4l2-ctrls: Sensor A: Saturation: 0 [ 1692.067499][T16419] Sensor A: ================== END STATUS ================== 20:30:19 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) ioctl$USBDEVFS_GET_SPEED(r2, 0x551f) 20:30:19 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980904, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:19 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980001, 0xfdfd, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1692.341058][T16442] Sensor A: ================= START STATUS ================= [ 1692.377579][T16442] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1692.403350][T16442] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1692.425461][T16442] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1692.447412][T16442] v4l2-ctrls: Sensor A: Brightness: 128 [ 1692.466791][T16442] v4l2-ctrls: Sensor A: Contrast: 128 [ 1692.485413][T16442] v4l2-ctrls: Sensor A: Hue: 0 [ 1692.501226][T16442] v4l2-ctrls: Sensor A: Saturation: 0 20:30:19 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r0, 0x1277, 0x0) write$binfmt_elf32(r0, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x8, 0x81, 0x3, 0x6, 0x2, 0x6, 0x7fff, 0x12d, 0x38, 0x222, 0x6, 0xa60, 0x20, 0x2, 0x3, 0x6d, 0x100}, [{0x3, 0x1d9, 0x7, 0x6, 0x7, 0x6, 0x10001, 0x3ff}], "334f464be1ad5457f2cdecb5549d807bce3e29f8a68d20434adc14c3a0c3c153ef338b8f782e0b19e0d7f556e910779876ff3b8a886ca77a328488d832ffde2e36a5461d69bb9f709a6237eab814b6ab3f59906b05bd2c16faf5f4dbc6c42e7c7250b7ee63b430e5368f722faa49396401d6a7f40dbf6fd99d0297898e2e2265c4d08e1d42439e265088cb7d770468dc962343ca50be387dfb0d599cb9b07cd5f2d2e097c689712dd05e4afdef891a815c36649b97b434d4958c632d7a121383813bf02abbd3d530b37766056776a5", [[], []]}, 0x327) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x102, 0x0) getsockname$unix(r3, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) writev(r1, &(0x7f0000003600)=[{0x0}, {0x0}, {&(0x7f0000000540)="f1", 0xfdef}], 0x3) [ 1692.519150][T16442] Sensor A: ================== END STATUS ================== 20:30:20 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000007008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 20:30:20 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980905, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:20 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980001, 0xff00, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:20 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000000)=0xffff, 0x4) 20:30:20 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980904, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) symlinkat(&(0x7f00000000c0)='./file0\x00', r1, &(0x7f0000000180)='./file0\x00') r2 = socket(0x10, 0x20000000802, 0x0) write(r2, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0xfe1e) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600000000f200000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x14, r7, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)={0x4c, r7, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x101}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x52}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7f}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r8, 0x1277, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000100001040000000000000000de00002066c8d47ba3b88b6e73d403f0284805dcd986188f26d8a306c9198873db78d6cd138d5cc44845c31f43f6683a27ef25956c114f5712b6c63470fe75b6151d1508c2ff6101d57b35f0216fea65c2ab2fa2de4709125a358a8bb76c16b3ac24b80ca3e4e0d2f2d67c6c03321292dd94838eb6a5", @ANYRESDEC, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008095f4de7a07fc34f362a306c491f251bc8b3adb5cc48bfb89f9ab52f4ed71bcb4b4d3f70ad6b1df4a8dc94bfe91fc92beafdbb73dd65c163bc8a0384c6531dae8bb3f7c2b628632f69b0303bd61b3f9ae52009e310309f53fa9d9528ded111ee0dbdb04d40263e7fb684db1a6a764f29734c81be03d83170e65e36d61b0da1615c4581dfe04c6adfad5060910c578e1d0ce1afc220893cef7c3a41762bcb25bb17fb4d9e25c3c9e629b25acc8a6feb8c0c6fa2920cd77f8f452b1b667cd16bbced30b900000000000000", @ANYRESDEC=r6, @ANYRES64=r8], 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) [ 1694.111711][T16481] Sensor A: ================= START STATUS ================= [ 1694.138560][T16481] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar 20:30:21 executing program 1: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="687567651f616c770879f3"]) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$BLKIOMIN(r1, 0x1277, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x9ba, 0x8, 0x41}) fsync(r1) fallocate(r0, 0x0, 0x0, 0x8800000) 20:30:21 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980001, 0xffe7, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:21 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980906, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1694.179627][T16481] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1694.204275][T16477] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1694.206135][T16481] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1694.254929][T16484] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1694.321264][T16477] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1694.365803][T16481] v4l2-ctrls: Sensor A: Brightness: 128 [ 1694.394829][T16523] tmpfs: Unknown parameter 'hugealwyó' [ 1694.416032][T16481] v4l2-ctrls: Sensor A: Contrast: 128 [ 1694.445866][T16481] v4l2-ctrls: Sensor A: Hue: 0 [ 1694.478552][T16481] v4l2-ctrls: Sensor A: Saturation: 0 [ 1694.514897][T16481] Sensor A: ================== END STATUS ================== 20:30:21 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x90000, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r0, &(0x7f00000001c0)=0x100000000000100, r1, 0x0, 0x100000200001, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000040)) 20:30:21 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980001, 0x1000000, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1694.561255][T16523] tmpfs: Unknown parameter 'hugealwyó' 20:30:21 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980908, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:23 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000008008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 20:30:23 executing program 5: syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r2, 0x1277, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r3, 0x1277, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0445624, &(0x7f0000000080)={0x9e0000, 0xfffffffd, 0x2, r3, 0x0, 0x0}) 20:30:23 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980001, 0xffe7, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:23 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, &(0x7f0000000000)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) close(0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f00000001c0)={0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0='bpq0\x00', 0x1, 'syz1\x00', @bcast, 0x200, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast]}) sendmsg$xdp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, 0xc, 0x0, 0x35}, 0x10, &(0x7f0000000340)=[{&(0x7f00000001c0)}, {0x0}], 0x2, 0x0, 0x0, 0x8040}, 0x4000040) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x103881) ioctl$TIOCSBRK(r2, 0x5427) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) r4 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x8000) 20:30:23 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980001, 0x2000000, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:23 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980910, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1696.194849][T16569] Sensor A: ================= START STATUS ================= [ 1696.230994][T16569] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar 20:30:23 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980902, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:23 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x140}) read(r0, &(0x7f0000000300)=""/128, 0x80) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000363000/0x1000)=nil, 0x1000}, 0x1}) r1 = socket$unix(0x1, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1696.259751][T16569] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1696.283000][T16569] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1696.299817][T16569] v4l2-ctrls: Sensor A: Brightness: 128 [ 1696.329476][T16566] hub 9-0:1.0: USB hub found [ 1696.341529][T16569] v4l2-ctrls: Sensor A: Contrast: 128 [ 1696.349604][T16566] hub 9-0:1.0: 8 ports detected [ 1696.372133][T16569] v4l2-ctrls: Sensor A: Hue: 0 [ 1696.398529][T16569] v4l2-ctrls: Sensor A: Saturation: 0 [ 1696.422514][T16569] Sensor A: ================== END STATUS ================== 20:30:23 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980001, 0x3000000, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:23 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980902, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:23 executing program 1: ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x25}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) socket$inet_dccp(0x2, 0x6, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e0200081600001000", 0x18) r1 = dup(r0) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) ioctl$SNDCTL_DSP_POST(r3, 0x5008, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000080)=0x54) r5 = dup2(r1, 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(r5, 0x0, 0xffffffffffffffff) 20:30:23 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980902, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1696.811919][T16597] IPVS: ftp: loaded support on port[0] = 21 [ 1696.845109][T16602] IPVS: ftp: loaded support on port[0] = 21 [ 1696.946997][T14473] tipc: TX() has been purged, node left! 20:30:24 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000009008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 20:30:24 executing program 0: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = eventfd2(0x0, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x3) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) keyctl$session_to_parent(0x12) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x8000, 0x0) ioctl$FIOCLEX(r4, 0x5451) write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x0, 0x7f, 0x8, 0x7fffffff}, {0x6, 0x0, 0x80, 0xfb}, {0x0, 0x5, 0x7f}, {0x20, 0x9, 0x40, 0x2}, {0x7f, 0x4c, 0x1, 0x3}, {0x4, 0x3f, 0x20, 0x6}]}) sendmmsg(r2, &(0x7f0000000240), 0x5c3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000180)={0x1, "5b7eb1acb0eff45df871acb6ed1efafbd6eaa4cef81c425dc243157053415e9c", 0x2, 0x1, 0x5, 0x0, 0x114, 0x4}) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000240)={{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in6=@mcast1}}, &(0x7f00000000c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@dev={0xfe, 0x80, [], 0x38}, @in=@loopback, 0x0, 0x0, 0x0, 0xffff, 0xa, 0x0, 0x0, 0x0, 0x0, r6}, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x4}, {0xf05, 0xfffffffffffffffd}, 0xfffffffc, 0x4, 0x1, 0x1, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3501, 0x3, 0x0, 0x5, 0x0, 0x4}}, 0xe8) 20:30:24 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980001, 0x4000000, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:24 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980902, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:24 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x181301, 0x0) recvmsg$can_raw(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000000c0)=""/84, 0x54}, {&(0x7f0000000140)=""/186, 0xba}, {&(0x7f0000000200)=""/189, 0xbd}, {&(0x7f0000000340)=""/77, 0x4d}, {&(0x7f0000001700)=""/238, 0xee}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000001400)=""/47, 0x2f}, {&(0x7f0000001440)=""/80, 0x50}], 0x8}, 0x20) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r3 = getpgrp(0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x100000001) ioctl$KVM_GET_TSC_KHZ(r4, 0xaea3) sched_setaffinity(r3, 0xfffffffffffffe6a, &(0x7f0000000100)=0x200baa) ptrace$setsig(0x4203, r3, 0x92f8, &(0x7f0000001580)={0x15, 0xc5, 0x3}) syncfs(0xffffffffffffffff) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xe00, &(0x7f0000000180)={&(0x7f0000000600)={0xa4, r6, 0x23f, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x88, 0x14, 'broadcast-link\x00'}}}, 0xa4}, 0x1, 0xfffffff0}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r6, 0x10, 0x70fd27, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x1a, 0x3, @l2={'ib', 0x3a, 'macsec0\x00'}}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0xc010}, 0x4000000) 20:30:25 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980902, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1698.043889][T16641] Sensor A: ================= START STATUS ================= [ 1698.067121][T16641] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1698.083056][T16641] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1698.117739][T16641] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1698.152825][T16641] v4l2-ctrls: Sensor A: Brightness: 128 [ 1698.177540][T16641] v4l2-ctrls: Sensor A: Contrast: 128 [ 1698.204206][T16641] v4l2-ctrls: Sensor A: Hue: 0 20:30:25 executing program 1: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r1, 0x1277, 0x0) dup3(r0, r1, 0x80000) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f00000000c0)='./file1\x00', 0x141042, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x8003, 0x8020001) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280), 0x1033b) fdatasync(r3) [ 1698.225649][T16641] v4l2-ctrls: Sensor A: Saturation: 0 [ 1698.253050][T16641] Sensor A: ================== END STATUS ================== [ 1698.328534][T16646] Unknown ioctl 22086 20:30:25 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980001, 0x5000000, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:25 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980902, 0x6, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1698.356474][ T27] audit: type=1804 audit(1591043425.275:350): pid=16650 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir310235184/syzkaller.KKpbs4/687/cgroup.controllers" dev="sda1" ino=16357 res=1 20:30:25 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000000c0)={0xa00000, 0x3, 0x3ff, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00905, 0x2, [], @p_u16=&(0x7f0000000000)=0x8000}}) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0xad, "8e1e595a2e83f87a669578956531312b5cac0267e21f465a16744afcd196320105609f5af5e7ba6c0bc37fd335e3125a19ea4643e24fa45a1a0550ca79cac6c8b09296819ad580d1341e2543cd968a4d866b6a621231e556415fe99b29739579a0a8961794435de874cbf682049106d9be1c1ad367de4767ee6b9de04bb76e28685e8b59d6c41d85ad4b1c431dd87d2f9a87b026b55e25954ae8e7762c82211ac689e30f24fba8e0020aaa3856"}, &(0x7f00000001c0)=0xb5) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000240)={r6, 0x3c, &(0x7f0000000200)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x14}}, @in6={0xa, 0x4e23, 0x3fe, @empty, 0x3}]}, &(0x7f0000000280)=0x10) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1698.512561][ T27] audit: type=1800 audit(1591043425.275:351): pid=16650 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="cgroup.controllers" dev="sda1" ino=16357 res=0 [ 1698.675900][ T27] audit: type=1804 audit(1591043425.365:352): pid=16642 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir310235184/syzkaller.KKpbs4/687/cgroup.controllers" dev="sda1" ino=16357 res=1 20:30:25 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980001, 0x6000000, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:25 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980902, 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1698.889444][T16664] Sensor A: ================= START STATUS ================= 20:30:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ife={0x58, 0x1, 0x0, 0x0, {{0x8, 0x1, 'ife\x00'}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_SKBMARK={0x8}, @IFE_META_PRIO={0x4, 0x3, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4e}}, 0x0) [ 1698.931093][T16664] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1698.938885][ T27] audit: type=1804 audit(1591043425.855:353): pid=16667 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir771465118/syzkaller.HI2jxB/1271/cgroup.controllers" dev="sda1" ino=15890 res=1 [ 1698.960387][T16664] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1699.039609][T16664] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1699.060484][ T27] audit: type=1804 audit(1591043425.945:354): pid=16671 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir771465118/syzkaller.HI2jxB/1271/cgroup.controllers" dev="sda1" ino=15890 res=1 [ 1699.079974][T16664] v4l2-ctrls: Sensor A: Brightness: 128 [ 1699.107548][T16664] v4l2-ctrls: Sensor A: Contrast: 128 [ 1699.130841][T16664] v4l2-ctrls: Sensor A: Hue: 0 [ 1699.147060][T16664] v4l2-ctrls: Sensor A: Saturation: 0 [ 1699.171174][T16664] Sensor A: ================== END STATUS ================== [ 1701.366196][ T27] audit: type=1800 audit(1591043428.285:355): pid=16662 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=16378 res=0 [ 1701.388474][ T27] audit: type=1800 audit(1591043428.305:356): pid=16652 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=16378 res=0 20:30:28 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e0000000a008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 20:30:28 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980001, 0x7000000, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:28 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x10}}, 0x0) 20:30:28 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980902, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:28 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r4, 0x78d}, 0x14}}, 0x20000010) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, r4, 0x300, 0x800, 0x25dfdbfb, {}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "6e64133d99"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "0d30131a6c35842e23811a72fa"}]}, 0x40}}, 0x800) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:28 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000002dff8)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001340)=[{&(0x7f0000000080)="d5", 0x1}], 0x1) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8800, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000001) sendmsg$IPSET_CMD_DEL(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xcc, 0xa, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_ADT={0x64, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x3ff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={[], [], @empty}}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x11}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x5}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}]}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x5c}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x40}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0xcc}, 0x1, 0x0, 0x0, 0x10}, 0x14) getsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000)={0x0, 0x2710}, 0x10) recvmmsg(r0, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/147, 0x93}], 0x1}, 0x80}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 20:30:28 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980902, 0xe7, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:28 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980001, 0x8000000, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1701.599616][T16689] Sensor A: ================= START STATUS ================= 20:30:28 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x101840, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000040)=0x10000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) connect$unix(r3, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) r4 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="24000000200003041dfffd946f6105000a00000a1f0000021410080008000400d27f1e00140000001a00ffffba16a0aa1c09000000000000", 0x38}], 0x1}, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000280)={0x9f0000, 0x800, 0xe88b, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x9f0902, 0x1, [], @string=&(0x7f0000000100)=0x20}}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @private=0xa010102}]}, &(0x7f0000000180)=0x10) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x7a, &(0x7f0000000080)={r8, 0x0, 0x0, 0xfffffffffffffffe}, &(0x7f0000000100)=0x18) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f00000002c0)={r8, 0x6}, 0x8) [ 1701.640005][T16689] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1701.673569][T16689] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1701.693556][T16689] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1701.711909][T16689] v4l2-ctrls: Sensor A: Brightness: 128 [ 1701.731645][T16689] v4l2-ctrls: Sensor A: Contrast: 128 [ 1701.752942][T16689] v4l2-ctrls: Sensor A: Hue: 0 [ 1701.775092][T16689] v4l2-ctrls: Sensor A: Saturation: 0 [ 1701.796685][T16689] Sensor A: ================== END STATUS ================== 20:30:28 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980902, 0x300, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:28 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980001, 0xe7ffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1701.910216][T16689] Sensor A: ================= START STATUS ================= [ 1701.937213][T16689] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1701.962084][T16689] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1701.982401][T16689] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1702.005844][T16689] v4l2-ctrls: Sensor A: Brightness: 128 20:30:28 executing program 0: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000071c000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f000066a000/0x2000)=nil) clock_settime(0x2, &(0x7f0000000040)) mremap(&(0x7f0000eb0000/0x2000)=nil, 0x2000, 0x150000, 0x3, &(0x7f00006b2000/0x2000)=nil) [ 1702.019814][T16689] v4l2-ctrls: Sensor A: Contrast: 128 [ 1702.035436][T16689] v4l2-ctrls: Sensor A: Hue: 0 [ 1702.049965][T16689] v4l2-ctrls: Sensor A: Saturation: 0 [ 1702.062196][T16689] Sensor A: ================== END STATUS ================== 20:30:32 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e0000000b008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 20:30:32 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980902, 0x500, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:32 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980001, 0xfdfdffff, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:32 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, r0, 0x0, 0x100000001) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000002000000140002006272696467e4c7736c6176655f310000090001"], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x880) r3 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r4 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r4, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:32 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980902, 0x300, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:32 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x3ff000) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r4, 0x2008001) r5 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) read(r5, &(0x7f0000000180)=""/19, 0xfffffe47) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) [ 1705.152701][T16736] Sensor A: ================= START STATUS ================= [ 1705.187926][T16736] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar 20:30:32 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980902, 0x600, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:32 executing program 0: r0 = gettid() r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, 0x0, 0xffffffffffffff9c) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b04b030400000000000092290a7e4555a763c15ced6a507f7f2f28fd863f0935bf7c58abf8f384c2b3d6a57fb1e270f492b811f0ffaba75432c664fdcf8efa5b6b6eeeb25f4ff519af2ccecfa08c29ba13086213ac514e6f8e1dda22cb690c142cc6fdfb4158b29c22fa247caf93231da4ad7fc87a9b66918f4273bc0556abfba75000a888d2c3733c5b1a1096b8c75f35c8a4bfea13579b476928d93429ad92fdbad7b3670de3150c01ffe8"], 0xbb) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) r2 = socket(0x40000000015, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)) wait4(0x0, &(0x7f0000000280), 0x8, &(0x7f00000002c0)) r3 = socket$alg(0x26, 0x5, 0x0) r4 = dup2(0xffffffffffffffff, r3) ioctl$VT_ACTIVATE(r4, 0x5606, 0x6) bind$rds(r2, 0x0, 0x0) getpriority(0x1, 0xffffffffffffffff) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000000200)={0x8, &(0x7f0000000100)=[{}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @local}, {}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @multicast}, {}]}) ptrace$setopts(0x4206, r0, 0x0, 0x0) 20:30:32 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980001, 0xff000000, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1705.216931][T16736] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1705.251659][T16736] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1705.280270][T16736] v4l2-ctrls: Sensor A: Brightness: 128 [ 1705.302706][T16736] v4l2-ctrls: Sensor A: Contrast: 128 [ 1705.324246][T16736] v4l2-ctrls: Sensor A: Hue: 0 [ 1705.350512][T16736] v4l2-ctrls: Sensor A: Saturation: 0 [ 1705.370444][T16736] Sensor A: ================== END STATUS ================== 20:30:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001500010000000000000000000a780000", @ANYRES32=r3, @ANYBLOB="14000100000000810000000000faffffff0000008728d4df4fe9a3e87a9e22700d00c6a083b5182f191be833db7ab1b0240b824a09f189b42546f1f477bf482da99135a55ffc0d79f6c16631328678b170d92e824ae01e8ef617b187feac52709dfd2d37640840c447fdfcbf9a73fc1503d44486c4b951817dea8168e66215154ddc3579b00fb192437d3ba59359b4b040e0da4e0debc3ab9aaa46400ee17d4a3f33da34cc550db3a5d0791ac919904c0c175734556a46a59c866865de0094a30a97"], 0x2c}}, 0x0) 20:30:32 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980902, 0x700, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:30:32 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0445624, &(0x7f0000000080)={0x980001, 0xfffffdfd, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1705.900673][ T27] audit: type=1804 audit(1591043432.816:357): pid=16735 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir377111778/syzkaller.YvCIsr/978/bus" dev="sda1" ino=15788 res=1 [ 1706.133060][T16735] ================================================================== [ 1706.141169][T16735] BUG: KCSAN: data-race in shmem_add_to_page_cache / shmem_recalc_inode [ 1706.149461][T16735] [ 1706.151772][T16735] write to 0xffff88809aa64698 of 8 bytes by task 16766 on cpu 1: [ 1706.159467][T16735] shmem_add_to_page_cache+0x4b0/0x6c0 [ 1706.164923][T16735] shmem_getpage_gfp+0x43f/0x16c0 [ 1706.169974][T16735] shmem_fault+0x117/0x4b0 [ 1706.174370][T16735] __do_fault+0xa8/0x1e0 [ 1706.178687][T16735] __handle_mm_fault+0x295c/0x2da0 [ 1706.183786][T16735] handle_mm_fault+0x21c/0x540 [ 1706.188567][T16735] __get_user_pages+0x533/0x11c0 [ 1706.193499][T16735] populate_vma_page_range+0xdc/0x100 [ 1706.198867][T16735] __mm_populate+0x168/0x2b0 [ 1706.203429][T16735] vm_mmap_pgoff+0x185/0x190 [ 1706.207993][T16735] ksys_mmap_pgoff+0x96/0x420 [ 1706.212646][T16735] do_syscall_64+0xc7/0x3b0 [ 1706.217126][T16735] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1706.222996][T16735] [ 1706.225310][T16735] read to 0xffff88809aa64698 of 8 bytes by task 16735 on cpu 0: [ 1706.232975][T16735] shmem_recalc_inode+0x50/0x180 [ 1706.237895][T16735] shmem_getpage_gfp+0x5ca/0x16c0 [ 1706.242899][T16735] shmem_fault+0x117/0x4b0 [ 1706.247309][T16735] __do_fault+0xa8/0x1e0 [ 1706.251528][T16735] __handle_mm_fault+0x27bc/0x2da0 [ 1706.256616][T16735] handle_mm_fault+0x21c/0x540 [ 1706.261358][T16735] do_page_fault+0x48a/0xa96 [ 1706.265987][T16735] page_fault+0x34/0x40 [ 1706.270197][T16735] copy_user_enhanced_fast_string+0xe/0x30 [ 1706.275982][T16735] copyout+0x8f/0xb0 [ 1706.279857][T16735] copy_page_to_iter+0x25c/0x910 [ 1706.284794][T16735] generic_file_read_iter+0x96a/0x18c0 [ 1706.290231][T16735] ext4_file_read_iter+0x103/0x360 [ 1706.295323][T16735] new_sync_read+0x306/0x450 [ 1706.299893][T16735] __vfs_read+0x9e/0xb0 [ 1706.304077][T16735] vfs_read+0x13e/0x2b0 [ 1706.308207][T16735] ksys_read+0xc5/0x1a0 [ 1706.312336][T16735] __x64_sys_read+0x49/0x60 [ 1706.316862][T16735] do_syscall_64+0xc7/0x3b0 [ 1706.321387][T16735] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1706.327249][T16735] [ 1706.329550][T16735] Reported by Kernel Concurrency Sanitizer on: [ 1706.335681][T16735] CPU: 0 PID: 16735 Comm: syz-executor.1 Not tainted 5.7.0-rc1-syzkaller #0 [ 1706.344323][T16735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1706.354353][T16735] ================================================================== [ 1706.362395][T16735] Kernel panic - not syncing: panic_on_warn set ... [ 1706.371738][T16735] CPU: 0 PID: 16735 Comm: syz-executor.1 Not tainted 5.7.0-rc1-syzkaller #0 [ 1706.380377][T16735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1706.390416][T16735] Call Trace: [ 1706.393747][T16735] dump_stack+0x11d/0x187 [ 1706.398063][T16735] panic+0x210/0x640 [ 1706.401941][T16735] ? vprintk_func+0x89/0x13a [ 1706.406625][T16735] kcsan_report.cold+0xc/0x1a [ 1706.411295][T16735] kcsan_setup_watchpoint+0x3fb/0x440 [ 1706.416657][T16735] shmem_recalc_inode+0x50/0x180 [ 1706.421624][T16735] shmem_getpage_gfp+0x5ca/0x16c0 [ 1706.426641][T16735] shmem_fault+0x117/0x4b0 [ 1706.431043][T16735] ? file_update_time+0x6e/0x2d0 [ 1706.435966][T16735] ? balance_dirty_pages_ratelimited+0xb5/0xa20 [ 1706.442482][T16735] __do_fault+0xa8/0x1e0 [ 1706.446703][T16735] __handle_mm_fault+0x27bc/0x2da0 [ 1706.451794][T16735] ? schedule+0x4b/0xe0 [ 1706.455937][T16735] handle_mm_fault+0x21c/0x540 [ 1706.460694][T16735] do_page_fault+0x48a/0xa96 [ 1706.465274][T16735] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1706.471146][T16735] page_fault+0x34/0x40 [ 1706.475281][T16735] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 [ 1706.481850][T16735] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 1706.501433][T16735] RSP: 0018:ffffc90005d6fba0 EFLAGS: 00010206 [ 1706.507487][T16735] RAX: ffff88809c5f9a58 RBX: 0000000000001000 RCX: 0000000000000180 [ 1706.515436][T16735] RDX: 0000000000001000 RSI: ffff888076237e80 RDI: 0000000020424000 [ 1706.523400][T16735] RBP: 0000000020423180 R08: 0000000000000000 R09: 000088809c5f9bd0 [ 1706.531349][T16735] R10: 0000ffffffffffff R11: 000088809c5f9bd7 R12: ffff888076237000 [ 1706.539298][T16735] R13: 0000000020424180 R14: 00007ffffffff000 R15: 0000000000000000 [ 1706.547259][T16735] copyout+0x8f/0xb0 [ 1706.551156][T16735] copy_page_to_iter+0x25c/0x910 [ 1706.556073][T16735] ? mark_page_accessed+0x148/0x4f0 [ 1706.561249][T16735] generic_file_read_iter+0x96a/0x18c0 [ 1706.566695][T16735] ext4_file_read_iter+0x103/0x360 [ 1706.571806][T16735] new_sync_read+0x306/0x450 [ 1706.576380][T16735] __vfs_read+0x9e/0xb0 [ 1706.580516][T16735] vfs_read+0x13e/0x2b0 [ 1706.584649][T16735] ksys_read+0xc5/0x1a0 [ 1706.588799][T16735] __x64_sys_read+0x49/0x60 [ 1706.593283][T16735] do_syscall_64+0xc7/0x3b0 [ 1706.597766][T16735] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1706.603652][T16735] RIP: 0033:0x45ca69 [ 1706.607546][T16735] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1706.627140][T16735] RSP: 002b:00007faa36d7bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1706.635526][T16735] RAX: ffffffffffffffda RBX: 00000000004fad40 RCX: 000000000045ca69 [ 1706.643474][T16735] RDX: 00000000fffffe47 RSI: 0000000020000180 RDI: 0000000000000008 [ 1706.651421][T16735] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1706.659387][T16735] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1706.667334][T16735] R13: 000000000000087b R14: 00000000004c9ff4 R15: 00007faa36d7c6d4 [ 1707.773968][T16735] Shutting down cpus with NMI [ 1707.779988][T16735] Kernel Offset: disabled [ 1707.784355][T16735] Rebooting in 86400 seconds..