0x1000, 0x4, {0x77359400}, {0x3, 0x1, 0x80, 0xe0, 0x74, 0x4, "fb232d7a"}, 0x80, 0x2, {}, 0xffff0001}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @sliced={0xbe10, [0x4, 0x6589, 0x800, 0x8000, 0x8, 0xea, 0x2, 0x9, 0x4, 0x81, 0x7f, 0xce, 0xf2, 0x1, 0xb2c, 0x94cd, 0x4, 0xafd6, 0xef47, 0x3, 0x8, 0x8270, 0x7, 0x1800, 0x3, 0xffe1, 0x40, 0xfffb, 0xa, 0xd9a1, 0x14, 0x9, 0x2, 0x0, 0xcf, 0x2, 0xfffc, 0x800, 0x9, 0x8, 0x5, 0x5, 0x1f, 0x401, 0x0, 0x4, 0x4, 0x100], 0x6}}) 23:35:41 executing program 2: r0 = socket(0xf, 0x3, 0x0) (async, rerun: 32) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x24040, 0x0) (rerun: 32) getsockopt$inet_dccp_buf(r1, 0x21, 0x2, &(0x7f0000000100)=""/217, &(0x7f0000000040)=0xd9) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:41 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x3, 0x0, 0xa}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r1, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0], 0x0, 0x8, &(0x7f0000000200)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r1, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) r8 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r9}, 0x48) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000007c0)={'erspan0\x00', &(0x7f0000000780)={'syztnl0\x00', 0x0, 0x7, 0x40, 0x3d, 0x3, {{0x8, 0x4, 0x2, 0x16, 0x20, 0x68, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0xb, 0x66, [@multicast1, @rand_addr=0x64010101]}, @end]}}}}}) r11 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$pptp(r1, &(0x7f0000000dc0)={0x18, 0x2, {0x1, @private=0xa010101}}, 0x1e) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r12}, 0x48) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000e00), 0x40002, 0x0) r13 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r14}, 0x48) r15 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r15, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r17 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) ioctl$VIDIOC_S_TUNER(r17, 0x4054561e, &(0x7f0000000d40)={0x9, "ecef137124c1fd3309473837644281682855732a67151365d1e027a318391d34", 0x0, 0x0, 0xce1, 0x2, 0x2, 0x3, 0xfc08, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r16}, 0x48) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000cc0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000800)=ANY=[@ANYBLOB="6c040000", @ANYRES16=0x0, @ANYBLOB="000227bd7000fddbdf250200000008000100", @ANYRES32=r2, @ANYBLOB="2c01028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400010100003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r4, @ANYBLOB="400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400ff07000008000600", @ANYRES32=r6, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000100000008000600", @ANYRES32=r7, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000001000008000100", @ANYRES32=r9, @ANYBLOB="b800028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000400000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000700000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="9f000100", @ANYRES32=r12, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="3c010280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000100008008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004008000000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b7570000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000700000008000600", @ANYRES32=r16, @ANYBLOB], 0x46c}, 0x1, 0x0, 0x0, 0x800}, 0x20040001) 23:35:41 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0285629, &(0x7f00000001c0)={0x4}) 23:35:41 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:41 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) r1 = socket$inet_sctp(0x2, 0x5, 0x84) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000400), 0x408100, 0x0) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x7, @mcast2, 0x5}}, 0x1, 0xff, 0xffffffff, 0x7, 0x2a, 0x7703, 0x4}, &(0x7f00000002c0)=0x9c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={r2, @in6={{0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x9}}, 0x7fff, 0x4, 0x0, 0xa5, 0x30, 0xffffff00, 0x81}, &(0x7f00000003c0)=0x9c) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)=@userptr={0x1, 0x1, 0x4, 0x1000, 0x4, {0x77359400}, {0x3, 0x1, 0x80, 0xe0, 0x74, 0x4, "fb232d7a"}, 0x80, 0x2, {}, 0xffff0001}) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @sliced={0xbe10, [0x4, 0x6589, 0x800, 0x8000, 0x8, 0xea, 0x2, 0x9, 0x4, 0x81, 0x7f, 0xce, 0xf2, 0x1, 0xb2c, 0x94cd, 0x4, 0xafd6, 0xef47, 0x3, 0x8, 0x8270, 0x7, 0x1800, 0x3, 0xffe1, 0x40, 0xfffb, 0xa, 0xd9a1, 0x14, 0x9, 0x2, 0x0, 0xcf, 0x2, 0xfffc, 0x800, 0x9, 0x8, 0x5, 0x5, 0x1f, 0x401, 0x0, 0x4, 0x4, 0x100], 0x6}}) 23:35:41 executing program 5: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x35323645, 0x6, 0x0, [{0xff, 0xf7}]}}) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000140)=0x5) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x3, 0x40, 0x4, {0x1, @sliced={0xfffd, [0x4, 0xffff, 0x6, 0x1ff, 0xff, 0x8, 0x9, 0xff, 0xee, 0x3, 0xff77, 0xfff, 0x1, 0x5, 0x8, 0x1, 0x3ff, 0x8000, 0x1ff, 0x52f, 0x4, 0xf7, 0x2, 0x100, 0x7, 0x35, 0x1ff, 0x367d, 0x0, 0x7ff, 0x6, 0x3, 0x8000, 0x7f, 0xfff, 0xff89, 0x7be2, 0xfffc, 0x5, 0x4, 0x1ff, 0x0, 0xccde, 0x0, 0x665, 0xf5f5, 0xfff, 0x81], 0x1936}}, 0x2}) 23:35:41 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x3, 0x0, 0xa}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r1, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0], 0x0, 0x8, &(0x7f0000000200)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r1, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) r8 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r9}, 0x48) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000007c0)={'erspan0\x00', &(0x7f0000000780)={'syztnl0\x00', 0x0, 0x7, 0x40, 0x3d, 0x3, {{0x8, 0x4, 0x2, 0x16, 0x20, 0x68, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0xb, 0x66, [@multicast1, @rand_addr=0x64010101]}, @end]}}}}}) r11 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$pptp(r1, &(0x7f0000000dc0)={0x18, 0x2, {0x1, @private=0xa010101}}, 0x1e) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r12}, 0x48) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000e00), 0x40002, 0x0) r13 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r14}, 0x48) r15 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r15, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r17 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) ioctl$VIDIOC_S_TUNER(r17, 0x4054561e, &(0x7f0000000d40)={0x9, "ecef137124c1fd3309473837644281682855732a67151365d1e027a318391d34", 0x0, 0x0, 0xce1, 0x2, 0x2, 0x3, 0xfc08, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r16}, 0x48) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000cc0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000800)=ANY=[@ANYBLOB="6c040000", @ANYRES16=0x0, @ANYBLOB="000227bd7000fddbdf250200000008000100", @ANYRES32=r2, @ANYBLOB="2c01028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400010100003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r4, @ANYBLOB="400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400ff07000008000600", @ANYRES32=r6, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000100000008000600", @ANYRES32=r7, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000001000008000100", @ANYRES32=r9, @ANYBLOB="b800028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000400000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000700000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="9f000100", @ANYRES32=r12, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="3c010280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000100008008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004008000000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b7570000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000700000008000600", @ANYRES32=r16, @ANYBLOB], 0x46c}, 0x1, 0x0, 0x0, 0x800}, 0x20040001) 23:35:41 executing program 2: r0 = socket(0xf, 0x3, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x24040, 0x0) getsockopt$inet_dccp_buf(r1, 0x21, 0x2, &(0x7f0000000100)=""/217, &(0x7f0000000040)=0xd9) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:41 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:41 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0285629, &(0x7f00000001c0)={0x4}) 23:35:41 executing program 3: socket(0x18, 0x0, 0x0) r0 = socket(0xa, 0x3, 0x2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4004001) 23:35:41 executing program 5: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x35323645, 0x6, 0x0, [{0xff, 0xf7}]}}) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000140)=0x5) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x3, 0x40, 0x4, {0x1, @sliced={0xfffd, [0x4, 0xffff, 0x6, 0x1ff, 0xff, 0x8, 0x9, 0xff, 0xee, 0x3, 0xff77, 0xfff, 0x1, 0x5, 0x8, 0x1, 0x3ff, 0x8000, 0x1ff, 0x52f, 0x4, 0xf7, 0x2, 0x100, 0x7, 0x35, 0x1ff, 0x367d, 0x0, 0x7ff, 0x6, 0x3, 0x8000, 0x7f, 0xfff, 0xff89, 0x7be2, 0xfffc, 0x5, 0x4, 0x1ff, 0x0, 0xccde, 0x0, 0x665, 0xf5f5, 0xfff, 0x81], 0x1936}}, 0x2}) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x35323645, 0x6, 0x0, [{0xff, 0xf7}]}}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000140)=0x5) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x3, 0x40, 0x4, {0x1, @sliced={0xfffd, [0x4, 0xffff, 0x6, 0x1ff, 0xff, 0x8, 0x9, 0xff, 0xee, 0x3, 0xff77, 0xfff, 0x1, 0x5, 0x8, 0x1, 0x3ff, 0x8000, 0x1ff, 0x52f, 0x4, 0xf7, 0x2, 0x100, 0x7, 0x35, 0x1ff, 0x367d, 0x0, 0x7ff, 0x6, 0x3, 0x8000, 0x7f, 0xfff, 0xff89, 0x7be2, 0xfffc, 0x5, 0x4, 0x1ff, 0x0, 0xccde, 0x0, 0x665, 0xf5f5, 0xfff, 0x81], 0x1936}}, 0x2}) (async) 23:35:41 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000000)=0x4, 0x4) 23:35:41 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000400), 0x408100, 0x0) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x7, @mcast2, 0x5}}, 0x1, 0xff, 0xffffffff, 0x7, 0x2a, 0x7703, 0x4}, &(0x7f00000002c0)=0x9c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={r2, @in6={{0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x9}}, 0x7fff, 0x4, 0x0, 0xa5, 0x30, 0xffffff00, 0x81}, &(0x7f00000003c0)=0x9c) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)=@userptr={0x1, 0x1, 0x4, 0x1000, 0x4, {0x77359400}, {0x3, 0x1, 0x80, 0xe0, 0x74, 0x4, "fb232d7a"}, 0x80, 0x2, {}, 0xffff0001}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @sliced={0xbe10, [0x4, 0x6589, 0x800, 0x8000, 0x8, 0xea, 0x2, 0x9, 0x4, 0x81, 0x7f, 0xce, 0xf2, 0x1, 0xb2c, 0x94cd, 0x4, 0xafd6, 0xef47, 0x3, 0x8, 0x8270, 0x7, 0x1800, 0x3, 0xffe1, 0x40, 0xfffb, 0xa, 0xd9a1, 0x14, 0x9, 0x2, 0x0, 0xcf, 0x2, 0xfffc, 0x800, 0x9, 0x8, 0x5, 0x5, 0x1f, 0x401, 0x0, 0x4, 0x4, 0x100], 0x6}}) 23:35:42 executing program 2: socket(0x23, 0x3, 0x0) socketpair(0x27, 0x80000, 0x105, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x4a, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 23:35:42 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0285629, &(0x7f00000001c0)={0x4}) 23:35:42 executing program 3: socket(0x18, 0x0, 0x0) r0 = socket(0xa, 0x3, 0x2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4004001) 23:35:42 executing program 5: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x35323645, 0x6, 0x0, [{0xff, 0xf7}]}}) (async) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async, rerun: 32) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000140)=0x5) (rerun: 32) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x3, 0x40, 0x4, {0x1, @sliced={0xfffd, [0x4, 0xffff, 0x6, 0x1ff, 0xff, 0x8, 0x9, 0xff, 0xee, 0x3, 0xff77, 0xfff, 0x1, 0x5, 0x8, 0x1, 0x3ff, 0x8000, 0x1ff, 0x52f, 0x4, 0xf7, 0x2, 0x100, 0x7, 0x35, 0x1ff, 0x367d, 0x0, 0x7ff, 0x6, 0x3, 0x8000, 0x7f, 0xfff, 0xff89, 0x7be2, 0xfffc, 0x5, 0x4, 0x1ff, 0x0, 0xccde, 0x0, 0x665, 0xf5f5, 0xfff, 0x81], 0x1936}}, 0x2}) 23:35:42 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) 23:35:42 executing program 2: socket(0x23, 0x3, 0x0) (async) socketpair(0x27, 0x80000, 0x105, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x4a, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 23:35:42 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4, @pix={0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 23:35:42 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000000)=0x4, 0x4) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000000)=0x4, 0x4) (async) 23:35:42 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) (async) 23:35:42 executing program 3: socket(0x18, 0x0, 0x0) r0 = socket(0xa, 0x3, 0x2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4004001) 23:35:42 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4, @pix={0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 23:35:42 executing program 2: socket(0x23, 0x3, 0x0) (async) socketpair(0x27, 0x80000, 0x105, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x4a, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 23:35:42 executing program 3: socket(0x18, 0x0, 0x0) socket(0xa, 0x3, 0x2) 23:35:42 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000000)=0x4, 0x4) 23:35:42 executing program 5: r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}], 0x10, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000480)={0x28, 0x0, 0x2710, @my=0x1}, 0x10, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="b8030000", @ANYRES16=0x0, @ANYBLOB="040b28bd7000fcdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="6401028074000100240001006270665f686173685f66756e63000000000000000000f9d8ebca386bf75f527953dcc520a800000000000000000000050003000b000000440004000700ff3f0500000001049f3f08000000f9004000dd1900000400801fffffffff50850008030000002000a020ff07000001003d0909000000faff073f050000003800010024000100616374697665706f727400"/172, @ANYRES32=0x0, @ANYBLOB="400001002400010071756575cedd69fd2803b8068891893dd374655f696400000000000000000000ff030000000000000600000000000018000000", @ANYRES64=r0, @ANYRESHEX=r4, @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400ff01000008000100", @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRES32=r1, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000900000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000800000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="4c0001000dbd6bb81492e96dad3d5dc8cfdf240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001006c625f706f72745f737461747300000000050003000b000000080004000200000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB], 0x3b8}, 0x1, 0x0, 0x0, 0x20000821}, 0x200040c0) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"3061ad27fb4832c2995d6bb855b55d796662f4c1b0b50d8043695d0a5031083e"}) 23:35:42 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) 23:35:42 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4, @pix={0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 23:35:42 executing program 3: socket(0xa, 0x3, 0x2) 23:35:42 executing program 2: r0 = socket(0x18, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r1, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000540)=[{}], 0x8, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r4}, 0x8) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="01643d9f", @ANYRES32=0x0], &(0x7f0000000040)=0x8) r8 = socket(0x5, 0x80000, 0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x5, @private1}}, 0x20, 0x8001, 0x6, 0x40000000, 0x80, 0x800, 0x1f}, &(0x7f00000002c0)=0x9c) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000400)={0x0, 0x1}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000300)={r9, @in={{0x2, 0x4e20, @broadcast}}, 0x2, 0xe4}, 0x99) r10 = socket$tipc(0x1e, 0x2, 0x0) accept4$tipc(r10, 0x0, &(0x7f00000003c0), 0x80000) r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r11, 0xae03, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r11, 0x84, 0x8, &(0x7f0000000780), &(0x7f00000007c0)=0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000080)={r7, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x9c) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000080)={r7, 0x6}, &(0x7f0000000100)=0x8) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 23:35:42 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x4, 0x5}) socket$tipc(0x1e, 0xfbf9f4a1704b3c1f, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) 23:35:42 executing program 5: r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}], 0x10, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) (async) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000480)={0x28, 0x0, 0x2710, @my=0x1}, 0x10, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="b8030000", @ANYRES16=0x0, @ANYBLOB="040b28bd7000fcdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="6401028074000100240001006270665f686173685f66756e63000000000000000000f9d8ebca386bf75f527953dcc520a800000000000000000000050003000b000000440004000700ff3f0500000001049f3f08000000f9004000dd1900000400801fffffffff50850008030000002000a020ff07000001003d0909000000faff073f050000003800010024000100616374697665706f727400"/172, @ANYRES32=0x0, @ANYBLOB="400001002400010071756575cedd69fd2803b8068891893dd374655f696400000000000000000000ff030000000000000600000000000018000000", @ANYRES64=r0, @ANYRESHEX=r4, @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400ff01000008000100", @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRES32=r1, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000900000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000800000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="4c0001000dbd6bb81492e96dad3d5dc8cfdf240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001006c625f706f72745f737461747300000000050003000b000000080004000200000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB], 0x3b8}, 0x1, 0x0, 0x0, 0x20000821}, 0x200040c0) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"3061ad27fb4832c2995d6bb855b55d796662f4c1b0b50d8043695d0a5031083e"}) 23:35:42 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) accept4$tipc(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800) socket$inet(0x2, 0x2, 0xd6) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0285629, &(0x7f00000001c0)={0x4}) 23:35:42 executing program 3: socket(0x0, 0x3, 0x2) 23:35:42 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x4, 0x5}) (async) socket$tipc(0x1e, 0xfbf9f4a1704b3c1f, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) (async) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) 23:35:42 executing program 2: r0 = socket(0x18, 0x0, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r1, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000540)=[{}], 0x8, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r4}, 0x8) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="01643d9f", @ANYRES32=0x0], &(0x7f0000000040)=0x8) r8 = socket(0x5, 0x80000, 0x4) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x5, @private1}}, 0x20, 0x8001, 0x6, 0x40000000, 0x80, 0x800, 0x1f}, &(0x7f00000002c0)=0x9c) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000400)={0x0, 0x1}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000300)={r9, @in={{0x2, 0x4e20, @broadcast}}, 0x2, 0xe4}, 0x99) r10 = socket$tipc(0x1e, 0x2, 0x0) accept4$tipc(r10, 0x0, &(0x7f00000003c0), 0x80000) (async) r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r11, 0xae03, 0x0) (async) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r11, 0x84, 0x8, &(0x7f0000000780), &(0x7f00000007c0)=0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000080)={r7, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x9c) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000080)={r7, 0x6}, &(0x7f0000000100)=0x8) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 23:35:42 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) (async) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x4, 0x5}) socket$tipc(0x1e, 0xfbf9f4a1704b3c1f, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) (async) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) 23:35:42 executing program 3: socket(0x0, 0x3, 0x2) 23:35:42 executing program 5: r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}], 0x10, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000480)={0x28, 0x0, 0x2710, @my=0x1}, 0x10, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="b8030000", @ANYRES16=0x0, @ANYBLOB="040b28bd7000fcdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="6401028074000100240001006270665f686173685f66756e63000000000000000000f9d8ebca386bf75f527953dcc520a800000000000000000000050003000b000000440004000700ff3f0500000001049f3f08000000f9004000dd1900000400801fffffffff50850008030000002000a020ff07000001003d0909000000faff073f050000003800010024000100616374697665706f727400"/172, @ANYRES32=0x0, @ANYBLOB="400001002400010071756575cedd69fd2803b8068891893dd374655f696400000000000000000000ff030000000000000600000000000018000000", @ANYRES64=r0, @ANYRESHEX=r4, @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400ff01000008000100", @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRES32=r1, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000900000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000800000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="4c0001000dbd6bb81492e96dad3d5dc8cfdf240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001006c625f706f72745f737461747300000000050003000b000000080004000200000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB], 0x3b8}, 0x1, 0x0, 0x0, 0x20000821}, 0x200040c0) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"3061ad27fb4832c2995d6bb855b55d796662f4c1b0b50d8043695d0a5031083e"}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440), 0x4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}], 0x10, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) (async) socket$l2tp(0x2, 0x2, 0x73) (async) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000480)={0x28, 0x0, 0x2710, @my=0x1}, 0x10, 0x800) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000004c0)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48) (async) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="b8030000", @ANYRES16=0x0, @ANYBLOB="040b28bd7000fcdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="6401028074000100240001006270665f686173685f66756e63000000000000000000f9d8ebca386bf75f527953dcc520a800000000000000000000050003000b000000440004000700ff3f0500000001049f3f08000000f9004000dd1900000400801fffffffff50850008030000002000a020ff07000001003d0909000000faff073f050000003800010024000100616374697665706f727400"/172, @ANYRES32=0x0, @ANYBLOB="400001002400010071756575cedd69fd2803b8068891893dd374655f696400000000000000000000ff030000000000000600000000000018000000", @ANYRES64=r0, @ANYRESHEX=r4, @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400ff01000008000100", @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRES32=r1, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000900000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000800000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="4c0001000dbd6bb81492e96dad3d5dc8cfdf240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001006c625f706f72745f737461747300000000050003000b000000080004000200000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB], 0x3b8}, 0x1, 0x0, 0x0, 0x20000821}, 0x200040c0) (async) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"3061ad27fb4832c2995d6bb855b55d796662f4c1b0b50d8043695d0a5031083e"}) (async) 23:35:42 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) accept4$tipc(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800) socket$inet(0x2, 0x2, 0xd6) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0285629, &(0x7f00000001c0)={0x4}) 23:35:42 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x14100, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5}, 0x48) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000001600)=ANY=[@ANYBLOB="ac48380b32406d86002d384a05f4c8f9ece370ffb64d4879fb42b000fbc47b0708c4fb8f210b1bed8353e6361446453ddbdf497c85f8e19f7511802230acfa"]) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) r8 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r9}, 0x48) r10 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r11}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r2, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000002c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r2, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000500)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000005c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r16 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r16, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r17}, 0x48) r18 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r18, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r20 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r19}, 0x48) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000001580)={0x0, @rand_addr, @multicast2}, &(0x7f00000015c0)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000f00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000800)={0x6b0, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x4}}, {{0x8}, {0x194, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r21}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x54, 0x2, 0x3, 0x8}, {0x7, 0x40, 0x2, 0x8}, {0x80, 0x7f, 0x35, 0x20}, {0x3, 0x7c, 0x2, 0x8}, {0x9, 0xff, 0x1, 0x8000}, {0x1, 0x0, 0xc0, 0x24}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}]}}, {{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r13}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x0, 0x3, 0x6, 0x3}]}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xcb}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x104, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r14}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}]}}, {{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0xffffffffffffffa5, 0x4, 0x1}}, {0x8}}}]}}]}, 0x6b0}, 0x1, 0x0, 0x0, 0x80}, 0x20000002) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x18, 0x80800000, 0x0, 0x8, 0x4a0, r1, 0x2d3033b2, '\x00', 0x0, r2, 0x0, 0x3, 0x3}, 0x48) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r22 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0xc, 0xb, &(0x7f0000000f40)=ANY=[@ANYBLOB="18000000020000000000000004000000950000000000000052800900c100000018500000030000000000000000000000852000000300000018230000", @ANYRES32=r12, @ANYBLOB="00000000ff0f00005595fe901e6bd1165670ff0000000000"], &(0x7f0000000fc0)='GPL\x00', 0xffffffff, 0xdc, &(0x7f0000001000)=""/220, 0x41100, 0x14, '\x00', r17, 0x1e, r2, 0x8, &(0x7f0000001100)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000001140)={0x1, 0x9, 0x8, 0xffffffff}, 0x10, r15, r1, 0x0, &(0x7f0000001180)=[r1, r20, 0xffffffffffffffff, r6, 0xffffffffffffffff, r1, 0x1]}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r22, 0xe0, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001240)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000001280)=[0x0, 0x0, 0x0], &(0x7f00000012c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001300)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000001340), &(0x7f0000001380), 0x8, 0x10, 0x8, 0x8, &(0x7f00000013c0)}}, 0x10) 23:35:42 executing program 2: r0 = socket(0x18, 0x0, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r1, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000540)=[{}], 0x8, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) (async) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r4}, 0x8) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="01643d9f", @ANYRES32=0x0], &(0x7f0000000040)=0x8) (async) r8 = socket(0x5, 0x80000, 0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x5, @private1}}, 0x20, 0x8001, 0x6, 0x40000000, 0x80, 0x800, 0x1f}, &(0x7f00000002c0)=0x9c) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000400)={0x0, 0x1}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000300)={r9, @in={{0x2, 0x4e20, @broadcast}}, 0x2, 0xe4}, 0x99) r10 = socket$tipc(0x1e, 0x2, 0x0) accept4$tipc(r10, 0x0, &(0x7f00000003c0), 0x80000) (async) r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r11, 0xae03, 0x0) (async) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r11, 0x84, 0x8, &(0x7f0000000780), &(0x7f00000007c0)=0x4) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000080)={r7, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x9c) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000080)={r7, 0x6}, &(0x7f0000000100)=0x8) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 23:35:42 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x14100, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) (async) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5}, 0x48) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000001600)=ANY=[@ANYBLOB="ac48380b32406d86002d384a05f4c8f9ece370ffb64d4879fb42b000fbc47b0708c4fb8f210b1bed8353e6361446453ddbdf497c85f8e19f7511802230acfa"]) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) (async) r8 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r9}, 0x48) (async) r10 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r11}, 0x48) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r2, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000002c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r2, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000500)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000005c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) (async) r16 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r16, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r17}, 0x48) r18 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r18, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r20 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r19}, 0x48) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000001580)={0x0, @rand_addr, @multicast2}, &(0x7f00000015c0)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000f00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000800)={0x6b0, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x4}}, {{0x8}, {0x194, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r21}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x54, 0x2, 0x3, 0x8}, {0x7, 0x40, 0x2, 0x8}, {0x80, 0x7f, 0x35, 0x20}, {0x3, 0x7c, 0x2, 0x8}, {0x9, 0xff, 0x1, 0x8000}, {0x1, 0x0, 0xc0, 0x24}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}]}}, {{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r13}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x0, 0x3, 0x6, 0x3}]}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xcb}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x104, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r14}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}]}}, {{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0xffffffffffffffa5, 0x4, 0x1}}, {0x8}}}]}}]}, 0x6b0}, 0x1, 0x0, 0x0, 0x80}, 0x20000002) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x18, 0x80800000, 0x0, 0x8, 0x4a0, r1, 0x2d3033b2, '\x00', 0x0, r2, 0x0, 0x3, 0x3}, 0x48) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) r22 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0xc, 0xb, &(0x7f0000000f40)=ANY=[@ANYBLOB="18000000020000000000000004000000950000000000000052800900c100000018500000030000000000000000000000852000000300000018230000", @ANYRES32=r12, @ANYBLOB="00000000ff0f00005595fe901e6bd1165670ff0000000000"], &(0x7f0000000fc0)='GPL\x00', 0xffffffff, 0xdc, &(0x7f0000001000)=""/220, 0x41100, 0x14, '\x00', r17, 0x1e, r2, 0x8, &(0x7f0000001100)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000001140)={0x1, 0x9, 0x8, 0xffffffff}, 0x10, r15, r1, 0x0, &(0x7f0000001180)=[r1, r20, 0xffffffffffffffff, r6, 0xffffffffffffffff, r1, 0x1]}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r22, 0xe0, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001240)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000001280)=[0x0, 0x0, 0x0], &(0x7f00000012c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001300)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000001340), &(0x7f0000001380), 0x8, 0x10, 0x8, 0x8, &(0x7f00000013c0)}}, 0x10) 23:35:42 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x81, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x2}, {0x3}, {}, {}, {0x0, 0xc3}], 0x0, 0xfe}}) 23:35:42 executing program 3: socket(0x0, 0x3, 0x2) 23:35:42 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x81, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x2}, {0x3}, {}, {}, {0x0, 0xc3}], 0x0, 0xfe}}) 23:35:42 executing program 3: socket(0xa, 0x0, 0x2) 23:35:42 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x8000000000000001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) 23:35:42 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) accept4$tipc(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800) socket$inet(0x2, 0x2, 0xd6) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0285629, &(0x7f00000001c0)={0x4}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) accept4$tipc(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800) (async) socket$inet(0x2, 0x2, 0xd6) (async) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0285629, &(0x7f00000001c0)={0x4}) (async) 23:35:42 executing program 2: r0 = socket(0x29, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040), 0x0, 0x8, &(0x7f0000000180)=[{}, {}], 0x10, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) sendmsg$can_bcm(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x1d, r2}, 0x10, &(0x7f0000000480)={&(0x7f0000000400)={0x4, 0x40, 0x3, {}, {}, {0x4, 0x1, 0x0, 0x1}, 0x1, @canfd={{0x2, 0x1, 0x0, 0x1}, 0x2e, 0x0, 0x0, 0x0, "f3abff899b3bdb919a11ba456b02fc67dcacf9d9c1c1ba9803d238095d03c86aacc279b1b2be7718d4948a6fce06afd35f37dfcab6b8879e5d7a9f968a52e38a"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000040}, 0x200440c1) 23:35:42 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x81, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x2}, {0x3}, {}, {}, {0x0, 0xc3}], 0x0, 0xfe}}) 23:35:42 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x14100, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5}, 0x48) (async) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000001600)=ANY=[@ANYBLOB="ac48380b32406d86002d384a05f4c8f9ece370ffb64d4879fb42b000fbc47b0708c4fb8f210b1bed8353e6361446453ddbdf497c85f8e19f7511802230acfa"]) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) (async) r8 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r9}, 0x48) (async) r10 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r11}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r2, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000002c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r2, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000500)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000005c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r16 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r16, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r17}, 0x48) (async) r18 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r18, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r20 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r19}, 0x48) (async) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000001580)={0x0, @rand_addr, @multicast2}, &(0x7f00000015c0)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000f00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000800)={0x6b0, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x4}}, {{0x8}, {0x194, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r21}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x54, 0x2, 0x3, 0x8}, {0x7, 0x40, 0x2, 0x8}, {0x80, 0x7f, 0x35, 0x20}, {0x3, 0x7c, 0x2, 0x8}, {0x9, 0xff, 0x1, 0x8000}, {0x1, 0x0, 0xc0, 0x24}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}]}}, {{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r13}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x0, 0x3, 0x6, 0x3}]}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xcb}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x104, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r14}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}]}}, {{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0xffffffffffffffa5, 0x4, 0x1}}, {0x8}}}]}}]}, 0x6b0}, 0x1, 0x0, 0x0, 0x80}, 0x20000002) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x18, 0x80800000, 0x0, 0x8, 0x4a0, r1, 0x2d3033b2, '\x00', 0x0, r2, 0x0, 0x3, 0x3}, 0x48) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r22 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0xc, 0xb, &(0x7f0000000f40)=ANY=[@ANYBLOB="18000000020000000000000004000000950000000000000052800900c100000018500000030000000000000000000000852000000300000018230000", @ANYRES32=r12, @ANYBLOB="00000000ff0f00005595fe901e6bd1165670ff0000000000"], &(0x7f0000000fc0)='GPL\x00', 0xffffffff, 0xdc, &(0x7f0000001000)=""/220, 0x41100, 0x14, '\x00', r17, 0x1e, r2, 0x8, &(0x7f0000001100)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000001140)={0x1, 0x9, 0x8, 0xffffffff}, 0x10, r15, r1, 0x0, &(0x7f0000001180)=[r1, r20, 0xffffffffffffffff, r6, 0xffffffffffffffff, r1, 0x1]}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r22, 0xe0, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001240)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000001280)=[0x0, 0x0, 0x0], &(0x7f00000012c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001300)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000001340), &(0x7f0000001380), 0x8, 0x10, 0x8, 0x8, &(0x7f00000013c0)}}, 0x10) 23:35:42 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x8000000000000001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x8000000000000001, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) (async) 23:35:42 executing program 2: r0 = socket(0x29, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040), 0x0, 0x8, &(0x7f0000000180)=[{}, {}], 0x10, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) sendmsg$can_bcm(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x1d, r2}, 0x10, &(0x7f0000000480)={&(0x7f0000000400)={0x4, 0x40, 0x3, {}, {}, {0x4, 0x1, 0x0, 0x1}, 0x1, @canfd={{0x2, 0x1, 0x0, 0x1}, 0x2e, 0x0, 0x0, 0x0, "f3abff899b3bdb919a11ba456b02fc67dcacf9d9c1c1ba9803d238095d03c86aacc279b1b2be7718d4948a6fce06afd35f37dfcab6b8879e5d7a9f968a52e38a"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000040}, 0x200440c1) 23:35:42 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x6a, 0x0, 0x0, 0x0, 0x6, [{}, {0x0, 0x2}, {}, {0xfffffffd}], 0x0, 0x0, 0x0, 0x0, 0x1}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$SNDCTL_DSP_RESET(r1, 0x5000, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x64, 0x8) 23:35:42 executing program 3: socket(0xa, 0x0, 0x2) 23:35:42 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x4c54264b}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000200)={0x0, @sdr={0x50323234}}) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000180)=@multiplanar_mmap={0x6, 0x3, 0x4, 0xe000, 0x2, {r2, r3/1000+10000}, {0x4, 0x1, 0x78, 0x3f, 0x5, 0x1, "bc4cd878"}, 0x3, 0x1, {&(0x7f0000000080)=[{0x78000000, 0xffff, {0x6}, 0x9}, {0x0, 0x4, {0xbd}, 0x8}]}, 0x3, 0x0, r4}) 23:35:42 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x8000000000000001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x8000000000000001, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) (async) 23:35:42 executing program 4: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000500)={0x10000, 0x4}) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000480)={0x0, "2e3c24ba40f1b19b355622e5bbf8d9d166fa2e019f3542958227334265cc5a17", 0x1}) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0285629, &(0x7f00000001c0)={0x4, @sliced={0x7fff, [0x1003, 0x1, 0x1, 0x2, 0xfffd, 0x401, 0x2, 0x2, 0xa630, 0xff, 0x6, 0x73, 0x2, 0x7, 0x6, 0x2, 0x7fff, 0xb41, 0x4, 0x6, 0x6, 0x4010, 0x2, 0x5, 0x7ff, 0x6, 0xf370, 0x9, 0xfb, 0x1, 0x3, 0x4, 0x800, 0x7, 0x8001, 0x1, 0x0, 0xf7, 0x101, 0xdc4d, 0x4, 0x101, 0xffe0, 0x9, 0x2, 0x5, 0x5, 0x1], 0x86f}}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000000)={0x3, @sdr={0x59565955, 0xfffffff9}}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000540)={0xa63, 0x2, "ecad32a62c637fa5f89acbff65d288f7f8e76df814590174", {0x4c7, 0x5e7}, 0xfffffffb}) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000340)=@multiplanar_fd={0x5, 0x6, 0x4, 0x2000, 0x80000001, {r3, r4/1000+60000}, {0x0, 0x2, 0x6, 0x80, 0x7, 0x7, "4c299e02"}, 0x1c, 0x4, {&(0x7f00000002c0)=[{0x1, 0x6bdc, {r5}, 0x1}, {0x7f, 0x9, {}, 0x8}]}, 0x9, 0x0, r6}) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r5}, 0x8) ioctl$vim2m_VIDIOC_QUERYCAP(r7, 0x80685600, &(0x7f00000003c0)) 23:35:42 executing program 2: r0 = socket(0x29, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040), 0x0, 0x8, &(0x7f0000000180)=[{}, {}], 0x10, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) (rerun: 64) sendmsg$can_bcm(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x1d, r2}, 0x10, &(0x7f0000000480)={&(0x7f0000000400)={0x4, 0x40, 0x3, {}, {}, {0x4, 0x1, 0x0, 0x1}, 0x1, @canfd={{0x2, 0x1, 0x0, 0x1}, 0x2e, 0x0, 0x0, 0x0, "f3abff899b3bdb919a11ba456b02fc67dcacf9d9c1c1ba9803d238095d03c86aacc279b1b2be7718d4948a6fce06afd35f37dfcab6b8879e5d7a9f968a52e38a"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000040}, 0x200440c1) 23:35:42 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x4c54264b}) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) (async) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000200)={0x0, @sdr={0x50323234}}) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000180)=@multiplanar_mmap={0x6, 0x3, 0x4, 0xe000, 0x2, {r2, r3/1000+10000}, {0x4, 0x1, 0x78, 0x3f, 0x5, 0x1, "bc4cd878"}, 0x3, 0x1, {&(0x7f0000000080)=[{0x78000000, 0xffff, {0x6}, 0x9}, {0x0, 0x4, {0xbd}, 0x8}]}, 0x3, 0x0, r4}) 23:35:43 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x6a, 0x0, 0x0, 0x0, 0x6, [{}, {0x0, 0x2}, {}, {0xfffffffd}], 0x0, 0x0, 0x0, 0x0, 0x1}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$SNDCTL_DSP_RESET(r1, 0x5000, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x64, 0x8) 23:35:43 executing program 3: socket(0xa, 0x0, 0x2) 23:35:43 executing program 2: r0 = socket(0x18, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x58, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4841}, 0x8a0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x10, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x60, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r2}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4011}, 0x148c4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f00000001c0)={0x77359400}, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:43 executing program 4: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) (async) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000500)={0x10000, 0x4}) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000480)={0x0, "2e3c24ba40f1b19b355622e5bbf8d9d166fa2e019f3542958227334265cc5a17", 0x1}) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0285629, &(0x7f00000001c0)={0x4, @sliced={0x7fff, [0x1003, 0x1, 0x1, 0x2, 0xfffd, 0x401, 0x2, 0x2, 0xa630, 0xff, 0x6, 0x73, 0x2, 0x7, 0x6, 0x2, 0x7fff, 0xb41, 0x4, 0x6, 0x6, 0x4010, 0x2, 0x5, 0x7ff, 0x6, 0xf370, 0x9, 0xfb, 0x1, 0x3, 0x4, 0x800, 0x7, 0x8001, 0x1, 0x0, 0xf7, 0x101, 0xdc4d, 0x4, 0x101, 0xffe0, 0x9, 0x2, 0x5, 0x5, 0x1], 0x86f}}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000000)={0x3, @sdr={0x59565955, 0xfffffff9}}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000540)={0xa63, 0x2, "ecad32a62c637fa5f89acbff65d288f7f8e76df814590174", {0x4c7, 0x5e7}, 0xfffffffb}) (async) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000340)=@multiplanar_fd={0x5, 0x6, 0x4, 0x2000, 0x80000001, {r3, r4/1000+60000}, {0x0, 0x2, 0x6, 0x80, 0x7, 0x7, "4c299e02"}, 0x1c, 0x4, {&(0x7f00000002c0)=[{0x1, 0x6bdc, {r5}, 0x1}, {0x7f, 0x9, {}, 0x8}]}, 0x9, 0x0, r6}) (async) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r5}, 0x8) ioctl$vim2m_VIDIOC_QUERYCAP(r7, 0x80685600, &(0x7f00000003c0)) 23:35:43 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0xf1f, 0x2) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0), 0x400000, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000300)=@multiplanar_userptr={0x4a3, 0x1, 0x4, 0x70000, 0x10001, {0x0, 0xea60}, {0x3, 0x8, 0xb2, 0x86, 0x20, 0xb3, "ddfae958"}, 0xffc0, 0x2, {&(0x7f0000000100)=[{0x3, 0x74, {&(0x7f0000000080)}, 0x6}, {0x3f, 0xffffffff, {&(0x7f00000000c0)}, 0xfff}]}, 0x1000, 0x0, r3}) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x11) 23:35:43 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x6a, 0x0, 0x0, 0x0, 0x6, [{}, {0x0, 0x2}, {}, {0xfffffffd}], 0x0, 0x0, 0x0, 0x0, 0x1}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$SNDCTL_DSP_RESET(r1, 0x5000, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x64, 0x8) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x6a, 0x0, 0x0, 0x0, 0x6, [{}, {0x0, 0x2}, {}, {0xfffffffd}], 0x0, 0x0, 0x0, 0x0, 0x1}}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$SNDCTL_DSP_RESET(r1, 0x5000, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x64, 0x8) (async) 23:35:43 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x4c54264b}) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) (async) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000200)={0x0, @sdr={0x50323234}}) (async) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000180)=@multiplanar_mmap={0x6, 0x3, 0x4, 0xe000, 0x2, {r2, r3/1000+10000}, {0x4, 0x1, 0x78, 0x3f, 0x5, 0x1, "bc4cd878"}, 0x3, 0x1, {&(0x7f0000000080)=[{0x78000000, 0xffff, {0x6}, 0x9}, {0x0, 0x4, {0xbd}, 0x8}]}, 0x3, 0x0, r4}) 23:35:43 executing program 3: socket(0xa, 0x3, 0x0) 23:35:43 executing program 2: r0 = socket(0x18, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x58, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4841}, 0x8a0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x10, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x60, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r2}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4011}, 0x148c4) (async) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f00000001c0)={0x77359400}, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:43 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0xf1f, 0x2) (async) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0), 0x400000, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000300)=@multiplanar_userptr={0x4a3, 0x1, 0x4, 0x70000, 0x10001, {0x0, 0xea60}, {0x3, 0x8, 0xb2, 0x86, 0x20, 0xb3, "ddfae958"}, 0xffc0, 0x2, {&(0x7f0000000100)=[{0x3, 0x74, {&(0x7f0000000080)}, 0x6}, {0x3f, 0xffffffff, {&(0x7f00000000c0)}, 0xfff}]}, 0x1000, 0x0, r3}) (async) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x11) 23:35:43 executing program 4: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) (async) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000500)={0x10000, 0x4}) (async, rerun: 64) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000480)={0x0, "2e3c24ba40f1b19b355622e5bbf8d9d166fa2e019f3542958227334265cc5a17", 0x1}) (async, rerun: 64) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0285629, &(0x7f00000001c0)={0x4, @sliced={0x7fff, [0x1003, 0x1, 0x1, 0x2, 0xfffd, 0x401, 0x2, 0x2, 0xa630, 0xff, 0x6, 0x73, 0x2, 0x7, 0x6, 0x2, 0x7fff, 0xb41, 0x4, 0x6, 0x6, 0x4010, 0x2, 0x5, 0x7ff, 0x6, 0xf370, 0x9, 0xfb, 0x1, 0x3, 0x4, 0x800, 0x7, 0x8001, 0x1, 0x0, 0xf7, 0x101, 0xdc4d, 0x4, 0x101, 0xffe0, 0x9, 0x2, 0x5, 0x5, 0x1], 0x86f}}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000000)={0x3, @sdr={0x59565955, 0xfffffff9}}) (async, rerun: 32) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) (async, rerun: 32) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000540)={0xa63, 0x2, "ecad32a62c637fa5f89acbff65d288f7f8e76df814590174", {0x4c7, 0x5e7}, 0xfffffffb}) (async, rerun: 64) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000340)=@multiplanar_fd={0x5, 0x6, 0x4, 0x2000, 0x80000001, {r3, r4/1000+60000}, {0x0, 0x2, 0x6, 0x80, 0x7, 0x7, "4c299e02"}, 0x1c, 0x4, {&(0x7f00000002c0)=[{0x1, 0x6bdc, {r5}, 0x1}, {0x7f, 0x9, {}, 0x8}]}, 0x9, 0x0, r6}) (async, rerun: 32) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r5}, 0x8) (rerun: 32) ioctl$vim2m_VIDIOC_QUERYCAP(r7, 0x80685600, &(0x7f00000003c0)) 23:35:43 executing program 0: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) getpeername$tipc(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x4) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:43 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0xc, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x1, 0x4, 0x0, 0xffffffffffffffff}, @map_fd={0x18, 0x1}, @map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000080)='syzkaller\x00', 0x6eab3dd3, 0x4b, &(0x7f0000000140)=""/75, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0x1, 0xfffffff7, 0x7fffffff}, 0x10, 0x13e3d, 0xffffffffffffffff, 0x0, &(0x7f0000000200)=[0xffffffffffffffff]}, 0x80) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:35:43 executing program 2: r0 = socket(0x18, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x58, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4841}, 0x8a0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x10, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x60, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r2}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4011}, 0x148c4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f00000001c0)={0x77359400}, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) socket(0x18, 0x0, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x58, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4841}, 0x8a0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x10, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x60, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r2}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4011}, 0x148c4) (async) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f00000001c0)={0x77359400}, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) 23:35:43 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0xf1f, 0x2) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0), 0x400000, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000300)=@multiplanar_userptr={0x4a3, 0x1, 0x4, 0x70000, 0x10001, {0x0, 0xea60}, {0x3, 0x8, 0xb2, 0x86, 0x20, 0xb3, "ddfae958"}, 0xffc0, 0x2, {&(0x7f0000000100)=[{0x3, 0x74, {&(0x7f0000000080)}, 0x6}, {0x3f, 0xffffffff, {&(0x7f00000000c0)}, 0xfff}]}, 0x1000, 0x0, r3}) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x11) syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) (async) syz_open_dev$vim2m(&(0x7f0000000040), 0xf1f, 0x2) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0), 0x400000, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000300)=@multiplanar_userptr={0x4a3, 0x1, 0x4, 0x70000, 0x10001, {0x0, 0xea60}, {0x3, 0x8, 0xb2, 0x86, 0x20, 0xb3, "ddfae958"}, 0xffc0, 0x2, {&(0x7f0000000100)=[{0x3, 0x74, {&(0x7f0000000080)}, 0x6}, {0x3f, 0xffffffff, {&(0x7f00000000c0)}, 0xfff}]}, 0x1000, 0x0, r3}) (async) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x11) (async) 23:35:43 executing program 0: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) getpeername$tipc(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x4) (async) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:43 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4, @sliced={0x4, [0xff02, 0x4, 0x7ff, 0x200, 0x2, 0x9, 0x20, 0x1, 0x0, 0xe4e, 0x3f, 0x458, 0x72be, 0x800, 0x9, 0x400, 0x6, 0x0, 0x100, 0xff01, 0xfffd, 0xffff, 0x101, 0x4, 0x20, 0xfc00, 0x3, 0x4000, 0x2, 0x5, 0x7ff, 0x0, 0xff, 0x3f, 0x20, 0x9, 0x0, 0x3, 0x0, 0x800, 0x2, 0x3ff, 0x3f, 0x1, 0x8, 0xfff9, 0x5, 0x6], 0x9}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000000c0)={0x1, 0x8001, 0x56, 0x100000}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) 23:35:43 executing program 3: socket(0xa, 0x3, 0x0) 23:35:43 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0xc, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x1, 0x4, 0x0, 0xffffffffffffffff}, @map_fd={0x18, 0x1}, @map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000080)='syzkaller\x00', 0x6eab3dd3, 0x4b, &(0x7f0000000140)=""/75, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0x1, 0xfffffff7, 0x7fffffff}, 0x10, 0x13e3d, 0xffffffffffffffff, 0x0, &(0x7f0000000200)=[0xffffffffffffffff]}, 0x80) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0xc, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x1, 0x4, 0x0, 0xffffffffffffffff}, @map_fd={0x18, 0x1}, @map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000080)='syzkaller\x00', 0x6eab3dd3, 0x4b, &(0x7f0000000140)=""/75, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0x1, 0xfffffff7, 0x7fffffff}, 0x10, 0x13e3d, 0xffffffffffffffff, 0x0, &(0x7f0000000200)=[0xffffffffffffffff]}, 0x80) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) 23:35:43 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x2, @pix={0xe7fd, 0x80000000, 0x0, 0x3, 0x7, 0x0, 0xb, 0xffffffff, 0x0, 0x1, 0x2, 0x4}}) 23:35:43 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4, @sliced={0x4, [0xff02, 0x4, 0x7ff, 0x200, 0x2, 0x9, 0x20, 0x1, 0x0, 0xe4e, 0x3f, 0x458, 0x72be, 0x800, 0x9, 0x400, 0x6, 0x0, 0x100, 0xff01, 0xfffd, 0xffff, 0x101, 0x4, 0x20, 0xfc00, 0x3, 0x4000, 0x2, 0x5, 0x7ff, 0x0, 0xff, 0x3f, 0x20, 0x9, 0x0, 0x3, 0x0, 0x800, 0x2, 0x3ff, 0x3f, 0x1, 0x8, 0xfff9, 0x5, 0x6], 0x9}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000000c0)={0x1, 0x8001, 0x56, 0x100000}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4, @sliced={0x4, [0xff02, 0x4, 0x7ff, 0x200, 0x2, 0x9, 0x20, 0x1, 0x0, 0xe4e, 0x3f, 0x458, 0x72be, 0x800, 0x9, 0x400, 0x6, 0x0, 0x100, 0xff01, 0xfffd, 0xffff, 0x101, 0x4, 0x20, 0xfc00, 0x3, 0x4000, 0x2, 0x5, 0x7ff, 0x0, 0xff, 0x3f, 0x20, 0x9, 0x0, 0x3, 0x0, 0x800, 0x2, 0x3ff, 0x3f, 0x1, 0x8, 0xfff9, 0x5, 0x6], 0x9}}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000000c0)={0x1, 0x8001, 0x56, 0x100000}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) (async) 23:35:43 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x2, @pix={0xe7fd, 0x80000000, 0x0, 0x3, 0x7, 0x0, 0xb, 0xffffffff, 0x0, 0x1, 0x2, 0x4}}) 23:35:43 executing program 0: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async, rerun: 64) getpeername$tipc(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x4) (async, rerun: 64) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:43 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x9}}, 0x9, 0x8000, 0x20ee, 0xfff, 0x15b, 0x9, 0x7}, &(0x7f0000000000)=0x9c) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) socketpair(0x8, 0x2, 0x5, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x28, 0x3, 0xffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000d40)=ANY=[@ANYBLOB='gre0\x00'/16, @ANYRES32=0x0, @ANYBLOB="0007004f5a003c00670008032f9078ac14141364017febff00ac14149af4ffffffe0000081e00000018000000007070080000000000000a350e3c6b988173c09e6ed4489bab1089023f88a8fc12261ea0000bbe5fbe46cb769f0000000000000000000f732b13c47df63ce5a6335bf6ad754f688bdfaf26e4165384e0b852681c56415"]}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}], 0x8, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000680)={'syztnl2\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x8010, 0x8000, 0x6, 0x10000, {{0x27, 0x4, 0x3, 0x4, 0x9c, 0x67, 0x0, 0x80, 0x2f, 0x0, @broadcast, @remote, {[@noop, @timestamp={0x44, 0x1c, 0x9b, 0x0, 0x4, [0x1, 0x1, 0x2, 0x5, 0xff, 0x9]}, @timestamp_addr={0x44, 0x2c, 0xc, 0x1, 0x8, [{@multicast1, 0x6}, {@multicast1, 0x7}, {@private=0xa010102, 0x7}, {@remote, 0x9c}, {@local, 0x80000000}]}, @timestamp_addr={0x44, 0x14, 0xbd, 0x1, 0x5, [{@multicast1}, {@multicast2, 0x2}]}, @cipso={0x86, 0x1d, 0x1, [{0x7, 0x11, "52f650021626a85ee46a51d2db9a5a"}, {0x6, 0x6, "d80617df"}]}, @lsrr={0x83, 0xb, 0xe8, [@broadcast, @empty]}]}}}}}) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x0) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000bc0)={0x59f0, 0x0}, 0x8) r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r11, 0xae03, 0x0) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c00)={0xffffffffffffffff, 0x7fffffff, 0x10}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c80)=@bpf_lsm={0x1d, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000007079a9cffa85315e2db03dff00000000", @ANYRES32=r8, @ANYBLOB="00000000000400008500000067000000186700000e0000000000000088bd0000183300000300"/48], &(0x7f0000000a80)='GPL\x00', 0x4, 0x63, &(0x7f0000000ac0)=""/99, 0x41000, 0x4, '\x00', 0x0, 0x1b, r9, 0x8, &(0x7f0000000b40)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000b80)={0x4, 0xc, 0x8000, 0x7}, 0x10, r10, 0x0, 0x0, &(0x7f0000000c40)=[r11, r1, r12]}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) socket$l2tp6(0xa, 0x2, 0x73) r14 = syz_genetlink_get_family_id$team(&(0x7f00000009c0), r3) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000980)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000700)={0x20c, r14, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8, 0x1, r6}, {0x1ac, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x8810}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$VIDIOC_S_OUTPUT(r8, 0xc004562f, &(0x7f0000000d00)=0x9) 23:35:43 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4, @sliced={0x4, [0xff02, 0x4, 0x7ff, 0x200, 0x2, 0x9, 0x20, 0x1, 0x0, 0xe4e, 0x3f, 0x458, 0x72be, 0x800, 0x9, 0x400, 0x6, 0x0, 0x100, 0xff01, 0xfffd, 0xffff, 0x101, 0x4, 0x20, 0xfc00, 0x3, 0x4000, 0x2, 0x5, 0x7ff, 0x0, 0xff, 0x3f, 0x20, 0x9, 0x0, 0x3, 0x0, 0x800, 0x2, 0x3ff, 0x3f, 0x1, 0x8, 0xfff9, 0x5, 0x6], 0x9}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000000c0)={0x1, 0x8001, 0x56, 0x100000}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4, @sliced={0x4, [0xff02, 0x4, 0x7ff, 0x200, 0x2, 0x9, 0x20, 0x1, 0x0, 0xe4e, 0x3f, 0x458, 0x72be, 0x800, 0x9, 0x400, 0x6, 0x0, 0x100, 0xff01, 0xfffd, 0xffff, 0x101, 0x4, 0x20, 0xfc00, 0x3, 0x4000, 0x2, 0x5, 0x7ff, 0x0, 0xff, 0x3f, 0x20, 0x9, 0x0, 0x3, 0x0, 0x800, 0x2, 0x3ff, 0x3f, 0x1, 0x8, 0xfff9, 0x5, 0x6], 0x9}}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000000c0)={0x1, 0x8001, 0x56, 0x100000}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) (async) 23:35:43 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0xc, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x1, 0x4, 0x0, 0xffffffffffffffff}, @map_fd={0x18, 0x1}, @map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000080)='syzkaller\x00', 0x6eab3dd3, 0x4b, &(0x7f0000000140)=""/75, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0x1, 0xfffffff7, 0x7fffffff}, 0x10, 0x13e3d, 0xffffffffffffffff, 0x0, &(0x7f0000000200)=[0xffffffffffffffff]}, 0x80) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:35:43 executing program 3: socket(0xa, 0x3, 0x0) 23:35:43 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x42, 0x228decc88208a676, 0x3, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x20385655}) 23:35:43 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x2, @pix={0xe7fd, 0x80000000, 0x0, 0x3, 0x7, 0x0, 0xb, 0xffffffff, 0x0, 0x1, 0x2, 0x4}}) 23:35:43 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x9}}, 0x9, 0x8000, 0x20ee, 0xfff, 0x15b, 0x9, 0x7}, &(0x7f0000000000)=0x9c) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) (async) socketpair(0x8, 0x2, 0x5, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x28, 0x3, 0xffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000d40)=ANY=[@ANYBLOB='gre0\x00'/16, @ANYRES32=0x0, @ANYBLOB="0007004f5a003c00670008032f9078ac14141364017febff00ac14149af4ffffffe0000081e00000018000000007070080000000000000a350e3c6b988173c09e6ed4489bab1089023f88a8fc12261ea0000bbe5fbe46cb769f0000000000000000000f732b13c47df63ce5a6335bf6ad754f688bdfaf26e4165384e0b852681c56415"]}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}], 0x8, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000680)={'syztnl2\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x8010, 0x8000, 0x6, 0x10000, {{0x27, 0x4, 0x3, 0x4, 0x9c, 0x67, 0x0, 0x80, 0x2f, 0x0, @broadcast, @remote, {[@noop, @timestamp={0x44, 0x1c, 0x9b, 0x0, 0x4, [0x1, 0x1, 0x2, 0x5, 0xff, 0x9]}, @timestamp_addr={0x44, 0x2c, 0xc, 0x1, 0x8, [{@multicast1, 0x6}, {@multicast1, 0x7}, {@private=0xa010102, 0x7}, {@remote, 0x9c}, {@local, 0x80000000}]}, @timestamp_addr={0x44, 0x14, 0xbd, 0x1, 0x5, [{@multicast1}, {@multicast2, 0x2}]}, @cipso={0x86, 0x1d, 0x1, [{0x7, 0x11, "52f650021626a85ee46a51d2db9a5a"}, {0x6, 0x6, "d80617df"}]}, @lsrr={0x83, 0xb, 0xe8, [@broadcast, @empty]}]}}}}}) (async) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x0) (async) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000bc0)={0x59f0, 0x0}, 0x8) r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r11, 0xae03, 0x0) (async) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c00)={0xffffffffffffffff, 0x7fffffff, 0x10}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c80)=@bpf_lsm={0x1d, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000007079a9cffa85315e2db03dff00000000", @ANYRES32=r8, @ANYBLOB="00000000000400008500000067000000186700000e0000000000000088bd0000183300000300"/48], &(0x7f0000000a80)='GPL\x00', 0x4, 0x63, &(0x7f0000000ac0)=""/99, 0x41000, 0x4, '\x00', 0x0, 0x1b, r9, 0x8, &(0x7f0000000b40)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000b80)={0x4, 0xc, 0x8000, 0x7}, 0x10, r10, 0x0, 0x0, &(0x7f0000000c40)=[r11, r1, r12]}, 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) socket$l2tp6(0xa, 0x2, 0x73) (async) r14 = syz_genetlink_get_family_id$team(&(0x7f00000009c0), r3) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000980)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000700)={0x20c, r14, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8, 0x1, r6}, {0x1ac, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x8810}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) ioctl$VIDIOC_S_OUTPUT(r8, 0xc004562f, &(0x7f0000000d00)=0x9) 23:35:43 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x1b) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x4, @pix={0x180, 0x4, 0x38414762, 0x8, 0x2000003, 0xff000000, 0x3, 0x8, 0x1, 0x7, 0x0, 0x4}}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) 23:35:43 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x84000}) 23:35:43 executing program 1: r0 = syz_open_dev$vim2m(0xffffffffffffffff, 0xfffe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) 23:35:43 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x9}}, 0x9, 0x8000, 0x20ee, 0xfff, 0x15b, 0x9, 0x7}, &(0x7f0000000000)=0x9c) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) (async) socketpair(0x8, 0x2, 0x5, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x28, 0x3, 0xffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000d40)=ANY=[@ANYBLOB='gre0\x00'/16, @ANYRES32=0x0, @ANYBLOB="0007004f5a003c00670008032f9078ac14141364017febff00ac14149af4ffffffe0000081e00000018000000007070080000000000000a350e3c6b988173c09e6ed4489bab1089023f88a8fc12261ea0000bbe5fbe46cb769f0000000000000000000f732b13c47df63ce5a6335bf6ad754f688bdfaf26e4165384e0b852681c56415"]}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}], 0x8, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000680)={'syztnl2\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x8010, 0x8000, 0x6, 0x10000, {{0x27, 0x4, 0x3, 0x4, 0x9c, 0x67, 0x0, 0x80, 0x2f, 0x0, @broadcast, @remote, {[@noop, @timestamp={0x44, 0x1c, 0x9b, 0x0, 0x4, [0x1, 0x1, 0x2, 0x5, 0xff, 0x9]}, @timestamp_addr={0x44, 0x2c, 0xc, 0x1, 0x8, [{@multicast1, 0x6}, {@multicast1, 0x7}, {@private=0xa010102, 0x7}, {@remote, 0x9c}, {@local, 0x80000000}]}, @timestamp_addr={0x44, 0x14, 0xbd, 0x1, 0x5, [{@multicast1}, {@multicast2, 0x2}]}, @cipso={0x86, 0x1d, 0x1, [{0x7, 0x11, "52f650021626a85ee46a51d2db9a5a"}, {0x6, 0x6, "d80617df"}]}, @lsrr={0x83, 0xb, 0xe8, [@broadcast, @empty]}]}}}}}) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x0) (async) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x0) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000bc0)={0x59f0, 0x0}, 0x8) (async) r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r11, 0xae03, 0x0) (async) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c00)={0xffffffffffffffff, 0x7fffffff, 0x10}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c80)=@bpf_lsm={0x1d, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000007079a9cffa85315e2db03dff00000000", @ANYRES32=r8, @ANYBLOB="00000000000400008500000067000000186700000e0000000000000088bd0000183300000300"/48], &(0x7f0000000a80)='GPL\x00', 0x4, 0x63, &(0x7f0000000ac0)=""/99, 0x41000, 0x4, '\x00', 0x0, 0x1b, r9, 0x8, &(0x7f0000000b40)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000b80)={0x4, 0xc, 0x8000, 0x7}, 0x10, r10, 0x0, 0x0, &(0x7f0000000c40)=[r11, r1, r12]}, 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) (async) socket$l2tp6(0xa, 0x2, 0x73) r14 = syz_genetlink_get_family_id$team(&(0x7f00000009c0), r3) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000980)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000700)={0x20c, r14, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8, 0x1, r6}, {0x1ac, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x8810}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) ioctl$VIDIOC_S_OUTPUT(r8, 0xc004562f, &(0x7f0000000d00)=0x9) 23:35:43 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x84000}) 23:35:43 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x42, 0x228decc88208a676, 0x3, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x20385655}) 23:35:43 executing program 3: r0 = socket(0x29, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040), 0x0, 0x8, &(0x7f0000000180)=[{}, {}], 0x10, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) sendmsg$can_bcm(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x1d, r2}, 0x10, &(0x7f0000000480)={&(0x7f0000000400)={0x4, 0x40, 0x3, {}, {}, {0x4, 0x1, 0x0, 0x1}, 0x1, @canfd={{0x2, 0x1, 0x0, 0x1}, 0x2e, 0x0, 0x0, 0x0, "f3abff899b3bdb919a11ba456b02fc67dcacf9d9c1c1ba9803d238095d03c86aacc279b1b2be7718d4948a6fce06afd35f37dfcab6b8879e5d7a9f968a52e38a"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000040}, 0x200440c1) 23:35:43 executing program 1: r0 = syz_open_dev$vim2m(0xffffffffffffffff, 0xfffe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) 23:35:43 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x1b) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x4, @pix={0x180, 0x4, 0x38414762, 0x8, 0x2000003, 0xff000000, 0x3, 0x8, 0x1, 0x7, 0x0, 0x4}}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) 23:35:43 executing program 2: r0 = socket(0x18, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:43 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x42, 0x228decc88208a676, 0x3, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x20385655}) 23:35:43 executing program 3: r0 = socket(0x29, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040), 0x0, 0x8, &(0x7f0000000180)=[{}, {}], 0x10, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) sendmsg$can_bcm(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x1d, r2}, 0x10, &(0x7f0000000480)={&(0x7f0000000400)={0x4, 0x40, 0x3, {}, {}, {0x4, 0x1, 0x0, 0x1}, 0x1, @canfd={{0x2, 0x1, 0x0, 0x1}, 0x2e, 0x0, 0x0, 0x0, "f3abff899b3bdb919a11ba456b02fc67dcacf9d9c1c1ba9803d238095d03c86aacc279b1b2be7718d4948a6fce06afd35f37dfcab6b8879e5d7a9f968a52e38a"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000040}, 0x200440c1) 23:35:43 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x84000}) 23:35:43 executing program 1: r0 = syz_open_dev$vim2m(0xffffffffffffffff, 0xfffe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) syz_open_dev$vim2m(0xffffffffffffffff, 0xfffe, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) (async) 23:35:43 executing program 2: r0 = socket(0x18, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x10) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:43 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x1b) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x4, @pix={0x180, 0x4, 0x38414762, 0x8, 0x2000003, 0xff000000, 0x3, 0x8, 0x1, 0x7, 0x0, 0x4}}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) 23:35:43 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000000)) 23:35:43 executing program 5: socket(0x9, 0x5, 0x8) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x5, 0xdc}) 23:35:43 executing program 3: r0 = socket(0x29, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040), 0x0, 0x8, &(0x7f0000000180)=[{}, {}], 0x10, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) sendmsg$can_bcm(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x1d, r2}, 0x10, &(0x7f0000000480)={&(0x7f0000000400)={0x4, 0x40, 0x3, {}, {}, {0x4, 0x1, 0x0, 0x1}, 0x1, @canfd={{0x2, 0x1, 0x0, 0x1}, 0x2e, 0x0, 0x0, 0x0, "f3abff899b3bdb919a11ba456b02fc67dcacf9d9c1c1ba9803d238095d03c86aacc279b1b2be7718d4948a6fce06afd35f37dfcab6b8879e5d7a9f968a52e38a"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000040}, 0x200440c1) 23:35:43 executing program 2: r0 = socket(0x18, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) socket(0x18, 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x10) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) 23:35:43 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000000)) 23:35:43 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x2, @pix={0x6, 0x5, 0x3031334d, 0x3, 0x9, 0x4, 0x3, 0x651c, 0x1, 0x0, 0x1, 0x4}}) 23:35:43 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, &(0x7f0000000080)) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000040)=0x5) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) 23:35:43 executing program 5: socket(0x9, 0x5, 0x8) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x5, 0xdc}) 23:35:43 executing program 2: r0 = socket(0x18, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_dccp_int(r3, 0x21, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400d0}, 0xd188639f478ba79f) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) accept4$vsock_stream(r2, &(0x7f00000002c0)={0x28, 0x0, 0x0, @local}, 0x10, 0x80000) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r6, r5, 0x0, 0x8, &(0x7f0000000300)='!@[\x12,\\-\x00'}, 0x30) r7 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000380)=0x1000, 0x4) getsockopt$inet_dccp_buf(r7, 0x21, 0xd, &(0x7f0000000200)=""/81, &(0x7f0000000280)=0x51) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r4) 23:35:43 executing program 3: r0 = socket(0x29, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040), 0x0, 0x8, &(0x7f0000000180)=[{}, {}], 0x10, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) 23:35:43 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x2, @pix={0x6, 0x5, 0x3031334d, 0x3, 0x9, 0x4, 0x3, 0x651c, 0x1, 0x0, 0x1, 0x4}}) 23:35:43 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, &(0x7f0000000080)) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000040)=0x5) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, &(0x7f0000000080)) (async) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000040)=0x5) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) (async) 23:35:43 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000000)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000000)) (async) 23:35:44 executing program 5: socket(0x9, 0x5, 0x8) (async, rerun: 64) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (rerun: 64) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async, rerun: 32) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x5, 0xdc}) (rerun: 32) 23:35:44 executing program 2: r0 = socket(0x18, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_dccp_int(r3, 0x21, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400d0}, 0xd188639f478ba79f) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) accept4$vsock_stream(r2, &(0x7f00000002c0)={0x28, 0x0, 0x0, @local}, 0x10, 0x80000) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r6, r5, 0x0, 0x8, &(0x7f0000000300)='!@[\x12,\\-\x00'}, 0x30) r7 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000380)=0x1000, 0x4) getsockopt$inet_dccp_buf(r7, 0x21, 0xd, &(0x7f0000000200)=""/81, &(0x7f0000000280)=0x51) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r4) socket(0x18, 0x0, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) (async) socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)) (async) getsockopt$inet_dccp_int(r3, 0x21, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400d0}, 0xd188639f478ba79f) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) (async) accept4$vsock_stream(r2, &(0x7f00000002c0)={0x28, 0x0, 0x0, @local}, 0x10, 0x80000) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) gettid() (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r6, r5, 0x0, 0x8, &(0x7f0000000300)='!@[\x12,\\-\x00'}, 0x30) (async) socket$inet_dccp(0x2, 0x6, 0x0) (async) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000380)=0x1000, 0x4) (async) getsockopt$inet_dccp_buf(r7, 0x21, 0xd, &(0x7f0000000200)=""/81, &(0x7f0000000280)=0x51) (async) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r4) (async) 23:35:44 executing program 3: r0 = socket(0x29, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) 23:35:44 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x1, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:44 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x2, @pix={0x6, 0x5, 0x3031334d, 0x3, 0x9, 0x4, 0x3, 0x651c, 0x1, 0x0, 0x1, 0x4}}) 23:35:44 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x1, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:44 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) (async, rerun: 64) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 64) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, &(0x7f0000000080)) (async) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000040)=0x5) (async, rerun: 64) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) (rerun: 64) 23:35:44 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x8001, 0x0, 0x1, "2ccb754af9e68da627e03b86bf29e6757e6f92c2d31a87362faca283bd51b6c6", 0x34343459}) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x9, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000300)={0x0, 0x6, 0x9, 0x80000}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000140)=0x6, 0x4) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000040)={0x3, @pix_mp={0xf265, 0xff, 0x3231564e, 0x9, 0xa, [{0x3f, 0x4}, {0x5, 0x1}, {0xe2, 0x8}, {0x3, 0x2}, {0x1, 0x8}, {0x7, 0x2ec}, {0x2, 0x80000000}, {0x5, 0x8000}], 0xb1, 0x81, 0x1, 0x1, 0x1}}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000380)={0x750, 0x1, 0x2, "d850ad0f719d2e76ca727d0219c51b32bf5171b24c8b8fcf984ab2cb6b1eb329", 0x584e4f53}) 23:35:44 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x1, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:44 executing program 3: r0 = socket(0x29, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 23:35:44 executing program 2: r0 = socket(0x18, 0x0, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) (async) socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_dccp_int(r3, 0x21, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400d0}, 0xd188639f478ba79f) (async) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) accept4$vsock_stream(r2, &(0x7f00000002c0)={0x28, 0x0, 0x0, @local}, 0x10, 0x80000) (async) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r6 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r6, r5, 0x0, 0x8, &(0x7f0000000300)='!@[\x12,\\-\x00'}, 0x30) r7 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000380)=0x1000, 0x4) (async) getsockopt$inet_dccp_buf(r7, 0x21, 0xd, &(0x7f0000000200)=""/81, &(0x7f0000000280)=0x51) (async) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r4) 23:35:44 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000040)=@userptr={0x3, 0x3, 0x4, 0x4, 0xffff, {}, {0x5, 0x8, 0x9, 0x0, 0x5, 0x4, "5d951a0d"}, 0x1fb2, 0x2, {}, 0x2b069cdc}) 23:35:44 executing program 3: r0 = socket(0x29, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:44 executing program 1: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0xa, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000700)=[{}], 0x8, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) 23:35:44 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000040)=@userptr={0x3, 0x3, 0x4, 0x4, 0xffff, {}, {0x5, 0x8, 0x9, 0x0, 0x5, 0x4, "5d951a0d"}, 0x1fb2, 0x2, {}, 0x2b069cdc}) 23:35:44 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x8001, 0x0, 0x1, "2ccb754af9e68da627e03b86bf29e6757e6f92c2d31a87362faca283bd51b6c6", 0x34343459}) (async) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x9, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000300)={0x0, 0x6, 0x9, 0x80000}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000140)=0x6, 0x4) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000040)={0x3, @pix_mp={0xf265, 0xff, 0x3231564e, 0x9, 0xa, [{0x3f, 0x4}, {0x5, 0x1}, {0xe2, 0x8}, {0x3, 0x2}, {0x1, 0x8}, {0x7, 0x2ec}, {0x2, 0x80000000}, {0x5, 0x8000}], 0xb1, 0x81, 0x1, 0x1, 0x1}}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz0\x00', 0x200002, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000380)={0x750, 0x1, 0x2, "d850ad0f719d2e76ca727d0219c51b32bf5171b24c8b8fcf984ab2cb6b1eb329", 0x584e4f53}) 23:35:44 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000002c0)={0x2, @pix_mp={0xe8}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x101, 0x3, 0x1, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:44 executing program 2: r0 = socket(0x18, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x44) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) r2 = socket$pptp(0x18, 0x1, 0x2) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r3, 0x28, 0x6, &(0x7f0000000040)={0x0, 0xea60}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) r7 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000680)={0x34c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0xf0, 0x2, 0x0, 0x1, [{0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x2, 0x58, 0x8, 0x8001}, {0x1ff, 0x9, 0x70, 0x8}, {0x80, 0x71, 0x5, 0xffff}, {0xa40, 0x8, 0x2, 0x6}, {0xffff, 0x9, 0x1, 0x7}, {0x3, 0x3a, 0x5}, {0xd2c, 0xc6, 0x2, 0x7}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x0, 0xf, 0x4, 0x7}, {0x6, 0x1, 0x5, 0xae41}, {0x7, 0x0, 0x7f, 0x1}, {0x7, 0x3, 0x80, 0x4}, {0x3, 0x7, 0x3, 0xffff}]}}}]}}, {{0x8, 0x1, r8}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x1, 0x3, 0x20, 0x2d}, {0x1, 0x0, 0x1, 0x4}, {0x8000, 0x6, 0x8, 0x800}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}]}, 0x34c}}, 0x14) connect$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @empty}}, 0x1e) 23:35:44 executing program 3: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:44 executing program 1: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0xa, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000700)=[{}], 0x8, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) 23:35:44 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000040)=@userptr={0x3, 0x3, 0x4, 0x4, 0xffff, {}, {0x5, 0x8, 0x9, 0x0, 0x5, 0x4, "5d951a0d"}, 0x1fb2, 0x2, {}, 0x2b069cdc}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000040)=@userptr={0x3, 0x3, 0x4, 0x4, 0xffff, {}, {0x5, 0x8, 0x9, 0x0, 0x5, 0x4, "5d951a0d"}, 0x1fb2, 0x2, {}, 0x2b069cdc}) (async) 23:35:44 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x8001, 0x0, 0x1, "2ccb754af9e68da627e03b86bf29e6757e6f92c2d31a87362faca283bd51b6c6", 0x34343459}) (async) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x9, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000300)={0x0, 0x6, 0x9, 0x80000}) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) (async) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000140)=0x6, 0x4) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000040)={0x3, @pix_mp={0xf265, 0xff, 0x3231564e, 0x9, 0xa, [{0x3f, 0x4}, {0x5, 0x1}, {0xe2, 0x8}, {0x3, 0x2}, {0x1, 0x8}, {0x7, 0x2ec}, {0x2, 0x80000000}, {0x5, 0x8000}], 0xb1, 0x81, 0x1, 0x1, 0x1}}) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000380)={0x750, 0x1, 0x2, "d850ad0f719d2e76ca727d0219c51b32bf5171b24c8b8fcf984ab2cb6b1eb329", 0x584e4f53}) 23:35:44 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async, rerun: 32) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (rerun: 32) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000002c0)={0x2, @pix_mp={0xe8}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x101, 0x3, 0x1, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:44 executing program 2: r0 = socket(0x18, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x44) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) r2 = socket$pptp(0x18, 0x1, 0x2) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r3, 0x28, 0x6, &(0x7f0000000040)={0x0, 0xea60}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) r7 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000680)={0x34c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0xf0, 0x2, 0x0, 0x1, [{0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x2, 0x58, 0x8, 0x8001}, {0x1ff, 0x9, 0x70, 0x8}, {0x80, 0x71, 0x5, 0xffff}, {0xa40, 0x8, 0x2, 0x6}, {0xffff, 0x9, 0x1, 0x7}, {0x3, 0x3a, 0x5}, {0xd2c, 0xc6, 0x2, 0x7}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x0, 0xf, 0x4, 0x7}, {0x6, 0x1, 0x5, 0xae41}, {0x7, 0x0, 0x7f, 0x1}, {0x7, 0x3, 0x80, 0x4}, {0x3, 0x7, 0x3, 0xffff}]}}}]}}, {{0x8, 0x1, r8}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x1, 0x3, 0x20, 0x2d}, {0x1, 0x0, 0x1, 0x4}, {0x8000, 0x6, 0x8, 0x800}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}]}, 0x34c}}, 0x14) connect$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @empty}}, 0x1e) socket(0x18, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x44) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) (async) socket$pptp(0x18, 0x1, 0x2) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) (async) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r3, 0x28, 0x6, &(0x7f0000000040)={0x0, 0xea60}, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) (async) socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) (async) socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8}, 0x48) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) (async) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000680)={0x34c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0xf0, 0x2, 0x0, 0x1, [{0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x2, 0x58, 0x8, 0x8001}, {0x1ff, 0x9, 0x70, 0x8}, {0x80, 0x71, 0x5, 0xffff}, {0xa40, 0x8, 0x2, 0x6}, {0xffff, 0x9, 0x1, 0x7}, {0x3, 0x3a, 0x5}, {0xd2c, 0xc6, 0x2, 0x7}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x0, 0xf, 0x4, 0x7}, {0x6, 0x1, 0x5, 0xae41}, {0x7, 0x0, 0x7f, 0x1}, {0x7, 0x3, 0x80, 0x4}, {0x3, 0x7, 0x3, 0xffff}]}}}]}}, {{0x8, 0x1, r8}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x1, 0x3, 0x20, 0x2d}, {0x1, 0x0, 0x1, 0x4}, {0x8000, 0x6, 0x8, 0x800}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}]}, 0x34c}}, 0x14) (async) connect$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @empty}}, 0x1e) (async) 23:35:44 executing program 3: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:44 executing program 1: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0xa, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000700)=[{}], 0x8, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0xa, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000700)=[{}], 0x8, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) (async) syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) (async) 23:35:44 executing program 5: syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x2, @pix_mp={0x1, 0x0, 0x33424752, 0x8, 0x1, [{}, {}, {}, {}, {}, {}, {0xfff}]}}) 23:35:44 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000000)='syz0\x00') 23:35:44 executing program 3: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:44 executing program 2: r0 = socket(0x18, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x44) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) r2 = socket$pptp(0x18, 0x1, 0x2) (async) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) (async) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r3, 0x28, 0x6, &(0x7f0000000040)={0x0, 0xea60}, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) (async) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) (async) r7 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8}, 0x48) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000680)={0x34c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0xf0, 0x2, 0x0, 0x1, [{0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x2, 0x58, 0x8, 0x8001}, {0x1ff, 0x9, 0x70, 0x8}, {0x80, 0x71, 0x5, 0xffff}, {0xa40, 0x8, 0x2, 0x6}, {0xffff, 0x9, 0x1, 0x7}, {0x3, 0x3a, 0x5}, {0xd2c, 0xc6, 0x2, 0x7}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x0, 0xf, 0x4, 0x7}, {0x6, 0x1, 0x5, 0xae41}, {0x7, 0x0, 0x7f, 0x1}, {0x7, 0x3, 0x80, 0x4}, {0x3, 0x7, 0x3, 0xffff}]}}}]}}, {{0x8, 0x1, r8}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x1, 0x3, 0x20, 0x2d}, {0x1, 0x0, 0x1, 0x4}, {0x8000, 0x6, 0x8, 0x800}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}]}, 0x34c}}, 0x14) connect$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @empty}}, 0x1e) 23:35:44 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000000)='syz0\x00') syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) (async) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000000)='syz0\x00') (async) 23:35:44 executing program 5: syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x2, @pix_mp={0x1, 0x0, 0x33424752, 0x8, 0x1, [{}, {}, {}, {}, {}, {}, {0xfff}]}}) 23:35:44 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000002c0)={0x2, @pix_mp={0xe8}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x101, 0x3, 0x1, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000002c0)={0x2, @pix_mp={0xe8}}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x101, 0x3, 0x1, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:35:44 executing program 3: r0 = socket(0x0, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:44 executing program 1: ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000100)) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0xb00, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x4, 0x434, 0x6, {}, {r1, r2/1000+60000}, {0x2, 0x1, 0x1}, 0x1, @canfd={{}, 0x1a, 0x2, 0x0, 0x0, "86c7359f7cfb17f0b620e6ff466743f93a8d1c9e21739a538e4494068607b842105b9fd62af98bb6e891243956ab05471d7f0841d252004532ac090b7be4a67f"}}, 0x80}}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0285628, &(0x7f0000000000)={0x1, @sliced={0x7, [0x0, 0x2, 0x2, 0x7, 0x8898, 0x81, 0x8, 0x40, 0x20, 0x4, 0x1, 0x24, 0xdd, 0x7, 0x0, 0x800, 0x7fff, 0x3, 0x4, 0x8100, 0x6, 0x1f, 0x0, 0x30, 0x8, 0x4, 0x80, 0x6, 0x88, 0x9, 0x2, 0x6, 0xd2d, 0x6, 0x2, 0x0, 0x7f, 0xf9, 0x4, 0x69ca, 0x800, 0x3, 0x800, 0x8, 0x9e, 0x67ba, 0x2, 0x8], 0xff}}) 23:35:44 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000000)='syz0\x00') 23:35:44 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000200)) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)=@userptr={0x2003f, 0x2, 0x4, 0x10000, 0x4, {0x0, 0xea60}, {0x4, 0x2, 0x5, 0x7, 0xff, 0xff, "00c23577"}, 0x100, 0x2, {&(0x7f0000000240)}, 0x41}) r1 = socket(0x4, 0x2, 0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:44 executing program 5: syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async, rerun: 32) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xffffffffffffffff, 0x2) (rerun: 32) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x2, @pix_mp={0x1, 0x0, 0x33424752, 0x8, 0x1, [{}, {}, {}, {}, {}, {}, {0xfff}]}}) 23:35:44 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x2, 0xa034}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x2, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x32525942}) 23:35:44 executing program 1: ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000100)) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0xb00, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x4, 0x434, 0x6, {}, {r1, r2/1000+60000}, {0x2, 0x1, 0x1}, 0x1, @canfd={{}, 0x1a, 0x2, 0x0, 0x0, "86c7359f7cfb17f0b620e6ff466743f93a8d1c9e21739a538e4494068607b842105b9fd62af98bb6e891243956ab05471d7f0841d252004532ac090b7be4a67f"}}, 0x80}}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0285628, &(0x7f0000000000)={0x1, @sliced={0x7, [0x0, 0x2, 0x2, 0x7, 0x8898, 0x81, 0x8, 0x40, 0x20, 0x4, 0x1, 0x24, 0xdd, 0x7, 0x0, 0x800, 0x7fff, 0x3, 0x4, 0x8100, 0x6, 0x1f, 0x0, 0x30, 0x8, 0x4, 0x80, 0x6, 0x88, 0x9, 0x2, 0x6, 0xd2d, 0x6, 0x2, 0x0, 0x7f, 0xf9, 0x4, 0x69ca, 0x800, 0x3, 0x800, 0x8, 0x9e, 0x67ba, 0x2, 0x8], 0xff}}) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000100)) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0xb00, 0x0) (async) clock_gettime(0x0, &(0x7f00000001c0)) (async) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x4, 0x434, 0x6, {}, {r1, r2/1000+60000}, {0x2, 0x1, 0x1}, 0x1, @canfd={{}, 0x1a, 0x2, 0x0, 0x0, "86c7359f7cfb17f0b620e6ff466743f93a8d1c9e21739a538e4494068607b842105b9fd62af98bb6e891243956ab05471d7f0841d252004532ac090b7be4a67f"}}, 0x80}}, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0285628, &(0x7f0000000000)={0x1, @sliced={0x7, [0x0, 0x2, 0x2, 0x7, 0x8898, 0x81, 0x8, 0x40, 0x20, 0x4, 0x1, 0x24, 0xdd, 0x7, 0x0, 0x800, 0x7fff, 0x3, 0x4, 0x8100, 0x6, 0x1f, 0x0, 0x30, 0x8, 0x4, 0x80, 0x6, 0x88, 0x9, 0x2, 0x6, 0xd2d, 0x6, 0x2, 0x0, 0x7f, 0xf9, 0x4, 0x69ca, 0x800, 0x3, 0x800, 0x8, 0x9e, 0x67ba, 0x2, 0x8], 0xff}}) (async) 23:35:44 executing program 4: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000040)={0x3, 0xff, "6c63fac456c8fa751bd3aa0543b9c54ca3299923f0990c3d", {0x81, 0xff}, 0x8}) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0285629, &(0x7f00000001c0)={0x4}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 23:35:44 executing program 3: r0 = socket(0x0, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:44 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000200)) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)=@userptr={0x2003f, 0x2, 0x4, 0x10000, 0x4, {0x0, 0xea60}, {0x4, 0x2, 0x5, 0x7, 0xff, 0xff, "00c23577"}, 0x100, 0x2, {&(0x7f0000000240)}, 0x41}) r1 = socket(0x4, 0x2, 0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) clock_gettime(0x0, &(0x7f0000000040)) (async) clock_gettime(0x0, &(0x7f0000000200)) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)=@userptr={0x2003f, 0x2, 0x4, 0x10000, 0x4, {0x0, 0xea60}, {0x4, 0x2, 0x5, 0x7, 0xff, 0xff, "00c23577"}, 0x100, 0x2, {&(0x7f0000000240)}, 0x41}) (async) socket(0x4, 0x2, 0x4) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) 23:35:44 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x2, 0xa034}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x2, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x32525942}) 23:35:44 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f00000000c0)={0x0, "27c86802e76545484bcc725c6bb4631a07f22eeff63bc6aa668e71a8a1309adb", 0x3}) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000040)={0x40, 0x800, "92d9421d4de9dab10b5ad295651612795b10c9a395b7b660", {0xfffff716, 0x81}, 0x5}) 23:35:44 executing program 1: ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000100)) (async) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0xb00, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x4, 0x434, 0x6, {}, {r1, r2/1000+60000}, {0x2, 0x1, 0x1}, 0x1, @canfd={{}, 0x1a, 0x2, 0x0, 0x0, "86c7359f7cfb17f0b620e6ff466743f93a8d1c9e21739a538e4494068607b842105b9fd62af98bb6e891243956ab05471d7f0841d252004532ac090b7be4a67f"}}, 0x80}}, 0x0) (async, rerun: 64) r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) (rerun: 64) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0285628, &(0x7f0000000000)={0x1, @sliced={0x7, [0x0, 0x2, 0x2, 0x7, 0x8898, 0x81, 0x8, 0x40, 0x20, 0x4, 0x1, 0x24, 0xdd, 0x7, 0x0, 0x800, 0x7fff, 0x3, 0x4, 0x8100, 0x6, 0x1f, 0x0, 0x30, 0x8, 0x4, 0x80, 0x6, 0x88, 0x9, 0x2, 0x6, 0xd2d, 0x6, 0x2, 0x0, 0x7f, 0xf9, 0x4, 0x69ca, 0x800, 0x3, 0x800, 0x8, 0x9e, 0x67ba, 0x2, 0x8], 0xff}}) 23:35:44 executing program 4: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000040)={0x3, 0xff, "6c63fac456c8fa751bd3aa0543b9c54ca3299923f0990c3d", {0x81, 0xff}, 0x8}) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0285629, &(0x7f00000001c0)={0x4}) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 23:35:44 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000200)) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)=@userptr={0x2003f, 0x2, 0x4, 0x10000, 0x4, {0x0, 0xea60}, {0x4, 0x2, 0x5, 0x7, 0xff, 0xff, "00c23577"}, 0x100, 0x2, {&(0x7f0000000240)}, 0x41}) r1 = socket(0x4, 0x2, 0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) clock_gettime(0x0, &(0x7f0000000040)) (async) clock_gettime(0x0, &(0x7f0000000200)) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)=@userptr={0x2003f, 0x2, 0x4, 0x10000, 0x4, {0x0, 0xea60}, {0x4, 0x2, 0x5, 0x7, 0xff, 0xff, "00c23577"}, 0x100, 0x2, {&(0x7f0000000240)}, 0x41}) (async) socket(0x4, 0x2, 0x4) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) 23:35:44 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x2, 0xa034}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x2, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x32525942}) 23:35:44 executing program 3: r0 = socket(0x0, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:44 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f00000000c0)={0x0, "27c86802e76545484bcc725c6bb4631a07f22eeff63bc6aa668e71a8a1309adb", 0x3}) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000040)={0x40, 0x800, "92d9421d4de9dab10b5ad295651612795b10c9a395b7b660", {0xfffff716, 0x81}, 0x5}) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f00000000c0)={0x0, "27c86802e76545484bcc725c6bb4631a07f22eeff63bc6aa668e71a8a1309adb", 0x3}) (async) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000040)={0x40, 0x800, "92d9421d4de9dab10b5ad295651612795b10c9a395b7b660", {0xfffff716, 0x81}, 0x5}) (async) 23:35:44 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000040)=0x8aa, 0x8) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) 23:35:45 executing program 4: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000040)={0x3, 0xff, "6c63fac456c8fa751bd3aa0543b9c54ca3299923f0990c3d", {0x81, 0xff}, 0x8}) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0285629, &(0x7f00000001c0)={0x4}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000040)={0x3, 0xff, "6c63fac456c8fa751bd3aa0543b9c54ca3299923f0990c3d", {0x81, 0xff}, 0x8}) (async) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0285629, &(0x7f00000001c0)={0x4}) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) 23:35:45 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) connect$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x3, @local}}, 0x1e) 23:35:45 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000040)=0x8aa, 0x8) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) 23:35:45 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f00000000c0)={0x0, "27c86802e76545484bcc725c6bb4631a07f22eeff63bc6aa668e71a8a1309adb", 0x3}) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000040)={0x40, 0x800, "92d9421d4de9dab10b5ad295651612795b10c9a395b7b660", {0xfffff716, 0x81}, 0x5}) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f00000000c0)={0x0, "27c86802e76545484bcc725c6bb4631a07f22eeff63bc6aa668e71a8a1309adb", 0x3}) (async) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000040)={0x40, 0x800, "92d9421d4de9dab10b5ad295651612795b10c9a395b7b660", {0xfffff716, 0x81}, 0x5}) (async) 23:35:45 executing program 3: r0 = socket(0x29, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:45 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x6, @sliced={0x0, [0x6, 0x1fe0, 0x6, 0x7fff, 0x4, 0x0, 0x6b, 0xffff, 0xffff, 0x2, 0x3, 0x9, 0x9065, 0x8, 0x8000, 0xceb6, 0x2, 0x2, 0x5, 0xd3, 0x800, 0x7e2, 0x2, 0x8001, 0x9, 0x81, 0x4, 0x1f, 0x8, 0x100, 0xf26, 0xcbc, 0xe8, 0x7, 0x400, 0x874e, 0x9, 0x1189, 0x0, 0x800, 0x1f, 0x2, 0x5, 0x1, 0x81, 0x400, 0x1, 0x1], 0x5}}) 23:35:45 executing program 2: r0 = socket(0x18, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @empty, @local}, &(0x7f0000000100)=0xc) 23:35:45 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) connect$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x3, @local}}, 0x1e) 23:35:45 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000140)={0x2, @sliced={0x6dc9, [0x9000, 0x7, 0x7, 0x2, 0x37, 0x66c, 0x6, 0x1000, 0xe2, 0x1, 0x7, 0x5, 0xa4, 0xec18, 0x0, 0xed2, 0x4, 0x9, 0x9, 0xa9e8, 0xc1, 0x94f, 0x401, 0x80, 0x7, 0xff, 0x8, 0x3, 0x6, 0x2d, 0x3f, 0x4, 0x0, 0x81, 0x7fff, 0x4, 0x6, 0x6, 0x3, 0xff, 0x83, 0x0, 0x5f, 0x40, 0x1, 0x4, 0x2], 0xf3}}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x1, 0x0, 0x4, 0x0, 0x4}) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @host}, 0x10) 23:35:45 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000040)=0x8aa, 0x8) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000040)=0x8aa, 0x8) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) (async) 23:35:45 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x6, @sliced={0x0, [0x6, 0x1fe0, 0x6, 0x7fff, 0x4, 0x0, 0x6b, 0xffff, 0xffff, 0x2, 0x3, 0x9, 0x9065, 0x8, 0x8000, 0xceb6, 0x2, 0x2, 0x5, 0xd3, 0x800, 0x7e2, 0x2, 0x8001, 0x9, 0x81, 0x4, 0x1f, 0x8, 0x100, 0xf26, 0xcbc, 0xe8, 0x7, 0x400, 0x874e, 0x9, 0x1189, 0x0, 0x800, 0x1f, 0x2, 0x5, 0x1, 0x81, 0x400, 0x1, 0x1], 0x5}}) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x6, @sliced={0x0, [0x6, 0x1fe0, 0x6, 0x7fff, 0x4, 0x0, 0x6b, 0xffff, 0xffff, 0x2, 0x3, 0x9, 0x9065, 0x8, 0x8000, 0xceb6, 0x2, 0x2, 0x5, 0xd3, 0x800, 0x7e2, 0x2, 0x8001, 0x9, 0x81, 0x4, 0x1f, 0x8, 0x100, 0xf26, 0xcbc, 0xe8, 0x7, 0x400, 0x874e, 0x9, 0x1189, 0x0, 0x800, 0x1f, 0x2, 0x5, 0x1, 0x81, 0x400, 0x1, 0x1], 0x5}}) (async) 23:35:45 executing program 3: r0 = socket(0x29, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:45 executing program 2: r0 = socket(0x18, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @empty, @local}, &(0x7f0000000100)=0xc) 23:35:45 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000140)={0x2, @sliced={0x6dc9, [0x9000, 0x7, 0x7, 0x2, 0x37, 0x66c, 0x6, 0x1000, 0xe2, 0x1, 0x7, 0x5, 0xa4, 0xec18, 0x0, 0xed2, 0x4, 0x9, 0x9, 0xa9e8, 0xc1, 0x94f, 0x401, 0x80, 0x7, 0xff, 0x8, 0x3, 0x6, 0x2d, 0x3f, 0x4, 0x0, 0x81, 0x7fff, 0x4, 0x6, 0x6, 0x3, 0xff, 0x83, 0x0, 0x5f, 0x40, 0x1, 0x4, 0x2], 0xf3}}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x1, 0x0, 0x4, 0x0, 0x4}) (async) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @host}, 0x10) 23:35:45 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) 23:35:45 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) connect$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x3, @local}}, 0x1e) 23:35:45 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x6, @sliced={0x0, [0x6, 0x1fe0, 0x6, 0x7fff, 0x4, 0x0, 0x6b, 0xffff, 0xffff, 0x2, 0x3, 0x9, 0x9065, 0x8, 0x8000, 0xceb6, 0x2, 0x2, 0x5, 0xd3, 0x800, 0x7e2, 0x2, 0x8001, 0x9, 0x81, 0x4, 0x1f, 0x8, 0x100, 0xf26, 0xcbc, 0xe8, 0x7, 0x400, 0x874e, 0x9, 0x1189, 0x0, 0x800, 0x1f, 0x2, 0x5, 0x1, 0x81, 0x400, 0x1, 0x1], 0x5}}) 23:35:45 executing program 3: r0 = socket(0x29, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:45 executing program 2: r0 = socket(0x18, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @empty, @local}, &(0x7f0000000100)=0xc) 23:35:45 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000140)={0x2, @sliced={0x6dc9, [0x9000, 0x7, 0x7, 0x2, 0x37, 0x66c, 0x6, 0x1000, 0xe2, 0x1, 0x7, 0x5, 0xa4, 0xec18, 0x0, 0xed2, 0x4, 0x9, 0x9, 0xa9e8, 0xc1, 0x94f, 0x401, 0x80, 0x7, 0xff, 0x8, 0x3, 0x6, 0x2d, 0x3f, 0x4, 0x0, 0x81, 0x7fff, 0x4, 0x6, 0x6, 0x3, 0xff, 0x83, 0x0, 0x5f, 0x40, 0x1, 0x4, 0x2], 0xf3}}) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x1, 0x0, 0x4, 0x0, 0x4}) (async) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @host}, 0x10) 23:35:45 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) 23:35:45 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) setsockopt$inet_dccp_buf(r0, 0x21, 0xf, &(0x7f0000000000)="7bc9ba30f01e45ac326954c1fb49bfc14743021f82c3c2fabb260c6fb94ac01a761f5a5478838638fadc16834fdb82d7de1cde7a352267645610cdaf4ef2441f2cc549d3a3e22bf76a2e57acf37dd82f02cbcf36655ef4d7bd9cc0dc771234381c1f0f9d280466ee9ce3080029206c6b5e64eaf4b0a4d183d98c550cbd722d5a27c467d7a93207e1eeebfb54c398ff0253e449fcac96da68e3e7a2dc9f2a121ee25b8b3e83b2f8", 0xa7) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:45 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x10001, 0x2, 0x2, 0x0, 0x5}) 23:35:45 executing program 3: socket(0x29, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:45 executing program 2: r0 = socket(0x18, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x10) 23:35:45 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) (async) 23:35:45 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) setsockopt$inet_dccp_buf(r0, 0x21, 0xf, &(0x7f0000000000)="7bc9ba30f01e45ac326954c1fb49bfc14743021f82c3c2fabb260c6fb94ac01a761f5a5478838638fadc16834fdb82d7de1cde7a352267645610cdaf4ef2441f2cc549d3a3e22bf76a2e57acf37dd82f02cbcf36655ef4d7bd9cc0dc771234381c1f0f9d280466ee9ce3080029206c6b5e64eaf4b0a4d183d98c550cbd722d5a27c467d7a93207e1eeebfb54c398ff0253e449fcac96da68e3e7a2dc9f2a121ee25b8b3e83b2f8", 0xa7) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) setsockopt$inet_dccp_buf(r0, 0x21, 0xf, &(0x7f0000000000)="7bc9ba30f01e45ac326954c1fb49bfc14743021f82c3c2fabb260c6fb94ac01a761f5a5478838638fadc16834fdb82d7de1cde7a352267645610cdaf4ef2441f2cc549d3a3e22bf76a2e57acf37dd82f02cbcf36655ef4d7bd9cc0dc771234381c1f0f9d280466ee9ce3080029206c6b5e64eaf4b0a4d183d98c550cbd722d5a27c467d7a93207e1eeebfb54c398ff0253e449fcac96da68e3e7a2dc9f2a121ee25b8b3e83b2f8", 0xa7) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:35:45 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x7, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x3}, {0x8}, {0x0, 0xfffffffc}, {0xfffffffc}, {0x3}, {}, {0x0, 0x8}]}}) 23:35:45 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x10001, 0x2, 0x2, 0x0, 0x5}) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x10001, 0x2, 0x2, 0x0, 0x5}) (async) 23:35:45 executing program 3: socket(0x29, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:45 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x7}, &(0x7f0000000140)=0x8) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000003c0)=@userptr={0x8000, 0x1, 0x4, 0x10, 0x0, {0x0, 0xea60}, {0x3, 0x1, 0x7, 0x2, 0x0, 0x1, "0afdb2da"}, 0x4, 0x2, {&(0x7f0000000380)}, 0xfffffffc, 0x0, r4}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000080)=@mmap={0xf3, 0x0, 0x4, 0x40, 0x7, {r2, r3/1000+10000}, {0x2, 0x2, 0x80, 0x43, 0x0, 0x5e, "87ee9dc7"}, 0x2, 0x1, {}, 0x2, 0x0, r4}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) 23:35:45 executing program 2: r0 = socket(0x18, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x10) socket(0x18, 0x0, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x10) (async) 23:35:45 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x7, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x3}, {0x8}, {0x0, 0xfffffffc}, {0xfffffffc}, {0x3}, {}, {0x0, 0x8}]}}) 23:35:45 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x10001, 0x2, 0x2, 0x0, 0x5}) 23:35:45 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) setsockopt$inet_dccp_buf(r0, 0x21, 0xf, &(0x7f0000000000)="7bc9ba30f01e45ac326954c1fb49bfc14743021f82c3c2fabb260c6fb94ac01a761f5a5478838638fadc16834fdb82d7de1cde7a352267645610cdaf4ef2441f2cc549d3a3e22bf76a2e57acf37dd82f02cbcf36655ef4d7bd9cc0dc771234381c1f0f9d280466ee9ce3080029206c6b5e64eaf4b0a4d183d98c550cbd722d5a27c467d7a93207e1eeebfb54c398ff0253e449fcac96da68e3e7a2dc9f2a121ee25b8b3e83b2f8", 0xa7) (async, rerun: 32) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (rerun: 32) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:45 executing program 3: socket(0x29, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:45 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x7}, &(0x7f0000000140)=0x8) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000003c0)=@userptr={0x8000, 0x1, 0x4, 0x10, 0x0, {0x0, 0xea60}, {0x3, 0x1, 0x7, 0x2, 0x0, 0x1, "0afdb2da"}, 0x4, 0x2, {&(0x7f0000000380)}, 0xfffffffc, 0x0, r4}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000080)=@mmap={0xf3, 0x0, 0x4, 0x40, 0x7, {r2, r3/1000+10000}, {0x2, 0x2, 0x80, 0x43, 0x0, 0x5e, "87ee9dc7"}, 0x2, 0x1, {}, 0x2, 0x0, r4}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) clock_gettime(0x0, &(0x7f0000000000)) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x7}, &(0x7f0000000140)=0x8) (async) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000003c0)=@userptr={0x8000, 0x1, 0x4, 0x10, 0x0, {0x0, 0xea60}, {0x3, 0x1, 0x7, 0x2, 0x0, 0x1, "0afdb2da"}, 0x4, 0x2, {&(0x7f0000000380)}, 0xfffffffc, 0x0, r4}) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000080)=@mmap={0xf3, 0x0, 0x4, 0x40, 0x7, {r2, r3/1000+10000}, {0x2, 0x2, 0x80, 0x43, 0x0, 0x5e, "87ee9dc7"}, 0x2, 0x1, {}, 0x2, 0x0, r4}) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) (async) 23:35:45 executing program 2: r0 = socket(0x18, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x10) 23:35:45 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x7, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x3}, {0x8}, {0x0, 0xfffffffc}, {0xfffffffc}, {0x3}, {}, {0x0, 0x8}]}}) 23:35:45 executing program 3: r0 = socket(0x29, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) 23:35:45 executing program 4: ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x56) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000000)={0xf, 0x3, 0x4}) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) 23:35:45 executing program 2: r0 = socket(0x17, 0x0, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:45 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) (async) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x7}, &(0x7f0000000140)=0x8) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000003c0)=@userptr={0x8000, 0x1, 0x4, 0x10, 0x0, {0x0, 0xea60}, {0x3, 0x1, 0x7, 0x2, 0x0, 0x1, "0afdb2da"}, 0x4, 0x2, {&(0x7f0000000380)}, 0xfffffffc, 0x0, r4}) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000080)=@mmap={0xf3, 0x0, 0x4, 0x40, 0x7, {r2, r3/1000+10000}, {0x2, 0x2, 0x80, 0x43, 0x0, 0x5e, "87ee9dc7"}, 0x2, 0x1, {}, 0x2, 0x0, r4}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) 23:35:45 executing program 4: ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x56) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000000)={0xf, 0x3, 0x4}) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x56) (async) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000000)={0xf, 0x3, 0x4}) (async) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) (async) 23:35:45 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x0, @raw_data="51c6de4e66642871261a53f5db2c9b89f2f818cbf02d886ce3694e2fac455bbf4c3096cf73e160f379163ed5b47eef419009cbebb93dabbf53afe6b245e8d39927d8821495e821a25b7a5e2f498e5e68515f6ad437426f5c99a28f57180df2b8096a9a98759439324b11db8121f4ea68657cb20a44aa76181af52b86333e8a247e82f05ef5229931f7a0f55efaa012053eac639719d357b48817223a6b282367146df07bc1122e3a3555271de35b85c3b34775f436d10abff5a391fdc483d36d290c729adad16b73"}) 23:35:45 executing program 3: r0 = socket(0x29, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) 23:35:45 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x2, @raw_data="1501cb0456dbe8015918b455c2f2ffed0f73e8f4e7052abcea0c6cc4d436f65a81fa1c238ee2a0fa952f348dbc8416153381d25d96262086ff4848d1752d517466aa1588063b63144134d73f69896b16c32485e57925a7513461f70729e784f5aa67c92c4f8e1a3a33ed3a4c1054dbbb829ff69663cda95018af141a2b34e806cee9661b350483af1088edc99602c71523985717a646bc0d73f2dd68d24bd8ddc6c477b925448c7124d16c2246e01d73c7091837b5736eb6b6aa16a4e0054a34dde3f0a19280a6d7"}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000080)=0x3ff, 0x4) 23:35:45 executing program 2: r0 = socket(0x17, 0x0, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:45 executing program 4: ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x56) (async) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000000)={0xf, 0x3, 0x4}) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) 23:35:45 executing program 1: ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_dccp_int(r0, 0x21, 0x11, &(0x7f0000000100)=0x3, 0x4) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000000)={0x1, @pix={0xf9a, 0x9, 0x37303250, 0x2, 0x4, 0x6, 0x3, 0x1ff, 0x0, 0x1, 0x1, 0x6}}) 23:35:45 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x0, @raw_data="51c6de4e66642871261a53f5db2c9b89f2f818cbf02d886ce3694e2fac455bbf4c3096cf73e160f379163ed5b47eef419009cbebb93dabbf53afe6b245e8d39927d8821495e821a25b7a5e2f498e5e68515f6ad437426f5c99a28f57180df2b8096a9a98759439324b11db8121f4ea68657cb20a44aa76181af52b86333e8a247e82f05ef5229931f7a0f55efaa012053eac639719d357b48817223a6b282367146df07bc1122e3a3555271de35b85c3b34775f436d10abff5a391fdc483d36d290c729adad16b73"}) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x0, @raw_data="51c6de4e66642871261a53f5db2c9b89f2f818cbf02d886ce3694e2fac455bbf4c3096cf73e160f379163ed5b47eef419009cbebb93dabbf53afe6b245e8d39927d8821495e821a25b7a5e2f498e5e68515f6ad437426f5c99a28f57180df2b8096a9a98759439324b11db8121f4ea68657cb20a44aa76181af52b86333e8a247e82f05ef5229931f7a0f55efaa012053eac639719d357b48817223a6b282367146df07bc1122e3a3555271de35b85c3b34775f436d10abff5a391fdc483d36d290c729adad16b73"}) (async) 23:35:45 executing program 3: r0 = socket(0x29, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) 23:35:45 executing program 2: r0 = socket(0x17, 0x0, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) socket(0x17, 0x0, 0x1) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) 23:35:45 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) socket$tipc(0x1e, 0x2, 0x0) 23:35:45 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x2, @raw_data="1501cb0456dbe8015918b455c2f2ffed0f73e8f4e7052abcea0c6cc4d436f65a81fa1c238ee2a0fa952f348dbc8416153381d25d96262086ff4848d1752d517466aa1588063b63144134d73f69896b16c32485e57925a7513461f70729e784f5aa67c92c4f8e1a3a33ed3a4c1054dbbb829ff69663cda95018af141a2b34e806cee9661b350483af1088edc99602c71523985717a646bc0d73f2dd68d24bd8ddc6c477b925448c7124d16c2246e01d73c7091837b5736eb6b6aa16a4e0054a34dde3f0a19280a6d7"}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000080)=0x3ff, 0x4) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x2, @raw_data="1501cb0456dbe8015918b455c2f2ffed0f73e8f4e7052abcea0c6cc4d436f65a81fa1c238ee2a0fa952f348dbc8416153381d25d96262086ff4848d1752d517466aa1588063b63144134d73f69896b16c32485e57925a7513461f70729e784f5aa67c92c4f8e1a3a33ed3a4c1054dbbb829ff69663cda95018af141a2b34e806cee9661b350483af1088edc99602c71523985717a646bc0d73f2dd68d24bd8ddc6c477b925448c7124d16c2246e01d73c7091837b5736eb6b6aa16a4e0054a34dde3f0a19280a6d7"}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000080)=0x3ff, 0x4) (async) 23:35:45 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x0, @raw_data="51c6de4e66642871261a53f5db2c9b89f2f818cbf02d886ce3694e2fac455bbf4c3096cf73e160f379163ed5b47eef419009cbebb93dabbf53afe6b245e8d39927d8821495e821a25b7a5e2f498e5e68515f6ad437426f5c99a28f57180df2b8096a9a98759439324b11db8121f4ea68657cb20a44aa76181af52b86333e8a247e82f05ef5229931f7a0f55efaa012053eac639719d357b48817223a6b282367146df07bc1122e3a3555271de35b85c3b34775f436d10abff5a391fdc483d36d290c729adad16b73"}) 23:35:45 executing program 1: ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) (async) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_dccp_int(r0, 0x21, 0x11, &(0x7f0000000100)=0x3, 0x4) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000000)={0x1, @pix={0xf9a, 0x9, 0x37303250, 0x2, 0x4, 0x6, 0x3, 0x1ff, 0x0, 0x1, 0x1, 0x6}}) 23:35:45 executing program 3: r0 = socket(0x29, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 23:35:46 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x30324c4a, 0x0, 0xa, [{}, {0xffffffff}, {}, {0x0, 0x7fffffff}, {0x0, 0x2}, {0x1}, {}, {0x0, 0x9}], 0x0, 0x0, 0x8, 0x0, 0x6}}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0xe14, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000140)={0x1, @pix={0xffffffc1, 0x40, 0x36314d4e, 0x7, 0x0, 0x3, 0xb, 0x5, 0x0, 0x6, 0x2, 0x5}}) 23:35:46 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) (async) socket$tipc(0x1e, 0x2, 0x0) 23:35:46 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x2, @raw_data="1501cb0456dbe8015918b455c2f2ffed0f73e8f4e7052abcea0c6cc4d436f65a81fa1c238ee2a0fa952f348dbc8416153381d25d96262086ff4848d1752d517466aa1588063b63144134d73f69896b16c32485e57925a7513461f70729e784f5aa67c92c4f8e1a3a33ed3a4c1054dbbb829ff69663cda95018af141a2b34e806cee9661b350483af1088edc99602c71523985717a646bc0d73f2dd68d24bd8ddc6c477b925448c7124d16c2246e01d73c7091837b5736eb6b6aa16a4e0054a34dde3f0a19280a6d7"}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000080)=0x3ff, 0x4) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x2, @raw_data="1501cb0456dbe8015918b455c2f2ffed0f73e8f4e7052abcea0c6cc4d436f65a81fa1c238ee2a0fa952f348dbc8416153381d25d96262086ff4848d1752d517466aa1588063b63144134d73f69896b16c32485e57925a7513461f70729e784f5aa67c92c4f8e1a3a33ed3a4c1054dbbb829ff69663cda95018af141a2b34e806cee9661b350483af1088edc99602c71523985717a646bc0d73f2dd68d24bd8ddc6c477b925448c7124d16c2246e01d73c7091837b5736eb6b6aa16a4e0054a34dde3f0a19280a6d7"}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000080)=0x3ff, 0x4) (async) 23:35:46 executing program 1: ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) (async) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_dccp_int(r0, 0x21, 0x11, &(0x7f0000000100)=0x3, 0x4) (async) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000000)={0x1, @pix={0xf9a, 0x9, 0x37303250, 0x2, 0x4, 0x6, 0x3, 0x1ff, 0x0, 0x1, 0x1, 0x6}}) 23:35:46 executing program 2: r0 = socket(0x18, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000480)={0x0, 0x0, {0x0, 0x6, 0x2002, 0x8, 0x5, 0x2, 0x2, 0x7}}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5}, 0x48) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x274, r2, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x214, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x586}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x274}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:46 executing program 3: r0 = socket(0x29, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 23:35:46 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x30324c4a, 0x0, 0xa, [{}, {0xffffffff}, {}, {0x0, 0x7fffffff}, {0x0, 0x2}, {0x1}, {}, {0x0, 0x9}], 0x0, 0x0, 0x8, 0x0, 0x6}}) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0xe14, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000140)={0x1, @pix={0xffffffc1, 0x40, 0x36314d4e, 0x7, 0x0, 0x3, 0xb, 0x5, 0x0, 0x6, 0x2, 0x5}}) 23:35:46 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xffff, 0x1ff}) 23:35:46 executing program 2: r0 = socket(0x18, 0x0, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) (async) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={0x0, @local, @local}, &(0x7f0000000140)=0xc) (async) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000480)={0x0, 0x0, {0x0, 0x6, 0x2002, 0x8, 0x5, 0x2, 0x2, 0x7}}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5}, 0x48) (async) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x274, r2, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x214, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x586}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x274}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:46 executing program 3: r0 = socket(0x29, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 23:35:46 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) socket$tipc(0x1e, 0x2, 0x0) 23:35:46 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xffff, 0x1ff}) 23:35:46 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @sliced={0x81cb, [0x8, 0x1f, 0x7, 0x2, 0x74, 0x1, 0x3f, 0x7, 0x6, 0x2, 0x9, 0xf0, 0x2, 0x40, 0x6, 0x8, 0x6, 0x20, 0x527e, 0x1, 0x6, 0x40, 0x4, 0x44, 0x8001, 0x1, 0x5, 0x1ff, 0x6, 0x7, 0x9, 0x5, 0x20, 0x1000, 0x6, 0x1, 0xbf25, 0x401, 0xfe, 0x3f, 0x7ff, 0x2, 0x100, 0xff, 0x6, 0x8000, 0xfffe, 0xffff], 0x3ff}}) 23:35:46 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x30324c4a, 0x0, 0xa, [{}, {0xffffffff}, {}, {0x0, 0x7fffffff}, {0x0, 0x2}, {0x1}, {}, {0x0, 0x9}], 0x0, 0x0, 0x8, 0x0, 0x6}}) (async, rerun: 64) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0xe14, 0x2) (rerun: 64) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000140)={0x1, @pix={0xffffffc1, 0x40, 0x36314d4e, 0x7, 0x0, 0x3, 0xb, 0x5, 0x0, 0x6, 0x2, 0x5}}) 23:35:46 executing program 4: syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x1, @win={{0x6, 0x101, 0x40, 0x5}, 0xa, 0x800, &(0x7f0000000100)={{0x7, 0x7, 0x1, 0x5732}, &(0x7f00000000c0)={{0x8000, 0x1, 0x5, 0x80000001}, &(0x7f0000000080)={{0x1ff, 0x0, 0xffffffff, 0xc4}}}}, 0x2, &(0x7f0000000140)="54ba65c93bdb1e5387a361edc155c6eb10fa6b689174760e6235320bf2d85271", 0x9}}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 23:35:46 executing program 2: r0 = socket(0x18, 0x0, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={0x0, @local, @local}, &(0x7f0000000140)=0xc) (async, rerun: 32) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000480)={0x0, 0x0, {0x0, 0x6, 0x2002, 0x8, 0x5, 0x2, 0x2, 0x7}}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5}, 0x48) (async) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x274, r2, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x214, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x586}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x274}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:46 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x44) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) r2 = socket$pptp(0x18, 0x1, 0x2) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r3, 0x28, 0x6, &(0x7f0000000040)={0x0, 0xea60}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) r7 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000680)={0x34c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0xf0, 0x2, 0x0, 0x1, [{0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x2, 0x58, 0x8, 0x8001}, {0x1ff, 0x9, 0x70, 0x8}, {0x80, 0x71, 0x5, 0xffff}, {0xa40, 0x8, 0x2, 0x6}, {0xffff, 0x9, 0x1, 0x7}, {0x3, 0x3a, 0x5}, {0xd2c, 0xc6, 0x2, 0x7}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x0, 0xf, 0x4, 0x7}, {0x6, 0x1, 0x5, 0xae41}, {0x7, 0x0, 0x7f, 0x1}, {0x7, 0x3, 0x80, 0x4}, {0x3, 0x7, 0x3, 0xffff}]}}}]}}, {{0x8, 0x1, r8}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x1, 0x3, 0x20, 0x2d}, {0x1, 0x0, 0x1, 0x4}, {0x8000, 0x6, 0x8, 0x800}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}]}, 0x34c}}, 0x14) connect$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @empty}}, 0x1e) 23:35:46 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xffff, 0x1ff}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xffff, 0x1ff}) (async) 23:35:46 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @sliced={0x81cb, [0x8, 0x1f, 0x7, 0x2, 0x74, 0x1, 0x3f, 0x7, 0x6, 0x2, 0x9, 0xf0, 0x2, 0x40, 0x6, 0x8, 0x6, 0x20, 0x527e, 0x1, 0x6, 0x40, 0x4, 0x44, 0x8001, 0x1, 0x5, 0x1ff, 0x6, 0x7, 0x9, 0x5, 0x20, 0x1000, 0x6, 0x1, 0xbf25, 0x401, 0xfe, 0x3f, 0x7ff, 0x2, 0x100, 0xff, 0x6, 0x8000, 0xfffe, 0xffff], 0x3ff}}) 23:35:46 executing program 4: syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x1, @win={{0x6, 0x101, 0x40, 0x5}, 0xa, 0x800, &(0x7f0000000100)={{0x7, 0x7, 0x1, 0x5732}, &(0x7f00000000c0)={{0x8000, 0x1, 0x5, 0x80000001}, &(0x7f0000000080)={{0x1ff, 0x0, 0xffffffff, 0xc4}}}}, 0x2, &(0x7f0000000140)="54ba65c93bdb1e5387a361edc155c6eb10fa6b689174760e6235320bf2d85271", 0x9}}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x1, @win={{0x6, 0x101, 0x40, 0x5}, 0xa, 0x800, &(0x7f0000000100)={{0x7, 0x7, 0x1, 0x5732}, &(0x7f00000000c0)={{0x8000, 0x1, 0x5, 0x80000001}, &(0x7f0000000080)={{0x1ff, 0x0, 0xffffffff, 0xc4}}}}, 0x2, &(0x7f0000000140)="54ba65c93bdb1e5387a361edc155c6eb10fa6b689174760e6235320bf2d85271", 0x9}}) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) 23:35:46 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200), 0x420500, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000240)={0x8, 0x6}) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f0000000280)={'\x00', 0xffffffff, 0x2, 0x3}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0xb00, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000440)=@userptr={0x8c, 0x3, 0x4, 0x100, 0x81, {r3, r4/1000+10000}, {0x2, 0x0, 0xe0, 0x9, 0x3, 0x5, "97eda66b"}, 0x93, 0x2, {&(0x7f00000003c0)}, 0xef, 0x0, r5}) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, &(0x7f0000000000)={0x40000000, 0x101, "8200e7ba5ae9fa7baea950a8c14db1d062457fee52c5f85cb0a2ef71c6ed7420", 0x6, 0x100, 0x4000, 0x8001, 0xdb, 0x3, 0xfffff800, 0x6, [0x1cf, 0x80000001, 0x9, 0xffffff81]}) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000180)={0x0, 0x0, {0x6, 0x7f, 0x1015, 0x9, 0x3, 0x3, 0x1}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x0) ioctl$PTP_PIN_SETFUNC2(r6, 0x40603d10, &(0x7f0000000300)={'\x00', 0x7, 0x1, 0x6}) 23:35:46 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x44) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) r2 = socket$pptp(0x18, 0x1, 0x2) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r3, 0x28, 0x6, &(0x7f0000000040)={0x0, 0xea60}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) r7 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000680)={0x34c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0xf0, 0x2, 0x0, 0x1, [{0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x2, 0x58, 0x8, 0x8001}, {0x1ff, 0x9, 0x70, 0x8}, {0x80, 0x71, 0x5, 0xffff}, {0xa40, 0x8, 0x2, 0x6}, {0xffff, 0x9, 0x1, 0x7}, {0x3, 0x3a, 0x5}, {0xd2c, 0xc6, 0x2, 0x7}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x0, 0xf, 0x4, 0x7}, {0x6, 0x1, 0x5, 0xae41}, {0x7, 0x0, 0x7f, 0x1}, {0x7, 0x3, 0x80, 0x4}, {0x3, 0x7, 0x3, 0xffff}]}}}]}}, {{0x8, 0x1, r8}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x1, 0x3, 0x20, 0x2d}, {0x1, 0x0, 0x1, 0x4}, {0x8000, 0x6, 0x8, 0x800}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}]}, 0x34c}}, 0x14) connect$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @empty}}, 0x1e) 23:35:46 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000000)) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:35:46 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @sliced={0x81cb, [0x8, 0x1f, 0x7, 0x2, 0x74, 0x1, 0x3f, 0x7, 0x6, 0x2, 0x9, 0xf0, 0x2, 0x40, 0x6, 0x8, 0x6, 0x20, 0x527e, 0x1, 0x6, 0x40, 0x4, 0x44, 0x8001, 0x1, 0x5, 0x1ff, 0x6, 0x7, 0x9, 0x5, 0x20, 0x1000, 0x6, 0x1, 0xbf25, 0x401, 0xfe, 0x3f, 0x7ff, 0x2, 0x100, 0xff, 0x6, 0x8000, 0xfffe, 0xffff], 0x3ff}}) 23:35:46 executing program 2: r0 = socket(0x18, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x402400, 0x0) setsockopt$inet_dccp_int(r1, 0x21, 0x6, &(0x7f0000000000)=0x100, 0x4) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000229bd7000fcdbdf25010000001400080067656e6576653100001f62f296e49ed74a0000000000000008001800e0000001050022000100000014002000fe8800000000000000000000000000010600020001000000060002000100000005001200000000000c0016000000000000001c0006000300ff000000"], 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x40840) 23:35:46 executing program 4: syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x1, @win={{0x6, 0x101, 0x40, 0x5}, 0xa, 0x800, &(0x7f0000000100)={{0x7, 0x7, 0x1, 0x5732}, &(0x7f00000000c0)={{0x8000, 0x1, 0x5, 0x80000001}, &(0x7f0000000080)={{0x1ff, 0x0, 0xffffffff, 0xc4}}}}, 0x2, &(0x7f0000000140)="54ba65c93bdb1e5387a361edc155c6eb10fa6b689174760e6235320bf2d85271", 0x9}}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 23:35:46 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200), 0x420500, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000240)={0x8, 0x6}) (async) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f0000000280)={'\x00', 0xffffffff, 0x2, 0x3}) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) (async) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0xb00, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000440)=@userptr={0x8c, 0x3, 0x4, 0x100, 0x81, {r3, r4/1000+10000}, {0x2, 0x0, 0xe0, 0x9, 0x3, 0x5, "97eda66b"}, 0x93, 0x2, {&(0x7f00000003c0)}, 0xef, 0x0, r5}) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, &(0x7f0000000000)={0x40000000, 0x101, "8200e7ba5ae9fa7baea950a8c14db1d062457fee52c5f85cb0a2ef71c6ed7420", 0x6, 0x100, 0x4000, 0x8001, 0xdb, 0x3, 0xfffff800, 0x6, [0x1cf, 0x80000001, 0x9, 0xffffff81]}) (async) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000180)={0x0, 0x0, {0x6, 0x7f, 0x1015, 0x9, 0x3, 0x3, 0x1}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x0) ioctl$PTP_PIN_SETFUNC2(r6, 0x40603d10, &(0x7f0000000300)={'\x00', 0x7, 0x1, 0x6}) 23:35:46 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xa) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0285628, &(0x7f00000001c0)={0x0, @pix_mp={0x5, 0x76046e8c, 0x33363248, 0x2, 0x5, [{0x9, 0x4}, {0x8, 0x7fff}, {0xff, 0x9}, {0x5}, {0xffff, 0x6}, {0x2, 0x9}, {0x1, 0x1}, {0x1, 0x7fffffff}], 0x80, 0x0, 0x1, 0x0, 0x7}}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x32001, 0x0) 23:35:46 executing program 2: r0 = socket(0x18, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x402400, 0x0) setsockopt$inet_dccp_int(r1, 0x21, 0x6, &(0x7f0000000000)=0x100, 0x4) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000229bd7000fcdbdf25010000001400080067656e6576653100001f62f296e49ed74a0000000000000008001800e0000001050022000100000014002000fe8800000000000000000000000000010600020001000000060002000100000005001200000000000c0016000000000000001c0006000300ff000000"], 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x40840) socket(0x18, 0x0, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x402400, 0x0) (async) setsockopt$inet_dccp_int(r1, 0x21, 0x6, &(0x7f0000000000)=0x100, 0x4) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000229bd7000fcdbdf25010000001400080067656e6576653100001f62f296e49ed74a0000000000000008001800e0000001050022000100000014002000fe8800000000000000000000000000010600020001000000060002000100000005001200000000000c0016000000000000001c0006000300ff000000"], 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x40840) (async) 23:35:46 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000000)) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000000)) (async) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) 23:35:46 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x44) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) r2 = socket$pptp(0x18, 0x1, 0x2) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r3, 0x28, 0x6, &(0x7f0000000040)={0x0, 0xea60}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) r7 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000680)={0x34c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0xf0, 0x2, 0x0, 0x1, [{0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x2, 0x58, 0x8, 0x8001}, {0x1ff, 0x9, 0x70, 0x8}, {0x80, 0x71, 0x5, 0xffff}, {0xa40, 0x8, 0x2, 0x6}, {0xffff, 0x9, 0x1, 0x7}, {0x3, 0x3a, 0x5}, {0xd2c, 0xc6, 0x2, 0x7}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x0, 0xf, 0x4, 0x7}, {0x6, 0x1, 0x5, 0xae41}, {0x7, 0x0, 0x7f, 0x1}, {0x7, 0x3, 0x80, 0x4}, {0x3, 0x7, 0x3, 0xffff}]}}}]}}, {{0x8, 0x1, r8}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x1, 0x3, 0x20, 0x2d}, {0x1, 0x0, 0x1, 0x4}, {0x8000, 0x6, 0x8, 0x800}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}]}, 0x34c}}, 0x14) connect$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @empty}}, 0x1e) 23:35:46 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x0, @vbi={0x1ff, 0x3986, 0x9, 0x48524742, [0x86f6], [0x0, 0x62c65d7c], 0x1}}) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0285629, &(0x7f00000001c0)={0x4}) 23:35:46 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200), 0x420500, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000240)={0x8, 0x6}) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f0000000280)={'\x00', 0xffffffff, 0x2, 0x3}) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0xb00, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000440)=@userptr={0x8c, 0x3, 0x4, 0x100, 0x81, {r3, r4/1000+10000}, {0x2, 0x0, 0xe0, 0x9, 0x3, 0x5, "97eda66b"}, 0x93, 0x2, {&(0x7f00000003c0)}, 0xef, 0x0, r5}) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, &(0x7f0000000000)={0x40000000, 0x101, "8200e7ba5ae9fa7baea950a8c14db1d062457fee52c5f85cb0a2ef71c6ed7420", 0x6, 0x100, 0x4000, 0x8001, 0xdb, 0x3, 0xfffff800, 0x6, [0x1cf, 0x80000001, 0x9, 0xffffff81]}) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000180)={0x0, 0x0, {0x6, 0x7f, 0x1015, 0x9, 0x3, 0x3, 0x1}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x0) (async) ioctl$PTP_PIN_SETFUNC2(r6, 0x40603d10, &(0x7f0000000300)={'\x00', 0x7, 0x1, 0x6}) 23:35:46 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xa) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0285628, &(0x7f00000001c0)={0x0, @pix_mp={0x5, 0x76046e8c, 0x33363248, 0x2, 0x5, [{0x9, 0x4}, {0x8, 0x7fff}, {0xff, 0x9}, {0x5}, {0xffff, 0x6}, {0x2, 0x9}, {0x1, 0x1}, {0x1, 0x7fffffff}], 0x80, 0x0, 0x1, 0x0, 0x7}}) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x32001, 0x0) 23:35:46 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x0, @vbi={0x1ff, 0x3986, 0x9, 0x48524742, [0x86f6], [0x0, 0x62c65d7c], 0x1}}) (async, rerun: 32) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (rerun: 32) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0285629, &(0x7f00000001c0)={0x4}) 23:35:46 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x44) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) socket$pptp(0x18, 0x1, 0x2) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, &(0x7f0000000040)={0x0, 0xea60}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5}, 0x48) r6 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000680)={0x34c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0xf0, 0x2, 0x0, 0x1, [{0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x2, 0x58, 0x8, 0x8001}, {0x1ff, 0x9, 0x70, 0x8}, {0x80, 0x71, 0x5, 0xffff}, {0xa40, 0x8, 0x2, 0x6}, {0xffff, 0x9, 0x1, 0x7}, {0x3, 0x3a, 0x5}, {0xd2c, 0xc6, 0x2, 0x7}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x0, 0xf, 0x4, 0x7}, {0x6, 0x1, 0x5, 0xae41}, {0x7, 0x0, 0x7f, 0x1}, {0x7, 0x3, 0x80, 0x4}, {0x3, 0x7, 0x3, 0xffff}]}}}]}}, {{0x8, 0x1, r7}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x1, 0x3, 0x20, 0x2d}, {0x1, 0x0, 0x1, 0x4}, {0x8000, 0x6, 0x8, 0x800}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}]}, 0x34c}}, 0x14) 23:35:46 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000000)) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000000)) (async) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) 23:35:46 executing program 2: r0 = socket(0x18, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x402400, 0x0) setsockopt$inet_dccp_int(r1, 0x21, 0x6, &(0x7f0000000000)=0x100, 0x4) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000229bd7000fcdbdf25010000001400080067656e6576653100001f62f296e49ed74a0000000000000008001800e0000001050022000100000014002000fe8800000000000000000000000000010600020001000000060002000100000005001200000000000c0016000000000000001c0006000300ff000000"], 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x40840) socket(0x18, 0x0, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x402400, 0x0) (async) setsockopt$inet_dccp_int(r1, 0x21, 0x6, &(0x7f0000000000)=0x100, 0x4) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000229bd7000fcdbdf25010000001400080067656e6576653100001f62f296e49ed74a0000000000000008001800e0000001050022000100000014002000fe8800000000000000000000000000010600020001000000060002000100000005001200000000000c0016000000000000001c0006000300ff000000"], 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x40840) (async) 23:35:46 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000280)=@multiplanar_overlay={0x1000, 0x3, 0x4, 0x0, 0x3f, {r1, r2/1000+60000}, {0x3, 0x8, 0x3f, 0x24, 0x8, 0x4, "e2c00196"}, 0xef, 0x3, {&(0x7f0000000200)=[{0x0, 0x2, {0x101}}, {0x20, 0x9, {0x7}, 0x5}]}, 0x7, 0x0, r3}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012dbd7000ffdbdf25010000000c000f00060000000000000008000900000000001400080064766d7270300000000000000000000005000400000000000af822000000000005001300080000000500050001000000080011000000000005002100000000000500220000000000"], 0x74}, 0x1, 0x0, 0x0, 0x14}, 0x20000000) 23:35:46 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xa) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0285628, &(0x7f00000001c0)={0x0, @pix_mp={0x5, 0x76046e8c, 0x33363248, 0x2, 0x5, [{0x9, 0x4}, {0x8, 0x7fff}, {0xff, 0x9}, {0x5}, {0xffff, 0x6}, {0x2, 0x9}, {0x1, 0x1}, {0x1, 0x7fffffff}], 0x80, 0x0, 0x1, 0x0, 0x7}}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x32001, 0x0) 23:35:46 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x44) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) socket$pptp(0x18, 0x1, 0x2) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, &(0x7f0000000040)={0x0, 0xea60}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) 23:35:46 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x0, @vbi={0x1ff, 0x3986, 0x9, 0x48524742, [0x86f6], [0x0, 0x62c65d7c], 0x1}}) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0285629, &(0x7f00000001c0)={0x4}) syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x0, @vbi={0x1ff, 0x3986, 0x9, 0x48524742, [0x86f6], [0x0, 0x62c65d7c], 0x1}}) (async) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0285629, &(0x7f00000001c0)={0x4}) (async) 23:35:46 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:35:46 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000280)=@multiplanar_overlay={0x1000, 0x3, 0x4, 0x0, 0x3f, {r1, r2/1000+60000}, {0x3, 0x8, 0x3f, 0x24, 0x8, 0x4, "e2c00196"}, 0xef, 0x3, {&(0x7f0000000200)=[{0x0, 0x2, {0x101}}, {0x20, 0x9, {0x7}, 0x5}]}, 0x7, 0x0, r3}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012dbd7000ffdbdf25010000000c000f00060000000000000008000900000000001400080064766d7270300000000000000000000005000400000000000af822000000000005001300080000000500050001000000080011000000000005002100000000000500220000000000"], 0x74}, 0x1, 0x0, 0x0, 0x14}, 0x20000000) 23:35:46 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x200040, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8) getsockname$tipc(r2, &(0x7f00000000c0)=@name, &(0x7f0000000100)=0x10) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x86, 0x0, 0x0, "4788e204385ca0aea6c229f4c65a1ce8857989323b07347c662bd7bec3918188", 0x4745504a}) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) accept4$tipc(r3, &(0x7f0000000140)=@id, &(0x7f00000002c0)=0x10, 0x80800) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000300)={r1}, 0x8) setsockopt$TIPC_MCAST_BROADCAST(r3, 0x10f, 0x85) 23:35:46 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x44) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) socket$pptp(0x18, 0x1, 0x2) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, &(0x7f0000000040)={0x0, 0xea60}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) 23:35:46 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000440)={0x3, 0x7, 0x1, 0x80}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000000c0)=[{}], 0x8, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) 23:35:46 executing program 2: r0 = socket(0x18, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000480)={r1}, 0x8) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f00000004c0)={0x4, "a73772c4290436e681cdf11c5e7f96a5dbed33e13aa8d0dfd5a84eb92f623984", 0x3, 0x0, 0xe88, 0x1000, 0x2}) connect$can_bcm(r1, &(0x7f0000000040), 0x10) recvmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x880, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r3}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r1, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000600)=[{}], 0x8, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x10, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) clock_gettime(0x0, &(0x7f0000000880)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000980)={&(0x7f0000000840)={0x1d, r5}, 0x10, &(0x7f0000000940)={&(0x7f00000008c0)={0x2, 0x801, 0xff, {r6, r7/1000+10000}, {0x0, 0x2710}, {0x1, 0x1, 0x0, 0x1}, 0x1, @can={{0x1, 0x0, 0x1, 0x1}, 0x6, 0x2, 0x0, 0x0, "343e3e72a3f77571"}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x80) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xffffffffffffffff) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000380), &(0x7f00000003c0)=0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:46 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) 23:35:46 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x200040, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8) getsockname$tipc(r2, &(0x7f00000000c0)=@name, &(0x7f0000000100)=0x10) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x86, 0x0, 0x0, "4788e204385ca0aea6c229f4c65a1ce8857989323b07347c662bd7bec3918188", 0x4745504a}) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) accept4$tipc(r3, &(0x7f0000000140)=@id, &(0x7f00000002c0)=0x10, 0x80800) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000300)={r1}, 0x8) setsockopt$TIPC_MCAST_BROADCAST(r3, 0x10f, 0x85) syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x200040, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8) (async) getsockname$tipc(r2, &(0x7f00000000c0)=@name, &(0x7f0000000100)=0x10) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x86, 0x0, 0x0, "4788e204385ca0aea6c229f4c65a1ce8857989323b07347c662bd7bec3918188", 0x4745504a}) (async) socket$tipc(0x1e, 0x2, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) (async) accept4$tipc(r3, &(0x7f0000000140)=@id, &(0x7f00000002c0)=0x10, 0x80800) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000300)={r1}, 0x8) (async) setsockopt$TIPC_MCAST_BROADCAST(r3, 0x10f, 0x85) (async) 23:35:46 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) (async) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000280)=@multiplanar_overlay={0x1000, 0x3, 0x4, 0x0, 0x3f, {r1, r2/1000+60000}, {0x3, 0x8, 0x3f, 0x24, 0x8, 0x4, "e2c00196"}, 0xef, 0x3, {&(0x7f0000000200)=[{0x0, 0x2, {0x101}}, {0x20, 0x9, {0x7}, 0x5}]}, 0x7, 0x0, r3}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012dbd7000ffdbdf25010000000c000f00060000000000000008000900000000001400080064766d7270300000000000000000000005000400000000000af822000000000005001300080000000500050001000000080011000000000005002100000000000500220000000000"], 0x74}, 0x1, 0x0, 0x0, 0x14}, 0x20000000) 23:35:47 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x44) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) socket$pptp(0x18, 0x1, 0x2) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, &(0x7f0000000040)={0x0, 0xea60}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)) 23:35:47 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000440)={0x3, 0x7, 0x1, 0x80}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000000c0)=[{}], 0x8, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) 23:35:47 executing program 2: r0 = socket(0x18, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000480)={r1}, 0x8) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f00000004c0)={0x4, "a73772c4290436e681cdf11c5e7f96a5dbed33e13aa8d0dfd5a84eb92f623984", 0x3, 0x0, 0xe88, 0x1000, 0x2}) connect$can_bcm(r1, &(0x7f0000000040), 0x10) recvmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x880, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r3}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r1, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000600)=[{}], 0x8, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x10, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) clock_gettime(0x0, &(0x7f0000000880)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000980)={&(0x7f0000000840)={0x1d, r5}, 0x10, &(0x7f0000000940)={&(0x7f00000008c0)={0x2, 0x801, 0xff, {r6, r7/1000+10000}, {0x0, 0x2710}, {0x1, 0x1, 0x0, 0x1}, 0x1, @can={{0x1, 0x0, 0x1, 0x1}, 0x6, 0x2, 0x0, 0x0, "343e3e72a3f77571"}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x80) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xffffffffffffffff) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000380), &(0x7f00000003c0)=0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) socket(0x18, 0x0, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000480)={r1}, 0x8) (async) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f00000004c0)={0x4, "a73772c4290436e681cdf11c5e7f96a5dbed33e13aa8d0dfd5a84eb92f623984", 0x3, 0x0, 0xe88, 0x1000, 0x2}) (async) connect$can_bcm(r1, &(0x7f0000000040), 0x10) (async) recvmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x880, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r3}, 0x8) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r1, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000600)=[{}], 0x8, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x10, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) (async) clock_gettime(0x0, &(0x7f0000000880)) (async) sendmsg$can_bcm(r1, &(0x7f0000000980)={&(0x7f0000000840)={0x1d, r5}, 0x10, &(0x7f0000000940)={&(0x7f00000008c0)={0x2, 0x801, 0xff, {r6, r7/1000+10000}, {0x0, 0x2710}, {0x1, 0x1, 0x0, 0x1}, 0x1, @can={{0x1, 0x0, 0x1, 0x1}, 0x6, 0x2, 0x0, 0x0, "343e3e72a3f77571"}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x80) (async) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xffffffffffffffff) (async) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000380), &(0x7f00000003c0)=0x4) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) 23:35:47 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:35:47 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x200040, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8) getsockname$tipc(r2, &(0x7f00000000c0)=@name, &(0x7f0000000100)=0x10) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x86, 0x0, 0x0, "4788e204385ca0aea6c229f4c65a1ce8857989323b07347c662bd7bec3918188", 0x4745504a}) (async) r3 = socket$tipc(0x1e, 0x2, 0x0) (async) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) accept4$tipc(r3, &(0x7f0000000140)=@id, &(0x7f00000002c0)=0x10, 0x80800) (async) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000300)={r1}, 0x8) (async) setsockopt$TIPC_MCAST_BROADCAST(r3, 0x10f, 0x85) 23:35:47 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x9) 23:35:47 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000440)={0x3, 0x7, 0x1, 0x80}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000000c0)=[{}], 0x8, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000440)={0x3, 0x7, 0x1, 0x80}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000000c0)=[{}], 0x8, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) (async) 23:35:47 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x44) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) socket$pptp(0x18, 0x1, 0x2) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, &(0x7f0000000040)={0x0, 0xea60}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) socket$l2tp(0x2, 0x2, 0x73) 23:35:47 executing program 2: r0 = socket(0x18, 0x0, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000480)={r1}, 0x8) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f00000004c0)={0x4, "a73772c4290436e681cdf11c5e7f96a5dbed33e13aa8d0dfd5a84eb92f623984", 0x3, 0x0, 0xe88, 0x1000, 0x2}) connect$can_bcm(r1, &(0x7f0000000040), 0x10) recvmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x880, 0x0) (async) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r3}, 0x8) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r1, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000600)=[{}], 0x8, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x10, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) clock_gettime(0x0, &(0x7f0000000880)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000980)={&(0x7f0000000840)={0x1d, r5}, 0x10, &(0x7f0000000940)={&(0x7f00000008c0)={0x2, 0x801, 0xff, {r6, r7/1000+10000}, {0x0, 0x2710}, {0x1, 0x1, 0x0, 0x1}, 0x1, @can={{0x1, 0x0, 0x1, 0x1}, 0x6, 0x2, 0x0, 0x0, "343e3e72a3f77571"}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x80) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xffffffffffffffff) (async) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000380), &(0x7f00000003c0)=0x4) (async, rerun: 64) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (rerun: 64) 23:35:47 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000080)=@id, &(0x7f00000000c0)=0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) syz_open_dev$ndb(&(0x7f0000000280), 0x0, 0xd4042) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000180)={0x3, 0x1, @start={0x8001}}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000200)={0x400, "a018377a30234991a638bfa1f0c54308840816875828f077f03ed5ef693f0433", 0x1, 0x8, 0x2, 0x3200e0, 0x10021, 0x4}) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000040)={0x1, 0x20303159, 0x1, @stepwise={0x1, 0x101, 0xfff, 0x5, 0x5cb, 0x4}}) 23:35:47 executing program 1: syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000002c0)=@fd={0x80, 0x0, 0x4, 0x4000, 0x4, {r1, r2/1000+60000}, {0x1, 0xc, 0x3, 0xfe, 0x0, 0x6, "d1319264"}, 0xaebf, 0x4, {}, 0xff}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @win={{0xc7, 0xfffffff7, 0x101, 0x2}, 0x3, 0x9, &(0x7f0000000080)={{0x9, 0x8, 0x7, 0x800}, &(0x7f0000000040)={{0x4, 0x1, 0x1, 0x7ff}, &(0x7f0000000000)={{0x3ff, 0x800101, 0x1}}}}, 0x81, &(0x7f0000000140)="8655ae732a728868ca16ce715c8973ff260670fbbc714d2c1a"}}) r3 = syz_open_dev$vim2m(&(0x7f0000000340), 0x3, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000480)={0xf6cb, 0xfff, 0x4, {0x1, @win={{0x7, 0x2, 0x6, 0x1}, 0x4, 0x1f, &(0x7f0000000400)={{0x6, 0x1, 0x80000001, 0x7c000}, &(0x7f00000003c0)={{0x10001, 0xa184, 0x1, 0x4}, &(0x7f0000000380)={{0x8bf0, 0x3ff, 0x0, 0x7}}}}, 0x0, &(0x7f0000000440)="b3", 0x2}}, 0x5}) 23:35:47 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x9) 23:35:47 executing program 4: r0 = socket(0x18, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000480)={r1}, 0x8) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f00000004c0)={0x4, "a73772c4290436e681cdf11c5e7f96a5dbed33e13aa8d0dfd5a84eb92f623984", 0x3, 0x0, 0xe88, 0x1000, 0x2}) connect$can_bcm(r1, &(0x7f0000000040), 0x10) recvmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x880, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r3}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r1, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000600)=[{}], 0x8, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x10, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) clock_gettime(0x0, &(0x7f0000000880)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000980)={&(0x7f0000000840)={0x1d, r5}, 0x10, &(0x7f0000000940)={&(0x7f00000008c0)={0x2, 0x801, 0xff, {r6, r7/1000+10000}, {0x0, 0x2710}, {0x1, 0x1, 0x0, 0x1}, 0x1, @can={{0x1, 0x0, 0x1, 0x1}, 0x6, 0x2, 0x0, 0x0, "343e3e72a3f77571"}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x80) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xffffffffffffffff) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000380), &(0x7f00000003c0)=0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:47 executing program 2: r0 = socket(0x18, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)) getsockname$tipc(r0, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x3) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:47 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x44) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) socket$pptp(0x18, 0x1, 0x2) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, &(0x7f0000000040)={0x0, 0xea60}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) 23:35:47 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000080)=@id, &(0x7f00000000c0)=0x10) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) syz_open_dev$ndb(&(0x7f0000000280), 0x0, 0xd4042) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000180)={0x3, 0x1, @start={0x8001}}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000200)={0x400, "a018377a30234991a638bfa1f0c54308840816875828f077f03ed5ef693f0433", 0x1, 0x8, 0x2, 0x3200e0, 0x10021, 0x4}) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000040)={0x1, 0x20303159, 0x1, @stepwise={0x1, 0x101, 0xfff, 0x5, 0x5cb, 0x4}}) 23:35:47 executing program 1: syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000002c0)=@fd={0x80, 0x0, 0x4, 0x4000, 0x4, {r1, r2/1000+60000}, {0x1, 0xc, 0x3, 0xfe, 0x0, 0x6, "d1319264"}, 0xaebf, 0x4, {}, 0xff}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @win={{0xc7, 0xfffffff7, 0x101, 0x2}, 0x3, 0x9, &(0x7f0000000080)={{0x9, 0x8, 0x7, 0x800}, &(0x7f0000000040)={{0x4, 0x1, 0x1, 0x7ff}, &(0x7f0000000000)={{0x3ff, 0x800101, 0x1}}}}, 0x81, &(0x7f0000000140)="8655ae732a728868ca16ce715c8973ff260670fbbc714d2c1a"}}) (async) r3 = syz_open_dev$vim2m(&(0x7f0000000340), 0x3, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000480)={0xf6cb, 0xfff, 0x4, {0x1, @win={{0x7, 0x2, 0x6, 0x1}, 0x4, 0x1f, &(0x7f0000000400)={{0x6, 0x1, 0x80000001, 0x7c000}, &(0x7f00000003c0)={{0x10001, 0xa184, 0x1, 0x4}, &(0x7f0000000380)={{0x8bf0, 0x3ff, 0x0, 0x7}}}}, 0x0, &(0x7f0000000440)="b3", 0x2}}, 0x5}) 23:35:47 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x9) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x9) (async) 23:35:47 executing program 4: r0 = socket(0x18, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000480)={r1}, 0x8) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f00000004c0)={0x4, "a73772c4290436e681cdf11c5e7f96a5dbed33e13aa8d0dfd5a84eb92f623984", 0x3, 0x0, 0xe88, 0x1000, 0x2}) connect$can_bcm(r1, &(0x7f0000000040), 0x10) recvmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x880, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r3}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r1, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000600)=[{}], 0x8, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x10, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) clock_gettime(0x0, &(0x7f0000000880)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000980)={&(0x7f0000000840)={0x1d, r5}, 0x10, &(0x7f0000000940)={&(0x7f00000008c0)={0x2, 0x801, 0xff, {r6, r7/1000+10000}, {0x0, 0x2710}, {0x1, 0x1, 0x0, 0x1}, 0x1, @can={{0x1, 0x0, 0x1, 0x1}, 0x6, 0x2, 0x0, 0x0, "343e3e72a3f77571"}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x80) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xffffffffffffffff) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000380), &(0x7f00000003c0)=0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:47 executing program 2: r0 = socket(0x18, 0x0, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)) (async) getsockname$tipc(r0, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x3) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:47 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x44) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) socket$pptp(0x18, 0x1, 0x2) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, &(0x7f0000000040)={0x0, 0xea60}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)) 23:35:47 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000080)=@id, &(0x7f00000000c0)=0x10) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) syz_open_dev$ndb(&(0x7f0000000280), 0x0, 0xd4042) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000180)={0x3, 0x1, @start={0x8001}}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000200)={0x400, "a018377a30234991a638bfa1f0c54308840816875828f077f03ed5ef693f0433", 0x1, 0x8, 0x2, 0x3200e0, 0x10021, 0x4}) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000040)={0x1, 0x20303159, 0x1, @stepwise={0x1, 0x101, 0xfff, 0x5, 0x5cb, 0x4}}) 23:35:47 executing program 1: syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000002c0)=@fd={0x80, 0x0, 0x4, 0x4000, 0x4, {r1, r2/1000+60000}, {0x1, 0xc, 0x3, 0xfe, 0x0, 0x6, "d1319264"}, 0xaebf, 0x4, {}, 0xff}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @win={{0xc7, 0xfffffff7, 0x101, 0x2}, 0x3, 0x9, &(0x7f0000000080)={{0x9, 0x8, 0x7, 0x800}, &(0x7f0000000040)={{0x4, 0x1, 0x1, 0x7ff}, &(0x7f0000000000)={{0x3ff, 0x800101, 0x1}}}}, 0x81, &(0x7f0000000140)="8655ae732a728868ca16ce715c8973ff260670fbbc714d2c1a"}}) (async) r3 = syz_open_dev$vim2m(&(0x7f0000000340), 0x3, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000480)={0xf6cb, 0xfff, 0x4, {0x1, @win={{0x7, 0x2, 0x6, 0x1}, 0x4, 0x1f, &(0x7f0000000400)={{0x6, 0x1, 0x80000001, 0x7c000}, &(0x7f00000003c0)={{0x10001, 0xa184, 0x1, 0x4}, &(0x7f0000000380)={{0x8bf0, 0x3ff, 0x0, 0x7}}}}, 0x0, &(0x7f0000000440)="b3", 0x2}}, 0x5}) 23:35:47 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x44) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) socket$pptp(0x18, 0x1, 0x2) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, &(0x7f0000000040)={0x0, 0xea60}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) socket$l2tp(0x2, 0x2, 0x73) 23:35:47 executing program 2: r0 = socket(0x18, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)) (async) getsockname$tipc(r0, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x3) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:47 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x1, [{}, {}, {}, {0xfffffffc}]}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x20, 0x1, 0x1}) 23:35:47 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x145000, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x2, "350c8f218fdf2fe349f510698c0b8e427b618c69529b694cff11a7098ab4b759"}) 23:35:47 executing program 4: r0 = socket(0x18, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000480)={r1}, 0x8) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f00000004c0)={0x4, "a73772c4290436e681cdf11c5e7f96a5dbed33e13aa8d0dfd5a84eb92f623984", 0x3, 0x0, 0xe88, 0x1000, 0x2}) connect$can_bcm(r1, &(0x7f0000000040), 0x10) recvmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x880, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r3}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r1, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000600)=[{}], 0x8, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x10, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) clock_gettime(0x0, &(0x7f0000000880)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000980)={&(0x7f0000000840)={0x1d, r5}, 0x10, &(0x7f0000000940)={&(0x7f00000008c0)={0x2, 0x801, 0xff, {r6, r7/1000+10000}, {0x0, 0x2710}, {0x1, 0x1, 0x0, 0x1}, 0x1, @can={{0x1, 0x0, 0x1, 0x1}, 0x6, 0x2, 0x0, 0x0, "343e3e72a3f77571"}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x80) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xffffffffffffffff) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000380), &(0x7f00000003c0)=0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:47 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000300)={0x1, 0x0, 0x6, 0x80}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @win={{0x8000, 0x1f, 0x7, 0x3}, 0x3, 0x10000, &(0x7f0000000040)={{0x5, 0x2, 0x2c, 0x8}, &(0x7f0000000000)={{0xd789, 0xf3, 0x8001, 0x8}}}, 0xa, &(0x7f0000000080)="07e99dd830af47f00601cd98602045fb5de1de53f15440d1f14d6ff0d644e7d6d303c81a6264ac1e6fb949149d9740ca264e9bd7cd432be1ab86a496111800bbf9ccc613962ee94910715331619ce4e7a7bb016760be2a5db22a1be09ee7bb9e14bc5b709a9aaecb208ee985a96b5adc3a5493617faf5149dc874de4cc443ff497a2e30b8134590a1b900d104bc686629986cb72c37c0332facdc5de298367f68ba11c0fdcdf67e399a49e90af22b2355c95eb806acb88872425ad8d61ba8a7a171b3426142a27364f0aa9a471b18c", 0x3}}) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f00000002c0)) 23:35:47 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x44) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) socket$pptp(0x18, 0x1, 0x2) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, &(0x7f0000000040)={0x0, 0xea60}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) 23:35:47 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x145000, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x2, "350c8f218fdf2fe349f510698c0b8e427b618c69529b694cff11a7098ab4b759"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x145000, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x2, "350c8f218fdf2fe349f510698c0b8e427b618c69529b694cff11a7098ab4b759"}) (async) 23:35:47 executing program 2: r0 = socket(0x18, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x1) 23:35:47 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x1, [{}, {}, {}, {0xfffffffc}]}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x20, 0x1, 0x1}) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x1, [{}, {}, {}, {0xfffffffc}]}}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x20, 0x1, 0x1}) (async) 23:35:47 executing program 4: r0 = socket(0x18, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000480)={r1}, 0x8) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f00000004c0)={0x4, "a73772c4290436e681cdf11c5e7f96a5dbed33e13aa8d0dfd5a84eb92f623984", 0x3, 0x0, 0xe88, 0x1000, 0x2}) connect$can_bcm(r1, &(0x7f0000000040), 0x10) recvmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x880, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r3}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r1, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000600)=[{}], 0x8, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x10, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) clock_gettime(0x0, &(0x7f0000000880)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000980)={&(0x7f0000000840)={0x1d, r5}, 0x10, &(0x7f0000000940)={&(0x7f00000008c0)={0x2, 0x801, 0xff, {r6, r7/1000+10000}, {0x0, 0x2710}, {0x1, 0x1, 0x0, 0x1}, 0x1, @can={{0x1, 0x0, 0x1, 0x1}, 0x6, 0x2, 0x0, 0x0, "343e3e72a3f77571"}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x80) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xffffffffffffffff) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000380), &(0x7f00000003c0)=0x4) 23:35:47 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000300)={0x1, 0x0, 0x6, 0x80}) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @win={{0x8000, 0x1f, 0x7, 0x3}, 0x3, 0x10000, &(0x7f0000000040)={{0x5, 0x2, 0x2c, 0x8}, &(0x7f0000000000)={{0xd789, 0xf3, 0x8001, 0x8}}}, 0xa, &(0x7f0000000080)="07e99dd830af47f00601cd98602045fb5de1de53f15440d1f14d6ff0d644e7d6d303c81a6264ac1e6fb949149d9740ca264e9bd7cd432be1ab86a496111800bbf9ccc613962ee94910715331619ce4e7a7bb016760be2a5db22a1be09ee7bb9e14bc5b709a9aaecb208ee985a96b5adc3a5493617faf5149dc874de4cc443ff497a2e30b8134590a1b900d104bc686629986cb72c37c0332facdc5de298367f68ba11c0fdcdf67e399a49e90af22b2355c95eb806acb88872425ad8d61ba8a7a171b3426142a27364f0aa9a471b18c", 0x3}}) (async) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f00000002c0)) 23:35:47 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x44) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) socket$pptp(0x18, 0x1, 0x2) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) 23:35:47 executing program 2: r0 = socket(0x18, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x1) 23:35:47 executing program 4: r0 = socket(0x18, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000480)={r1}, 0x8) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f00000004c0)={0x4, "a73772c4290436e681cdf11c5e7f96a5dbed33e13aa8d0dfd5a84eb92f623984", 0x3, 0x0, 0xe88, 0x1000, 0x2}) connect$can_bcm(r1, &(0x7f0000000040), 0x10) recvmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x880, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r3}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r1, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000600)=[{}], 0x8, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x10, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) clock_gettime(0x0, &(0x7f0000000880)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000980)={&(0x7f0000000840)={0x1d, r5}, 0x10, &(0x7f0000000940)={&(0x7f00000008c0)={0x2, 0x801, 0xff, {r6, r7/1000+10000}, {0x0, 0x2710}, {0x1, 0x1, 0x0, 0x1}, 0x1, @can={{0x1, 0x0, 0x1, 0x1}, 0x6, 0x2, 0x0, 0x0, "343e3e72a3f77571"}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x80) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xffffffffffffffff) 23:35:47 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x1, [{}, {}, {}, {0xfffffffc}]}}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x20, 0x1, 0x1}) 23:35:47 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000300)={0x1, 0x0, 0x6, 0x80}) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @win={{0x8000, 0x1f, 0x7, 0x3}, 0x3, 0x10000, &(0x7f0000000040)={{0x5, 0x2, 0x2c, 0x8}, &(0x7f0000000000)={{0xd789, 0xf3, 0x8001, 0x8}}}, 0xa, &(0x7f0000000080)="07e99dd830af47f00601cd98602045fb5de1de53f15440d1f14d6ff0d644e7d6d303c81a6264ac1e6fb949149d9740ca264e9bd7cd432be1ab86a496111800bbf9ccc613962ee94910715331619ce4e7a7bb016760be2a5db22a1be09ee7bb9e14bc5b709a9aaecb208ee985a96b5adc3a5493617faf5149dc874de4cc443ff497a2e30b8134590a1b900d104bc686629986cb72c37c0332facdc5de298367f68ba11c0fdcdf67e399a49e90af22b2355c95eb806acb88872425ad8d61ba8a7a171b3426142a27364f0aa9a471b18c", 0x3}}) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f00000002c0)) 23:35:47 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x44) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) socket$pptp(0x18, 0x1, 0x2) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) 23:35:47 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x145000, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x2, "350c8f218fdf2fe349f510698c0b8e427b618c69529b694cff11a7098ab4b759"}) 23:35:47 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0xffff7246, 0x3, 0x0, "22f5af15c482e19cfe02ff327e3940f1b5211994345e2fc30eccbb1062f798c7", 0x50313134}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @win={{0x3, 0x60466d3a, 0x9, 0x2}, 0x7, 0x8, &(0x7f00000002c0)={{0x1, 0xe7a, 0x7, 0xc8000000}, &(0x7f0000000040)={{0xc9f9, 0x5, 0x10001, 0x80}, &(0x7f0000000000)={{0x3ff, 0x101, 0x0, 0x9}}}}, 0x7ff, &(0x7f00000000c0)="53fce2769bf9c9df84767a2656a697d417f831502b3be2e9bcd5ab516741bf82dd8acbdf9d95c40615f8f5852de3fd1d1a1d50f597a85e080ef3facbba648d1afe5bf250f49602e025a1e1b12b4a24ff7ccb095463c8ec991cd1a24890c5a304c0187ea5fda0806764a03d15abfaac104180ae59f49eb6a195ee0a0071f7b4276ef3b730220de700"/151, 0x2}}) 23:35:47 executing program 5: ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000080)=0x1) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000140)={0xd}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000480)={0x3, @sdr={0x43564548, 0x4}}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000040)) 23:35:47 executing program 4: r0 = socket(0x18, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000480)={r1}, 0x8) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f00000004c0)={0x4, "a73772c4290436e681cdf11c5e7f96a5dbed33e13aa8d0dfd5a84eb92f623984", 0x3, 0x0, 0xe88, 0x1000, 0x2}) connect$can_bcm(r1, &(0x7f0000000040), 0x10) recvmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x880, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r3}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r1, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000600)=[{}], 0x8, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x10, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) clock_gettime(0x0, &(0x7f0000000880)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000980)={&(0x7f0000000840)={0x1d, r4}, 0x10, &(0x7f0000000940)={&(0x7f00000008c0)={0x2, 0x801, 0xff, {r5, r6/1000+10000}, {0x0, 0x2710}, {0x1, 0x1, 0x0, 0x1}, 0x1, @can={{0x1, 0x0, 0x1, 0x1}, 0x6, 0x2, 0x0, 0x0, "343e3e72a3f77571"}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x80) 23:35:47 executing program 2: r0 = socket(0x18, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x1) 23:35:47 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x44) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) socket$pptp(0x18, 0x1, 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) 23:35:47 executing program 5: ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000080)=0x1) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000140)={0xd}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000480)={0x3, @sdr={0x43564548, 0x4}}) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000040)) 23:35:47 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0xffff7246, 0x3, 0x0, "22f5af15c482e19cfe02ff327e3940f1b5211994345e2fc30eccbb1062f798c7", 0x50313134}) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @win={{0x3, 0x60466d3a, 0x9, 0x2}, 0x7, 0x8, &(0x7f00000002c0)={{0x1, 0xe7a, 0x7, 0xc8000000}, &(0x7f0000000040)={{0xc9f9, 0x5, 0x10001, 0x80}, &(0x7f0000000000)={{0x3ff, 0x101, 0x0, 0x9}}}}, 0x7ff, &(0x7f00000000c0)="53fce2769bf9c9df84767a2656a697d417f831502b3be2e9bcd5ab516741bf82dd8acbdf9d95c40615f8f5852de3fd1d1a1d50f597a85e080ef3facbba648d1afe5bf250f49602e025a1e1b12b4a24ff7ccb095463c8ec991cd1a24890c5a304c0187ea5fda0806764a03d15abfaac104180ae59f49eb6a195ee0a0071f7b4276ef3b730220de700"/151, 0x2}}) 23:35:47 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:47 executing program 4: r0 = socket(0x18, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000480)={r1}, 0x8) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f00000004c0)={0x4, "a73772c4290436e681cdf11c5e7f96a5dbed33e13aa8d0dfd5a84eb92f623984", 0x3, 0x0, 0xe88, 0x1000, 0x2}) connect$can_bcm(r1, &(0x7f0000000040), 0x10) recvmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x880, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r3}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r1, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000600)=[{}], 0x8, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x10, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) clock_gettime(0x0, &(0x7f0000000880)) 23:35:47 executing program 5: ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000080)=0x1) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000140)={0xd}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000480)={0x3, @sdr={0x43564548, 0x4}}) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000040)) 23:35:47 executing program 2: r0 = socket(0x18, 0x800, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x11800, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1}}, 0x5, 0x101}, 0x90) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:47 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0xffff7246, 0x3, 0x0, "22f5af15c482e19cfe02ff327e3940f1b5211994345e2fc30eccbb1062f798c7", 0x50313134}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @win={{0x3, 0x60466d3a, 0x9, 0x2}, 0x7, 0x8, &(0x7f00000002c0)={{0x1, 0xe7a, 0x7, 0xc8000000}, &(0x7f0000000040)={{0xc9f9, 0x5, 0x10001, 0x80}, &(0x7f0000000000)={{0x3ff, 0x101, 0x0, 0x9}}}}, 0x7ff, &(0x7f00000000c0)="53fce2769bf9c9df84767a2656a697d417f831502b3be2e9bcd5ab516741bf82dd8acbdf9d95c40615f8f5852de3fd1d1a1d50f597a85e080ef3facbba648d1afe5bf250f49602e025a1e1b12b4a24ff7ccb095463c8ec991cd1a24890c5a304c0187ea5fda0806764a03d15abfaac104180ae59f49eb6a195ee0a0071f7b4276ef3b730220de700"/151, 0x2}}) syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0xffff7246, 0x3, 0x0, "22f5af15c482e19cfe02ff327e3940f1b5211994345e2fc30eccbb1062f798c7", 0x50313134}) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @win={{0x3, 0x60466d3a, 0x9, 0x2}, 0x7, 0x8, &(0x7f00000002c0)={{0x1, 0xe7a, 0x7, 0xc8000000}, &(0x7f0000000040)={{0xc9f9, 0x5, 0x10001, 0x80}, &(0x7f0000000000)={{0x3ff, 0x101, 0x0, 0x9}}}}, 0x7ff, &(0x7f00000000c0)="53fce2769bf9c9df84767a2656a697d417f831502b3be2e9bcd5ab516741bf82dd8acbdf9d95c40615f8f5852de3fd1d1a1d50f597a85e080ef3facbba648d1afe5bf250f49602e025a1e1b12b4a24ff7ccb095463c8ec991cd1a24890c5a304c0187ea5fda0806764a03d15abfaac104180ae59f49eb6a195ee0a0071f7b4276ef3b730220de700"/151, 0x2}}) (async) 23:35:48 executing program 4: r0 = socket(0x18, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000480)={r1}, 0x8) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f00000004c0)={0x4, "a73772c4290436e681cdf11c5e7f96a5dbed33e13aa8d0dfd5a84eb92f623984", 0x3, 0x0, 0xe88, 0x1000, 0x2}) connect$can_bcm(r1, &(0x7f0000000040), 0x10) recvmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x880, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r3}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r1, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000600)=[{}], 0x8, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x10, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) 23:35:48 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x44) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) 23:35:48 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:35:48 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000140)={0xd}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f0000000000)) 23:35:48 executing program 2: r0 = socket(0x18, 0x800, 0x0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x11800, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1}}, 0x5, 0x101}, 0x90) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:48 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x4, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0xd80, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0xe8000, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r2, r3, 0x0, r4}, 0x10) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000080)=@userptr={0x3, 0x1, 0x4, 0x2, 0x400, {0x77359400}, {0x5, 0x1, 0x8, 0x35, 0x4, 0x6, "95b7b58f"}, 0x1, 0x2, {&(0x7f0000000040)}, 0x4d6f}) 23:35:48 executing program 4: r0 = socket(0x18, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000480)={r1}, 0x8) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f00000004c0)={0x4, "a73772c4290436e681cdf11c5e7f96a5dbed33e13aa8d0dfd5a84eb92f623984", 0x3, 0x0, 0xe88, 0x1000, 0x2}) connect$can_bcm(r1, &(0x7f0000000040), 0x10) recvmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x880, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r3}, 0x8) 23:35:48 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x44) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) 23:35:48 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000140)={0xd}) (async, rerun: 64) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f0000000000)) 23:35:48 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x4, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0xd80, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0xe8000, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r2, r3, 0x0, r4}, 0x10) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000080)=@userptr={0x3, 0x1, 0x4, 0x2, 0x400, {0x77359400}, {0x5, 0x1, 0x8, 0x35, 0x4, 0x6, "95b7b58f"}, 0x1, 0x2, {&(0x7f0000000040)}, 0x4d6f}) syz_open_dev$vim2m(&(0x7f0000000180), 0x4, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0xd80, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0xe8000, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r2, r3, 0x0, r4}, 0x10) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000080)=@userptr={0x3, 0x1, 0x4, 0x2, 0x400, {0x77359400}, {0x5, 0x1, 0x8, 0x35, 0x4, 0x6, "95b7b58f"}, 0x1, 0x2, {&(0x7f0000000040)}, 0x4d6f}) (async) 23:35:48 executing program 2: r0 = socket(0x18, 0x800, 0x0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x11800, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1}}, 0x5, 0x101}, 0x90) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:48 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:35:48 executing program 4: r0 = socket(0x18, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000480)={r1}, 0x8) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f00000004c0)={0x4, "a73772c4290436e681cdf11c5e7f96a5dbed33e13aa8d0dfd5a84eb92f623984", 0x3, 0x0, 0xe88, 0x1000, 0x2}) connect$can_bcm(r1, &(0x7f0000000040), 0x10) recvmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x880, 0x0) 23:35:48 executing program 3: r0 = socket(0x18, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) 23:35:48 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x2000000) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x1b2) 23:35:48 executing program 4: r0 = socket(0x18, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000480)={r1}, 0x8) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f00000004c0)={0x4, "a73772c4290436e681cdf11c5e7f96a5dbed33e13aa8d0dfd5a84eb92f623984", 0x3, 0x0, 0xe88, 0x1000, 0x2}) connect$can_bcm(r1, &(0x7f0000000040), 0x10) recvmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 23:35:48 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000140)={0xd}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f0000000000)) 23:35:48 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000100)={0x9, 0x4, {0x56, 0x4, 0x8, {0x383e, 0x3e3d}, {0x3ff, 0x8}, @rumble={0x1f, 0x4}}, {0x53, 0x2, 0x6, {0x0, 0x240}, {0x0, 0x1}, @ramp={0x5, 0x7, {0x7, 0x200, 0x3ee, 0x3ff}}}}) r1 = socket(0x18, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:48 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x4, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) (async) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0xd80, 0x0) (async, rerun: 32) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0xe8000, 0x0) (async, rerun: 32) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r2, r3, 0x0, r4}, 0x10) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000080)=@userptr={0x3, 0x1, 0x4, 0x2, 0x400, {0x77359400}, {0x5, 0x1, 0x8, 0x35, 0x4, 0x6, "95b7b58f"}, 0x1, 0x2, {&(0x7f0000000040)}, 0x4d6f}) 23:35:48 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) 23:35:48 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x2000000) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x1b2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x2000000) (async) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x1b2) (async) 23:35:48 executing program 4: r0 = socket(0x18, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000480)={r1}, 0x8) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f00000004c0)={0x4, "a73772c4290436e681cdf11c5e7f96a5dbed33e13aa8d0dfd5a84eb92f623984", 0x3, 0x0, 0xe88, 0x1000, 0x2}) connect$can_bcm(r1, &(0x7f0000000040), 0x10) recvmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) 23:35:48 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7}, {0x0, 0x4}, {}, {0x400000}, {0x2}, {}, {0xdbef}, {0x0, 0xff}], 0x0, 0x0, 0x0, 0x2}}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x80000000, 0x7f}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000280)={0x1, "7107ba8ef682c2ba04cb085dc54b01e396c8cbb74ee90b53610bbaeb839b18ff", 0x0, 0x1}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000540)=0x1) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1ff, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f00000000c0)=0x3) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = accept4$tipc(r1, 0x0, &(0x7f0000000300), 0x80800) sendmsg$tipc(r5, &(0x7f0000000500)={&(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x4, 0x4}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000380)="f2e02cebb2c777db390f33723514def3fb772a6961cb55fbe071e98b8b251e0796ed", 0x22}, {&(0x7f00000003c0)="51968c9b78051fa78c6b284a252701d79a6603418a5bbf2f54f74dd31915ee04e36626ec2510d6911a8ce41ffa05b6ad2bc5dd1090dfc8ffae389193f8938a0b61dab0d7b8f02d67b82abbd9433828b3d13b70e997162549ad320f7f22de1ea2311e6a02a3b43262acefb0d851e9862947390caf73157bc1020b946ce598c9e2b33d16151367191dbdcbbaae104aa9ff33e09a66b1d694484d66777051e66ccf3c23e621b2e1db7c6082e87af5fcde1630ac01df32957d7aae4e606e7767c996e89db591abbcc5913ce4970409bd2a6b", 0xd0}], 0x2, &(0x7f0000000680)="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", 0x1000, 0x81}, 0x1) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000140)={0x1, @pix={0x4, 0xffff0001, 0x59455247, 0x25fc2247ab3b41d2, 0x0, 0x9e, 0x2, 0x1, 0x1, 0x4, 0x6, 0x4}}) setsockopt$inet_dccp_int(r1, 0x21, 0x11, &(0x7f0000001680)=0x6, 0x4) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000002c0)={0x8, 0x2, 0x2, "e46b8dd010a282b1bc9d03be9464378398c37548b18ecd33867fb62f5598143d", 0x47314356}) 23:35:48 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000100)={0x9, 0x4, {0x56, 0x4, 0x8, {0x383e, 0x3e3d}, {0x3ff, 0x8}, @rumble={0x1f, 0x4}}, {0x53, 0x2, 0x6, {0x0, 0x240}, {0x0, 0x1}, @ramp={0x5, 0x7, {0x7, 0x200, 0x3ee, 0x3ff}}}}) (async) r1 = socket(0x18, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:48 executing program 3: ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) 23:35:48 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x2, 0x5, 0x4, {0x2, @sliced={0x96, [0x101, 0x3, 0x4, 0x401, 0x5892, 0xfff, 0x7, 0x8, 0x3, 0x6, 0x0, 0x3, 0x1, 0x2, 0x8, 0x4, 0x5, 0xffff, 0x7, 0x101, 0x905, 0x1000, 0x0, 0xcc, 0x6d, 0x7e, 0x6, 0x8, 0x5, 0x93, 0x5, 0x0, 0x800, 0x4, 0x6b6e, 0x2, 0x5, 0xd812, 0x57b, 0x1, 0x9, 0x159e, 0x0, 0x800, 0x957a, 0x6, 0xfffe, 0x4], 0x80}}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)=@userptr={0x40, 0x2, 0x4, 0x2, 0x0, {}, {0x3, 0x2, 0x3, 0x9e, 0x0, 0x1f, "0f953082"}, 0x8, 0x2, {}, 0x5, 0x0, r1}) 23:35:48 executing program 4: r0 = socket(0x18, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000480)={r1}, 0x8) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f00000004c0)={0x4, "a73772c4290436e681cdf11c5e7f96a5dbed33e13aa8d0dfd5a84eb92f623984", 0x3, 0x0, 0xe88, 0x1000, 0x2}) recvmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) 23:35:48 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x2000000) (async) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x1b2) 23:35:48 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7}, {0x0, 0x4}, {}, {0x400000}, {0x2}, {}, {0xdbef}, {0x0, 0xff}], 0x0, 0x0, 0x0, 0x2}}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x80000000, 0x7f}) (async, rerun: 64) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000280)={0x1, "7107ba8ef682c2ba04cb085dc54b01e396c8cbb74ee90b53610bbaeb839b18ff", 0x0, 0x1}) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000540)=0x1) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1ff, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f00000000c0)=0x3) (async) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = accept4$tipc(r1, 0x0, &(0x7f0000000300), 0x80800) sendmsg$tipc(r5, &(0x7f0000000500)={&(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x4, 0x4}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000380)="f2e02cebb2c777db390f33723514def3fb772a6961cb55fbe071e98b8b251e0796ed", 0x22}, {&(0x7f00000003c0)="51968c9b78051fa78c6b284a252701d79a6603418a5bbf2f54f74dd31915ee04e36626ec2510d6911a8ce41ffa05b6ad2bc5dd1090dfc8ffae389193f8938a0b61dab0d7b8f02d67b82abbd9433828b3d13b70e997162549ad320f7f22de1ea2311e6a02a3b43262acefb0d851e9862947390caf73157bc1020b946ce598c9e2b33d16151367191dbdcbbaae104aa9ff33e09a66b1d694484d66777051e66ccf3c23e621b2e1db7c6082e87af5fcde1630ac01df32957d7aae4e606e7767c996e89db591abbcc5913ce4970409bd2a6b", 0xd0}], 0x2, &(0x7f0000000680)="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", 0x1000, 0x81}, 0x1) (async) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000140)={0x1, @pix={0x4, 0xffff0001, 0x59455247, 0x25fc2247ab3b41d2, 0x0, 0x9e, 0x2, 0x1, 0x1, 0x4, 0x6, 0x4}}) (async) setsockopt$inet_dccp_int(r1, 0x21, 0x11, &(0x7f0000001680)=0x6, 0x4) (async, rerun: 64) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000002c0)={0x8, 0x2, 0x2, "e46b8dd010a282b1bc9d03be9464378398c37548b18ecd33867fb62f5598143d", 0x47314356}) (rerun: 64) 23:35:48 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x2, 0x5, 0x4, {0x2, @sliced={0x96, [0x101, 0x3, 0x4, 0x401, 0x5892, 0xfff, 0x7, 0x8, 0x3, 0x6, 0x0, 0x3, 0x1, 0x2, 0x8, 0x4, 0x5, 0xffff, 0x7, 0x101, 0x905, 0x1000, 0x0, 0xcc, 0x6d, 0x7e, 0x6, 0x8, 0x5, 0x93, 0x5, 0x0, 0x800, 0x4, 0x6b6e, 0x2, 0x5, 0xd812, 0x57b, 0x1, 0x9, 0x159e, 0x0, 0x800, 0x957a, 0x6, 0xfffe, 0x4], 0x80}}}) (async, rerun: 32) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) (rerun: 32) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)=@userptr={0x40, 0x2, 0x4, 0x2, 0x0, {}, {0x3, 0x2, 0x3, 0x9e, 0x0, 0x1f, "0f953082"}, 0x8, 0x2, {}, 0x5, 0x0, r1}) 23:35:48 executing program 3: ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) 23:35:48 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000100)={0x9, 0x4, {0x56, 0x4, 0x8, {0x383e, 0x3e3d}, {0x3ff, 0x8}, @rumble={0x1f, 0x4}}, {0x53, 0x2, 0x6, {0x0, 0x240}, {0x0, 0x1}, @ramp={0x5, 0x7, {0x7, 0x200, 0x3ee, 0x3ff}}}}) (async, rerun: 32) r1 = socket(0x18, 0x0, 0x0) (rerun: 32) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:48 executing program 4: r0 = socket(0x18, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000480)={r1}, 0x8) recvmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) 23:35:48 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x48524742}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) 23:35:48 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7}, {0x0, 0x4}, {}, {0x400000}, {0x2}, {}, {0xdbef}, {0x0, 0xff}], 0x0, 0x0, 0x0, 0x2}}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x80000000, 0x7f}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000280)={0x1, "7107ba8ef682c2ba04cb085dc54b01e396c8cbb74ee90b53610bbaeb839b18ff", 0x0, 0x1}) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000540)=0x1) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1ff, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f00000000c0)=0x3) (async) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r5 = accept4$tipc(r1, 0x0, &(0x7f0000000300), 0x80800) sendmsg$tipc(r5, &(0x7f0000000500)={&(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x4, 0x4}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000380)="f2e02cebb2c777db390f33723514def3fb772a6961cb55fbe071e98b8b251e0796ed", 0x22}, {&(0x7f00000003c0)="51968c9b78051fa78c6b284a252701d79a6603418a5bbf2f54f74dd31915ee04e36626ec2510d6911a8ce41ffa05b6ad2bc5dd1090dfc8ffae389193f8938a0b61dab0d7b8f02d67b82abbd9433828b3d13b70e997162549ad320f7f22de1ea2311e6a02a3b43262acefb0d851e9862947390caf73157bc1020b946ce598c9e2b33d16151367191dbdcbbaae104aa9ff33e09a66b1d694484d66777051e66ccf3c23e621b2e1db7c6082e87af5fcde1630ac01df32957d7aae4e606e7767c996e89db591abbcc5913ce4970409bd2a6b", 0xd0}], 0x2, &(0x7f0000000680)="a4bedef4ab88b1012111b0b4c20551fbb8bc3653645df8e831f46bdad167b9a217d212f8c4774d0679638d1656a5d7f0fa17b75f2aea8b19caa8f6ee1f3883528fa42de72199bfccac9c185d82b3adf45ba41dd7631eea34c3ed6b601cf378c6ea92b4bf62d69db69966034f082a9c265411f1d796440587d1d6f282ad3e149882d9177fce9c4b144d7745777542cdce7f96ed56e6572ec3b05e2158b0ce2bdb095d4228e46faab5a45a464b75491ca2783ecccaab0d5ef678a0834c7dcc3cafa74e62e04a182d2c539a6884f6f41575fe29f177ef5ed41743caf63359ac41a1f494e9b2a2764e7db11b46e2d2adfd7a4d9ea76aaf0c33cbfb47776b189a5952956a5029c9bf7c5b7a526eb939ca4b13b2d3137608e8fcf8a3cc74717fa5b351ff8dec7734943dce109fa7a8165ad5b9e8ccf8d7f39343ce81191b70bb1e50a8e9b4ffc26d5bbb0d69e5cd7c1f0fd41fa7b8322d67ca27b96f7fc9f7d4827d2abcd18c26788610cb60af9f33d8f82d87fa5cc8c89d55d115e102c8cea5030b0e10df9c16f69edaf2fe3ca7431939d98d9da181a3ebf6e7713b4e4edfde798458293ec6424d332b48d89f6205bfd7ba51ebdfee5cb5c98ea4ba5a087111525aad82403e7b033ca0568903abe5272ea3f49fd4b61a0b05f171657b4d39bf66deac8b23729eaafedef7f5626d2751c3aee45526f696a2534fa06637458e1cdf5d708fc95fa97543791964c52a2ba82fb06dbaae870ef5836d8da62352a299d430fdea471b61dd80594edf0f9cb09566c66633db094dfa1d0f33cbeeb6d855183a074e6546a7265302ba354aaf040d70affc64ae463ba70460c5cb93516441b20b78de85addeb619cb49cb1f348cfc267e36e6f224f183706e42bfcb89719a929a445a0d558d3fea5b4b786f181e747df40525c73fc60181b7a49bf42bc67c9d8c6931cb89a33daac3930e54acd1928c6de0fc471629613868ee3544ff7ff9389ea5e39f9e5133537f280bbeaa109cad79aebe7318d4bf08c3722d7b8559233bc626ceb75485b6571a3fe8aaf3c37c8d355d43797a58f6d8c18e5516bb1df67d9eb841974fda054c08f4faad83bad83882d5af5c930ab6d43af2b9e711a8f7e5de57bc1c8fd12622afc0280ea84897af492f26dbbe0bbfb1979c19d542f55cd607bbfa1d8eabc4489ac04e12d18985539288a6f6d0f5b3591efe02adb6c89f67c24466b5d70ffa2460da173a4d8b2f8dc6bd4bf1fbb5c7b3126e163f90b431b0787ec3d26a5985c13f7fe167749fcc704b831152e4482083b9dd6494dfd33dc425ddba248aac21bc8e208a69704ad650bd332164f9f06d65643212d74b815410b629b1896d8eaf7203c89dd577d87726bf9802ac673ca60468612ad38d4f14a7bb898e5a890e729afbc2afd4bf9f93fdc964c74f5a3f7c9dc8558d378ad23d00e65e9c09bbc78c2120992eb71b7af5b0ce8a9730f405a494f1c24e021e940d32e50416eed89747572bc4f565cd39d69ada7e2b72379bd71894153c754868af755bd552997a68099da98cfe86fd94b80bba5ce1f0b331fe14e901f894a0ed68e2c4225105a046392d7382c32cd85ff84fd47df3eec3cd9368b206fe69dce75f608bb0056753d8352001f17eb2f0251af716ab59cc20647694f40b6d973fcab806779ae957f90b9b233eee281499ed44edc08a8b005f31b181815ab4dbceb2fde1c89bb9ce43af0a39ae3052466348a8d2469c1cd57af1fe1eb4c3942746126a126b1aa55739a727024fe1d043f201cc08ade151cd218a8f2a3e97b6da9b3b3c1f66fb3051f298ea3f30d6aa3a091d5eabe0e2a5b2321dfff51056de2d3715b29356b2293681275824bcfc81f913bb4286e1a4782ec2989f0aca58407bbef1759dc0a83580f7edf2f1577dc03039c5f5e4d29e4eccf27041ca2cfea2b9a4f31257c3fcf431cbb97d0708e3ae7b4e7926ebb7747fe510561a74202d6ad5d4cf44d6a7909a82bfeaf04329da15a6b27396a990b18bc472128accbc1bc6c0a74dfc22b310c9e878e4ad1155431d3f21c51d4a8f1e90b94dad65b921409cdedc38540631273f63105a55115c98940167fd3fc39f148db5840a621ca8c46fe3fa95f92050096f862fffb23e9d952a08c71282b5957d6c8a9f5a2be0dfb476b0172fc5f2e56705db7943461e4bc8002625718cf9538860294260fd4f7243aef5bc5d2d15d5916b1340e28f03bdad2b5505ae3c722b585e9173282cc185e6d00e482763fe1070ff013c35329bcc792dff1b52ee3e0288f890bf748bba47e5b44a0276c5db436ea70a947f9262645ab5be3499a4e0e15b2de936704d6ec956e6cd0f5cab0cf0ce62577c57ae46381592380eab6a1e55d303d11e97038458664f5d0e61e8f17ee34b062d7caf3359bba1c3555f58b67f94017c1977f896124dd7be2d89a7e16de02430ff87dbd83ce46d753dd488288425150330a4c208175a0271e9c65eca74a47ce08eba2a640d26766008158c0fccaad690eaa694a7490b2d6ad27f19fa4f7ed566963a7d6acf07c80f9d5b1d867c7168640c2bc5c87800a4ced9225354940c57a3d84c99ac7fc48a123e642f73b2f167e6043f0044c751d4716870c1a88cd1af98399a2a7ca2562ac20f152f10df613d208ccc6071338354c83b5771553932d9eb29aab3bc90f120be676121a6bee921da279474a2b84287edd4e72dfa930b92af118e94096b4a4ff98852e28db068fc25f01c62789f7891512983482bc78b53fbbe10885a01189688230446bb90ccb03d776e46db32fc7446b767b71cb374c6cd35977e0179c1c8263753755f56ecc534871afbfb05a7b9424482ab2fb91ea8d5ee21e7ebe22d01b4e47f6fee7c0068eef21986e77fd4e71ead04383f2095924e7597b7e9ea664b4e2ff0c9a818df382213fbf49fab6be6a548f1624eaebcd579be623c21600d020bcc19e6f26922c1dcad3b684270efa784a73784807c227896e5b67e9edaf25a9b83ea255725f95c4ff3657a0a30180642f2d5071577e43cb763d3eaab3934aa793ac751c5de995b1b4b27f926ff3fe7dc1b9477f6372afc62bcb7973150e3988d9b10595953f29d05d73d4f1af03b589820ec50f2fdaf6a395b22b82ff2cc77aca318c14bb4c01c136f4acad040b66299ffe8e08a2a38d644bc09d0ab35e8baa9e05b489878e05dfc3d82054858608ed882e25f652db844428c3560331098dfc8edafa10102bcefc66cf1a53f51328a1016cd71eed2c806966ba24cdfa221973c7d06bbb7d42211acc56e2dca36c22578d8d7d236883c1038a9eed3318318e02379d11ae674c3c0051d816b547c637eebd22be35a97e5024f96d79f7668e74fb09a3447502a52b2623d7a5dc7aa075c2d1a9de574d5fa5ff28a71cf4a12f928a49d0f5c8486e04949e2289b63abdd03839b8d1ce6d2363c3468e5d378eb895126404b0729e89f1001a1bdfb5f83255400fd5cb8e62b038ad69f02baf2701afd68ae50fc30543bcff605bb93ebb24695b304156efb7d8dab45bd23065bc16074cafa218f9f734b12fed931ac89eebdd58e900d56dba30a8f6e8bd18c7092a859172a656f0fcd2add345eefaeffaca2e9084b36db688c56b7aed6f54ca758e8bbad145d8901ba82057d04b17d7fdc17674fa434226f2b9bef4743446fa78bfee95ccb4d3628234e719853a5e9d9d83d5a25a52500d3051c99ae26046d4d817d18636a421a605a00d4f4681dbf1f4a5005fcb5d27468e5bda128faf463482ef5568c1de445fe540e1d73ee7e107ab6f89e7095005e0a405b5908ac1f4afc71ade8d09c827f85089312ea6fd0274367930ef85ec4cb844b6036f6b7205bd551dec1d8ea23b3dddf87527e3b1a0dea0b775cf03db665741590f233caf067cd205dbfcf7a55da4c94d9a9f76cb649069ba93c905f7218c7c970adceb57063fd6c864b709fe966aacd400f67acdbeb7caceb407a037b586dbf37643857161fa0cc244e8d210d818f28a96927f8a1c68c5dbb81ba96f5e7b33991c6c287d55db36796c047abeccd9b4f88982cca488cc7071ad76b3f2bb364e06790feceb3d9fa71b70548d546260390f4e206a0cc44bf7f0c8e2e31db30ec2861963f97b5fd6140e28c8302718a498af769679628be990b536d2f63ef1bce3a6546c661c2af9492961c1841afe6d2ce0061768a1773c65fef98bbfb80dc176b0ae3a9c20f47902bb644a92da515f6d7fec3737015e706ddad0bdc76d09789d83e7adcef0a6420e4331bfaff993aec545edad55c655413ab23e05b5d973bac83d10d11dc402e358feccf7ddb679b0066da714f8bb0d0e722c18649cd57d091ad5817af6966ce5c97aa54eeca00acaca88f2e6af4eb02d2e761d752a28f09ff1dd4ee264afffd88ecd2857cdc25945bfe4b8f9ff4345e4b703c25505401c771a5dff724fe56b91f6f613102d1af3a818fbe9ceeee7cb3859c5bbf517eb1afb25a48a2b8fcec739ca73abaa28cbaddea6e2ede9bf11434d978a73131b725e0b5e47a3facab06d04a98f4af397d9a183e1cacfd996c4b9b87d1edbcc23d4283ecee67af887bf764f544775303fd16e1371740ff4cc6812e92e030b3f97ba10efbb37927bd68d35e16fb333a28c0bbceec98f5b2695bff851a1883a4b1fa5ea47b48ae6786f5a661c5c194f37ddddd1d444096bb7de2048496c89ee52d42a7ebe7609cd0296fe78521c5e39a716c8135af1900d653ca7651dad4f39a92a53075c13d9bc2f85a5cb8222fa73152a87ddc9ed8c7cb5bdc930698312962e4eef4ec5dcbac1a44105731cbd1bcacc53abaac95b1b546a400ead2650ab0dc357e291cfab9f3f7f3050d1d80a9ebe9e05f0040d85bc36f9b5ac279d15729f55197746d177c35f166704ec89c7039eedc1d85c0303e7da609f538ced8647060ef6430fff8a6acaacb4d45450d3ed7369209634613e0d16d4f55bfb6e401d2a684df2d020998ad809602c3e26e746db3b66b05ea99f21ce0bee6276d696a69639e18dc890951debc132b0a9318b1359be661e131727baa25f19d696dc1b55a4feffdbaf4884f243f7e8c2a94af4d0c4712d3579dc3e62310413e57ed62ced0bf1042040b0eee93dcc55e2f96350defed9a2bdf1dca2017701e5eaf6f644610038ee9e32a5f6fe6d9a89c0bc9958501a63e4b8af453383cfba5f5e03e548c58067a1c0a4c59edc964b00ace46690f5e9fa7352ad5c489e75debdf07df05e2803d8b7068ff5eac4aeab99b574a65a3dda5d1762bcf6c620cd5e59acf9a39d8958a43dee5f6660f36a1a55fae573d399572319e9fb18eb7429b984801cae269fe29b443b916a05c8389693bc85b5e1fbc75323fbc187138774971ab379c5b15a69e6bdb4bbbcf1331c88cc4b771065e1aa3e038301aa5b54f78285fc79265056ef8d929e4cd1fd92b33a0e8025eb138085d4c05def20bc94e7106ffbabc74df0006c3b4e152513c0de178149d6de99609f880cb10f1a303a0fd37c5e349afb8b2a1e8f8d05a6678879e66c4c07430f8398de06c06286af62b63bbac20a291346a2ee8e6377155f008656b8c7a01033827ca72fc52ba6559c41c2f265ca81a5daaf044d7aaeb135f4ce0b847982a0fac13d2e5094c07d72678a6c74da1ef7c8f06c294c563899a187d50e63ccc9a6cf5845ac4fe8a7aa81b56daa18f321461ee15cbf05aba996a82ae36a1a6668173cd52df88b483917264cb1ee32cb499b387150d0da6add394a729ddb9c073d30c940483bbf09c7bfa4cba3bbec4928fd576be0907113829c15260", 0x1000, 0x81}, 0x1) (async) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000140)={0x1, @pix={0x4, 0xffff0001, 0x59455247, 0x25fc2247ab3b41d2, 0x0, 0x9e, 0x2, 0x1, 0x1, 0x4, 0x6, 0x4}}) (async, rerun: 32) setsockopt$inet_dccp_int(r1, 0x21, 0x11, &(0x7f0000001680)=0x6, 0x4) (rerun: 32) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000002c0)={0x8, 0x2, 0x2, "e46b8dd010a282b1bc9d03be9464378398c37548b18ecd33867fb62f5598143d", 0x47314356}) 23:35:48 executing program 3: ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) 23:35:48 executing program 2: r0 = socket(0x18, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x18) 23:35:48 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x48524742}) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) 23:35:48 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x2, 0x5, 0x4, {0x2, @sliced={0x96, [0x101, 0x3, 0x4, 0x401, 0x5892, 0xfff, 0x7, 0x8, 0x3, 0x6, 0x0, 0x3, 0x1, 0x2, 0x8, 0x4, 0x5, 0xffff, 0x7, 0x101, 0x905, 0x1000, 0x0, 0xcc, 0x6d, 0x7e, 0x6, 0x8, 0x5, 0x93, 0x5, 0x0, 0x800, 0x4, 0x6b6e, 0x2, 0x5, 0xd812, 0x57b, 0x1, 0x9, 0x159e, 0x0, 0x800, 0x957a, 0x6, 0xfffe, 0x4], 0x80}}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)=@userptr={0x40, 0x2, 0x4, 0x2, 0x0, {}, {0x3, 0x2, 0x3, 0x9e, 0x0, 0x1f, "0f953082"}, 0x8, 0x2, {}, 0x5, 0x0, r1}) syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x2, 0x5, 0x4, {0x2, @sliced={0x96, [0x101, 0x3, 0x4, 0x401, 0x5892, 0xfff, 0x7, 0x8, 0x3, 0x6, 0x0, 0x3, 0x1, 0x2, 0x8, 0x4, 0x5, 0xffff, 0x7, 0x101, 0x905, 0x1000, 0x0, 0xcc, 0x6d, 0x7e, 0x6, 0x8, 0x5, 0x93, 0x5, 0x0, 0x800, 0x4, 0x6b6e, 0x2, 0x5, 0xd812, 0x57b, 0x1, 0x9, 0x159e, 0x0, 0x800, 0x957a, 0x6, 0xfffe, 0x4], 0x80}}}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)=@userptr={0x40, 0x2, 0x4, 0x2, 0x0, {}, {0x3, 0x2, 0x3, 0x9e, 0x0, 0x1f, "0f953082"}, 0x8, 0x2, {}, 0x5, 0x0, r1}) (async) 23:35:48 executing program 4: r0 = socket(0x18, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) 23:35:48 executing program 3: r0 = socket(0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) 23:35:48 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x8000) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000040)={0x5, 0x30364d54, 0x3, @discrete={0x8144, 0x666f}}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x600001, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:35:48 executing program 2: r0 = socket(0x18, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x18) 23:35:48 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x48524742}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x48524742}) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) (async) 23:35:48 executing program 1: r0 = socket(0x18, 0x800, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x11800, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1}}, 0x5, 0x101}, 0x90) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:48 executing program 3: r0 = socket(0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) 23:35:48 executing program 4: r0 = socket(0x18, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) 23:35:48 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x8000) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000040)={0x5, 0x30364d54, 0x3, @discrete={0x8144, 0x666f}}) (async) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x600001, 0x0) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:35:49 executing program 2: r0 = socket(0x18, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x18) socket(0x18, 0x0, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x18) (async) 23:35:49 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000200)={0x9, 0x80000000}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000240)=@fd={0x4, 0x0, 0x4, 0x0, 0x7, {}, {0x2, 0x2, 0x6, 0x2, 0x9, 0x1f, "58b8dd93"}, 0x2, 0x4, {}, 0x3ff}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb800"}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000180)=0x1) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x3, @sliced={0x400, [0x2, 0xfff, 0x6, 0x9, 0x3, 0x2, 0xffbd, 0x9, 0x1, 0x101, 0x1ff, 0x401, 0x8, 0xc592, 0x3, 0x8001, 0x1, 0x118, 0x5, 0xc4b3, 0x6, 0x8, 0x2, 0x8, 0x7f, 0x6, 0x0, 0x6, 0x8, 0x2, 0x4, 0x1cc1, 0x7, 0x3, 0x3, 0x1, 0x8, 0x80, 0x100, 0x6, 0x100, 0xffff, 0x1, 0x7, 0x8, 0xfffc, 0x5, 0x3], 0x81}}) 23:35:49 executing program 4: r0 = socket(0x18, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) 23:35:49 executing program 1: r0 = socket(0x18, 0x800, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x11800, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1}}, 0x5, 0x101}, 0x90) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:49 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000200)={0x9, 0x80000000}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000240)=@fd={0x4, 0x0, 0x4, 0x0, 0x7, {}, {0x2, 0x2, 0x6, 0x2, 0x9, 0x1f, "58b8dd93"}, 0x2, 0x4, {}, 0x3ff}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb800"}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000180)=0x1) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x3, @sliced={0x400, [0x2, 0xfff, 0x6, 0x9, 0x3, 0x2, 0xffbd, 0x9, 0x1, 0x101, 0x1ff, 0x401, 0x8, 0xc592, 0x3, 0x8001, 0x1, 0x118, 0x5, 0xc4b3, 0x6, 0x8, 0x2, 0x8, 0x7f, 0x6, 0x0, 0x6, 0x8, 0x2, 0x4, 0x1cc1, 0x7, 0x3, 0x3, 0x1, 0x8, 0x80, 0x100, 0x6, 0x100, 0xffff, 0x1, 0x7, 0x8, 0xfffc, 0x5, 0x3], 0x81}}) 23:35:49 executing program 3: r0 = socket(0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) 23:35:49 executing program 2: r0 = socket(0x18, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:49 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x8000) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000040)={0x5, 0x30364d54, 0x3, @discrete={0x8144, 0x666f}}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x600001, 0x0) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:35:49 executing program 4: r0 = socket(0x18, 0x0, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) 23:35:49 executing program 1: r0 = socket(0x18, 0x800, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x11800, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1}}, 0x5, 0x101}, 0x90) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:49 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000200)={0x9, 0x80000000}) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000240)=@fd={0x4, 0x0, 0x4, 0x0, 0x7, {}, {0x2, 0x2, 0x6, 0x2, 0x9, 0x1f, "58b8dd93"}, 0x2, 0x4, {}, 0x3ff}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb800"}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000180)=0x1) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x3, @sliced={0x400, [0x2, 0xfff, 0x6, 0x9, 0x3, 0x2, 0xffbd, 0x9, 0x1, 0x101, 0x1ff, 0x401, 0x8, 0xc592, 0x3, 0x8001, 0x1, 0x118, 0x5, 0xc4b3, 0x6, 0x8, 0x2, 0x8, 0x7f, 0x6, 0x0, 0x6, 0x8, 0x2, 0x4, 0x1cc1, 0x7, 0x3, 0x3, 0x1, 0x8, 0x80, 0x100, 0x6, 0x100, 0xffff, 0x1, 0x7, 0x8, 0xfffc, 0x5, 0x3], 0x81}}) 23:35:49 executing program 3: socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) 23:35:49 executing program 2: r0 = socket(0x18, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:49 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x0, @pix_mp={0x200, 0x3f, 0x0, 0x0, 0x0, [{0x6}, {}, {}, {}, {0x0, 0x8000}, {}, {0x1}], 0x0, 0x0, 0x2}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0x1, 0x5}) 23:35:49 executing program 4: recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) 23:35:49 executing program 1: r0 = socket(0x18, 0x800, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x11800, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:49 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x8, 0xfff, 0x3, {0x0, @pix_mp={0x1, 0x7, 0x3436324d, 0x3, 0x2, [{0xfffffff9, 0x100}, {0x1f, 0x40}, {0xc81, 0x7}, {0x8001, 0x2}, {0x9, 0xffff}, {0x6ac, 0x4}, {0x0, 0x3}, {0x0, 0x2}], 0x4, 0x2, 0x0, 0x2}}, 0x1301}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x1, 0x3, 0x0, "475d003fe11ed59bb805dfd0f1c62f66c7800000220000000000000000001de0", 0x30385056}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f00000000c0)=0x1) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000080)={0x5, 0x2, 0x2, "6510994c0a67f1ce626279ada56e39e172988a71ead6edd00b2ddbc4fda49928", 0x3631564e}) 23:35:49 executing program 2: r0 = socket(0x18, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:49 executing program 3: socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) 23:35:49 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x0, @pix_mp={0x200, 0x3f, 0x0, 0x0, 0x0, [{0x6}, {}, {}, {}, {0x0, 0x8000}, {}, {0x1}], 0x0, 0x0, 0x2}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0x1, 0x5}) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x0, @pix_mp={0x200, 0x3f, 0x0, 0x0, 0x0, [{0x6}, {}, {}, {}, {0x0, 0x8000}, {}, {0x1}], 0x0, 0x0, 0x2}}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0x1, 0x5}) (async) 23:35:49 executing program 4: recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) 23:35:49 executing program 1: r0 = socket(0x18, 0x800, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x11800, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:49 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x8, 0xfff, 0x3, {0x0, @pix_mp={0x1, 0x7, 0x3436324d, 0x3, 0x2, [{0xfffffff9, 0x100}, {0x1f, 0x40}, {0xc81, 0x7}, {0x8001, 0x2}, {0x9, 0xffff}, {0x6ac, 0x4}, {0x0, 0x3}, {0x0, 0x2}], 0x4, 0x2, 0x0, 0x2}}, 0x1301}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x1, 0x3, 0x0, "475d003fe11ed59bb805dfd0f1c62f66c7800000220000000000000000001de0", 0x30385056}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f00000000c0)=0x1) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000080)={0x5, 0x2, 0x2, "6510994c0a67f1ce626279ada56e39e172988a71ead6edd00b2ddbc4fda49928", 0x3631564e}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x8, 0xfff, 0x3, {0x0, @pix_mp={0x1, 0x7, 0x3436324d, 0x3, 0x2, [{0xfffffff9, 0x100}, {0x1f, 0x40}, {0xc81, 0x7}, {0x8001, 0x2}, {0x9, 0xffff}, {0x6ac, 0x4}, {0x0, 0x3}, {0x0, 0x2}], 0x4, 0x2, 0x0, 0x2}}, 0x1301}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x1, 0x3, 0x0, "475d003fe11ed59bb805dfd0f1c62f66c7800000220000000000000000001de0", 0x30385056}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f00000000c0)=0x1) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000080)={0x5, 0x2, 0x2, "6510994c0a67f1ce626279ada56e39e172988a71ead6edd00b2ddbc4fda49928", 0x3631564e}) (async) 23:35:49 executing program 3: socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) 23:35:49 executing program 2: r0 = socket(0x18, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x44) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) socket$pptp(0x18, 0x1, 0x2) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, &(0x7f0000000040)={0x0, 0xea60}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) 23:35:49 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x0, @pix_mp={0x200, 0x3f, 0x0, 0x0, 0x0, [{0x6}, {}, {}, {}, {0x0, 0x8000}, {}, {0x1}], 0x0, 0x0, 0x2}}) (async, rerun: 32) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 32) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0x1, 0x5}) 23:35:49 executing program 4: recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) 23:35:49 executing program 1: r0 = socket(0x18, 0x800, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x11800, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:49 executing program 2: r0 = socket(0x18, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)) getsockname$tipc(r0, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x3) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:49 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x8, 0xfff, 0x3, {0x0, @pix_mp={0x1, 0x7, 0x3436324d, 0x3, 0x2, [{0xfffffff9, 0x100}, {0x1f, 0x40}, {0xc81, 0x7}, {0x8001, 0x2}, {0x9, 0xffff}, {0x6ac, 0x4}, {0x0, 0x3}, {0x0, 0x2}], 0x4, 0x2, 0x0, 0x2}}, 0x1301}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x1, 0x3, 0x0, "475d003fe11ed59bb805dfd0f1c62f66c7800000220000000000000000001de0", 0x30385056}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f00000000c0)=0x1) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000080)={0x5, 0x2, 0x2, "6510994c0a67f1ce626279ada56e39e172988a71ead6edd00b2ddbc4fda49928", 0x3631564e}) 23:35:49 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 23:35:49 executing program 4: r0 = socket(0x0, 0x0, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) 23:35:49 executing program 1: r0 = socket(0x18, 0x800, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:49 executing program 2: r0 = socket(0x18, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)) getsockname$tipc(r0, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x3) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:49 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x2}]}}) 23:35:49 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x1, @vbi={0x9, 0x8001, 0x401, 0x31435641, [0x3], [0xfff], 0x2}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:49 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 23:35:49 executing program 1: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:49 executing program 4: r0 = socket(0x0, 0x0, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) 23:35:49 executing program 2: r0 = socket(0x18, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)) getsockname$tipc(r0, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x3) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:49 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x1, @vbi={0x9, 0x8001, 0x401, 0x31435641, [0x3], [0xfff], 0x2}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x1, @vbi={0x9, 0x8001, 0x401, 0x31435641, [0x3], [0xfff], 0x2}}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:35:49 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x2}]}}) 23:35:49 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 23:35:50 executing program 2: r0 = socket(0x18, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)) getsockname$tipc(r0, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x3) 23:35:50 executing program 1: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:50 executing program 4: r0 = socket(0x0, 0x0, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) 23:35:50 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x1, @vbi={0x9, 0x8001, 0x401, 0x31435641, [0x3], [0xfff], 0x2}}) (async, rerun: 64) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (rerun: 64) 23:35:50 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x2}]}}) 23:35:50 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) 23:35:50 executing program 1: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:50 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x4, 0x3, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x38414262}) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000000)=0x10000) 23:35:50 executing program 2: r0 = socket(0x18, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)) getsockname$tipc(r0, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) 23:35:50 executing program 4: socket(0x18, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) 23:35:50 executing program 5: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)={0x800}, 0x8) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x82081, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x2dcc, 0x1, 0x1, "1af9abe043490780aad84f4ad2ba75d5eb0d4cb299df3b7cf54651b60119f918", 0x38414761}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x2, 0x18}, 0xc) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2000000}]}}) 23:35:50 executing program 1: r0 = socket(0x0, 0x800, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:50 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) 23:35:50 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x4, 0x3, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x38414262}) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000000)=0x10000) 23:35:50 executing program 2: r0 = socket(0x18, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)) getsockname$tipc(r0, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 23:35:50 executing program 5: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)={0x800}, 0x8) (async) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x82081, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x2dcc, 0x1, 0x1, "1af9abe043490780aad84f4ad2ba75d5eb0d4cb299df3b7cf54651b60119f918", 0x38414761}) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x2, 0x18}, 0xc) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2000000}]}}) 23:35:50 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) 23:35:50 executing program 1: r0 = socket(0x0, 0x800, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:50 executing program 4: socket(0x18, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) 23:35:50 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x4, 0x3, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x38414262}) (async) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000000)=0x10000) 23:35:50 executing program 2: r0 = socket(0x18, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)) getsockname$tipc(r0, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) 23:35:50 executing program 5: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)={0x800}, 0x8) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x82081, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x2dcc, 0x1, 0x1, "1af9abe043490780aad84f4ad2ba75d5eb0d4cb299df3b7cf54651b60119f918", 0x38414761}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x2, 0x18}, 0xc) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2000000}]}}) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)={0x800}, 0x8) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x82081, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x2dcc, 0x1, 0x1, "1af9abe043490780aad84f4ad2ba75d5eb0d4cb299df3b7cf54651b60119f918", 0x38414761}) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x2, 0x18}, 0xc) (async) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2000000}]}}) (async) 23:35:50 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) 23:35:50 executing program 4: socket(0x18, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) 23:35:50 executing program 1: r0 = socket(0x0, 0x800, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:50 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x584e4f53}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x1f, 0x2, 0x1}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000080)={0xd, 0x7, {0x52, 0x7, 0x7, {0xd2f}, {0x5, 0xfffe}, @period={0x7, 0x0, 0x81, 0x7, 0x800, {0x5, 0x6, 0x0, 0xfb5f}, 0x3, &(0x7f0000000040)=[0xd4c, 0x3ff, 0xff1f]}}, {0x55, 0x444, 0x0, {0x416e, 0x4}, {0x6}, @const={0x401, {0x63d, 0x5, 0x101, 0x2}}}}) 23:35:50 executing program 2: r0 = socket(0x18, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) getsockname$tipc(r0, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) 23:35:50 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x1000000009, 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x80000000, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1ffffffff, 0x2) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000240)=""/74) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)=@mmap={0x200, 0x3, 0x4, 0x10, 0xffffffff, {r3, r4/1000+10000}, {0x3, 0x0, 0xfd, 0x80, 0x18, 0x0, "f26d4006"}, 0x2, 0x1, {}, 0x5}) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x105200, 0x0) bind$tipc(r5, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x2}, 0x10) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix={0x4, 0x4, 0x34363248, 0x4, 0x400, 0x0, 0x4, 0x4, 0x0, 0x3, 0x0, 0x1}}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) 23:35:50 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) 23:35:50 executing program 4: r0 = socket(0x18, 0x0, 0x0) recvmsg$can_bcm(r0, 0x0, 0x2020) 23:35:50 executing program 2: r0 = socket(0x18, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockname$tipc(r0, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) 23:35:50 executing program 1: r0 = socket(0x18, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:50 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x1000000009, 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x80000000, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1ffffffff, 0x2) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000240)=""/74) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)=@mmap={0x200, 0x3, 0x4, 0x10, 0xffffffff, {r3, r4/1000+10000}, {0x3, 0x0, 0xfd, 0x80, 0x18, 0x0, "f26d4006"}, 0x2, 0x1, {}, 0x5}) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x105200, 0x0) bind$tipc(r5, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x2}, 0x10) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix={0x4, 0x4, 0x34363248, 0x4, 0x400, 0x0, 0x4, 0x4, 0x0, 0x3, 0x0, 0x1}}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) syz_open_dev$vim2m(&(0x7f0000000200), 0x1000000009, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x80000000, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000080), 0x1ffffffff, 0x2) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) (async) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000240)=""/74) (async) clock_gettime(0x0, &(0x7f00000000c0)) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)=@mmap={0x200, 0x3, 0x4, 0x10, 0xffffffff, {r3, r4/1000+10000}, {0x3, 0x0, 0xfd, 0x80, 0x18, 0x0, "f26d4006"}, 0x2, 0x1, {}, 0x5}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x105200, 0x0) (async) bind$tipc(r5, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x2}, 0x10) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix={0x4, 0x4, 0x34363248, 0x4, 0x400, 0x0, 0x4, 0x4, 0x0, 0x3, 0x0, 0x1}}) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) 23:35:50 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) 23:35:50 executing program 4: r0 = socket(0x18, 0x0, 0x0) recvmsg$can_bcm(r0, 0x0, 0x2020) 23:35:50 executing program 1: r0 = socket(0x18, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:50 executing program 2: r0 = socket(0x18, 0x0, 0x0) getsockname$tipc(r0, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) 23:35:50 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x584e4f53}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x1f, 0x2, 0x1}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async, rerun: 32) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000080)={0xd, 0x7, {0x52, 0x7, 0x7, {0xd2f}, {0x5, 0xfffe}, @period={0x7, 0x0, 0x81, 0x7, 0x800, {0x5, 0x6, 0x0, 0xfb5f}, 0x3, &(0x7f0000000040)=[0xd4c, 0x3ff, 0xff1f]}}, {0x55, 0x444, 0x0, {0x416e, 0x4}, {0x6}, @const={0x401, {0x63d, 0x5, 0x101, 0x2}}}}) (rerun: 32) 23:35:50 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) 23:35:50 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x1000000009, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x80000000, 0x2) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1ffffffff, 0x2) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000240)=""/74) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)=@mmap={0x200, 0x3, 0x4, 0x10, 0xffffffff, {r3, r4/1000+10000}, {0x3, 0x0, 0xfd, 0x80, 0x18, 0x0, "f26d4006"}, 0x2, 0x1, {}, 0x5}) (async) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x105200, 0x0) bind$tipc(r5, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x2}, 0x10) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix={0x4, 0x4, 0x34363248, 0x4, 0x400, 0x0, 0x4, 0x4, 0x0, 0x3, 0x0, 0x1}}) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) 23:35:50 executing program 4: r0 = socket(0x18, 0x0, 0x0) recvmsg$can_bcm(r0, 0x0, 0x2020) 23:35:51 executing program 1: r0 = socket(0x18, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:51 executing program 2: getsockname$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) 23:35:51 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x50, 0x4, 0x0, 0x0, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) 23:35:51 executing program 4: r0 = socket(0x18, 0x0, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) 23:35:51 executing program 2: getsockname$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) 23:35:51 executing program 1: socket(0x18, 0x800, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:51 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x1, @raw_data="d6d547b7ae078ffb5727e60fb33bbb63e1a7fa9a64fdb790d6f0d12fd10c323c372bce5dfff7c719711fb03acc33785574fa0c4f4be1fc6de2b35e383dc22bd0f8dc9de0699058d83d3f32aea5611060c3df40a6a64bd6cffe52957aad4d63bad6717a05dd6d1271f825a3fb449feff5ad3065e5b70ad3bc388c2b49a0254b32e0b865b34aebfe69aaf31e66e6807fcfadeef43ef15657c424bb11adc66c503e6fe40437a4df688ff47764434af12bbe2392a77e354df85f6601f55500"}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x4}]}}) 23:35:51 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x50, 0x4, 0x0, 0x0, 0x140, 0x0, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) 23:35:51 executing program 2: getsockname$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) 23:35:51 executing program 4: r0 = socket(0x18, 0x0, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) 23:35:51 executing program 1: socket(0x18, 0x800, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:51 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x584e4f53}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x1f, 0x2, 0x1}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000080)={0xd, 0x7, {0x52, 0x7, 0x7, {0xd2f}, {0x5, 0xfffe}, @period={0x7, 0x0, 0x81, 0x7, 0x800, {0x5, 0x6, 0x0, 0xfb5f}, 0x3, &(0x7f0000000040)=[0xd4c, 0x3ff, 0xff1f]}}, {0x55, 0x444, 0x0, {0x416e, 0x4}, {0x6}, @const={0x401, {0x63d, 0x5, 0x101, 0x2}}}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x584e4f53}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x1f, 0x2, 0x1}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000080)={0xd, 0x7, {0x52, 0x7, 0x7, {0xd2f}, {0x5, 0xfffe}, @period={0x7, 0x0, 0x81, 0x7, 0x800, {0x5, 0x6, 0x0, 0xfb5f}, 0x3, &(0x7f0000000040)=[0xd4c, 0x3ff, 0xff1f]}}, {0x55, 0x444, 0x0, {0x416e, 0x4}, {0x6}, @const={0x401, {0x63d, 0x5, 0x101, 0x2}}}}) (async) 23:35:51 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x50, 0x4, 0x0, 0x0, 0x140, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) 23:35:51 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x1, @raw_data="d6d547b7ae078ffb5727e60fb33bbb63e1a7fa9a64fdb790d6f0d12fd10c323c372bce5dfff7c719711fb03acc33785574fa0c4f4be1fc6de2b35e383dc22bd0f8dc9de0699058d83d3f32aea5611060c3df40a6a64bd6cffe52957aad4d63bad6717a05dd6d1271f825a3fb449feff5ad3065e5b70ad3bc388c2b49a0254b32e0b865b34aebfe69aaf31e66e6807fcfadeef43ef15657c424bb11adc66c503e6fe40437a4df688ff47764434af12bbe2392a77e354df85f6601f55500"}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x4}]}}) 23:35:51 executing program 4: r0 = socket(0x18, 0x0, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x2020) 23:35:51 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x50, 0x4, 0x0, 0x0, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) 23:35:51 executing program 1: socket(0x18, 0x800, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:51 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x1, @raw_data="d6d547b7ae078ffb5727e60fb33bbb63e1a7fa9a64fdb790d6f0d12fd10c323c372bce5dfff7c719711fb03acc33785574fa0c4f4be1fc6de2b35e383dc22bd0f8dc9de0699058d83d3f32aea5611060c3df40a6a64bd6cffe52957aad4d63bad6717a05dd6d1271f825a3fb449feff5ad3065e5b70ad3bc388c2b49a0254b32e0b865b34aebfe69aaf31e66e6807fcfadeef43ef15657c424bb11adc66c503e6fe40437a4df688ff47764434af12bbe2392a77e354df85f6601f55500"}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x4}]}}) 23:35:51 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x3d, 0x4, 0x0, 0x0, 0xf4, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}]}}}}}) 23:35:51 executing program 2: r0 = socket(0x0, 0x0, 0x0) getsockname$tipc(r0, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) 23:35:51 executing program 4: r0 = socket(0x18, 0x0, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 23:35:51 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x1, @sliced={0x333, [0xffc, 0x0, 0x3, 0x0, 0x9, 0x1, 0x3d, 0x6000, 0xff, 0x7, 0x3ff, 0x0, 0x12, 0x91, 0x400, 0x9, 0x4f27, 0x6, 0x7f, 0x370d, 0x7f, 0x1c, 0x4, 0xc04, 0xfff8, 0xcac9, 0xa74, 0x7, 0x7f, 0x9, 0x8, 0x4e, 0x8, 0x826, 0x0, 0x7, 0x5, 0x423, 0xffff, 0x7, 0x0, 0x6, 0x9, 0x1, 0x6, 0x6, 0x7, 0x4], 0x7fff}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x5, 0x200, 0x4, {0x1, @vbi={0x1, 0x8d72, 0x401, 0x30395056, [0x1, 0x1f], [0x1], 0x1}}, 0x6}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0), 0x101002, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000200)={0x401, 0xff}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000180)=0x1) 23:35:51 executing program 1: r0 = socket(0x18, 0x800, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) 23:35:51 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x39, 0x4, 0x0, 0x0, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}]}}}}}) 23:35:51 executing program 4: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) 23:35:51 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x1, @sliced={0x333, [0xffc, 0x0, 0x3, 0x0, 0x9, 0x1, 0x3d, 0x6000, 0xff, 0x7, 0x3ff, 0x0, 0x12, 0x91, 0x400, 0x9, 0x4f27, 0x6, 0x7f, 0x370d, 0x7f, 0x1c, 0x4, 0xc04, 0xfff8, 0xcac9, 0xa74, 0x7, 0x7f, 0x9, 0x8, 0x4e, 0x8, 0x826, 0x0, 0x7, 0x5, 0x423, 0xffff, 0x7, 0x0, 0x6, 0x9, 0x1, 0x6, 0x6, 0x7, 0x4], 0x7fff}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x5, 0x200, 0x4, {0x1, @vbi={0x1, 0x8d72, 0x401, 0x30395056, [0x1, 0x1f], [0x1], 0x1}}, 0x6}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0), 0x101002, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000200)={0x401, 0xff}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000180)=0x1) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x1, @sliced={0x333, [0xffc, 0x0, 0x3, 0x0, 0x9, 0x1, 0x3d, 0x6000, 0xff, 0x7, 0x3ff, 0x0, 0x12, 0x91, 0x400, 0x9, 0x4f27, 0x6, 0x7f, 0x370d, 0x7f, 0x1c, 0x4, 0xc04, 0xfff8, 0xcac9, 0xa74, 0x7, 0x7f, 0x9, 0x8, 0x4e, 0x8, 0x826, 0x0, 0x7, 0x5, 0x423, 0xffff, 0x7, 0x0, 0x6, 0x9, 0x1, 0x6, 0x6, 0x7, 0x4], 0x7fff}}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x5, 0x200, 0x4, {0x1, @vbi={0x1, 0x8d72, 0x401, 0x30395056, [0x1, 0x1f], [0x1], 0x1}}, 0x6}) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0), 0x101002, 0x0) (async) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000200)={0x401, 0xff}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000180)=0x1) (async) 23:35:51 executing program 1: r0 = socket(0x18, 0x800, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) 23:35:51 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) syz_open_dev$vim2m(&(0x7f0000000280), 0x4, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000140)={0x0, @pix={0x5, 0x80000000, 0x32315659, 0x2, 0x9, 0x2, 0x4, 0x9, 0x1, 0x8, 0x2, 0x1}}) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x400000001042049) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [], 0x80}}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) connect$can_bcm(r3, &(0x7f00000002c0), 0x10) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000340)=0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000080)=@fd={0x0, 0x0, 0x4, 0x0, 0x81, {0x77359400}, {0x5, 0x0, 0x40, 0x8, 0xf3, 0x0, "75eb426d"}, 0x2}) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 23:35:51 executing program 2: r0 = socket(0x0, 0x0, 0x0) getsockname$tipc(r0, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) 23:35:51 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2e, 0x4, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}]}}}}}) 23:35:51 executing program 4: r0 = socket(0x18, 0x0, 0x0) getsockname$tipc(r0, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) 23:35:51 executing program 2: r0 = socket(0x0, 0x0, 0x0) getsockname$tipc(r0, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) 23:35:51 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x27, 0x4, 0x0, 0x0, 0x9c, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}]}}}}}) 23:35:51 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x1, @sliced={0x333, [0xffc, 0x0, 0x3, 0x0, 0x9, 0x1, 0x3d, 0x6000, 0xff, 0x7, 0x3ff, 0x0, 0x12, 0x91, 0x400, 0x9, 0x4f27, 0x6, 0x7f, 0x370d, 0x7f, 0x1c, 0x4, 0xc04, 0xfff8, 0xcac9, 0xa74, 0x7, 0x7f, 0x9, 0x8, 0x4e, 0x8, 0x826, 0x0, 0x7, 0x5, 0x423, 0xffff, 0x7, 0x0, 0x6, 0x9, 0x1, 0x6, 0x6, 0x7, 0x4], 0x7fff}}) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async, rerun: 64) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x5, 0x200, 0x4, {0x1, @vbi={0x1, 0x8d72, 0x401, 0x30395056, [0x1, 0x1f], [0x1], 0x1}}, 0x6}) (async, rerun: 64) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0), 0x101002, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000200)={0x401, 0xff}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000180)=0x1) 23:35:51 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) syz_open_dev$vim2m(&(0x7f0000000280), 0x4, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) (async, rerun: 32) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000140)={0x0, @pix={0x5, 0x80000000, 0x32315659, 0x2, 0x9, 0x2, 0x4, 0x9, 0x1, 0x8, 0x2, 0x1}}) (async, rerun: 32) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x400000001042049) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [], 0x80}}) (async, rerun: 64) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 64) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) (async) connect$can_bcm(r3, &(0x7f00000002c0), 0x10) (async) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000340)=0x2) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000080)=@fd={0x0, 0x0, 0x4, 0x0, 0x81, {0x77359400}, {0x5, 0x0, 0x40, 0x8, 0xf3, 0x0, "75eb426d"}, 0x2}) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 23:35:51 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x584e4f53}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x1f, 0x2, 0x1}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000080)={0xd, 0x7, {0x52, 0x7, 0x7, {0xd2f}, {0x5, 0xfffe}, @period={0x7, 0x0, 0x81, 0x7, 0x800, {0x5, 0x6, 0x0, 0xfb5f}, 0x3, &(0x7f0000000040)=[0xd4c, 0x3ff, 0xff1f]}}, {0x55, 0x444, 0x0, {0x416e, 0x4}, {0x6}, @const={0x401, {0x63d, 0x5, 0x101, 0x2}}}}) 23:35:51 executing program 1: r0 = socket(0x18, 0x800, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) 23:35:51 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x10400, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000280)=@userptr={0x8001, 0x0, 0x4, 0x100, 0x97dd, {}, {0x1, 0x0, 0x4, 0x0, 0x2, 0x7f, "73357795"}, 0x3f, 0x2, {&(0x7f0000000240)}, 0x9397}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f00000000c0)=0x7f) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) ioctl$VIDIOC_S_TUNER(r3, 0x4054561e, &(0x7f0000000180)={0x4, "4023516c6dc45bf4329f6c5411ab96c528bb7e60fd1c8e9007b003d836be6cf0", 0x5, 0x4, 0x6, 0x21, 0x4, 0x4, 0x18000000, 0x4}) 23:35:51 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x18, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}]}}}}}) 23:35:52 executing program 2: socket(0x18, 0x0, 0x0) getsockname$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) 23:35:52 executing program 1: r0 = socket(0x18, 0x800, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 23:35:52 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x10400, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000280)=@userptr={0x8001, 0x0, 0x4, 0x100, 0x97dd, {}, {0x1, 0x0, 0x4, 0x0, 0x2, 0x7f, "73357795"}, 0x3f, 0x2, {&(0x7f0000000240)}, 0x9397}) (async, rerun: 32) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) (rerun: 32) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f00000000c0)=0x7f) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) (async) ioctl$VIDIOC_S_TUNER(r3, 0x4054561e, &(0x7f0000000180)={0x4, "4023516c6dc45bf4329f6c5411ab96c528bb7e60fd1c8e9007b003d836be6cf0", 0x5, 0x4, 0x6, 0x21, 0x4, 0x4, 0x18000000, 0x4}) 23:35:52 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x10, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}]}}}}}) 23:35:52 executing program 2: socket(0x18, 0x0, 0x0) getsockname$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) 23:35:52 executing program 1: r0 = socket(0x18, 0x800, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 23:35:52 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xd, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}]}}}}}) 23:35:52 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) syz_open_dev$vim2m(&(0x7f0000000280), 0x4, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000140)={0x0, @pix={0x5, 0x80000000, 0x32315659, 0x2, 0x9, 0x2, 0x4, 0x9, 0x1, 0x8, 0x2, 0x1}}) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x400000001042049) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [], 0x80}}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) connect$can_bcm(r3, &(0x7f00000002c0), 0x10) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000340)=0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000080)=@fd={0x0, 0x0, 0x4, 0x0, 0x81, {0x77359400}, {0x5, 0x0, 0x40, 0x8, 0xf3, 0x0, "75eb426d"}, 0x2}) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000280), 0x4, 0x2) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000140)={0x0, @pix={0x5, 0x80000000, 0x32315659, 0x2, 0x9, 0x2, 0x4, 0x9, 0x1, 0x8, 0x2, 0x1}}) (async) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x400000001042049) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [], 0x80}}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) (async) connect$can_bcm(r3, &(0x7f00000002c0), 0x10) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000340)=0x2) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000080)=@fd={0x0, 0x0, 0x4, 0x0, 0x81, {0x77359400}, {0x5, 0x0, 0x40, 0x8, 0xf3, 0x0, "75eb426d"}, 0x2}) (async) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) (async) 23:35:52 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x584e4f53}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x1f, 0x2, 0x1}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000080)={0xd, 0x7, {0x52, 0x7, 0x7, {0xd2f}, {0x5, 0xfffe}, @period={0x7, 0x0, 0x81, 0x7, 0x800, {0x5, 0x6, 0x0, 0xfb5f}, 0x3, &(0x7f0000000040)=[0xd4c, 0x3ff, 0xff1f]}}, {0x55, 0x444, 0x0, {0x416e, 0x4}, {0x6}, @const={0x401, {0x63d, 0x5, 0x101, 0x2}}}}) 23:35:52 executing program 2: socket(0x18, 0x0, 0x0) getsockname$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) 23:35:52 executing program 1: r0 = socket(0x18, 0x800, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 23:35:52 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x10400, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000280)=@userptr={0x8001, 0x0, 0x4, 0x100, 0x97dd, {}, {0x1, 0x0, 0x4, 0x0, 0x2, 0x7f, "73357795"}, 0x3f, 0x2, {&(0x7f0000000240)}, 0x9397}) (async, rerun: 32) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) (rerun: 32) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f00000000c0)=0x7f) (async) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) (async) ioctl$VIDIOC_S_TUNER(r3, 0x4054561e, &(0x7f0000000180)={0x4, "4023516c6dc45bf4329f6c5411ab96c528bb7e60fd1c8e9007b003d836be6cf0", 0x5, 0x4, 0x6, 0x21, 0x4, 0x4, 0x18000000, 0x4}) 23:35:52 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @broadcast, {[@end]}}}}}) 23:35:52 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000000)={0x5, @vbi={0x1, 0x1, 0xffffffff, 0x34343459, [0x7f, 0xffff5e29], [0x6, 0x75], 0x1}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0xfffffffd, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:52 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @broadcast}}}}) 23:35:52 executing program 2: r0 = socket(0x18, 0x0, 0x0) getsockname$tipc(r0, 0x0, &(0x7f0000000040)) 23:35:52 executing program 1: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) 23:35:52 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000000)={0x5, @vbi={0x1, 0x1, 0xffffffff, 0x34343459, [0x7f, 0xffff5e29], [0x6, 0x75], 0x1}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0xfffffffd, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:52 executing program 2: r0 = socket(0x18, 0x0, 0x0) getsockname$tipc(r0, 0x0, 0x0) 23:35:52 executing program 5: setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000000)=0x376, 0x8) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0xa, [{}, {}, {}, {}, {}, {0xfffffffd}]}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) 23:35:52 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000040)=@userptr={0x3, 0x3, 0x4, 0x4, 0xffff, {}, {0x5, 0x8, 0x9, 0x0, 0x5, 0x4, "5d951a0d"}, 0x1fb2, 0x2, {}, 0x2b069cdc}) 23:35:52 executing program 3: r0 = socket(0x18, 0x0, 0x0) getsockname$tipc(r0, 0x0, &(0x7f0000000040)) 23:35:52 executing program 1: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) 23:35:52 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000000)={0x5, @vbi={0x1, 0x1, 0xffffffff, 0x34343459, [0x7f, 0xffff5e29], [0x6, 0x75], 0x1}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0xfffffffd, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000000)={0x5, @vbi={0x1, 0x1, 0xffffffff, 0x34343459, [0x7f, 0xffff5e29], [0x6, 0x75], 0x1}}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0xfffffffd, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:35:52 executing program 5: setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000000)=0x376, 0x8) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0xa, [{}, {}, {}, {}, {}, {0xfffffffd}]}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000000)=0x376, 0x8) (async) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0xa, [{}, {}, {}, {}, {}, {0xfffffffd}]}}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) (async) 23:35:52 executing program 1: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) 23:35:52 executing program 2: r0 = socket(0x18, 0x0, 0x0) getsockname$tipc(r0, 0x0, 0x0) 23:35:52 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_dccp_int(r3, 0x21, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400d0}, 0xd188639f478ba79f) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) accept4$vsock_stream(r2, &(0x7f00000002c0)={0x28, 0x0, 0x0, @local}, 0x10, 0x80000) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r6, r5, 0x0, 0x8, &(0x7f0000000300)='!@[\x12,\\-\x00'}, 0x30) r7 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000380)=0x1000, 0x4) getsockopt$inet_dccp_buf(r7, 0x21, 0xd, &(0x7f0000000200)=""/81, &(0x7f0000000280)=0x51) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r4) 23:35:52 executing program 5: setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000000)=0x376, 0x8) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0xa, [{}, {}, {}, {}, {}, {0xfffffffd}]}}) (async, rerun: 64) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) 23:35:52 executing program 4: r0 = syz_open_dev$vim2m(0xffffffffffffffff, 0xfffe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) 23:35:52 executing program 1: ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) 23:35:52 executing program 2: r0 = socket(0x18, 0x0, 0x0) getsockname$tipc(r0, 0x0, 0x0) 23:35:52 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x78082, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000200)=@multiplanar_userptr={0x1f, 0x1, 0x4, 0x100, 0x20, {0x77359400}, {0x1, 0xc, 0xfb, 0xe6, 0x6, 0xb7, "a3f24ca3"}, 0x4, 0x2, {&(0x7f0000000180)=[{0xffff32db, 0x80, {&(0x7f0000000040)}, 0x5}, {0x3ff, 0x8, {&(0x7f0000000080)}, 0x3ff}]}, 0xffff, 0x0, r2}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5}, 0x48) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_tracing={0x1a, 0xd, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000008d00000018630000100000000000000006000000183500000500000000000000000000007a000000957c40000000000018470000070000000000000000000000186700001000000000000000010001009500"/104], &(0x7f0000000980)='syzkaller\x00', 0x6, 0x8, &(0x7f00000009c0)=""/8, 0x40f00, 0x2, '\x00', r5, 0x19, r2, 0x8, &(0x7f0000000a00)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000a40)={0x2, 0x3, 0x40, 0x1}, 0x10, 0x1c675, 0xffffffffffffffff, 0x0, &(0x7f0000000a80)=[r6]}, 0x80) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000b40)={r1}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_ext={0x1c, 0xc, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd96, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_idx={0x18, 0x0, 0x5, 0x0, 0xb}, @jmp={0x5, 0x1, 0x0, 0xe, 0xa, 0xfffffffffffffff4, 0x4}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xa, 0xa, 0x5, 0x1, 0x8}, @generic={0x3, 0x9, 0x9, 0x3ff, 0x6}]}, &(0x7f00000007c0)='GPL\x00', 0x7f, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0x10, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000008c0)={0x5, 0x9, 0x4c, 0x401}, 0x10, 0x17b3f, r7, 0x0, &(0x7f0000000b80)=[r8]}, 0x80) r9 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r10}, 0x48) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000000700)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f00000003c0)={0x2c8, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x230, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x867}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x4000}, 0x4004000) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r11, 0xae03, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000c40)) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000280)={0x1, @vbi={0xff, 0x1000, 0x7, 0x41416770, [0x1d0d9037, 0x6f3], [0x1], 0x13a}}) 23:35:52 executing program 4: r0 = syz_open_dev$vim2m(0xffffffffffffffff, 0xfffe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) 23:35:52 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"eaa1fe54881501c649e49c36f3dd74044e37367827fe7989bb9cb940b7f1ea5a", 0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000040)={"07cf87e66641e7f787faaf1c31c06eef9af37c3e3de585b559d9a74a98baa799", r2}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x9) 23:35:52 executing program 1: ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) 23:35:52 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000000)=0x4, 0x4) 23:35:52 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x78082, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000200)=@multiplanar_userptr={0x1f, 0x1, 0x4, 0x100, 0x20, {0x77359400}, {0x1, 0xc, 0xfb, 0xe6, 0x6, 0xb7, "a3f24ca3"}, 0x4, 0x2, {&(0x7f0000000180)=[{0xffff32db, 0x80, {&(0x7f0000000040)}, 0x5}, {0x3ff, 0x8, {&(0x7f0000000080)}, 0x3ff}]}, 0xffff, 0x0, r2}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5}, 0x48) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_tracing={0x1a, 0xd, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000008d00000018630000100000000000000006000000183500000500000000000000000000007a000000957c40000000000018470000070000000000000000000000186700001000000000000000010001009500"/104], &(0x7f0000000980)='syzkaller\x00', 0x6, 0x8, &(0x7f00000009c0)=""/8, 0x40f00, 0x2, '\x00', r5, 0x19, r2, 0x8, &(0x7f0000000a00)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000a40)={0x2, 0x3, 0x40, 0x1}, 0x10, 0x1c675, 0xffffffffffffffff, 0x0, &(0x7f0000000a80)=[r6]}, 0x80) (async) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000b40)={r1}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_ext={0x1c, 0xc, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd96, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_idx={0x18, 0x0, 0x5, 0x0, 0xb}, @jmp={0x5, 0x1, 0x0, 0xe, 0xa, 0xfffffffffffffff4, 0x4}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xa, 0xa, 0x5, 0x1, 0x8}, @generic={0x3, 0x9, 0x9, 0x3ff, 0x6}]}, &(0x7f00000007c0)='GPL\x00', 0x7f, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0x10, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000008c0)={0x5, 0x9, 0x4c, 0x401}, 0x10, 0x17b3f, r7, 0x0, &(0x7f0000000b80)=[r8]}, 0x80) (async) r9 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r10}, 0x48) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000000700)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f00000003c0)={0x2c8, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x230, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x867}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x4000}, 0x4004000) (async) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) (async) r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r11, 0xae03, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000c40)) (async) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000280)={0x1, @vbi={0xff, 0x1000, 0x7, 0x41416770, [0x1d0d9037, 0x6f3], [0x1], 0x13a}}) 23:35:52 executing program 4: r0 = syz_open_dev$vim2m(0xffffffffffffffff, 0xfffe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) 23:35:52 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_dccp_int(r3, 0x21, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400d0}, 0xd188639f478ba79f) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) accept4$vsock_stream(r2, &(0x7f00000002c0)={0x28, 0x0, 0x0, @local}, 0x10, 0x80000) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r6, r5, 0x0, 0x8, &(0x7f0000000300)='!@[\x12,\\-\x00'}, 0x30) r7 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000380)=0x1000, 0x4) getsockopt$inet_dccp_buf(r7, 0x21, 0xd, &(0x7f0000000200)=""/81, &(0x7f0000000280)=0x51) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r4) 23:35:52 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"eaa1fe54881501c649e49c36f3dd74044e37367827fe7989bb9cb940b7f1ea5a", 0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async, rerun: 64) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000040)={"07cf87e66641e7f787faaf1c31c06eef9af37c3e3de585b559d9a74a98baa799", r2}) (async, rerun: 64) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x9) 23:35:52 executing program 1: ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) 23:35:52 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x78082, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000200)=@multiplanar_userptr={0x1f, 0x1, 0x4, 0x100, 0x20, {0x77359400}, {0x1, 0xc, 0xfb, 0xe6, 0x6, 0xb7, "a3f24ca3"}, 0x4, 0x2, {&(0x7f0000000180)=[{0xffff32db, 0x80, {&(0x7f0000000040)}, 0x5}, {0x3ff, 0x8, {&(0x7f0000000080)}, 0x3ff}]}, 0xffff, 0x0, r2}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5}, 0x48) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_tracing={0x1a, 0xd, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000008d00000018630000100000000000000006000000183500000500000000000000000000007a000000957c40000000000018470000070000000000000000000000186700001000000000000000010001009500"/104], &(0x7f0000000980)='syzkaller\x00', 0x6, 0x8, &(0x7f00000009c0)=""/8, 0x40f00, 0x2, '\x00', r5, 0x19, r2, 0x8, &(0x7f0000000a00)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000a40)={0x2, 0x3, 0x40, 0x1}, 0x10, 0x1c675, 0xffffffffffffffff, 0x0, &(0x7f0000000a80)=[r6]}, 0x80) (async) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000b40)={r1}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_ext={0x1c, 0xc, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd96, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_idx={0x18, 0x0, 0x5, 0x0, 0xb}, @jmp={0x5, 0x1, 0x0, 0xe, 0xa, 0xfffffffffffffff4, 0x4}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xa, 0xa, 0x5, 0x1, 0x8}, @generic={0x3, 0x9, 0x9, 0x3ff, 0x6}]}, &(0x7f00000007c0)='GPL\x00', 0x7f, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0x10, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000008c0)={0x5, 0x9, 0x4c, 0x401}, 0x10, 0x17b3f, r7, 0x0, &(0x7f0000000b80)=[r8]}, 0x80) r9 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r10}, 0x48) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000000700)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f00000003c0)={0x2c8, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x230, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x867}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x4000}, 0x4004000) (async) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) (async) r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r11, 0xae03, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000c40)) (async) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000280)={0x1, @vbi={0xff, 0x1000, 0x7, 0x41416770, [0x1d0d9037, 0x6f3], [0x1], 0x13a}}) 23:35:52 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x8, 0x36314d59, 0x2, @stepwise={0x6d1, 0x10001, 0x8, 0x1}}) 23:35:53 executing program 4: syz_open_dev$vim2m(0xffffffffffffffff, 0xfffe, 0x2) 23:35:53 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async, rerun: 32) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"eaa1fe54881501c649e49c36f3dd74044e37367827fe7989bb9cb940b7f1ea5a", 0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000040)={"07cf87e66641e7f787faaf1c31c06eef9af37c3e3de585b559d9a74a98baa799", r2}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x9) 23:35:53 executing program 1: r0 = socket(0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) 23:35:53 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_dccp_int(r3, 0x21, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400d0}, 0xd188639f478ba79f) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) accept4$vsock_stream(r2, &(0x7f00000002c0)={0x28, 0x0, 0x0, @local}, 0x10, 0x80000) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r6, r5, 0x0, 0x8, &(0x7f0000000300)='!@[\x12,\\-\x00'}, 0x30) r7 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000380)=0x1000, 0x4) getsockopt$inet_dccp_buf(r7, 0x21, 0xd, &(0x7f0000000200)=""/81, &(0x7f0000000280)=0x51) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r4) 23:35:53 executing program 4: syz_open_dev$vim2m(0xffffffffffffffff, 0x0, 0x2) 23:35:53 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x8, 0x36314d59, 0x2, @stepwise={0x6d1, 0x10001, 0x8, 0x1}}) 23:35:53 executing program 1: r0 = socket(0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) 23:35:53 executing program 0: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:53 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x2, @win={{0x38f6, 0x6, 0x2, 0x80000000}, 0x5, 0x1, &(0x7f00000000c0)={{0x40, 0xfffffffe, 0xffffffff, 0x16b}, &(0x7f0000000140)={{0xf3c8, 0xfffffffd, 0x6}, &(0x7f0000000040)={{0x4a91, 0x1000, 0x3, 0x1}}}}, 0x2, &(0x7f0000000000)="7a6f7f2befdb3cc7a556c32f6fcf85d006c26dd100", 0x3}}) 23:35:53 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x8, 0x36314d59, 0x2, @stepwise={0x6d1, 0x10001, 0x8, 0x1}}) 23:35:53 executing program 1: r0 = socket(0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) 23:35:53 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x9, @pix_mp}) 23:35:53 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x2, @win={{0x38f6, 0x6, 0x2, 0x80000000}, 0x5, 0x1, &(0x7f00000000c0)={{0x40, 0xfffffffe, 0xffffffff, 0x16b}, &(0x7f0000000140)={{0xf3c8, 0xfffffffd, 0x6}, &(0x7f0000000040)={{0x4a91, 0x1000, 0x3, 0x1}}}}, 0x2, &(0x7f0000000000)="7a6f7f2befdb3cc7a556c32f6fcf85d006c26dd100", 0x3}}) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x2, @win={{0x38f6, 0x6, 0x2, 0x80000000}, 0x5, 0x1, &(0x7f00000000c0)={{0x40, 0xfffffffe, 0xffffffff, 0x16b}, &(0x7f0000000140)={{0xf3c8, 0xfffffffd, 0x6}, &(0x7f0000000040)={{0x4a91, 0x1000, 0x3, 0x1}}}}, 0x2, &(0x7f0000000000)="7a6f7f2befdb3cc7a556c32f6fcf85d006c26dd100", 0x3}}) (async) 23:35:53 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_dccp_int(r3, 0x21, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400d0}, 0xd188639f478ba79f) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) accept4$vsock_stream(r2, &(0x7f00000002c0)={0x28, 0x0, 0x0, @local}, 0x10, 0x80000) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r6, r5, 0x0, 0x8, &(0x7f0000000300)='!@[\x12,\\-\x00'}, 0x30) r7 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000380)=0x1000, 0x4) getsockopt$inet_dccp_buf(r7, 0x21, 0xd, &(0x7f0000000200)=""/81, &(0x7f0000000280)=0x51) 23:35:53 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x8, 0x36314d59, 0x2, @stepwise={0x6d1, 0x10001, 0x8, 0x1}}) 23:35:53 executing program 0: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:53 executing program 1: socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) 23:35:53 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x2, @win={{0x38f6, 0x6, 0x2, 0x80000000}, 0x5, 0x1, &(0x7f00000000c0)={{0x40, 0xfffffffe, 0xffffffff, 0x16b}, &(0x7f0000000140)={{0xf3c8, 0xfffffffd, 0x6}, &(0x7f0000000040)={{0x4a91, 0x1000, 0x3, 0x1}}}}, 0x2, &(0x7f0000000000)="7a6f7f2befdb3cc7a556c32f6fcf85d006c26dd100", 0x3}}) 23:35:53 executing program 0: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:53 executing program 2: ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000000)={0x8, 0x36314d59, 0x2, @stepwise={0x6d1, 0x10001, 0x8, 0x1}}) 23:35:53 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x9, @pix_mp}) 23:35:53 executing program 1: socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) 23:35:53 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_dccp_int(r3, 0x21, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400d0}, 0xd188639f478ba79f) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) accept4$vsock_stream(r2, &(0x7f00000002c0)={0x28, 0x0, 0x0, @local}, 0x10, 0x80000) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r6, r5, 0x0, 0x8, &(0x7f0000000300)='!@[\x12,\\-\x00'}, 0x30) socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000380)=0x1000, 0x4) 23:35:53 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x80}, {0x4001}, {0xfffffffc}], 0x0, 0x9, 0x8}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000000)={0x7, 0x7ff, 0x4, {0x3, @vbi={0x919b, 0x0, 0xe0, 0x42303159, [0xf92b, 0x40], [0x0, 0xfffffffb], 0x1}}, 0x8}) 23:35:53 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x9, @pix_mp}) 23:35:53 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0xffffffff, 0x1, 0x0, "475d003fe11ed59bb805dfd0f1c605000000fe00220000000000000000001de0", 0x3031334d}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x0, @raw_data="c989128cf0dfb1f10e286f94a1f3cbd7d106de9dfd995742e1a59dac18934d905c94a3b6c5a287f59994a7586dfff00da531d05a4460189e70bf85ccac1bdf69801957ffc4c60b48bc98a79f27a5f5405f70e70b3f71113c2d71e04491003be757edee651aea9ee677c7fb8b88bb5b7c20a06faa4afa5319646071dc4555bdf577e967c07e8e1b204ceb93136e961f12ffc462466cd7cae01b555979664ce830c815d7238d4b2d74fdf96548333335328e4c7b91db0a086ea4d43ef47469cc8978142d23d72c95bc"}) 23:35:53 executing program 2: ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000000)={0x8, 0x36314d59, 0x2, @stepwise={0x6d1, 0x10001, 0x8, 0x1}}) 23:35:53 executing program 1: socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) 23:35:53 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x80}, {0x4001}, {0xfffffffc}], 0x0, 0x9, 0x8}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000000)={0x7, 0x7ff, 0x4, {0x3, @vbi={0x919b, 0x0, 0xe0, 0x42303159, [0xf92b, 0x40], [0x0, 0xfffffffb], 0x1}}, 0x8}) 23:35:53 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_dccp_int(r3, 0x21, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400d0}, 0xd188639f478ba79f) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) accept4$vsock_stream(r2, &(0x7f00000002c0)={0x28, 0x0, 0x0, @local}, 0x10, 0x80000) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r6, r5, 0x0, 0x8, &(0x7f0000000300)='!@[\x12,\\-\x00'}, 0x30) socket$inet_dccp(0x2, 0x6, 0x0) 23:35:53 executing program 4: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000580)={0x9, @pix_mp}) 23:35:53 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0xffffffff, 0x1, 0x0, "475d003fe11ed59bb805dfd0f1c605000000fe00220000000000000000001de0", 0x3031334d}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x0, @raw_data="c989128cf0dfb1f10e286f94a1f3cbd7d106de9dfd995742e1a59dac18934d905c94a3b6c5a287f59994a7586dfff00da531d05a4460189e70bf85ccac1bdf69801957ffc4c60b48bc98a79f27a5f5405f70e70b3f71113c2d71e04491003be757edee651aea9ee677c7fb8b88bb5b7c20a06faa4afa5319646071dc4555bdf577e967c07e8e1b204ceb93136e961f12ffc462466cd7cae01b555979664ce830c815d7238d4b2d74fdf96548333335328e4c7b91db0a086ea4d43ef47469cc8978142d23d72c95bc"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0xffffffff, 0x1, 0x0, "475d003fe11ed59bb805dfd0f1c605000000fe00220000000000000000001de0", 0x3031334d}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x0, @raw_data="c989128cf0dfb1f10e286f94a1f3cbd7d106de9dfd995742e1a59dac18934d905c94a3b6c5a287f59994a7586dfff00da531d05a4460189e70bf85ccac1bdf69801957ffc4c60b48bc98a79f27a5f5405f70e70b3f71113c2d71e04491003be757edee651aea9ee677c7fb8b88bb5b7c20a06faa4afa5319646071dc4555bdf577e967c07e8e1b204ceb93136e961f12ffc462466cd7cae01b555979664ce830c815d7238d4b2d74fdf96548333335328e4c7b91db0a086ea4d43ef47469cc8978142d23d72c95bc"}) (async) 23:35:53 executing program 1: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 23:35:53 executing program 2: ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000000)={0x8, 0x36314d59, 0x2, @stepwise={0x6d1, 0x10001, 0x8, 0x1}}) 23:35:53 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x80}, {0x4001}, {0xfffffffc}], 0x0, 0x9, 0x8}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000000)={0x7, 0x7ff, 0x4, {0x3, @vbi={0x919b, 0x0, 0xe0, 0x42303159, [0xf92b, 0x40], [0x0, 0xfffffffb], 0x1}}, 0x8}) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x80}, {0x4001}, {0xfffffffc}], 0x0, 0x9, 0x8}}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000000)={0x7, 0x7ff, 0x4, {0x3, @vbi={0x919b, 0x0, 0xe0, 0x42303159, [0xf92b, 0x40], [0x0, 0xfffffffb], 0x1}}, 0x8}) (async) 23:35:53 executing program 4: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000580)={0x9, @pix_mp}) 23:35:53 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_dccp_int(r3, 0x21, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400d0}, 0xd188639f478ba79f) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) accept4$vsock_stream(r2, &(0x7f00000002c0)={0x28, 0x0, 0x0, @local}, 0x10, 0x80000) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r6, r5, 0x0, 0x8, &(0x7f0000000300)='!@[\x12,\\-\x00'}, 0x30) 23:35:53 executing program 2: r0 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x8, 0x36314d59, 0x2, @stepwise={0x6d1, 0x10001, 0x8, 0x1}}) 23:35:53 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0xffffffff, 0x1, 0x0, "475d003fe11ed59bb805dfd0f1c605000000fe00220000000000000000001de0", 0x3031334d}) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x0, @raw_data="c989128cf0dfb1f10e286f94a1f3cbd7d106de9dfd995742e1a59dac18934d905c94a3b6c5a287f59994a7586dfff00da531d05a4460189e70bf85ccac1bdf69801957ffc4c60b48bc98a79f27a5f5405f70e70b3f71113c2d71e04491003be757edee651aea9ee677c7fb8b88bb5b7c20a06faa4afa5319646071dc4555bdf577e967c07e8e1b204ceb93136e961f12ffc462466cd7cae01b555979664ce830c815d7238d4b2d74fdf96548333335328e4c7b91db0a086ea4d43ef47469cc8978142d23d72c95bc"}) 23:35:53 executing program 1: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 23:35:53 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x6}}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) 23:35:53 executing program 2: r0 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x8, 0x36314d59, 0x2, @stepwise={0x6d1, 0x10001, 0x8, 0x1}}) 23:35:53 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_dccp_int(r3, 0x21, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400d0}, 0xd188639f478ba79f) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) accept4$vsock_stream(r2, &(0x7f00000002c0)={0x28, 0x0, 0x0, @local}, 0x10, 0x80000) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) gettid() 23:35:53 executing program 4: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000580)={0x9, @pix_mp}) 23:35:53 executing program 1: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 23:35:53 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000000)={0x2, @pix_mp={0x8, 0xfffffffd, 0x37303250, 0x2, 0x5, [{0x0, 0x7fffffff}, {0x1, 0x400}, {0x1, 0x1f}, {0x2, 0xf3d5}, {0x0, 0x8}, {0xc9, 0x6}, {0x1, 0x1}, {0x6, 0x200}], 0x2, 0x5, 0x1, 0x1811df204ecf53ab}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x2, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:53 executing program 2: r0 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x8, 0x36314d59, 0x2, @stepwise={0x6d1, 0x10001, 0x8, 0x1}}) 23:35:54 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_dccp_int(r3, 0x21, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400d0}, 0xd188639f478ba79f) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) accept4$vsock_stream(r2, &(0x7f00000002c0)={0x28, 0x0, 0x0, @local}, 0x10, 0x80000) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 23:35:54 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x6}}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x6}}) (async) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) (async) 23:35:54 executing program 4: r0 = syz_open_dev$vim2m(0x0, 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x9, @pix_mp}) 23:35:54 executing program 1: r0 = socket(0x18, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xf0ff7f) 23:35:54 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000000)={0x2, @pix_mp={0x8, 0xfffffffd, 0x37303250, 0x2, 0x5, [{0x0, 0x7fffffff}, {0x1, 0x400}, {0x1, 0x1f}, {0x2, 0xf3d5}, {0x0, 0x8}, {0xc9, 0x6}, {0x1, 0x1}, {0x6, 0x200}], 0x2, 0x5, 0x1, 0x1811df204ecf53ab}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x2, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000000)={0x2, @pix_mp={0x8, 0xfffffffd, 0x37303250, 0x2, 0x5, [{0x0, 0x7fffffff}, {0x1, 0x400}, {0x1, 0x1f}, {0x2, 0xf3d5}, {0x0, 0x8}, {0xc9, 0x6}, {0x1, 0x1}, {0x6, 0x200}], 0x2, 0x5, 0x1, 0x1811df204ecf53ab}}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x2, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:35:54 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x8, 0x36314d59, 0x2, @stepwise={0x6d1, 0x10001, 0x8, 0x1}}) 23:35:54 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x6}}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x6}}) (async) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) (async) 23:35:54 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_dccp_int(r3, 0x21, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400d0}, 0xd188639f478ba79f) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) accept4$vsock_stream(r2, &(0x7f00000002c0)={0x28, 0x0, 0x0, @local}, 0x10, 0x80000) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) 23:35:54 executing program 4: r0 = syz_open_dev$vim2m(0x0, 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x9, @pix_mp}) 23:35:54 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285667, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) 23:35:54 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000000)={0x2, @pix_mp={0x8, 0xfffffffd, 0x37303250, 0x2, 0x5, [{0x0, 0x7fffffff}, {0x1, 0x400}, {0x1, 0x1f}, {0x2, 0xf3d5}, {0x0, 0x8}, {0xc9, 0x6}, {0x1, 0x1}, {0x6, 0x200}], 0x2, 0x5, 0x1, 0x1811df204ecf53ab}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x2, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:54 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x8, 0x36314d59, 0x2, @stepwise={0x6d1, 0x10001, 0x8, 0x1}}) 23:35:54 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_dccp_int(r3, 0x21, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400d0}, 0xd188639f478ba79f) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) accept4$vsock_stream(r2, &(0x7f00000002c0)={0x28, 0x0, 0x0, @local}, 0x10, 0x80000) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 23:35:54 executing program 4: r0 = syz_open_dev$vim2m(0x0, 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x9, @pix_mp}) 23:35:54 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:54 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000140)={0x0, 0xff, 0x9e, 0x4000}) ioctl$PTP_ENABLE_PPS(r0, 0x40043d04, 0x1) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000180)=0x75706cf23ce0c2a0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x2) ioctl$PTP_ENABLE_PPS(r1, 0x40043d04, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f00000001c0)={0xa21, 0x3234564e, 0x3, @stepwise={0x7, 0x7f, 0x1, 0x401, 0x6, 0x8}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x1, 0x9598033cdf91d447, 0x3, "475d0088e11ed59bb805dfd0f1000000000000000000008000"}) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 23:35:54 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0xe62d, 0x2) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)=@mmap={0x7ff, 0x3, 0x4, 0x4, 0x0, {0x77359400}, {0xf, 0x1, 0x5, 0x8, 0x0, 0x1, "7716ef09"}, 0x1, 0x1, {}, 0x2, 0x0, r2}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000080)=@userptr={0x8651, 0x3, 0x4, 0x0, 0x4, {0x77359400}, {0x3, 0x0, 0xff, 0x0, 0x5, 0x2, "d316305f"}, 0x6, 0x2, {&(0x7f0000000040)}, 0x800, 0x0, r2}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x0, @pix_mp={0x100000, 0xfffffffc, 0x0, 0x0, 0x0, [{0x0, 0x6}, {0x0, 0xfffff800}, {}, {}, {0x0, 0x5}, {0x5, 0x4}, {0x200}, {0xfffffffe, 0x6}], 0x0, 0x1, 0x0, 0x0, 0x6}}) 23:35:54 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x9, @pix_mp}) 23:35:54 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x8, 0x36314d59, 0x2, @stepwise={0x6d1, 0x10001, 0x8, 0x1}}) 23:35:54 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:54 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_dccp_int(r3, 0x21, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400d0}, 0xd188639f478ba79f) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) accept4$vsock_stream(r2, &(0x7f00000002c0)={0x28, 0x0, 0x0, @local}, 0x10, 0x80000) 23:35:54 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000140)={0x0, 0xff, 0x9e, 0x4000}) ioctl$PTP_ENABLE_PPS(r0, 0x40043d04, 0x1) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000180)=0x75706cf23ce0c2a0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x2) (async) ioctl$PTP_ENABLE_PPS(r1, 0x40043d04, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async, rerun: 64) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f00000001c0)={0xa21, 0x3234564e, 0x3, @stepwise={0x7, 0x7f, 0x1, 0x401, 0x6, 0x8}}) (rerun: 64) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x1, 0x9598033cdf91d447, 0x3, "475d0088e11ed59bb805dfd0f1000000000000000000008000"}) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 23:35:54 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0xe62d, 0x2) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)=@mmap={0x7ff, 0x3, 0x4, 0x4, 0x0, {0x77359400}, {0xf, 0x1, 0x5, 0x8, 0x0, 0x1, "7716ef09"}, 0x1, 0x1, {}, 0x2, 0x0, r2}) (async) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000080)=@userptr={0x8651, 0x3, 0x4, 0x0, 0x4, {0x77359400}, {0x3, 0x0, 0xff, 0x0, 0x5, 0x2, "d316305f"}, 0x6, 0x2, {&(0x7f0000000040)}, 0x800, 0x0, r2}) (async, rerun: 32) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x0, @pix_mp={0x100000, 0xfffffffc, 0x0, 0x0, 0x0, [{0x0, 0x6}, {0x0, 0xfffff800}, {}, {}, {0x0, 0x5}, {0x5, 0x4}, {0x200}, {0xfffffffe, 0x6}], 0x0, 0x1, 0x0, 0x0, 0x6}}) (rerun: 32) 23:35:54 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x9, @pix_mp}) 23:35:54 executing program 2: syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000000)={0x8, 0x36314d59, 0x2, @stepwise={0x6d1, 0x10001, 0x8, 0x1}}) 23:35:54 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) (async) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000140)={0x0, 0xff, 0x9e, 0x4000}) (async) ioctl$PTP_ENABLE_PPS(r0, 0x40043d04, 0x1) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000180)=0x75706cf23ce0c2a0) (async, rerun: 64) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x2) (async, rerun: 64) ioctl$PTP_ENABLE_PPS(r1, 0x40043d04, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f00000001c0)={0xa21, 0x3234564e, 0x3, @stepwise={0x7, 0x7f, 0x1, 0x401, 0x6, 0x8}}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x1, 0x9598033cdf91d447, 0x3, "475d0088e11ed59bb805dfd0f1000000000000000000008000"}) (async, rerun: 32) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (rerun: 32) 23:35:54 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async, rerun: 32) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0xe62d, 0x2) (rerun: 32) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async, rerun: 64) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)=@mmap={0x7ff, 0x3, 0x4, 0x4, 0x0, {0x77359400}, {0xf, 0x1, 0x5, 0x8, 0x0, 0x1, "7716ef09"}, 0x1, 0x1, {}, 0x2, 0x0, r2}) (rerun: 64) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000080)=@userptr={0x8651, 0x3, 0x4, 0x0, 0x4, {0x77359400}, {0x3, 0x0, 0xff, 0x0, 0x5, 0x2, "d316305f"}, 0x6, 0x2, {&(0x7f0000000040)}, 0x800, 0x0, r2}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x0, @pix_mp={0x100000, 0xfffffffc, 0x0, 0x0, 0x0, [{0x0, 0x6}, {0x0, 0xfffff800}, {}, {}, {0x0, 0x5}, {0x5, 0x4}, {0x200}, {0xfffffffe, 0x6}], 0x0, 0x1, 0x0, 0x0, 0x6}}) 23:35:54 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:54 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_dccp_int(r2, 0x21, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400d0}, 0xd188639f478ba79f) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) 23:35:54 executing program 2: syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000000)={0x8, 0x36314d59, 0x2, @stepwise={0x6d1, 0x10001, 0x8, 0x1}}) 23:35:54 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x9, @pix_mp}) 23:35:54 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x38) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0x1, 0x3}) 23:35:54 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="00020000", @ANYRES16=0x0, @ANYBLOB="08002dbd7000fcdbdf250000000008000100", @ANYRES32=r1, @ANYBLOB="7400028038000100240001006c625f73746174725f726566726573685f696e74657276616c000000000000000500030003000000080004000900000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000800000008000100", @ANYRES32=0x0, @ANYBLOB="6801028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400190c00003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040002000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000700000008000600", @ANYRES32=r3, @ANYBLOB="38000100240001006d636173745f72650000696e5f696e74657276616c0000000000000000000000050003000300000008000400ffffffff40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e0000"], 0x200}, 0x1, 0x0, 0x0, 0x40011}, 0x20048004) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:35:54 executing program 1: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405608, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:54 executing program 2: syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000000)={0x8, 0x36314d59, 0x2, @stepwise={0x6d1, 0x10001, 0x8, 0x1}}) 23:35:54 executing program 4: syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000580)={0x9, @pix_mp}) 23:35:54 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_dccp_int(r2, 0x21, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400d0}, 0xd188639f478ba79f) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 23:35:54 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x38) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0x1, 0x3}) 23:35:54 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="00020000", @ANYRES16=0x0, @ANYBLOB="08002dbd7000fcdbdf250000000008000100", @ANYRES32=r1, @ANYBLOB="7400028038000100240001006c625f73746174725f726566726573685f696e74657276616c000000000000000500030003000000080004000900000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000800000008000100", @ANYRES32=0x0, @ANYBLOB="6801028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400190c00003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040002000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000700000008000600", @ANYRES32=r3, @ANYBLOB="38000100240001006d636173745f72650000696e5f696e74657276616c0000000000000000000000050003000300000008000400ffffffff40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e0000"], 0x200}, 0x1, 0x0, 0x0, 0x40011}, 0x20048004) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48) (async) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="00020000", @ANYRES16=0x0, @ANYBLOB="08002dbd7000fcdbdf250000000008000100", @ANYRES32=r1, @ANYBLOB="7400028038000100240001006c625f73746174725f726566726573685f696e74657276616c000000000000000500030003000000080004000900000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000800000008000100", @ANYRES32=0x0, @ANYBLOB="6801028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400190c00003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040002000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000700000008000600", @ANYRES32=r3, @ANYBLOB="38000100240001006d636173745f72650000696e5f696e74657276616c0000000000000000000000050003000300000008000400ffffffff40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e0000"], 0x200}, 0x1, 0x0, 0x0, 0x40011}, 0x20048004) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) 23:35:54 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0) 23:35:54 executing program 1: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405608, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:54 executing program 4: syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000580)={0x9, @pix_mp}) 23:35:54 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x38) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0x1, 0x3}) 23:35:54 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_dccp_int(r2, 0x21, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400d0}, 0xd188639f478ba79f) 23:35:54 executing program 1: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405608, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:55 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0) 23:35:55 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48) (async) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="00020000", @ANYRES16=0x0, @ANYBLOB="08002dbd7000fcdbdf250000000008000100", @ANYRES32=r1, @ANYBLOB="7400028038000100240001006c625f73746174725f726566726573685f696e74657276616c000000000000000500030003000000080004000900000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000800000008000100", @ANYRES32=0x0, @ANYBLOB="6801028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400190c00003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040002000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000700000008000600", @ANYRES32=r3, @ANYBLOB="38000100240001006d636173745f72650000696e5f696e74657276616c0000000000000000000000050003000300000008000400ffffffff40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e0000"], 0x200}, 0x1, 0x0, 0x0, 0x40011}, 0x20048004) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:35:55 executing program 4: syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000580)={0x9, @pix_mp}) 23:35:55 executing program 3: socket(0x18, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_dccp_int(r1, 0x21, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) 23:35:55 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:55 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0) 23:35:55 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x2, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:55 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0xfffffffc}], 0x0, 0x0, 0x0, 0x0, 0x4}}) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f00000000c0)=0x3) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x1, @win={{0xffffffff, 0x2, 0x9, 0x400}, 0x1, 0x1, &(0x7f0000000080)={{0x4, 0x9, 0x1, 0x5}, &(0x7f0000000040)={{0xfff, 0x0, 0x1, 0xfffff8db}}}, 0x617, &(0x7f0000000140)="78c52f775276bb955fe12ca6b4c16bf6e700416528c0f5bb23d5a39457402d3d58a9478a10cd56f06dec6b231ada99e4893555e1874626da231fd451c25b0e1feac2a23748c1dc136f37b6da9c43ec41fd2a999b2b1f0f284ac5530ba59636e9ebbb2d360a297294da3a265ff5aad85f6a6467591d8b89c965c4b92ae4783fa5a8511dd954f60fa8c592ae493fbb6b9589336546abe4529ec6ca52a01ab2677b55a0fa89776aa1d866f6af1baeeb2184e8de4c440a42edbd2dc60c570a7f38827f4f791622d9f36e4a7499192044df022659256b7b90c1e72c6b4a0a5581af529b866ca4a152261d60d682bedec8fdbeb6b958bb57d2", 0x8}}) 23:35:55 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:55 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x2, @stepwise={0x6d1, 0x10001, 0x8, 0x1}}) 23:35:55 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0xfffffffc}], 0x0, 0x0, 0x0, 0x0, 0x4}}) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f00000000c0)=0x3) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x1, @win={{0xffffffff, 0x2, 0x9, 0x400}, 0x1, 0x1, &(0x7f0000000080)={{0x4, 0x9, 0x1, 0x5}, &(0x7f0000000040)={{0xfff, 0x0, 0x1, 0xfffff8db}}}, 0x617, &(0x7f0000000140)="78c52f775276bb955fe12ca6b4c16bf6e700416528c0f5bb23d5a39457402d3d58a9478a10cd56f06dec6b231ada99e4893555e1874626da231fd451c25b0e1feac2a23748c1dc136f37b6da9c43ec41fd2a999b2b1f0f284ac5530ba59636e9ebbb2d360a297294da3a265ff5aad85f6a6467591d8b89c965c4b92ae4783fa5a8511dd954f60fa8c592ae493fbb6b9589336546abe4529ec6ca52a01ab2677b55a0fa89776aa1d866f6af1baeeb2184e8de4c440a42edbd2dc60c570a7f38827f4f791622d9f36e4a7499192044df022659256b7b90c1e72c6b4a0a5581af529b866ca4a152261d60d682bedec8fdbeb6b958bb57d2", 0x8}}) 23:35:55 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) 23:35:55 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x2, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:55 executing program 3: socket(0x18, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)) 23:35:55 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x0, 0x2, @stepwise={0x6d1, 0x10001, 0x8, 0x1}}) 23:35:55 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:55 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) 23:35:55 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0xfffffffc}], 0x0, 0x0, 0x0, 0x0, 0x4}}) (async) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f00000000c0)=0x3) (async) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x1, @win={{0xffffffff, 0x2, 0x9, 0x400}, 0x1, 0x1, &(0x7f0000000080)={{0x4, 0x9, 0x1, 0x5}, &(0x7f0000000040)={{0xfff, 0x0, 0x1, 0xfffff8db}}}, 0x617, &(0x7f0000000140)="78c52f775276bb955fe12ca6b4c16bf6e700416528c0f5bb23d5a39457402d3d58a9478a10cd56f06dec6b231ada99e4893555e1874626da231fd451c25b0e1feac2a23748c1dc136f37b6da9c43ec41fd2a999b2b1f0f284ac5530ba59636e9ebbb2d360a297294da3a265ff5aad85f6a6467591d8b89c965c4b92ae4783fa5a8511dd954f60fa8c592ae493fbb6b9589336546abe4529ec6ca52a01ab2677b55a0fa89776aa1d866f6af1baeeb2184e8de4c440a42edbd2dc60c570a7f38827f4f791622d9f36e4a7499192044df022659256b7b90c1e72c6b4a0a5581af529b866ca4a152261d60d682bedec8fdbeb6b958bb57d2", 0x8}}) 23:35:55 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x2, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:55 executing program 3: socket(0x18, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)) 23:35:55 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x0, 0x2, @stepwise={0x6d1, 0x10001, 0x8, 0x1}}) 23:35:55 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405608, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:55 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x1, 0x10000, 0x8003f, 0x4080}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000140)={0x2, @raw_data="7845b7c063e7846b6c9dbc970af7854f2ee2bbf566601e08aa2f97764694e5a0c1d7394607a1d5996f86c35c3caf976228fb80da8a9fa95f05605cbdd5f8b51c6f697ff4c1b5386855d3703d536289450792f3981f8abdefe8e522fbfacd6ece9eefc1d23da4771221d6fe5de59b3a098f5b3ca8f835747830e49ed162cfbb592338aedc67655a17778ae8d279965a8117d120c3e8b4334386a12fdc284ad731bef033ede0799e8cee78ddfc08a2badf0ed3d483a89d1b9d5ec9fc3ca0d8613e40519e708b9e7c77"}) 23:35:55 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) 23:35:55 executing program 3: socket(0x18, 0x0, 0x0) socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)) 23:35:55 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000180)={0x3, "63a7f476df65274e85efc0c6f3e44d31bc8481b8578e29f6b069e8359048a1bc", 0x3, 0x200, 0x6, 0x3, 0x4, 0x2, 0x7ff, 0xd94}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f00000000c0)=0x7) 23:35:55 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x0, 0x2, @stepwise={0x6d1, 0x10001, 0x8, 0x1}}) 23:35:55 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async, rerun: 64) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x1, 0x10000, 0x8003f, 0x4080}) (rerun: 64) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000140)={0x2, @raw_data="7845b7c063e7846b6c9dbc970af7854f2ee2bbf566601e08aa2f97764694e5a0c1d7394607a1d5996f86c35c3caf976228fb80da8a9fa95f05605cbdd5f8b51c6f697ff4c1b5386855d3703d536289450792f3981f8abdefe8e522fbfacd6ece9eefc1d23da4771221d6fe5de59b3a098f5b3ca8f835747830e49ed162cfbb592338aedc67655a17778ae8d279965a8117d120c3e8b4334386a12fdc284ad731bef033ede0799e8cee78ddfc08a2badf0ed3d483a89d1b9d5ec9fc3ca0d8613e40519e708b9e7c77"}) 23:35:55 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405608, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:55 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise={0x6d1, 0x10001, 0x8, 0x1}}) 23:35:55 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x0, @pix_mp}) 23:35:55 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000180)={0x3, "63a7f476df65274e85efc0c6f3e44d31bc8481b8578e29f6b069e8359048a1bc", 0x3, 0x200, 0x6, 0x3, 0x4, 0x2, 0x7ff, 0xd94}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async, rerun: 64) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f00000000c0)=0x7) 23:35:55 executing program 3: socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)) 23:35:55 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise={0x0, 0x10001, 0x8, 0x1}}) 23:35:55 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405608, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:55 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x0, @pix_mp}) 23:35:55 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x1, 0x10000, 0x8003f, 0x4080}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000140)={0x2, @raw_data="7845b7c063e7846b6c9dbc970af7854f2ee2bbf566601e08aa2f97764694e5a0c1d7394607a1d5996f86c35c3caf976228fb80da8a9fa95f05605cbdd5f8b51c6f697ff4c1b5386855d3703d536289450792f3981f8abdefe8e522fbfacd6ece9eefc1d23da4771221d6fe5de59b3a098f5b3ca8f835747830e49ed162cfbb592338aedc67655a17778ae8d279965a8117d120c3e8b4334386a12fdc284ad731bef033ede0799e8cee78ddfc08a2badf0ed3d483a89d1b9d5ec9fc3ca0d8613e40519e708b9e7c77"}) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x1, 0x10000, 0x8003f, 0x4080}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000140)={0x2, @raw_data="7845b7c063e7846b6c9dbc970af7854f2ee2bbf566601e08aa2f97764694e5a0c1d7394607a1d5996f86c35c3caf976228fb80da8a9fa95f05605cbdd5f8b51c6f697ff4c1b5386855d3703d536289450792f3981f8abdefe8e522fbfacd6ece9eefc1d23da4771221d6fe5de59b3a098f5b3ca8f835747830e49ed162cfbb592338aedc67655a17778ae8d279965a8117d120c3e8b4334386a12fdc284ad731bef033ede0799e8cee78ddfc08a2badf0ed3d483a89d1b9d5ec9fc3ca0d8613e40519e708b9e7c77"}) (async) 23:35:55 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise={0x0, 0x0, 0x8, 0x1}}) 23:35:55 executing program 3: socketpair(0x0, 0x4, 0x7fffffff, &(0x7f0000000100)) 23:35:55 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000180)={0x3, "63a7f476df65274e85efc0c6f3e44d31bc8481b8578e29f6b069e8359048a1bc", 0x3, 0x200, 0x6, 0x3, 0x4, 0x2, 0x7ff, 0xd94}) (async, rerun: 64) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) (async, rerun: 64) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f00000000c0)=0x7) 23:35:55 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise={0x0, 0x0, 0x0, 0x1}}) 23:35:55 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, 0x0) 23:35:55 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x0, @pix_mp}) 23:35:55 executing program 5: syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0xd17b) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x3, @pix_mp={0x0, 0x0, 0x38414762, 0x0, 0x0, [{}, {0xffff}, {0x0, 0x7}, {}, {}, {}, {}, {0x14000}], 0x0, 0x0, 0x8, 0x0, 0x2}}) 23:35:55 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@multiplanar_overlay={0x2, 0x3, 0x4, 0x0, 0xff, {r2, r3/1000+10000}, {0x1, 0x2, 0x80, 0xf7, 0xb9, 0x0, "678e86bb"}, 0x7, 0x3, {&(0x7f0000000040)=[{0x7f, 0x401, {0xa5ab}, 0x4}, {0x400, 0x80000000, {0x7}, 0x80000000}]}, 0x6, 0x0, r4}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x1, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:55 executing program 3: socketpair(0x0, 0x4, 0x7fffffff, &(0x7f0000000100)) 23:35:55 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:35:55 executing program 4: socketpair(0x0, 0x4, 0x7fffffff, &(0x7f0000000100)) 23:35:55 executing program 5: syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0xd17b) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x3, @pix_mp={0x0, 0x0, 0x38414762, 0x0, 0x0, [{}, {0xffff}, {0x0, 0x7}, {}, {}, {}, {}, {0x14000}], 0x0, 0x0, 0x8, 0x0, 0x2}}) 23:35:55 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) (async) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@multiplanar_overlay={0x2, 0x3, 0x4, 0x0, 0xff, {r2, r3/1000+10000}, {0x1, 0x2, 0x80, 0xf7, 0xb9, 0x0, "678e86bb"}, 0x7, 0x3, {&(0x7f0000000040)=[{0x7f, 0x401, {0xa5ab}, 0x4}, {0x400, 0x80000000, {0x7}, 0x80000000}]}, 0x6, 0x0, r4}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x1, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:55 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, 0x0) 23:35:56 executing program 3: socketpair(0x0, 0x4, 0x7fffffff, &(0x7f0000000100)) 23:35:56 executing program 2: socket(0x18, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_dccp_int(r1, 0x21, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) 23:35:56 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x2, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:56 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) (async) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@multiplanar_overlay={0x2, 0x3, 0x4, 0x0, 0xff, {r2, r3/1000+10000}, {0x1, 0x2, 0x80, 0xf7, 0xb9, 0x0, "678e86bb"}, 0x7, 0x3, {&(0x7f0000000040)=[{0x7f, 0x401, {0xa5ab}, 0x4}, {0x400, 0x80000000, {0x7}, 0x80000000}]}, 0x6, 0x0, r4}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x1, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:56 executing program 4: r0 = socket(0x18, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_dccp_int(r3, 0x21, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400d0}, 0xd188639f478ba79f) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) accept4$vsock_stream(r2, &(0x7f00000002c0)={0x28, 0x0, 0x0, @local}, 0x10, 0x80000) 23:35:56 executing program 2: socket(0x18, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_dccp_int(r1, 0x21, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) 23:35:56 executing program 5: syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0xd17b) (async) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x3, @pix_mp={0x0, 0x0, 0x38414762, 0x0, 0x0, [{}, {0xffff}, {0x0, 0x7}, {}, {}, {}, {}, {0x14000}], 0x0, 0x0, 0x8, 0x0, 0x2}}) 23:35:56 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x10000, 0x4}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) write$uinput_user_dev(r2, &(0x7f0000000180)={'syz1\x00', {0x4, 0x5, 0x5, 0x1}, 0x4b, [0x0, 0x5, 0x9, 0x7, 0x4, 0x3, 0x9, 0x8, 0x352, 0x7, 0x8, 0x7, 0x5, 0x6, 0xb1, 0x2, 0x4c7c2202, 0x2, 0x2d99839b, 0x7, 0xff, 0x10001, 0x9, 0x2, 0xa3e5, 0x40, 0xfff, 0x401, 0x8, 0x5, 0x1, 0x80000000, 0x3, 0x8000, 0xffffffff, 0x7039, 0x7, 0x6, 0x1f, 0x8001, 0x0, 0xfffffffb, 0x409, 0x0, 0xfff, 0x7fff, 0x86a6, 0x4, 0x8, 0x4, 0x4, 0x5, 0xca89, 0xff, 0x200, 0x1, 0x8, 0x8, 0x3, 0x748, 0x4, 0x1, 0x1, 0xfffffffc], [0x0, 0xd0, 0x6, 0x8, 0x8, 0x464, 0x8001, 0x8001, 0x1, 0x5, 0x4, 0x80000001, 0x1000, 0x0, 0x6, 0x8, 0x100, 0xfffffffa, 0xb8f5, 0x4, 0x0, 0x1, 0x8, 0xc7ed, 0xffffffff, 0x7f, 0x6, 0x7, 0x9, 0xef, 0x0, 0x80000001, 0x63, 0x2, 0x2, 0x40, 0x4, 0xff, 0x4, 0xdc, 0x1ee, 0x3f, 0x81, 0x4, 0x101, 0x401, 0xffffffff, 0x0, 0x1ff, 0x80, 0xfffffffd, 0x7, 0x4, 0x3, 0x7, 0x200, 0x2f12aca1, 0x200, 0x7fffffff, 0x9, 0x40, 0x5, 0x3f, 0x9], [0xd4, 0x4, 0x7, 0x1ff, 0x5, 0x20, 0x6, 0x400, 0xc5, 0x400, 0x7, 0xffff, 0x401, 0x6, 0x4, 0x6, 0x0, 0x3, 0x2, 0x101, 0x7, 0x1000, 0x8000, 0x4, 0xfffff001, 0x8, 0x59, 0x2, 0x0, 0xfffffffb, 0x20, 0xabb, 0x2, 0x1, 0x0, 0x56, 0x7f, 0x2, 0x26, 0x0, 0x6, 0xb8, 0x8, 0xfffffffd, 0x9, 0xfff, 0x34, 0x9, 0x0, 0x101, 0xe80c, 0x5, 0x3, 0xffffff80, 0x40, 0x10001, 0x8001, 0x8, 0x7, 0x0, 0x9, 0x4, 0x200, 0x8], [0x1, 0x3, 0x0, 0x0, 0x0, 0x100, 0x7, 0x17, 0x1, 0x9, 0x80000001, 0x40, 0x8, 0x1000, 0x4, 0x80000000, 0x1, 0x8, 0x2, 0x5, 0x9, 0x96, 0xebe0, 0x1, 0x5, 0x8, 0x9, 0x7, 0xfffffffd, 0xffffffff, 0x7fffffff, 0x0, 0x9, 0xfff, 0x8, 0x1, 0x401, 0x1d73, 0x2, 0x3, 0xfff, 0x5635, 0x80000001, 0x3, 0x5, 0x243, 0x7, 0x2, 0xffffffff, 0x5, 0x2, 0x2, 0x20000000, 0x8, 0x2, 0xffffffff, 0xfffffff9, 0x8, 0x6, 0x4, 0xfffffffd, 0x203, 0x8, 0x48]}, 0x4a8) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_ERASE(r1, 0xc06855c8, &(0x7f0000000040)) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000600)={0x2, 0x4, 0x3, 0x0, 0x7}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x3c) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000640)={r2}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000680)={0x0, 0xd0}, &(0x7f00000006c0)=0x8) 23:35:56 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0585609, &(0x7f0000000580)={0x1, @pix_mp}) 23:35:56 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x6, 0x0, [{}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x8000}]}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x1, 0x0, 0x3ff, 0x880}) 23:35:56 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, 0x0) 23:35:56 executing program 3: socketpair(0x23, 0x0, 0x7fffffff, &(0x7f0000000100)) 23:35:56 executing program 2: socket(0x18, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_dccp_int(r1, 0x21, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) 23:35:56 executing program 4: r0 = socket(0x18, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x300}, 0x0) 23:35:56 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x10000, 0x4}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) write$uinput_user_dev(r2, &(0x7f0000000180)={'syz1\x00', {0x4, 0x5, 0x5, 0x1}, 0x4b, [0x0, 0x5, 0x9, 0x7, 0x4, 0x3, 0x9, 0x8, 0x352, 0x7, 0x8, 0x7, 0x5, 0x6, 0xb1, 0x2, 0x4c7c2202, 0x2, 0x2d99839b, 0x7, 0xff, 0x10001, 0x9, 0x2, 0xa3e5, 0x40, 0xfff, 0x401, 0x8, 0x5, 0x1, 0x80000000, 0x3, 0x8000, 0xffffffff, 0x7039, 0x7, 0x6, 0x1f, 0x8001, 0x0, 0xfffffffb, 0x409, 0x0, 0xfff, 0x7fff, 0x86a6, 0x4, 0x8, 0x4, 0x4, 0x5, 0xca89, 0xff, 0x200, 0x1, 0x8, 0x8, 0x3, 0x748, 0x4, 0x1, 0x1, 0xfffffffc], [0x0, 0xd0, 0x6, 0x8, 0x8, 0x464, 0x8001, 0x8001, 0x1, 0x5, 0x4, 0x80000001, 0x1000, 0x0, 0x6, 0x8, 0x100, 0xfffffffa, 0xb8f5, 0x4, 0x0, 0x1, 0x8, 0xc7ed, 0xffffffff, 0x7f, 0x6, 0x7, 0x9, 0xef, 0x0, 0x80000001, 0x63, 0x2, 0x2, 0x40, 0x4, 0xff, 0x4, 0xdc, 0x1ee, 0x3f, 0x81, 0x4, 0x101, 0x401, 0xffffffff, 0x0, 0x1ff, 0x80, 0xfffffffd, 0x7, 0x4, 0x3, 0x7, 0x200, 0x2f12aca1, 0x200, 0x7fffffff, 0x9, 0x40, 0x5, 0x3f, 0x9], [0xd4, 0x4, 0x7, 0x1ff, 0x5, 0x20, 0x6, 0x400, 0xc5, 0x400, 0x7, 0xffff, 0x401, 0x6, 0x4, 0x6, 0x0, 0x3, 0x2, 0x101, 0x7, 0x1000, 0x8000, 0x4, 0xfffff001, 0x8, 0x59, 0x2, 0x0, 0xfffffffb, 0x20, 0xabb, 0x2, 0x1, 0x0, 0x56, 0x7f, 0x2, 0x26, 0x0, 0x6, 0xb8, 0x8, 0xfffffffd, 0x9, 0xfff, 0x34, 0x9, 0x0, 0x101, 0xe80c, 0x5, 0x3, 0xffffff80, 0x40, 0x10001, 0x8001, 0x8, 0x7, 0x0, 0x9, 0x4, 0x200, 0x8], [0x1, 0x3, 0x0, 0x0, 0x0, 0x100, 0x7, 0x17, 0x1, 0x9, 0x80000001, 0x40, 0x8, 0x1000, 0x4, 0x80000000, 0x1, 0x8, 0x2, 0x5, 0x9, 0x96, 0xebe0, 0x1, 0x5, 0x8, 0x9, 0x7, 0xfffffffd, 0xffffffff, 0x7fffffff, 0x0, 0x9, 0xfff, 0x8, 0x1, 0x401, 0x1d73, 0x2, 0x3, 0xfff, 0x5635, 0x80000001, 0x3, 0x5, 0x243, 0x7, 0x2, 0xffffffff, 0x5, 0x2, 0x2, 0x20000000, 0x8, 0x2, 0xffffffff, 0xfffffff9, 0x8, 0x6, 0x4, 0xfffffffd, 0x203, 0x8, 0x48]}, 0x4a8) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$UI_END_FF_ERASE(r1, 0xc06855c8, &(0x7f0000000040)) (async) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000600)={0x2, 0x4, 0x3, 0x0, 0x7}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x3c) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000640)={r2}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000680)={0x0, 0xd0}, &(0x7f00000006c0)=0x8) 23:35:56 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x6, 0x0, [{}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x8000}]}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x1, 0x0, 0x3ff, 0x880}) 23:35:56 executing program 3: socketpair(0x23, 0x0, 0x0, &(0x7f0000000100)) 23:35:56 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x10000, 0x4}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) write$uinput_user_dev(r2, &(0x7f0000000180)={'syz1\x00', {0x4, 0x5, 0x5, 0x1}, 0x4b, [0x0, 0x5, 0x9, 0x7, 0x4, 0x3, 0x9, 0x8, 0x352, 0x7, 0x8, 0x7, 0x5, 0x6, 0xb1, 0x2, 0x4c7c2202, 0x2, 0x2d99839b, 0x7, 0xff, 0x10001, 0x9, 0x2, 0xa3e5, 0x40, 0xfff, 0x401, 0x8, 0x5, 0x1, 0x80000000, 0x3, 0x8000, 0xffffffff, 0x7039, 0x7, 0x6, 0x1f, 0x8001, 0x0, 0xfffffffb, 0x409, 0x0, 0xfff, 0x7fff, 0x86a6, 0x4, 0x8, 0x4, 0x4, 0x5, 0xca89, 0xff, 0x200, 0x1, 0x8, 0x8, 0x3, 0x748, 0x4, 0x1, 0x1, 0xfffffffc], [0x0, 0xd0, 0x6, 0x8, 0x8, 0x464, 0x8001, 0x8001, 0x1, 0x5, 0x4, 0x80000001, 0x1000, 0x0, 0x6, 0x8, 0x100, 0xfffffffa, 0xb8f5, 0x4, 0x0, 0x1, 0x8, 0xc7ed, 0xffffffff, 0x7f, 0x6, 0x7, 0x9, 0xef, 0x0, 0x80000001, 0x63, 0x2, 0x2, 0x40, 0x4, 0xff, 0x4, 0xdc, 0x1ee, 0x3f, 0x81, 0x4, 0x101, 0x401, 0xffffffff, 0x0, 0x1ff, 0x80, 0xfffffffd, 0x7, 0x4, 0x3, 0x7, 0x200, 0x2f12aca1, 0x200, 0x7fffffff, 0x9, 0x40, 0x5, 0x3f, 0x9], [0xd4, 0x4, 0x7, 0x1ff, 0x5, 0x20, 0x6, 0x400, 0xc5, 0x400, 0x7, 0xffff, 0x401, 0x6, 0x4, 0x6, 0x0, 0x3, 0x2, 0x101, 0x7, 0x1000, 0x8000, 0x4, 0xfffff001, 0x8, 0x59, 0x2, 0x0, 0xfffffffb, 0x20, 0xabb, 0x2, 0x1, 0x0, 0x56, 0x7f, 0x2, 0x26, 0x0, 0x6, 0xb8, 0x8, 0xfffffffd, 0x9, 0xfff, 0x34, 0x9, 0x0, 0x101, 0xe80c, 0x5, 0x3, 0xffffff80, 0x40, 0x10001, 0x8001, 0x8, 0x7, 0x0, 0x9, 0x4, 0x200, 0x8], [0x1, 0x3, 0x0, 0x0, 0x0, 0x100, 0x7, 0x17, 0x1, 0x9, 0x80000001, 0x40, 0x8, 0x1000, 0x4, 0x80000000, 0x1, 0x8, 0x2, 0x5, 0x9, 0x96, 0xebe0, 0x1, 0x5, 0x8, 0x9, 0x7, 0xfffffffd, 0xffffffff, 0x7fffffff, 0x0, 0x9, 0xfff, 0x8, 0x1, 0x401, 0x1d73, 0x2, 0x3, 0xfff, 0x5635, 0x80000001, 0x3, 0x5, 0x243, 0x7, 0x2, 0xffffffff, 0x5, 0x2, 0x2, 0x20000000, 0x8, 0x2, 0xffffffff, 0xfffffff9, 0x8, 0x6, 0x4, 0xfffffffd, 0x203, 0x8, 0x48]}, 0x4a8) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_ERASE(r1, 0xc06855c8, &(0x7f0000000040)) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000600)={0x2, 0x4, 0x3, 0x0, 0x7}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x3c) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000640)={r2}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000680)={0x0, 0xd0}, &(0x7f00000006c0)=0x8) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x10000, 0x4}) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) write$uinput_user_dev(r2, &(0x7f0000000180)={'syz1\x00', {0x4, 0x5, 0x5, 0x1}, 0x4b, [0x0, 0x5, 0x9, 0x7, 0x4, 0x3, 0x9, 0x8, 0x352, 0x7, 0x8, 0x7, 0x5, 0x6, 0xb1, 0x2, 0x4c7c2202, 0x2, 0x2d99839b, 0x7, 0xff, 0x10001, 0x9, 0x2, 0xa3e5, 0x40, 0xfff, 0x401, 0x8, 0x5, 0x1, 0x80000000, 0x3, 0x8000, 0xffffffff, 0x7039, 0x7, 0x6, 0x1f, 0x8001, 0x0, 0xfffffffb, 0x409, 0x0, 0xfff, 0x7fff, 0x86a6, 0x4, 0x8, 0x4, 0x4, 0x5, 0xca89, 0xff, 0x200, 0x1, 0x8, 0x8, 0x3, 0x748, 0x4, 0x1, 0x1, 0xfffffffc], [0x0, 0xd0, 0x6, 0x8, 0x8, 0x464, 0x8001, 0x8001, 0x1, 0x5, 0x4, 0x80000001, 0x1000, 0x0, 0x6, 0x8, 0x100, 0xfffffffa, 0xb8f5, 0x4, 0x0, 0x1, 0x8, 0xc7ed, 0xffffffff, 0x7f, 0x6, 0x7, 0x9, 0xef, 0x0, 0x80000001, 0x63, 0x2, 0x2, 0x40, 0x4, 0xff, 0x4, 0xdc, 0x1ee, 0x3f, 0x81, 0x4, 0x101, 0x401, 0xffffffff, 0x0, 0x1ff, 0x80, 0xfffffffd, 0x7, 0x4, 0x3, 0x7, 0x200, 0x2f12aca1, 0x200, 0x7fffffff, 0x9, 0x40, 0x5, 0x3f, 0x9], [0xd4, 0x4, 0x7, 0x1ff, 0x5, 0x20, 0x6, 0x400, 0xc5, 0x400, 0x7, 0xffff, 0x401, 0x6, 0x4, 0x6, 0x0, 0x3, 0x2, 0x101, 0x7, 0x1000, 0x8000, 0x4, 0xfffff001, 0x8, 0x59, 0x2, 0x0, 0xfffffffb, 0x20, 0xabb, 0x2, 0x1, 0x0, 0x56, 0x7f, 0x2, 0x26, 0x0, 0x6, 0xb8, 0x8, 0xfffffffd, 0x9, 0xfff, 0x34, 0x9, 0x0, 0x101, 0xe80c, 0x5, 0x3, 0xffffff80, 0x40, 0x10001, 0x8001, 0x8, 0x7, 0x0, 0x9, 0x4, 0x200, 0x8], [0x1, 0x3, 0x0, 0x0, 0x0, 0x100, 0x7, 0x17, 0x1, 0x9, 0x80000001, 0x40, 0x8, 0x1000, 0x4, 0x80000000, 0x1, 0x8, 0x2, 0x5, 0x9, 0x96, 0xebe0, 0x1, 0x5, 0x8, 0x9, 0x7, 0xfffffffd, 0xffffffff, 0x7fffffff, 0x0, 0x9, 0xfff, 0x8, 0x1, 0x401, 0x1d73, 0x2, 0x3, 0xfff, 0x5635, 0x80000001, 0x3, 0x5, 0x243, 0x7, 0x2, 0xffffffff, 0x5, 0x2, 0x2, 0x20000000, 0x8, 0x2, 0xffffffff, 0xfffffff9, 0x8, 0x6, 0x4, 0xfffffffd, 0x203, 0x8, 0x48]}, 0x4a8) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$UI_END_FF_ERASE(r1, 0xc06855c8, &(0x7f0000000040)) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000600)={0x2, 0x4, 0x3, 0x0, 0x7}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x3c) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000640)={r2}, 0x8) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000680)={0x0, 0xd0}, &(0x7f00000006c0)=0x8) (async) 23:35:56 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40049409, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:56 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:56 executing program 2: socket(0x18, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)) 23:35:56 executing program 3: socketpair(0x23, 0x0, 0x0, &(0x7f0000000100)) 23:35:56 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x6, 0x0, [{}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x8000}]}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x1, 0x0, 0x3ff, 0x880}) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x6, 0x0, [{}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x8000}]}}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x1, 0x0, 0x3ff, 0x880}) (async) 23:35:56 executing program 4: r0 = socket(0x18, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xffffff7f00000000}}, 0x0) 23:35:56 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x31363553}) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 23:35:56 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:56 executing program 5: recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000000)=@hci, 0x80, &(0x7f0000001680)=[{&(0x7f0000000080)=""/40, 0x28}, {&(0x7f0000000140)=""/65, 0x41}, {&(0x7f0000001c80)=""/4103, 0x1007}, {&(0x7f00000001c0)=""/96, 0x60}, {&(0x7f0000000240)=""/83, 0x53}, {&(0x7f00000002c0)=""/120, 0x78}, {&(0x7f0000000340)=""/195, 0xc3}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f00000000c0)=""/59, 0x3b}], 0x9, &(0x7f0000000680)=""/108, 0x6c}, 0x41) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=@base={0x1c, 0xff, 0x6, 0x1, 0x400, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001800), 0x48000, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x40600, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000001bc0)={0x1, 0xf1}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@bloom_filter={0x1e, 0x5, 0x8, 0x100, 0x108, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1, 0x4}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b40)={0x6, 0x9, &(0x7f0000001c00)=ANY=[@ANYBLOB="78580c001900008b18000000", @ANYRES32=r1, @ANYBLOB="000000e3d10000008520000085e8b5dcb1d6b40dde226a890000000000000000000020000000f42830b60000447d263e28c656005d6a180a8233aec78a80c5ef0f3391aa", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\t\x00'], &(0x7f00000018c0)='syzkaller\x00', 0xffff, 0xe5, &(0x7f0000001900)=""/229, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001a00)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000001a40)={0x0, 0xc, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001b00)=[r3]}, 0x80) 23:35:56 executing program 2: socket(0x18, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)) 23:35:56 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (fail_nth: 1) 23:35:56 executing program 3: socketpair(0x23, 0x0, 0x0, &(0x7f0000000100)) 23:35:56 executing program 5: recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000000)=@hci, 0x80, &(0x7f0000001680)=[{&(0x7f0000000080)=""/40, 0x28}, {&(0x7f0000000140)=""/65, 0x41}, {&(0x7f0000001c80)=""/4103, 0x1007}, {&(0x7f00000001c0)=""/96, 0x60}, {&(0x7f0000000240)=""/83, 0x53}, {&(0x7f00000002c0)=""/120, 0x78}, {&(0x7f0000000340)=""/195, 0xc3}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f00000000c0)=""/59, 0x3b}], 0x9, &(0x7f0000000680)=""/108, 0x6c}, 0x41) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=@base={0x1c, 0xff, 0x6, 0x1, 0x400, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48) (async) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001800), 0x48000, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x40600, 0x0) (async) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000001bc0)={0x1, 0xf1}) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@bloom_filter={0x1e, 0x5, 0x8, 0x100, 0x108, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1, 0x4}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b40)={0x6, 0x9, &(0x7f0000001c00)=ANY=[@ANYBLOB="78580c001900008b18000000", @ANYRES32=r1, @ANYBLOB="000000e3d10000008520000085e8b5dcb1d6b40dde226a890000000000000000000020000000f42830b60000447d263e28c656005d6a180a8233aec78a80c5ef0f3391aa", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\t\x00'], &(0x7f00000018c0)='syzkaller\x00', 0xffff, 0xe5, &(0x7f0000001900)=""/229, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001a00)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000001a40)={0x0, 0xc, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001b00)=[r3]}, 0x80) 23:35:56 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (fail_nth: 1) 23:35:56 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x31363553}) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x31363553}) (async) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) 23:35:56 executing program 3: socketpair(0x23, 0x0, 0x7fffffff, 0x0) 23:35:56 executing program 5: recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000000)=@hci, 0x80, &(0x7f0000001680)=[{&(0x7f0000000080)=""/40, 0x28}, {&(0x7f0000000140)=""/65, 0x41}, {&(0x7f0000001c80)=""/4103, 0x1007}, {&(0x7f00000001c0)=""/96, 0x60}, {&(0x7f0000000240)=""/83, 0x53}, {&(0x7f00000002c0)=""/120, 0x78}, {&(0x7f0000000340)=""/195, 0xc3}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f00000000c0)=""/59, 0x3b}], 0x9, &(0x7f0000000680)=""/108, 0x6c}, 0x41) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=@base={0x1c, 0xff, 0x6, 0x1, 0x400, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48) (async, rerun: 32) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001800), 0x48000, 0x0) (rerun: 32) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x40600, 0x0) (async) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000001bc0)={0x1, 0xf1}) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@bloom_filter={0x1e, 0x5, 0x8, 0x100, 0x108, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1, 0x4}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b40)={0x6, 0x9, &(0x7f0000001c00)=ANY=[@ANYBLOB="78580c001900008b18000000", @ANYRES32=r1, @ANYBLOB="000000e3d10000008520000085e8b5dcb1d6b40dde226a890000000000000000000020000000f42830b60000447d263e28c656005d6a180a8233aec78a80c5ef0f3391aa", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\t\x00'], &(0x7f00000018c0)='syzkaller\x00', 0xffff, 0xe5, &(0x7f0000001900)=""/229, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001a00)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000001a40)={0x0, 0xc, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001b00)=[r3]}, 0x80) 23:35:56 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:35:56 executing program 2: socket(0x18, 0x0, 0x0) socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)) 23:35:56 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:56 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x31363553}) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 23:35:56 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0x2, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:35:56 executing program 3: socketpair(0x23, 0x0, 0x7fffffff, 0x0) 23:35:56 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0xfffffffd}]}}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x1, 0xab}) 23:35:56 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x2, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:56 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0x5421, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:35:56 executing program 2: socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)) 23:35:56 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0xfffffffd}]}}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x1, 0xab}) 23:35:56 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x620040, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, [@map_fd={0x18, 0x2, 0x1, 0x0, r2}, @alu={0x4, 0x0, 0x8, 0x8, 0x6, 0x0, 0x10}, @generic={0x81, 0x5, 0x8, 0x9, 0x10001}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000000c0)='GPL\x00', 0xffffffff, 0x97, &(0x7f0000000180)=""/151, 0x5db5dbe243c47599, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x4, 0x3ce8, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0x1]}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000380)={r0, r1, 0x0, r3}, 0x10) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "47ecfe3f0000350000000000f1c60672000013002200000000000000001de000", 0x50565559}) 23:35:56 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5421, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:56 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0x5450, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:35:56 executing program 3: socketpair(0x23, 0x0, 0x7fffffff, 0x0) 23:35:56 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0xfffffffd}]}}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x1, 0xab}) 23:35:56 executing program 2: socketpair(0x0, 0x4, 0x7fffffff, &(0x7f0000000100)) 23:35:56 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5450, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:57 executing program 3: socketpair(0x23, 0x0, 0x7fffffff, &(0x7f0000000100)) (fail_nth: 1) 23:35:57 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x620040, 0x0) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, [@map_fd={0x18, 0x2, 0x1, 0x0, r2}, @alu={0x4, 0x0, 0x8, 0x8, 0x6, 0x0, 0x10}, @generic={0x81, 0x5, 0x8, 0x9, 0x10001}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000000c0)='GPL\x00', 0xffffffff, 0x97, &(0x7f0000000180)=""/151, 0x5db5dbe243c47599, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x4, 0x3ce8, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0x1]}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000380)={r0, r1, 0x0, r3}, 0x10) (async) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "47ecfe3f0000350000000000f1c60672000013002200000000000000001de000", 0x50565559}) 23:35:57 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5451, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:57 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0x5451, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:35:57 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x3}]}}) 23:35:57 executing program 2: socketpair(0x0, 0x4, 0x7fffffff, &(0x7f0000000100)) [ 2310.641164] FAULT_INJECTION: forcing a failure. [ 2310.641164] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2310.699922] CPU: 0 PID: 4353 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 2310.707756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2310.717122] Call Trace: [ 2310.719723] dump_stack+0x1fc/0x2ef [ 2310.723367] should_fail.cold+0xa/0xf [ 2310.727178] ? lock_acquire+0x170/0x3c0 [ 2310.731161] ? setup_fault_attr+0x200/0x200 [ 2310.735503] __alloc_pages_nodemask+0x239/0x2890 [ 2310.740268] ? __lock_acquire+0x6de/0x3ff0 [ 2310.744526] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2310.749413] ? mark_held_locks+0xf0/0xf0 [ 2310.753501] ? __lock_acquire+0x6de/0x3ff0 [ 2310.757758] alloc_pages_current+0x193/0x2a0 [ 2310.762171] ? mark_held_locks+0xf0/0xf0 [ 2310.766240] __pmd_alloc+0x37/0x440 [ 2310.769880] __handle_mm_fault+0x1760/0x41c0 [ 2310.774297] ? vm_insert_page+0x9c0/0x9c0 [ 2310.778450] ? __lock_acquire+0x6de/0x3ff0 [ 2310.782706] ? check_preemption_disabled+0x41/0x280 [ 2310.787736] handle_mm_fault+0x436/0xb10 [ 2310.791815] __do_page_fault+0x68e/0xd60 23:35:57 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x620040, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, [@map_fd={0x18, 0x2, 0x1, 0x0, r2}, @alu={0x4, 0x0, 0x8, 0x8, 0x6, 0x0, 0x10}, @generic={0x81, 0x5, 0x8, 0x9, 0x10001}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000000c0)='GPL\x00', 0xffffffff, 0x97, &(0x7f0000000180)=""/151, 0x5db5dbe243c47599, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x4, 0x3ce8, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0x1]}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000380)={r0, r1, 0x0, r3}, 0x10) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "47ecfe3f0000350000000000f1c60672000013002200000000000000001de000", 0x50565559}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x620040, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, [@map_fd={0x18, 0x2, 0x1, 0x0, r2}, @alu={0x4, 0x0, 0x8, 0x8, 0x6, 0x0, 0x10}, @generic={0x81, 0x5, 0x8, 0x9, 0x10001}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000000c0)='GPL\x00', 0xffffffff, 0x97, &(0x7f0000000180)=""/151, 0x5db5dbe243c47599, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x4, 0x3ce8, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0x1]}, 0x80) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000380)={r0, r1, 0x0, r3}, 0x10) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "47ecfe3f0000350000000000f1c60672000013002200000000000000001de000", 0x50565559}) (async) 23:35:57 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0x5452, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) [ 2310.795890] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2310.800908] ? spurious_fault+0x840/0x840 [ 2310.805480] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2310.805503] page_fault+0x1e/0x30 23:35:57 executing program 2: socketpair(0x0, 0x4, 0x7fffffff, &(0x7f0000000100)) 23:35:57 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5452, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) [ 2310.805517] RIP: 0010:__put_user_4+0x1c/0x30 [ 2310.805531] Code: 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 c0 df 01 00 48 8b 9b 98 14 00 00 48 83 eb 03 48 39 d9 73 3c 0f 01 cb <89> 01 31 c0 0f 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 65 48 23:35:57 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0x5460, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:35:57 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5460, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:57 executing program 3: socketpair(0x23, 0x0, 0x7fffffff, &(0x7f0000000100)) (fail_nth: 2) 23:35:57 executing program 2: socketpair(0x23, 0x0, 0x7fffffff, &(0x7f0000000100)) [ 2310.805538] RSP: 0018:ffff888022e17e28 EFLAGS: 00050297 [ 2310.805549] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020000100 23:35:57 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045612, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:57 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0x40049409, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) [ 2310.805557] RDX: 0000000000000058 RSI: ffffffff866de86b RDI: 0000000000000286 [ 2310.805565] RBP: 0000000000000000 R08: ffffffff8cd41898 R09: 0000000000000000 [ 2310.805573] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000004 [ 2310.805583] R13: 0000000000000005 R14: 0000000000000000 R15: dffffc0000000000 [ 2310.805610] ? __sys_socketpair+0xfb/0x570 [ 2310.805632] __sys_socketpair+0x107/0x570 [ 2310.805648] ? __ia32_sys_socket+0xb0/0xb0 [ 2310.805663] ? ksys_write+0x1c8/0x2a0 [ 2310.805681] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2310.805696] __x64_sys_socketpair+0x93/0xf0 [ 2310.805708] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2310.805717] do_syscall_64+0xf9/0x620 [ 2310.805730] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2310.805740] RIP: 0033:0x7fcd11dfc0c9 [ 2310.805754] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2310.805762] RSP: 002b:00007fcd1036e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 2310.805775] RAX: ffffffffffffffda RBX: 00007fcd11f1bf80 RCX: 00007fcd11dfc0c9 [ 2310.805782] RDX: 000000007fffffff RSI: 0000000000000000 RDI: 0000000000000023 [ 2310.805789] RBP: 00007fcd1036e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2310.805796] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 2310.805802] R13: 00007ffda60a98df R14: 00007fcd1036e300 R15: 0000000000022000 [ 2311.026238] FAULT_INJECTION: forcing a failure. [ 2311.026238] name failslab, interval 1, probability 0, space 0, times 0 [ 2311.026258] CPU: 0 PID: 4405 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 2311.026267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2311.026272] Call Trace: [ 2311.026291] dump_stack+0x1fc/0x2ef [ 2311.026320] should_fail.cold+0xa/0xf [ 2311.026340] ? setup_fault_attr+0x200/0x200 [ 2311.026356] ? lock_acquire+0x170/0x3c0 [ 2311.026378] __should_failslab+0x115/0x180 [ 2311.026396] should_failslab+0x5/0x10 [ 2311.026409] kmem_cache_alloc+0x277/0x370 [ 2311.026426] __pmd_alloc+0xbb/0x440 [ 2311.026444] __handle_mm_fault+0x1760/0x41c0 [ 2311.026463] ? vm_insert_page+0x9c0/0x9c0 [ 2311.026477] ? __lock_acquire+0x6de/0x3ff0 [ 2311.026505] ? check_preemption_disabled+0x41/0x280 [ 2311.026525] handle_mm_fault+0x436/0xb10 [ 2311.026545] __do_page_fault+0x68e/0xd60 [ 2311.026567] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2311.026582] ? spurious_fault+0x840/0x840 [ 2311.026597] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2311.026618] page_fault+0x1e/0x30 [ 2311.026631] RIP: 0010:__put_user_4+0x1c/0x30 [ 2311.026643] Code: 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 c0 df 01 00 48 8b 9b 98 14 00 00 48 83 eb 03 48 39 d9 73 3c 0f 01 cb <89> 01 31 c0 0f 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 65 48 [ 2311.026651] RSP: 0018:ffff8880b321fe28 EFLAGS: 00050297 [ 2311.026662] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020000100 [ 2311.026686] RDX: 0000000000000058 RSI: ffffffff866de86b RDI: 0000000000000286 [ 2311.026695] RBP: 0000000000000000 R08: ffffffff8cd41898 R09: 0000000000000000 [ 2311.026703] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000004 [ 2311.026711] R13: 0000000000000005 R14: 0000000000000000 R15: dffffc0000000000 [ 2311.026733] ? __sys_socketpair+0xfb/0x570 [ 2311.026748] __sys_socketpair+0x107/0x570 [ 2311.026765] ? __ia32_sys_socket+0xb0/0xb0 [ 2311.026781] ? ksys_write+0x1c8/0x2a0 [ 2311.026799] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2311.026815] __x64_sys_socketpair+0x93/0xf0 [ 2311.026830] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2311.026839] do_syscall_64+0xf9/0x620 [ 2311.026852] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2311.026863] RIP: 0033:0x7fcd11dfc0c9 [ 2311.026876] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2311.026883] RSP: 002b:00007fcd1036e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 2311.026897] RAX: ffffffffffffffda RBX: 00007fcd11f1bf80 RCX: 00007fcd11dfc0c9 23:35:57 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x3}]}}) 23:35:57 executing program 3: socketpair(0x23, 0x0, 0x7fffffff, &(0x7f0000000100)) (fail_nth: 3) 23:35:57 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r2, r1, 0x0, r1}, 0x10) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000080)=@multiplanar_overlay={0x26c5, 0x0, 0x4, 0x8, 0x0, {0x77359400}, {0x5, 0x2, 0x1f, 0x81, 0x20, 0x12, "9e268860"}, 0x3, 0x3, {&(0x7f0000000000)=[{0xf6dd5d2, 0xf5, {0x9}, 0x8}, {0x4, 0x10001, {0x9}, 0x4}]}, 0xff}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:57 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:57 executing program 2: socketpair(0x23, 0x0, 0x0, &(0x7f0000000100)) 23:35:57 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0x4020940d, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) [ 2311.026905] RDX: 000000007fffffff RSI: 0000000000000000 RDI: 0000000000000023 [ 2311.026913] RBP: 00007fcd1036e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2311.026922] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 2311.026930] R13: 00007ffda60a98df R14: 00007fcd1036e300 R15: 0000000000022000 23:35:57 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc0045878, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) [ 2311.527328] FAULT_INJECTION: forcing a failure. [ 2311.527328] name failslab, interval 1, probability 0, space 0, times 0 [ 2311.577749] CPU: 1 PID: 4418 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 2311.585580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2311.594959] Call Trace: [ 2311.594987] dump_stack+0x1fc/0x2ef [ 2311.595013] should_fail.cold+0xa/0xf [ 2311.595037] ? setup_fault_attr+0x200/0x200 [ 2311.595053] ? lock_acquire+0x170/0x3c0 [ 2311.595073] __should_failslab+0x115/0x180 [ 2311.595090] should_failslab+0x5/0x10 [ 2311.595104] kmem_cache_alloc+0x277/0x370 [ 2311.595123] __anon_vma_prepare+0x5d/0x560 [ 2311.595143] do_huge_pmd_anonymous_page+0x106e/0x1e60 [ 2311.595157] ? lock_downgrade+0x720/0x720 [ 2311.595175] ? lock_acquire+0x170/0x3c0 [ 2311.643031] ? __pmd_alloc+0x147/0x440 [ 2311.646945] ? prep_transhuge_page+0xa0/0xa0 [ 2311.651362] ? do_raw_spin_unlock+0x171/0x230 [ 2311.655867] ? _raw_spin_unlock+0x29/0x40 [ 2311.660027] __handle_mm_fault+0x289c/0x41c0 [ 2311.664444] ? vm_insert_page+0x9c0/0x9c0 [ 2311.668598] ? __lock_acquire+0x6de/0x3ff0 [ 2311.672856] ? check_preemption_disabled+0x41/0x280 23:35:58 executing program 2: socketpair(0x23, 0x0, 0x0, &(0x7f0000000100)) 23:35:58 executing program 2: socketpair(0x23, 0x0, 0x0, &(0x7f0000000100)) 23:35:58 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x3}]}}) [ 2311.677885] handle_mm_fault+0x436/0xb10 [ 2311.681957] __do_page_fault+0x68e/0xd60 [ 2311.686030] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2311.691053] ? spurious_fault+0x840/0x840 [ 2311.695209] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2311.700071] page_fault+0x1e/0x30 [ 2311.703529] RIP: 0010:__put_user_4+0x1c/0x30 [ 2311.707938] Code: 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 c0 df 01 00 48 8b 9b 98 14 00 00 48 83 eb 03 48 39 d9 73 3c 0f 01 cb <89> 01 31 c0 0f 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 65 48 [ 2311.726841] RSP: 0018:ffff8880a2107e28 EFLAGS: 00050297 [ 2311.732211] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020000100 [ 2311.739492] RDX: 0000000000000058 RSI: ffffffff866de86b RDI: 0000000000000286 [ 2311.746769] RBP: 0000000000000000 R08: ffffffff8cd41898 R09: 0000000000000000 [ 2311.754063] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000004 [ 2311.754075] R13: 0000000000000005 R14: 0000000000000000 R15: dffffc0000000000 [ 2311.768623] ? __sys_socketpair+0xfb/0x570 [ 2311.772878] __sys_socketpair+0x107/0x570 23:35:58 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc0045878, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:35:58 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40049409, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:58 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @vbi={0xffffffff, 0x7, 0x20, 0x32315659, [0xb71a, 0x2], [0x200, 0x7], 0x2}}) [ 2311.777061] ? __ia32_sys_socket+0xb0/0xb0 [ 2311.777079] ? ksys_write+0x1c8/0x2a0 23:35:58 executing program 3: socketpair(0x23, 0x0, 0x7fffffff, &(0x7f0000000100)) (fail_nth: 4) [ 2311.777100] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2311.777118] __x64_sys_socketpair+0x93/0xf0 [ 2311.777135] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2311.777151] do_syscall_64+0xf9/0x620 [ 2311.777169] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2311.777181] RIP: 0033:0x7fcd11dfc0c9 [ 2311.777195] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2311.777204] RSP: 002b:00007fcd1036e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 2311.777217] RAX: ffffffffffffffda RBX: 00007fcd11f1bf80 RCX: 00007fcd11dfc0c9 [ 2311.777231] RDX: 000000007fffffff RSI: 0000000000000000 RDI: 0000000000000023 [ 2311.777239] RBP: 00007fcd1036e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2311.777247] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 2311.777255] R13: 00007ffda60a98df R14: 00007fcd1036e300 R15: 0000000000022000 [ 2311.892451] FAULT_INJECTION: forcing a failure. [ 2311.892451] name failslab, interval 1, probability 0, space 0, times 0 [ 2311.892470] CPU: 1 PID: 4453 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 2311.892478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2311.892484] Call Trace: [ 2311.892502] dump_stack+0x1fc/0x2ef [ 2311.892523] should_fail.cold+0xa/0xf [ 2311.892541] ? setup_fault_attr+0x200/0x200 [ 2311.892556] ? lock_acquire+0x170/0x3c0 [ 2311.892575] __should_failslab+0x115/0x180 [ 2311.892591] should_failslab+0x5/0x10 [ 2311.892605] kmem_cache_alloc+0x277/0x370 [ 2311.892620] __anon_vma_prepare+0x2d3/0x560 [ 2311.892639] do_huge_pmd_anonymous_page+0x106e/0x1e60 [ 2311.892654] ? lock_downgrade+0x720/0x720 [ 2311.892667] ? lock_acquire+0x170/0x3c0 [ 2311.892680] ? __pmd_alloc+0x147/0x440 [ 2311.892696] ? prep_transhuge_page+0xa0/0xa0 [ 2311.892708] ? do_raw_spin_unlock+0x171/0x230 [ 2311.892721] ? _raw_spin_unlock+0x29/0x40 [ 2311.892737] __handle_mm_fault+0x289c/0x41c0 [ 2311.892755] ? vm_insert_page+0x9c0/0x9c0 [ 2311.892779] ? __lock_acquire+0x6de/0x3ff0 [ 2311.892810] ? check_preemption_disabled+0x41/0x280 [ 2311.892830] handle_mm_fault+0x436/0xb10 [ 2311.892851] __do_page_fault+0x68e/0xd60 [ 2311.892871] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2311.892886] ? spurious_fault+0x840/0x840 [ 2311.892900] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2311.892920] page_fault+0x1e/0x30 [ 2311.892932] RIP: 0010:__put_user_4+0x1c/0x30 [ 2311.892944] Code: 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 c0 df 01 00 48 8b 9b 98 14 00 00 48 83 eb 03 48 39 d9 73 3c 0f 01 cb <89> 01 31 c0 0f 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 65 48 [ 2311.892952] RSP: 0018:ffff88809f37fe28 EFLAGS: 00050297 [ 2311.892963] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020000100 [ 2311.892971] RDX: 0000000000000058 RSI: ffffffff866de86b RDI: 0000000000000286 [ 2311.892978] RBP: 0000000000000000 R08: ffffffff8cd41898 R09: 0000000000000000 [ 2311.892986] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000004 [ 2311.892993] R13: 0000000000000005 R14: 0000000000000000 R15: dffffc0000000000 [ 2311.893013] ? __sys_socketpair+0xfb/0x570 [ 2311.893029] __sys_socketpair+0x107/0x570 [ 2311.893044] ? __ia32_sys_socket+0xb0/0xb0 [ 2311.893061] ? ksys_write+0x1c8/0x2a0 [ 2311.893080] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2311.893097] __x64_sys_socketpair+0x93/0xf0 [ 2311.893112] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2311.893124] do_syscall_64+0xf9/0x620 [ 2311.893140] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2311.893149] RIP: 0033:0x7fcd11dfc0c9 23:35:58 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r2, r1, 0x0, r1}, 0x10) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000080)=@multiplanar_overlay={0x26c5, 0x0, 0x4, 0x8, 0x0, {0x77359400}, {0x5, 0x2, 0x1f, 0x81, 0x20, 0x12, "9e268860"}, 0x3, 0x3, {&(0x7f0000000000)=[{0xf6dd5d2, 0xf5, {0x9}, 0x8}, {0x4, 0x10001, {0x9}, 0x4}]}, 0xff}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r2, r1, 0x0, r1}, 0x10) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000080)=@multiplanar_overlay={0x26c5, 0x0, 0x4, 0x8, 0x0, {0x77359400}, {0x5, 0x2, 0x1f, 0x81, 0x20, 0x12, "9e268860"}, 0x3, 0x3, {&(0x7f0000000000)=[{0xf6dd5d2, 0xf5, {0x9}, 0x8}, {0x4, 0x10001, {0x9}, 0x4}]}, 0xff}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:35:58 executing program 2: socketpair(0x23, 0x0, 0x7fffffff, 0x0) 23:35:58 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x4020940d, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:58 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @vbi={0xffffffff, 0x7, 0x20, 0x32315659, [0xb71a, 0x2], [0x200, 0x7], 0x2}}) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @vbi={0xffffffff, 0x7, 0x20, 0x32315659, [0xb71a, 0x2], [0x200, 0x7], 0x2}}) (async) 23:35:58 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc0189436, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:35:58 executing program 3: socketpair(0x23, 0x0, 0x7fffffff, &(0x7f0000000100)) (fail_nth: 5) [ 2311.893161] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2311.893168] RSP: 002b:00007fcd1036e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 2311.893180] RAX: ffffffffffffffda RBX: 00007fcd11f1bf80 RCX: 00007fcd11dfc0c9 [ 2311.893187] RDX: 000000007fffffff RSI: 0000000000000000 RDI: 0000000000000023 [ 2311.893195] RBP: 00007fcd1036e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2311.893203] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 2311.893211] R13: 00007ffda60a98df R14: 00007fcd1036e300 R15: 0000000000022000 [ 2312.363078] FAULT_INJECTION: forcing a failure. [ 2312.363078] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2312.382912] CPU: 1 PID: 4464 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 2312.390751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2312.400111] Call Trace: [ 2312.402719] dump_stack+0x1fc/0x2ef [ 2312.406364] should_fail.cold+0xa/0xf 23:35:58 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r2, r1, 0x0, r1}, 0x10) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000080)=@multiplanar_overlay={0x26c5, 0x0, 0x4, 0x8, 0x0, {0x77359400}, {0x5, 0x2, 0x1f, 0x81, 0x20, 0x12, "9e268860"}, 0x3, 0x3, {&(0x7f0000000000)=[{0xf6dd5d2, 0xf5, {0x9}, 0x8}, {0x4, 0x10001, {0x9}, 0x4}]}, 0xff}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r2, r1, 0x0, r1}, 0x10) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000080)=@multiplanar_overlay={0x26c5, 0x0, 0x4, 0x8, 0x0, {0x77359400}, {0x5, 0x2, 0x1f, 0x81, 0x20, 0x12, "9e268860"}, 0x3, 0x3, {&(0x7f0000000000)=[{0xf6dd5d2, 0xf5, {0x9}, 0x8}, {0x4, 0x10001, {0x9}, 0x4}]}, 0xff}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:35:58 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0045878, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:58 executing program 2: socketpair(0x23, 0x0, 0x7fffffff, 0x0) [ 2312.410178] ? setup_fault_attr+0x200/0x200 [ 2312.414518] __alloc_pages_nodemask+0x239/0x2890 [ 2312.419285] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2312.424658] ? mark_held_locks+0xf0/0xf0 [ 2312.428742] ? mark_held_locks+0xf0/0xf0 [ 2312.432822] ? __lock_acquire+0x6de/0x3ff0 [ 2312.437062] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2312.441922] ? __anon_vma_prepare+0x2a6/0x560 23:35:58 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc0205647, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:35:58 executing program 2: socketpair(0x23, 0x0, 0x7fffffff, 0x0) [ 2312.446443] ? lock_downgrade+0x720/0x720 23:35:58 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc0205649, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:35:58 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @vbi={0xffffffff, 0x7, 0x20, 0x32315659, [0xb71a, 0x2], [0x200, 0x7], 0x2}}) 23:35:58 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r2, r1, 0x0, r1}, 0x10) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000080)=@multiplanar_overlay={0x26c5, 0x0, 0x4, 0x8, 0x0, {0x77359400}, {0x5, 0x2, 0x1f, 0x81, 0x20, 0x12, "9e268860"}, 0x3, 0x3, {&(0x7f0000000000)=[{0xf6dd5d2, 0xf5, {0x9}, 0x8}, {0x4, 0x10001, {0x9}, 0x4}]}, 0xff}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) [ 2312.446457] ? lock_downgrade+0x720/0x720 23:35:58 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0045878, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) [ 2312.446472] ? __anon_vma_prepare+0xc2/0x560 23:35:58 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc020660b, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:35:59 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000280)={0x2, @vbi={0x8, 0x7, 0x7, 0x32315258, [0x10001, 0x1], [0x80000000, 0x6e], 0x108}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000140)={0x2, @win={{0x0, 0x3ff, 0x8, 0xffffff80}, 0x2, 0x7, &(0x7f0000000080)={{0x6, 0x275, 0x4, 0x4}, &(0x7f0000000040)={{0x8, 0x129, 0xaef, 0x3}, &(0x7f0000000000)={{0xfffffff8, 0x0, 0x5}}}}, 0x7, &(0x7f00000000c0)="e5f81cf155c1a31c3d8c83cd6e8d113dbd0f4ed44e9c1ea754ec4e5264", 0x8}}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) [ 2312.446493] alloc_pages_vma+0x461/0x780 [ 2312.446513] do_huge_pmd_anonymous_page+0x3b4/0x1e60 [ 2312.446548] ? lock_downgrade+0x720/0x720 [ 2312.446561] ? lock_acquire+0x170/0x3c0 [ 2312.446574] ? __pmd_alloc+0x147/0x440 [ 2312.446589] ? prep_transhuge_page+0xa0/0xa0 [ 2312.446602] ? do_raw_spin_unlock+0x171/0x230 [ 2312.446618] ? _raw_spin_unlock+0x29/0x40 [ 2312.446636] __handle_mm_fault+0x289c/0x41c0 23:35:59 executing program 3: socketpair(0x23, 0x0, 0x7fffffff, &(0x7f0000000100)) (fail_nth: 6) [ 2312.446655] ? vm_insert_page+0x9c0/0x9c0 [ 2312.446670] ? __lock_acquire+0x6de/0x3ff0 [ 2312.446697] ? check_preemption_disabled+0x41/0x280 [ 2312.446717] handle_mm_fault+0x436/0xb10 [ 2312.446737] __do_page_fault+0x68e/0xd60 [ 2312.446758] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2312.446773] ? spurious_fault+0x840/0x840 [ 2312.446787] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2312.446807] page_fault+0x1e/0x30 [ 2312.446820] RIP: 0010:__put_user_4+0x1c/0x30 [ 2312.446834] Code: 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 c0 df 01 00 48 8b 9b 98 14 00 00 48 83 eb 03 48 39 d9 73 3c 0f 01 cb <89> 01 31 c0 0f 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 65 48 [ 2312.446841] RSP: 0018:ffff8880a2107e28 EFLAGS: 00050297 [ 2312.446852] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020000100 [ 2312.446860] RDX: 0000000000000058 RSI: ffffffff866de86b RDI: 0000000000000286 [ 2312.446868] RBP: 0000000000000000 R08: ffffffff8cd41898 R09: 0000000000000000 [ 2312.446875] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000004 [ 2312.446883] R13: 0000000000000005 R14: 0000000000000000 R15: dffffc0000000000 [ 2312.446905] ? __sys_socketpair+0xfb/0x570 [ 2312.446923] __sys_socketpair+0x107/0x570 [ 2312.446938] ? __ia32_sys_socket+0xb0/0xb0 [ 2312.446952] ? ksys_write+0x1c8/0x2a0 [ 2312.446970] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2312.446987] __x64_sys_socketpair+0x93/0xf0 [ 2312.447002] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2312.447015] do_syscall_64+0xf9/0x620 [ 2312.447033] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2312.447042] RIP: 0033:0x7fcd11dfc0c9 [ 2312.447055] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2312.447062] RSP: 002b:00007fcd1036e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 2312.447074] RAX: ffffffffffffffda RBX: 00007fcd11f1bf80 RCX: 00007fcd11dfc0c9 [ 2312.447081] RDX: 000000007fffffff RSI: 0000000000000000 RDI: 0000000000000023 [ 2312.447088] RBP: 00007fcd1036e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2312.447095] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 2312.447103] R13: 00007ffda60a98df R14: 00007fcd1036e300 R15: 0000000000022000 [ 2312.709767] FAULT_INJECTION: forcing a failure. [ 2312.709767] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2312.709786] CPU: 1 PID: 4525 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 2312.709795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2312.709799] Call Trace: [ 2312.709819] dump_stack+0x1fc/0x2ef [ 2312.709839] should_fail.cold+0xa/0xf [ 2312.709855] ? lock_acquire+0x170/0x3c0 [ 2312.709873] ? setup_fault_attr+0x200/0x200 [ 2312.709899] __alloc_pages_nodemask+0x239/0x2890 [ 2312.709918] ? get_mem_cgroup_from_mm+0x135/0x440 [ 2312.709943] ? check_preemption_disabled+0x41/0x280 [ 2312.709958] ? mem_cgroup_oom_trylock+0x220/0x220 [ 2312.709975] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2312.709989] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2312.710006] ? mem_cgroup_from_task+0x120/0x120 [ 2312.710030] ? lock_downgrade+0x720/0x720 [ 2312.710045] ? check_preemption_disabled+0x41/0x280 [ 2312.710062] ? check_preemption_disabled+0x41/0x280 [ 2312.710086] alloc_pages_current+0x193/0x2a0 [ 2312.710113] pte_alloc_one+0x16/0x190 [ 2312.710129] do_huge_pmd_anonymous_page+0xb76/0x1e60 [ 2312.710147] ? lock_downgrade+0x720/0x720 [ 2312.710161] ? lock_acquire+0x170/0x3c0 [ 2312.710175] ? __pmd_alloc+0x147/0x440 [ 2312.710191] ? prep_transhuge_page+0xa0/0xa0 [ 2312.710204] ? do_raw_spin_unlock+0x171/0x230 [ 2312.710220] ? _raw_spin_unlock+0x29/0x40 [ 2312.710238] __handle_mm_fault+0x289c/0x41c0 [ 2312.710257] ? vm_insert_page+0x9c0/0x9c0 [ 2312.710270] ? __lock_acquire+0x6de/0x3ff0 [ 2312.710296] ? check_preemption_disabled+0x41/0x280 [ 2312.710316] handle_mm_fault+0x436/0xb10 [ 2312.710335] __do_page_fault+0x68e/0xd60 [ 2312.710358] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2312.710375] ? spurious_fault+0x840/0x840 [ 2312.710391] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2312.710412] page_fault+0x1e/0x30 [ 2312.710426] RIP: 0010:__put_user_4+0x1c/0x30 [ 2312.710439] Code: 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 c0 df 01 00 48 8b 9b 98 14 00 00 48 83 eb 03 48 39 d9 73 3c 0f 01 cb <89> 01 31 c0 0f 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 65 48 [ 2312.710446] RSP: 0018:ffff88807922fe28 EFLAGS: 00050297 [ 2312.710458] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020000100 [ 2312.710467] RDX: 0000000000000058 RSI: ffffffff866de86b RDI: 0000000000000286 [ 2312.710475] RBP: 0000000000000000 R08: ffffffff8cd41898 R09: 0000000000000000 [ 2312.710482] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000004 [ 2312.710490] R13: 0000000000000005 R14: 0000000000000000 R15: dffffc0000000000 [ 2312.710511] ? __sys_socketpair+0xfb/0x570 [ 2312.710528] __sys_socketpair+0x107/0x570 [ 2312.710542] ? __ia32_sys_socket+0xb0/0xb0 [ 2312.710557] ? ksys_write+0x1c8/0x2a0 [ 2312.710577] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2312.710595] __x64_sys_socketpair+0x93/0xf0 [ 2312.710610] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2312.710624] do_syscall_64+0xf9/0x620 [ 2312.710642] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2312.710653] RIP: 0033:0x7fcd11dfc0c9 [ 2312.710666] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 23:35:59 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x5, 0x1, 0x3, 0x0, 0xff}) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000003c0)={0x3, @win={{}, 0x0, 0x0, &(0x7f00000000c0)={{0x0, 0xde}}, 0x0, &(0x7f00000002c0)="9934e284df0e187efb6dc96b72dc9a82477b773e5fec2d915e5a8a1b99232cd40bd59dc7a2d6cf188f2b23b14765223c8bf215fbe8ffc80f8aa502a2180a6ce14d65057693272ec0b08420bea6126b80f0ba5d3acbb45abd6484bf62eed6ab8b48534e2afa7bc83c50d06a1c953330d9eacf670cd9e0c97349b6509e82ae70cca1a57a8a04024ccc2c5b91f398a3da5e42e1f3ed4a5dc41a26d716440a47b956d18056bbd893e5d117097ff46c259588dd707a582fa7d1c40fec21a4b3d4b5a01f8ac4b663b4ada5bb444ef1d3", 0x1}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x9098, 0x2, 0x2, "475d003fe11ed59bb805dfd0f1c62f7200000000220000200000000000001de0", 0x32344d59}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000004c0)=@multiplanar_userptr={0x1, 0x1, 0x4, 0x40, 0x5, {}, {0x2, 0x5, 0x80, 0x1b, 0x40, 0x1e, "0a1045e5"}, 0x20, 0x2, {&(0x7f0000000200)=[{0x1, 0xce4, {&(0x7f0000000140)}, 0x3f}, {0x63, 0x8, {&(0x7f00000001c0)}, 0x2}]}, 0x5}) 23:35:59 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0145608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:59 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc0285628, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:35:59 executing program 3: socketpair(0x23, 0x0, 0x7fffffff, &(0x7f0000000100)) (fail_nth: 7) 23:35:59 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:59 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000280)={0x2, @vbi={0x8, 0x7, 0x7, 0x32315258, [0x10001, 0x1], [0x80000000, 0x6e], 0x108}}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000140)={0x2, @win={{0x0, 0x3ff, 0x8, 0xffffff80}, 0x2, 0x7, &(0x7f0000000080)={{0x6, 0x275, 0x4, 0x4}, &(0x7f0000000040)={{0x8, 0x129, 0xaef, 0x3}, &(0x7f0000000000)={{0xfffffff8, 0x0, 0x5}}}}, 0x7, &(0x7f00000000c0)="e5f81cf155c1a31c3d8c83cd6e8d113dbd0f4ed44e9c1ea754ec4e5264", 0x8}}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) [ 2312.710674] RSP: 002b:00007fcd1036e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 2312.710686] RAX: ffffffffffffffda RBX: 00007fcd11f1bf80 RCX: 00007fcd11dfc0c9 [ 2312.710694] RDX: 000000007fffffff RSI: 0000000000000000 RDI: 0000000000000023 [ 2312.710702] RBP: 00007fcd1036e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2312.710710] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 2312.710719] R13: 00007ffda60a98df R14: 00007fcd1036e300 R15: 0000000000022000 23:35:59 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc0285629, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:35:59 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:59 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:59 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000280)={0x2, @vbi={0x8, 0x7, 0x7, 0x32315258, [0x10001, 0x1], [0x80000000, 0x6e], 0x108}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000140)={0x2, @win={{0x0, 0x3ff, 0x8, 0xffffff80}, 0x2, 0x7, &(0x7f0000000080)={{0x6, 0x275, 0x4, 0x4}, &(0x7f0000000040)={{0x8, 0x129, 0xaef, 0x3}, &(0x7f0000000000)={{0xfffffff8, 0x0, 0x5}}}}, 0x7, &(0x7f00000000c0)="e5f81cf155c1a31c3d8c83cd6e8d113dbd0f4ed44e9c1ea754ec4e5264", 0x8}}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000280)={0x2, @vbi={0x8, 0x7, 0x7, 0x32315258, [0x10001, 0x1], [0x80000000, 0x6e], 0x108}}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000140)={0x2, @win={{0x0, 0x3ff, 0x8, 0xffffff80}, 0x2, 0x7, &(0x7f0000000080)={{0x6, 0x275, 0x4, 0x4}, &(0x7f0000000040)={{0x8, 0x129, 0xaef, 0x3}, &(0x7f0000000000)={{0xfffffff8, 0x0, 0x5}}}}, 0x7, &(0x7f00000000c0)="e5f81cf155c1a31c3d8c83cd6e8d113dbd0f4ed44e9c1ea754ec4e5264", 0x8}}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) 23:35:59 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c5667, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) [ 2313.343469] FAULT_INJECTION: forcing a failure. [ 2313.343469] name failslab, interval 1, probability 0, space 0, times 0 23:35:59 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) [ 2313.424043] CPU: 0 PID: 4536 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 2313.431873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2313.441237] Call Trace: [ 2313.443840] dump_stack+0x1fc/0x2ef [ 2313.447487] should_fail.cold+0xa/0xf [ 2313.451300] ? setup_fault_attr+0x200/0x200 [ 2313.455638] ? lock_acquire+0x170/0x3c0 [ 2313.459627] __should_failslab+0x115/0x180 [ 2313.463878] should_failslab+0x5/0x10 [ 2313.467691] kmem_cache_alloc+0x277/0x370 [ 2313.471860] ptlock_alloc+0x1d/0x70 [ 2313.475502] pte_alloc_one+0x68/0x190 [ 2313.479323] do_huge_pmd_anonymous_page+0xb76/0x1e60 [ 2313.484440] ? lock_downgrade+0x720/0x720 [ 2313.488602] ? lock_acquire+0x170/0x3c0 [ 2313.492593] ? __pmd_alloc+0x147/0x440 [ 2313.496506] ? prep_transhuge_page+0xa0/0xa0 [ 2313.500932] ? do_raw_spin_unlock+0x171/0x230 [ 2313.505443] ? _raw_spin_unlock+0x29/0x40 [ 2313.509618] __handle_mm_fault+0x289c/0x41c0 [ 2313.514163] ? vm_insert_page+0x9c0/0x9c0 [ 2313.518333] ? __lock_acquire+0x6de/0x3ff0 23:35:59 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x5, 0x1, 0x3, 0x0, 0xff}) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000003c0)={0x3, @win={{}, 0x0, 0x0, &(0x7f00000000c0)={{0x0, 0xde}}, 0x0, &(0x7f00000002c0)="9934e284df0e187efb6dc96b72dc9a82477b773e5fec2d915e5a8a1b99232cd40bd59dc7a2d6cf188f2b23b14765223c8bf215fbe8ffc80f8aa502a2180a6ce14d65057693272ec0b08420bea6126b80f0ba5d3acbb45abd6484bf62eed6ab8b48534e2afa7bc83c50d06a1c953330d9eacf670cd9e0c97349b6509e82ae70cca1a57a8a04024ccc2c5b91f398a3da5e42e1f3ed4a5dc41a26d716440a47b956d18056bbd893e5d117097ff46c259588dd707a582fa7d1c40fec21a4b3d4b5a01f8ac4b663b4ada5bb444ef1d3", 0x1}}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x9098, 0x2, 0x2, "475d003fe11ed59bb805dfd0f1c62f7200000000220000200000000000001de0", 0x32344d59}) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000004c0)=@multiplanar_userptr={0x1, 0x1, 0x4, 0x40, 0x5, {}, {0x2, 0x5, 0x80, 0x1b, 0x40, 0x1e, "0a1045e5"}, 0x20, 0x2, {&(0x7f0000000200)=[{0x1, 0xce4, {&(0x7f0000000140)}, 0x3f}, {0x63, 0x8, {&(0x7f00000001c0)}, 0x2}]}, 0x5}) 23:35:59 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc0585609, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:35:59 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc058560f, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) [ 2313.522605] ? check_preemption_disabled+0x41/0x280 [ 2313.527651] handle_mm_fault+0x436/0xb10 [ 2313.531745] __do_page_fault+0x68e/0xd60 [ 2313.535827] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2313.540867] ? spurious_fault+0x840/0x840 [ 2313.545037] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2313.549906] page_fault+0x1e/0x30 [ 2313.553381] RIP: 0010:__put_user_4+0x1c/0x30 [ 2313.557805] Code: 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 c0 df 01 00 48 8b 9b 98 14 00 00 48 83 eb 03 48 39 d9 73 3c 0f 01 cb <89> 01 31 c0 0f 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 65 48 [ 2313.576714] RSP: 0018:ffff888098a57e28 EFLAGS: 00050297 [ 2313.582085] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020000100 [ 2313.589365] RDX: 0000000000000058 RSI: ffffffff866de86b RDI: 0000000000000286 [ 2313.596644] RBP: 0000000000000000 R08: ffffffff8cd41898 R09: 0000000000000000 [ 2313.603926] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000004 [ 2313.611203] R13: 0000000000000005 R14: 0000000000000000 R15: dffffc0000000000 [ 2313.618502] ? __sys_socketpair+0xfb/0x570 [ 2313.622752] __sys_socketpair+0x107/0x570 [ 2313.626930] ? __ia32_sys_socket+0xb0/0xb0 [ 2313.631192] ? ksys_write+0x1c8/0x2a0 [ 2313.631212] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2313.640363] __x64_sys_socketpair+0x93/0xf0 [ 2313.644699] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2313.649297] do_syscall_64+0xf9/0x620 [ 2313.653113] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2313.658309] RIP: 0033:0x7fcd11dfc0c9 23:36:00 executing program 3: socketpair(0x23, 0x0, 0x7fffffff, &(0x7f0000000100)) (fail_nth: 8) 23:36:00 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc0585611, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:36:00 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async, rerun: 32) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async, rerun: 32) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x5, 0x1, 0x3, 0x0, 0xff}) (async, rerun: 32) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000003c0)={0x3, @win={{}, 0x0, 0x0, &(0x7f00000000c0)={{0x0, 0xde}}, 0x0, &(0x7f00000002c0)="9934e284df0e187efb6dc96b72dc9a82477b773e5fec2d915e5a8a1b99232cd40bd59dc7a2d6cf188f2b23b14765223c8bf215fbe8ffc80f8aa502a2180a6ce14d65057693272ec0b08420bea6126b80f0ba5d3acbb45abd6484bf62eed6ab8b48534e2afa7bc83c50d06a1c953330d9eacf670cd9e0c97349b6509e82ae70cca1a57a8a04024ccc2c5b91f398a3da5e42e1f3ed4a5dc41a26d716440a47b956d18056bbd893e5d117097ff46c259588dd707a582fa7d1c40fec21a4b3d4b5a01f8ac4b663b4ada5bb444ef1d3", 0x1}}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x9098, 0x2, 0x2, "475d003fe11ed59bb805dfd0f1c62f7200000000220000200000000000001de0", 0x32344d59}) (async, rerun: 64) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000004c0)=@multiplanar_userptr={0x1, 0x1, 0x4, 0x40, 0x5, {}, {0x2, 0x5, 0x80, 0x1b, 0x40, 0x1e, "0a1045e5"}, 0x20, 0x2, {&(0x7f0000000200)=[{0x1, 0xce4, {&(0x7f0000000140)}, 0x3f}, {0x63, 0x8, {&(0x7f00000001c0)}, 0x2}]}, 0x5}) (rerun: 64) 23:36:00 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:00 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205649, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:00 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x541b, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) [ 2313.662030] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2313.680929] RSP: 002b:00007fcd1036e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 2313.688623] RAX: ffffffffffffffda RBX: 00007fcd11f1bf80 RCX: 00007fcd11dfc0c9 [ 2313.695877] RDX: 000000007fffffff RSI: 0000000000000000 RDI: 0000000000000023 [ 2313.703131] RBP: 00007fcd1036e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2313.710381] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 2313.717632] R13: 00007ffda60a98df R14: 00007fcd1036e300 R15: 0000000000022000 23:36:00 executing program 2: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:00 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc020660b, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:00 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000000)=@overlay={0x1000, 0x2, 0x4, 0xe000, 0x100, {0x0, 0xea60}, {0x5, 0xc, 0x80, 0x40, 0x7, 0x4, "75c925aa"}, 0x7fff, 0x3, {}, 0x5}) 23:36:00 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc058565d, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) [ 2313.837564] FAULT_INJECTION: forcing a failure. [ 2313.837564] name failslab, interval 1, probability 0, space 0, times 0 [ 2313.885392] CPU: 0 PID: 4599 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 2313.893220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2313.902583] Call Trace: [ 2313.905181] dump_stack+0x1fc/0x2ef [ 2313.908826] should_fail.cold+0xa/0xf [ 2313.912640] ? setup_fault_attr+0x200/0x200 [ 2313.916973] ? lock_acquire+0x170/0x3c0 [ 2313.920966] __should_failslab+0x115/0x180 [ 2313.925219] should_failslab+0x5/0x10 [ 2313.929027] kmem_cache_alloc+0x277/0x370 [ 2313.933187] ? sock_destroy_inode+0x60/0x60 [ 2313.937526] sock_alloc_inode+0x19/0x250 [ 2313.941602] ? sock_destroy_inode+0x60/0x60 [ 2313.945932] alloc_inode+0x5d/0x180 [ 2313.949568] new_inode_pseudo+0x14/0xe0 [ 2313.953558] sock_alloc+0x3c/0x260 [ 2313.957111] __sock_create+0xba/0x740 [ 2313.960926] __sys_socketpair+0x1be/0x570 [ 2313.965090] ? __ia32_sys_socket+0xb0/0xb0 [ 2313.969338] ? ksys_write+0x1c8/0x2a0 [ 2313.973154] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2313.978535] __x64_sys_socketpair+0x93/0xf0 23:36:00 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x20303159, 0x0, @stepwise}) [ 2313.982877] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2313.987471] do_syscall_64+0xf9/0x620 [ 2313.991282] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2313.996473] RIP: 0033:0x7fcd11dfc0c9 [ 2314.000204] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2314.019115] RSP: 002b:00007fcd1036e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 2314.026835] RAX: ffffffffffffffda RBX: 00007fcd11f1bf80 RCX: 00007fcd11dfc0c9 23:36:00 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000000)=@overlay={0x1000, 0x2, 0x4, 0xe000, 0x100, {0x0, 0xea60}, {0x5, 0xc, 0x80, 0x40, 0x7, 0x4, "75c925aa"}, 0x7fff, 0x3, {}, 0x5}) [ 2314.034117] RDX: 000000007fffffff RSI: 0000000000000000 RDI: 0000000000000023 [ 2314.041396] RBP: 00007fcd1036e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2314.048695] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 2314.055979] R13: 00007ffda60a98df R14: 00007fcd1036e300 R15: 0000000000022000 23:36:00 executing program 3: socketpair(0x23, 0x0, 0x7fffffff, &(0x7f0000000100)) (fail_nth: 9) 23:36:00 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x541b, 0x0) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:00 executing program 2: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:00 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0285628, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:00 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000000)=@overlay={0x1000, 0x2, 0x4, 0xe000, 0x100, {0x0, 0xea60}, {0x5, 0xc, 0x80, 0x40, 0x7, 0x4, "75c925aa"}, 0x7fff, 0x3, {}, 0x5}) 23:36:00 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x20323159, 0x0, @stepwise}) [ 2314.102934] socket: no more sockets 23:36:00 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) syz_open_dev$vim2m(&(0x7f0000000080), 0x80, 0x2) 23:36:00 executing program 2: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:00 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0285629, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:00 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x20363159, 0x0, @stepwise}) [ 2314.214056] FAULT_INJECTION: forcing a failure. [ 2314.214056] name failslab, interval 1, probability 0, space 0, times 0 [ 2314.252148] CPU: 0 PID: 4641 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 2314.259976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2314.269334] Call Trace: [ 2314.271943] dump_stack+0x1fc/0x2ef [ 2314.275594] should_fail.cold+0xa/0xf [ 2314.279415] ? setup_fault_attr+0x200/0x200 [ 2314.283750] ? lock_acquire+0x170/0x3c0 [ 2314.287741] __should_failslab+0x115/0x180 [ 2314.291994] should_failslab+0x5/0x10 [ 2314.295809] kmem_cache_alloc_trace+0x284/0x380 [ 2314.300494] ? kmem_cache_alloc+0x315/0x370 [ 2314.304835] sock_alloc_inode+0x5f/0x250 [ 2314.308909] ? sock_destroy_inode+0x60/0x60 [ 2314.313241] alloc_inode+0x5d/0x180 [ 2314.316891] new_inode_pseudo+0x14/0xe0 [ 2314.320881] sock_alloc+0x3c/0x260 [ 2314.324452] __sock_create+0xba/0x740 [ 2314.328274] __sys_socketpair+0x1be/0x570 [ 2314.332439] ? __ia32_sys_socket+0xb0/0xb0 [ 2314.336685] ? ksys_write+0x1c8/0x2a0 [ 2314.340505] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2314.345887] __x64_sys_socketpair+0x93/0xf0 [ 2314.350219] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2314.354811] do_syscall_64+0xf9/0x620 [ 2314.358628] entry_SYSCALL_64_after_hwframe+0x49/0xbe 23:36:00 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x30314142, 0x0, @stepwise}) 23:36:00 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) syz_open_dev$vim2m(&(0x7f0000000080), 0x80, 0x2) [ 2314.363824] RIP: 0033:0x7fcd11dfc0c9 [ 2314.367544] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2314.386453] RSP: 002b:00007fcd1036e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 2314.394171] RAX: ffffffffffffffda RBX: 00007fcd11f1bf80 RCX: 00007fcd11dfc0c9 [ 2314.401446] RDX: 000000007fffffff RSI: 0000000000000000 RDI: 0000000000000023 [ 2314.408721] RBP: 00007fcd1036e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2314.415997] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 2314.423272] R13: 00007ffda60a98df R14: 00007fcd1036e300 R15: 0000000000022000 23:36:00 executing program 3: socketpair(0x23, 0x0, 0x7fffffff, &(0x7f0000000100)) (fail_nth: 10) 23:36:00 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x541b, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) socket$inet_sctp(0x2, 0x1, 0x84) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x541b, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) 23:36:00 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:00 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405610, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:00 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) syz_open_dev$vim2m(&(0x7f0000000080), 0x80, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) (async) syz_open_dev$vim2m(&(0x7f0000000080), 0x80, 0x2) (async) 23:36:00 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x30314247, 0x0, @stepwise}) [ 2314.476269] socket: no more sockets 23:36:00 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405667, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:01 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="004080000000000300000f0047af001c006500087f2f907800000000ac1414aa0083066704807c00"]}) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:01 executing program 0: r0 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r0}, 0x8) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f00000001c0)) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) [ 2314.559586] FAULT_INJECTION: forcing a failure. [ 2314.559586] name failslab, interval 1, probability 0, space 0, times 0 23:36:01 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x30314742, 0x0, @stepwise}) [ 2314.618603] CPU: 0 PID: 4675 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 2314.626432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2314.635792] Call Trace: [ 2314.638453] dump_stack+0x1fc/0x2ef [ 2314.642104] should_fail.cold+0xa/0xf [ 2314.645920] ? setup_fault_attr+0x200/0x200 [ 2314.650251] ? lock_acquire+0x170/0x3c0 [ 2314.654237] __should_failslab+0x115/0x180 [ 2314.658516] should_failslab+0x5/0x10 [ 2314.662334] kmem_cache_alloc_trace+0x284/0x380 [ 2314.667023] __request_module+0x31e/0xb80 [ 2314.671183] ? pn_socket_create+0x47b/0x5a0 [ 2314.675508] ? free_modprobe_argv+0x90/0x90 [ 2314.679887] ? mark_held_locks+0xf0/0xf0 [ 2314.683957] ? should_fail+0x142/0x7b0 [ 2314.687854] ? fs_reclaim_release+0xd0/0x110 [ 2314.692272] ? setup_fault_attr+0x200/0x200 [ 2314.696612] ? calibrate_delay+0x6b4/0xc4a [ 2314.700861] ? cap_capable+0x1eb/0x250 [ 2314.704757] ? security_capable+0x8f/0xc0 [ 2314.708919] pn_socket_create+0x47b/0x5a0 [ 2314.713083] __sock_create+0x3d8/0x740 23:36:01 executing program 0: r0 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r0}, 0x8) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f00000001c0)) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r0}, 0x8) (async) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f00000001c0)) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:36:01 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x30314752, 0x0, @stepwise}) [ 2314.716985] __sys_socketpair+0x1be/0x570 [ 2314.721137] ? __ia32_sys_socket+0xb0/0xb0 [ 2314.725380] ? ksys_write+0x1c8/0x2a0 [ 2314.729202] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2314.734582] __x64_sys_socketpair+0x93/0xf0 [ 2314.738920] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2314.743520] do_syscall_64+0xf9/0x620 [ 2314.747341] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2314.752552] RIP: 0033:0x7fcd11dfc0c9 [ 2314.756271] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2314.775183] RSP: 002b:00007fcd1036e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 2314.782914] RAX: ffffffffffffffda RBX: 00007fcd11f1bf80 RCX: 00007fcd11dfc0c9 [ 2314.790195] RDX: 000000007fffffff RSI: 0000000000000000 RDI: 0000000000000023 [ 2314.797480] RBP: 00007fcd1036e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2314.804765] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000002 [ 2314.812045] R13: 00007ffda60a98df R14: 00007fcd1036e300 R15: 0000000000022000 23:36:01 executing program 3: socketpair(0x23, 0x0, 0x7fffffff, &(0x7f0000000100)) (fail_nth: 11) 23:36:01 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31324d4e, 0x0, @stepwise}) 23:36:01 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:01 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0585609, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:01 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="004080000000000300000f0047af001c006500087f2f907800000000ac1414aa0083066704807c00"]}) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:01 executing program 0: r0 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r0}, 0x8) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f00000001c0)) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:01 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31324d59, 0x0, @stepwise}) 23:36:01 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:01 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) [ 2314.934020] FAULT_INJECTION: forcing a failure. [ 2314.934020] name failslab, interval 1, probability 0, space 0, times 0 23:36:01 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x721181, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000040)=""/46) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:01 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) [ 2314.997272] CPU: 0 PID: 4712 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 2315.005105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2315.014471] Call Trace: [ 2315.017072] dump_stack+0x1fc/0x2ef [ 2315.020720] should_fail.cold+0xa/0xf [ 2315.024534] ? setup_fault_attr+0x200/0x200 [ 2315.028868] ? lock_acquire+0x170/0x3c0 [ 2315.032859] __should_failslab+0x115/0x180 [ 2315.037108] should_failslab+0x5/0x10 [ 2315.040918] __kmalloc_track_caller+0x2a6/0x3c0 23:36:01 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x721181, 0x0) (rerun: 64) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000040)=""/46) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) [ 2315.045593] ? __request_module+0x33c/0xb80 [ 2315.049925] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2315.054956] kstrdup+0x36/0x70 [ 2315.058156] __request_module+0x33c/0xb80 [ 2315.062311] ? pn_socket_create+0x47b/0x5a0 [ 2315.066642] ? free_modprobe_argv+0x90/0x90 [ 2315.070977] ? mark_held_locks+0xf0/0xf0 [ 2315.075042] ? should_fail+0x142/0x7b0 [ 2315.078931] ? fs_reclaim_release+0xd0/0x110 [ 2315.083348] ? setup_fault_attr+0x200/0x200 [ 2315.087677] ? calibrate_delay+0x6b4/0xc4a [ 2315.091925] ? cap_capable+0x1eb/0x250 [ 2315.095833] ? security_capable+0x8f/0xc0 [ 2315.100000] pn_socket_create+0x47b/0x5a0 [ 2315.104167] __sock_create+0x3d8/0x740 [ 2315.108070] __sys_socketpair+0x1be/0x570 [ 2315.112226] ? __ia32_sys_socket+0xb0/0xb0 [ 2315.116475] ? ksys_write+0x1c8/0x2a0 [ 2315.120284] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2315.125668] __x64_sys_socketpair+0x93/0xf0 [ 2315.129999] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2315.134587] do_syscall_64+0xf9/0x620 [ 2315.138399] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2315.143596] RIP: 0033:0x7fcd11dfc0c9 [ 2315.147313] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2315.166221] RSP: 002b:00007fcd1036e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 2315.173960] RAX: ffffffffffffffda RBX: 00007fcd11f1bf80 RCX: 00007fcd11dfc0c9 [ 2315.181239] RDX: 000000007fffffff RSI: 0000000000000000 RDI: 0000000000000023 [ 2315.188520] RBP: 00007fcd1036e1d0 R08: 0000000000000000 R09: 0000000000000000 23:36:01 executing program 3: socketpair(0x23, 0x0, 0x7fffffff, &(0x7f0000000100)) (fail_nth: 12) 23:36:01 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:01 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0585611, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:01 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x3132564e, 0x0, @stepwise}) 23:36:01 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="004080000000000300000f0047af001c006500087f2f907800000000ac1414aa0083066704807c00"]}) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="004080000000000300000f0047af001c006500087f2f907800000000ac1414aa0083066704807c00"]}) (async) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) 23:36:01 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x721181, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000040)=""/46) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) [ 2315.195799] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000002 [ 2315.203082] R13: 00007ffda60a98df R14: 00007fcd1036e300 R15: 0000000000022000 23:36:01 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:01 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) [ 2315.291175] FAULT_INJECTION: forcing a failure. [ 2315.291175] name failslab, interval 1, probability 0, space 0, times 0 [ 2315.322406] CPU: 0 PID: 4746 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 2315.330237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2315.339601] Call Trace: [ 2315.342212] dump_stack+0x1fc/0x2ef 23:36:01 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x408040, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f0000000040)={{0x7fff, 0x3}, {0x100000000, 0x9}, 0x7}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) [ 2315.345864] should_fail.cold+0xa/0xf [ 2315.349681] ? setup_fault_attr+0x200/0x200 [ 2315.354014] ? lock_acquire+0x170/0x3c0 [ 2315.358007] __should_failslab+0x115/0x180 [ 2315.362260] should_failslab+0x5/0x10 [ 2315.366072] kmem_cache_alloc_trace+0x284/0x380 [ 2315.370748] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2315.375780] ? dec_ucount+0x200/0x200 [ 2315.379595] call_usermodehelper_setup+0x84/0x300 [ 2315.384457] __request_module+0x42e/0xb80 [ 2315.388623] ? pn_socket_create+0x47b/0x5a0 [ 2315.392964] ? free_modprobe_argv+0x90/0x90 [ 2315.397306] ? mark_held_locks+0xf0/0xf0 [ 2315.401380] ? should_fail+0x142/0x7b0 [ 2315.405277] ? fs_reclaim_release+0xd0/0x110 [ 2315.409707] ? setup_fault_attr+0x200/0x200 [ 2315.414044] ? calibrate_delay+0x6b4/0xc4a [ 2315.418296] ? cap_capable+0x1eb/0x250 [ 2315.422199] ? security_capable+0x8f/0xc0 [ 2315.426364] pn_socket_create+0x47b/0x5a0 [ 2315.430526] __sock_create+0x3d8/0x740 [ 2315.434429] __sys_socketpair+0x1be/0x570 [ 2315.438584] ? __ia32_sys_socket+0xb0/0xb0 [ 2315.442829] ? ksys_write+0x1c8/0x2a0 23:36:01 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x408040, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f0000000040)={{0x7fff, 0x3}, {0x100000000, 0x9}, 0x7}) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:01 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31364d4e, 0x0, @stepwise}) [ 2315.446649] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2315.452026] __x64_sys_socketpair+0x93/0xf0 [ 2315.456365] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2315.460955] do_syscall_64+0xf9/0x620 [ 2315.464773] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2315.469967] RIP: 0033:0x7fcd11dfc0c9 [ 2315.473686] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 23:36:01 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xdc8, 0x47}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000140)={0x0, @raw_data="66b8aa2b12e82042194134fbbe79990d248360ab0f65c636349781f668a3642e5052cfb273848c14250b12fad916f6b2b4710844d543d54dabacc1163654d1335fc69ef0e8943fc62484a6a06d45814a70e9de781d26809cab9ccd2a7ee09ffaf29209fa0913bff45df5aba343d9e1d9471926ac7d5b64678602c5a790ab8020537627368f48c46096863f1a64dceb0f9af0f0e6a2f8d709be1f3fe43f8cee9c26aff951d82f4776fa02c8e5a0d494ba07b9da01ea08426232e65ed81175991e5f19f7820313b7a6"}) [ 2315.492685] RSP: 002b:00007fcd1036e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 2315.500410] RAX: ffffffffffffffda RBX: 00007fcd11f1bf80 RCX: 00007fcd11dfc0c9 [ 2315.507699] RDX: 000000007fffffff RSI: 0000000000000000 RDI: 0000000000000023 [ 2315.514971] RBP: 00007fcd1036e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2315.522247] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000002 [ 2315.529533] R13: 00007ffda60a98df R14: 00007fcd1036e300 R15: 0000000000022000 23:36:02 executing program 3: socketpair(0x23, 0x0, 0x7fffffff, &(0x7f0000000100)) (fail_nth: 13) 23:36:02 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:02 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x408040, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f0000000040)={{0x7fff, 0x3}, {0x100000000, 0x9}, 0x7}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:02 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31364d59, 0x0, @stepwise}) 23:36:02 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, 0x0) 23:36:02 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xdc8, 0x47}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000140)={0x0, @raw_data="66b8aa2b12e82042194134fbbe79990d248360ab0f65c636349781f668a3642e5052cfb273848c14250b12fad916f6b2b4710844d543d54dabacc1163654d1335fc69ef0e8943fc62484a6a06d45814a70e9de781d26809cab9ccd2a7ee09ffaf29209fa0913bff45df5aba343d9e1d9471926ac7d5b64678602c5a790ab8020537627368f48c46096863f1a64dceb0f9af0f0e6a2f8d709be1f3fe43f8cee9c26aff951d82f4776fa02c8e5a0d494ba07b9da01ea08426232e65ed81175991e5f19f7820313b7a6"}) 23:36:02 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xdc8, 0x47}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000140)={0x0, @raw_data="66b8aa2b12e82042194134fbbe79990d248360ab0f65c636349781f668a3642e5052cfb273848c14250b12fad916f6b2b4710844d543d54dabacc1163654d1335fc69ef0e8943fc62484a6a06d45814a70e9de781d26809cab9ccd2a7ee09ffaf29209fa0913bff45df5aba343d9e1d9471926ac7d5b64678602c5a790ab8020537627368f48c46096863f1a64dceb0f9af0f0e6a2f8d709be1f3fe43f8cee9c26aff951d82f4776fa02c8e5a0d494ba07b9da01ea08426232e65ed81175991e5f19f7820313b7a6"}) 23:36:02 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, 0x0) 23:36:02 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x90000000, 0x0, 0x4, {0x0, @sliced={0xff, [0x7, 0x8, 0x9, 0x4, 0x9, 0x0, 0x1, 0x6, 0x0, 0xfff9, 0x2, 0x1, 0x8, 0x4, 0x6, 0x5, 0x3, 0x7ff, 0x5, 0x1, 0x8, 0x9, 0x0, 0xff, 0x1765, 0x9, 0x5, 0xffff, 0xc9b8, 0x1, 0x0, 0x6, 0x200, 0x9, 0x7fff, 0x4, 0x9, 0x5b, 0x3304, 0xc4, 0xc000, 0x7ff, 0x5, 0xfffb, 0x7, 0x8, 0x7, 0x79], 0xfff}}, 0x9}) 23:36:02 executing program 3: socketpair(0x23, 0x0, 0x7fffffff, &(0x7f0000000100)) 23:36:02 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x290000, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@multiplanar_userptr={0x1, 0x1, 0x4, 0x70000, 0x1960, {0x77359400}, {0x2, 0xc, 0x9, 0x7f, 0x53, 0x7f, "ee84735a"}, 0x81, 0x2, {&(0x7f0000000080)=[{0x4, 0x80}, {0x2816, 0x1, {&(0x7f0000000040)}, 0xffff}]}, 0x2, 0x0, r2}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:02 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, 0x0) 23:36:02 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x90000000, 0x0, 0x4, {0x0, @sliced={0xff, [0x7, 0x8, 0x9, 0x4, 0x9, 0x0, 0x1, 0x6, 0x0, 0xfff9, 0x2, 0x1, 0x8, 0x4, 0x6, 0x5, 0x3, 0x7ff, 0x5, 0x1, 0x8, 0x9, 0x0, 0xff, 0x1765, 0x9, 0x5, 0xffff, 0xc9b8, 0x1, 0x0, 0x6, 0x200, 0x9, 0x7fff, 0x4, 0x9, 0x5b, 0x3304, 0xc4, 0xc000, 0x7ff, 0x5, 0xfffb, 0x7, 0x8, 0x7, 0x79], 0xfff}}, 0x9}) 23:36:02 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x3136564e, 0x0, @stepwise}) 23:36:02 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x589000, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000240)=@multiplanar_userptr={0x14, 0x1, 0x4, 0x10000, 0x3, {r2, r3/1000+60000}, {0x5, 0x2, 0x80, 0x9, 0x83, 0x8, "390cae24"}, 0xfe41, 0x2, {&(0x7f00000001c0)=[{0x2, 0x6, {&(0x7f00000000c0)}, 0x63d}, {0x7, 0x860, {&(0x7f0000000180)}}]}, 0x80000001, 0x0, r4}) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, &(0x7f0000000040)={{0x7, 0x1a6}, {0x7, 0x1}, 0x6, 0x1}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x9) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) getsockname$tipc(r5, &(0x7f00000002c0)=@name, &(0x7f0000000300)=0x10) 23:36:02 executing program 3: socketpair(0x2, 0x0, 0x7fffffff, &(0x7f0000000100)) 23:36:02 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x290000, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@multiplanar_userptr={0x1, 0x1, 0x4, 0x70000, 0x1960, {0x77359400}, {0x2, 0xc, 0x9, 0x7f, 0x53, 0x7f, "ee84735a"}, 0x81, 0x2, {&(0x7f0000000080)=[{0x4, 0x80}, {0x2816, 0x1, {&(0x7f0000000040)}, 0xffff}]}, 0x2, 0x0, r2}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:02 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:02 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x589000, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) (async) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) (async, rerun: 32) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000240)=@multiplanar_userptr={0x14, 0x1, 0x4, 0x10000, 0x3, {r2, r3/1000+60000}, {0x5, 0x2, 0x80, 0x9, 0x83, 0x8, "390cae24"}, 0xfe41, 0x2, {&(0x7f00000001c0)=[{0x2, 0x6, {&(0x7f00000000c0)}, 0x63d}, {0x7, 0x860, {&(0x7f0000000180)}}]}, 0x80000001, 0x0, r4}) (async, rerun: 32) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, &(0x7f0000000040)={{0x7, 0x1a6}, {0x7, 0x1}, 0x6, 0x1}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x9) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) (async, rerun: 32) getsockname$tipc(r5, &(0x7f00000002c0)=@name, &(0x7f0000000300)=0x10) (rerun: 32) 23:36:02 executing program 3: socketpair(0x9, 0x0, 0x7fffffff, &(0x7f0000000100)) 23:36:02 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x90000000, 0x0, 0x4, {0x0, @sliced={0xff, [0x7, 0x8, 0x9, 0x4, 0x9, 0x0, 0x1, 0x6, 0x0, 0xfff9, 0x2, 0x1, 0x8, 0x4, 0x6, 0x5, 0x3, 0x7ff, 0x5, 0x1, 0x8, 0x9, 0x0, 0xff, 0x1765, 0x9, 0x5, 0xffff, 0xc9b8, 0x1, 0x0, 0x6, 0x200, 0x9, 0x7fff, 0x4, 0x9, 0x5b, 0x3304, 0xc4, 0xc000, 0x7ff, 0x5, 0xfffb, 0x7, 0x8, 0x7, 0x79], 0xfff}}, 0x9}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x90000000, 0x0, 0x4, {0x0, @sliced={0xff, [0x7, 0x8, 0x9, 0x4, 0x9, 0x0, 0x1, 0x6, 0x0, 0xfff9, 0x2, 0x1, 0x8, 0x4, 0x6, 0x5, 0x3, 0x7ff, 0x5, 0x1, 0x8, 0x9, 0x0, 0xff, 0x1765, 0x9, 0x5, 0xffff, 0xc9b8, 0x1, 0x0, 0x6, 0x200, 0x9, 0x7fff, 0x4, 0x9, 0x5b, 0x3304, 0xc4, 0xc000, 0x7ff, 0x5, 0xfffb, 0x7, 0x8, 0x7, 0x79], 0xfff}}, 0x9}) (async) 23:36:02 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31384142, 0x0, @stepwise}) 23:36:02 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:02 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x290000, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@multiplanar_userptr={0x1, 0x1, 0x4, 0x70000, 0x1960, {0x77359400}, {0x2, 0xc, 0x9, 0x7f, 0x53, 0x7f, "ee84735a"}, 0x81, 0x2, {&(0x7f0000000080)=[{0x4, 0x80}, {0x2816, 0x1, {&(0x7f0000000040)}, 0xffff}]}, 0x2, 0x0, r2}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x290000, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@multiplanar_userptr={0x1, 0x1, 0x4, 0x70000, 0x1960, {0x77359400}, {0x2, 0xc, 0x9, 0x7f, 0x53, 0x7f, "ee84735a"}, 0x81, 0x2, {&(0x7f0000000080)=[{0x4, 0x80}, {0x2816, 0x1, {&(0x7f0000000040)}, 0xffff}]}, 0x2, 0x0, r2}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) 23:36:02 executing program 3: socketpair(0xa, 0x0, 0x7fffffff, &(0x7f0000000100)) 23:36:02 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x589000, 0x0) (async) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) (async) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000240)=@multiplanar_userptr={0x14, 0x1, 0x4, 0x10000, 0x3, {r2, r3/1000+60000}, {0x5, 0x2, 0x80, 0x9, 0x83, 0x8, "390cae24"}, 0xfe41, 0x2, {&(0x7f00000001c0)=[{0x2, 0x6, {&(0x7f00000000c0)}, 0x63d}, {0x7, 0x860, {&(0x7f0000000180)}}]}, 0x80000001, 0x0, r4}) (async) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, &(0x7f0000000040)={{0x7, 0x1a6}, {0x7, 0x1}, 0x6, 0x1}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) (async) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x9) (async) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) (async) getsockname$tipc(r5, &(0x7f00000002c0)=@name, &(0x7f0000000300)=0x10) 23:36:02 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31424752, 0x0, @stepwise}) 23:36:02 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:02 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:02 executing program 3: socketpair(0x2c, 0x0, 0x7fffffff, &(0x7f0000000100)) 23:36:02 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711}, 0x10) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x8000, 0x3831354f, 0x8, 0x3, [{}, {0x0, 0x6}, {}, {0x5}, {0xd26}], 0x0, 0x1, 0x0, 0x0, 0x5}}) 23:36:02 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x32314142, 0x0, @stepwise}) 23:36:02 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000180)={0x1, 0x0, 0x0, "41159e9a65e49e5e4978a575410b832821891ed656c02426b4b5f31ca091e590", 0x38414262}) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x75, 0x3, 0x0, "dc65a814a019248eab8edcc4e1abf314d65488f0fed98ce75482839f9e3162e4", 0x41414770}) 23:36:02 executing program 3: socketpair(0x63, 0x0, 0x7fffffff, &(0x7f0000000100)) 23:36:02 executing program 2: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:02 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:36:02 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711}, 0x10) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x8000, 0x3831354f, 0x8, 0x3, [{}, {0x0, 0x6}, {}, {0x5}, {0xd26}], 0x0, 0x1, 0x0, 0x0, 0x5}}) 23:36:02 executing program 3: socketpair(0x5f5e0ff, 0x0, 0x7fffffff, &(0x7f0000000100)) 23:36:02 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x32314247, 0x0, @stepwise}) 23:36:02 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:02 executing program 2: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:02 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000180)={0x1, 0x0, 0x0, "41159e9a65e49e5e4978a575410b832821891ed656c02426b4b5f31ca091e590", 0x38414262}) (async, rerun: 32) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080)) (async, rerun: 32) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x75, 0x3, 0x0, "dc65a814a019248eab8edcc4e1abf314d65488f0fed98ce75482839f9e3162e4", 0x41414770}) 23:36:02 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x32314742, 0x0, @stepwise}) 23:36:02 executing program 3: socketpair(0x23, 0x2, 0x7fffffff, &(0x7f0000000100)) 23:36:02 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711}, 0x10) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x8000, 0x3831354f, 0x8, 0x3, [{}, {0x0, 0x6}, {}, {0x5}, {0xd26}], 0x0, 0x1, 0x0, 0x0, 0x5}}) syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) (async) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711}, 0x10) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x8000, 0x3831354f, 0x8, 0x3, [{}, {0x0, 0x6}, {}, {0x5}, {0xd26}], 0x0, 0x1, 0x0, 0x0, 0x5}}) (async) 23:36:02 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r2) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x51, 0x200800) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x60000, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f00000001c0)={0x1, @raw_data="dd745bf504da2869fc48d12acf8dcc3cf3b4ed0179e0e35f6759a562f8fdcd945962d621a28f0633d3bded86364022814437fa6f2c789049e45522f9aac093609f3f56da7de2a4227401586c0cd2f4e087a5779bc1d2db06e8e98b27085287de97578df49b6ba90ff0b67860d5382b124f58efc0eef4704c4bd04e67d5610a73643904616f0fdc5f6b8e2b084a5e76eca42aff3ce3b845c1adc25d3e3661048efc6a0d2e21b781fb81069fb42734a1191430e321ceba71fc0c13a1da82db11ef0f1dc4d69c2e22e7"}) openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) 23:36:02 executing program 2: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:02 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000180)={0x1, 0x0, 0x0, "41159e9a65e49e5e4978a575410b832821891ed656c02426b4b5f31ca091e590", 0x38414262}) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x75, 0x3, 0x0, "dc65a814a019248eab8edcc4e1abf314d65488f0fed98ce75482839f9e3162e4", 0x41414770}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000180)={0x1, 0x0, 0x0, "41159e9a65e49e5e4978a575410b832821891ed656c02426b4b5f31ca091e590", 0x38414262}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080)) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x75, 0x3, 0x0, "dc65a814a019248eab8edcc4e1abf314d65488f0fed98ce75482839f9e3162e4", 0x41414770}) (async) 23:36:02 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x32314752, 0x0, @stepwise}) 23:36:02 executing program 3: socketpair(0x23, 0x3, 0x7fffffff, &(0x7f0000000100)) 23:36:02 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x32314d4e, 0x0, @stepwise}) 23:36:02 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:02 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) sendmsg$tipc(r1, &(0x7f0000000140)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x3}}, 0x10, &(0x7f0000000040), 0x0, &(0x7f0000000080)="60f7e790741233af0766df40a4a20071aa97b6d6a9e692f9cf9d188e14fb220f66979c46a4f4aaa36f3746fcceb73fdab962912fa5bf1ca55305ffbb8b70d4aacc4fccc41748103045a4ba5dc3691f4f11d3cb0a459c4448680290d4eef3225ac919261f8e4d25f049143c727c06867d81137b6002b14b8556e98ade5d", 0x7d, 0x1}, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:02 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async, rerun: 64) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r2) (async) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x51, 0x200800) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) (async) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x60000, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f00000001c0)={0x1, @raw_data="dd745bf504da2869fc48d12acf8dcc3cf3b4ed0179e0e35f6759a562f8fdcd945962d621a28f0633d3bded86364022814437fa6f2c789049e45522f9aac093609f3f56da7de2a4227401586c0cd2f4e087a5779bc1d2db06e8e98b27085287de97578df49b6ba90ff0b67860d5382b124f58efc0eef4704c4bd04e67d5610a73643904616f0fdc5f6b8e2b084a5e76eca42aff3ce3b845c1adc25d3e3661048efc6a0d2e21b781fb81069fb42734a1191430e321ceba71fc0c13a1da82db11ef0f1dc4d69c2e22e7"}) (async) openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) 23:36:02 executing program 3: socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)) 23:36:03 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:03 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xea) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xffff, 0xfe1}) accept4$tipc(r0, &(0x7f0000000080)=@id, &(0x7f00000000c0)=0x10, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:03 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r2) (async) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x51, 0x200800) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) (async) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x60000, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f00000001c0)={0x1, @raw_data="dd745bf504da2869fc48d12acf8dcc3cf3b4ed0179e0e35f6759a562f8fdcd945962d621a28f0633d3bded86364022814437fa6f2c789049e45522f9aac093609f3f56da7de2a4227401586c0cd2f4e087a5779bc1d2db06e8e98b27085287de97578df49b6ba90ff0b67860d5382b124f58efc0eef4704c4bd04e67d5610a73643904616f0fdc5f6b8e2b084a5e76eca42aff3ce3b845c1adc25d3e3661048efc6a0d2e21b781fb81069fb42734a1191430e321ceba71fc0c13a1da82db11ef0f1dc4d69c2e22e7"}) (async) openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) 23:36:03 executing program 3: socketpair(0x23, 0x5, 0x7fffffff, &(0x7f0000000100)) 23:36:03 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x32314d59, 0x0, @stepwise}) 23:36:03 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:03 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) sendmsg$tipc(r1, &(0x7f0000000140)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x3}}, 0x10, &(0x7f0000000040), 0x0, &(0x7f0000000080)="60f7e790741233af0766df40a4a20071aa97b6d6a9e692f9cf9d188e14fb220f66979c46a4f4aaa36f3746fcceb73fdab962912fa5bf1ca55305ffbb8b70d4aacc4fccc41748103045a4ba5dc3691f4f11d3cb0a459c4448680290d4eef3225ac919261f8e4d25f049143c727c06867d81137b6002b14b8556e98ade5d", 0x7d, 0x1}, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:03 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xea) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xffff, 0xfe1}) (async) accept4$tipc(r0, &(0x7f0000000080)=@id, &(0x7f00000000c0)=0x10, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:03 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:03 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000040)=@fd={0x7, 0x2, 0x4, 0x161120, 0xffffff98, {r1, r2/1000+10000}, {0x5, 0xc, 0x0, 0x2, 0xed, 0xff, "25e61880"}, 0xff, 0x4, {}, 0x0, 0x0, r3}) 23:36:03 executing program 3: socketpair(0x23, 0x6, 0x7fffffff, &(0x7f0000000100)) 23:36:03 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x32315241, 0x0, @stepwise}) 23:36:03 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xea) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xffff, 0xfe1}) accept4$tipc(r0, &(0x7f0000000080)=@id, &(0x7f00000000c0)=0x10, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xea) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xffff, 0xfe1}) (async) accept4$tipc(r0, &(0x7f0000000080)=@id, &(0x7f00000000c0)=0x10, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:36:03 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:03 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) sendmsg$tipc(r1, &(0x7f0000000140)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x3}}, 0x10, &(0x7f0000000040), 0x0, &(0x7f0000000080)="60f7e790741233af0766df40a4a20071aa97b6d6a9e692f9cf9d188e14fb220f66979c46a4f4aaa36f3746fcceb73fdab962912fa5bf1ca55305ffbb8b70d4aacc4fccc41748103045a4ba5dc3691f4f11d3cb0a459c4448680290d4eef3225ac919261f8e4d25f049143c727c06867d81137b6002b14b8556e98ade5d", 0x7d, 0x1}, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) sendmsg$tipc(r1, &(0x7f0000000140)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x3}}, 0x10, &(0x7f0000000040), 0x0, &(0x7f0000000080)="60f7e790741233af0766df40a4a20071aa97b6d6a9e692f9cf9d188e14fb220f66979c46a4f4aaa36f3746fcceb73fdab962912fa5bf1ca55305ffbb8b70d4aacc4fccc41748103045a4ba5dc3691f4f11d3cb0a459c4448680290d4eef3225ac919261f8e4d25f049143c727c06867d81137b6002b14b8556e98ade5d", 0x7d, 0x1}, 0x0) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) 23:36:03 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000040)=@fd={0x7, 0x2, 0x4, 0x161120, 0xffffff98, {r1, r2/1000+10000}, {0x5, 0xc, 0x0, 0x2, 0xed, 0xff, "25e61880"}, 0xff, 0x4, {}, 0x0, 0x0, r3}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) clock_gettime(0x0, &(0x7f0000000000)) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000040)=@fd={0x7, 0x2, 0x4, 0x161120, 0xffffff98, {r1, r2/1000+10000}, {0x5, 0xc, 0x0, 0x2, 0xed, 0xff, "25e61880"}, 0xff, 0x4, {}, 0x0, 0x0, r3}) (async) 23:36:03 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x32315258, 0x0, @stepwise}) 23:36:03 executing program 3: socketpair(0x23, 0x7, 0x7fffffff, &(0x7f0000000100)) 23:36:03 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x32315559, 0x0, @stepwise}) 23:36:03 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:03 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000040)=@fd={0x7, 0x2, 0x4, 0x161120, 0xffffff98, {r1, r2/1000+10000}, {0x5, 0xc, 0x0, 0x2, 0xed, 0xff, "25e61880"}, 0xff, 0x4, {}, 0x0, 0x0, r3}) 23:36:03 executing program 3: socketpair(0x23, 0x8, 0x7fffffff, &(0x7f0000000100)) 23:36:03 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x3231564e, 0x0, @stepwise}) 23:36:03 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8000000000000000, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5}, 0x48) r7 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x401, 0x8, 0x800, 0x0, r6, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0xe}, 0x48) r10 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGETNODEID(r10, 0x89e1, &(0x7f0000000480)={0x4}) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)={0x20c, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4008000) 23:36:03 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, 0x0) 23:36:03 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x32315659, 0x0, @stepwise}) 23:36:03 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x9, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) clock_gettime(0x0, &(0x7f0000000000)) bind$pptp(r1, &(0x7f0000000200)={0x18, 0x2, {0x0, @rand_addr=0x64010100}}, 0x1e) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x4, 0x0}, 0x8) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_tracing={0x1a, 0x7, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x10001}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0xf}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu={0x7, 0x1, 0x7, 0x3, 0x2, 0xfffffffffffffffe, 0x4}]}, &(0x7f00000006c0)='syzkaller\x00', 0xbb8, 0x4a, &(0x7f0000000700)=""/74, 0x41100, 0x18, '\x00', 0x0, 0x18, r3, 0x8, &(0x7f0000000780)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xa, 0x6, 0x9}, 0x10, 0x1206e, r3, 0x0, &(0x7f0000000800)=[r1, r3, 0x1, r2, r2]}, 0x80) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000000980)=0x200) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x5, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x0, 0x40, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r4}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @ldst={0x3, 0x3, 0x3, 0x6, 0x1, 0x100, 0xfffffffffffffff0}]}, &(0x7f00000003c0)='syzkaller\x00', 0xc0, 0x88, &(0x7f0000000400)=""/136, 0x40f00, 0x3, '\x00', r6, 0x22, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0xf, 0x3f, 0xffffff01}, 0x10, r7, r8, 0x0, &(0x7f00000008c0)=[r9]}, 0x80) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r2}, 0x8) r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r11, 0xae03, 0x0) ioctl$SYNC_IOC_MERGE(r10, 0xc0303e03, &(0x7f0000000280)={"891d834fbdde98a023eb401673a9835ad4adaab9322ed0af5ce5f4a193627f31", r11}) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f0000000240)={0x6, 0x9, 0x1}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000140)=@multiplanar_mmap={0x9272, 0x0, 0x4, 0x10000, 0x200, {0x0, 0x2710}, {0x5, 0x1, 0x3f, 0x3f, 0x9, 0x9, "d0e7c035"}, 0x10000, 0x1, {&(0x7f0000000340)=[{0x1ff, 0x1800, {0x7f}, 0xe7c4}, {0xffff, 0x2, {0x3f87}, 0x9}]}, 0x7, 0x0, r2}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) r12 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r12, 0xae03, 0x0) openat$cgroup_procs(r12, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) 23:36:03 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x3, "475d003f9bb805dfd0f1c62f7200ecff00220000000000000000001de000", 0x31435641}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000180)=""/4096) 23:36:03 executing program 3: socketpair(0x23, 0x9, 0x7fffffff, &(0x7f0000000100)) 23:36:03 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8000000000000000, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) (async) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5}, 0x48) r7 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x401, 0x8, 0x800, 0x0, r6, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0xe}, 0x48) (async) r10 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGETNODEID(r10, 0x89e1, &(0x7f0000000480)={0x4}) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)={0x20c, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4008000) 23:36:03 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x9, 0x2) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) clock_gettime(0x0, &(0x7f0000000000)) (async) bind$pptp(r1, &(0x7f0000000200)={0x18, 0x2, {0x0, @rand_addr=0x64010100}}, 0x1e) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) (async) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x4, 0x0}, 0x8) (async) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_tracing={0x1a, 0x7, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x10001}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0xf}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu={0x7, 0x1, 0x7, 0x3, 0x2, 0xfffffffffffffffe, 0x4}]}, &(0x7f00000006c0)='syzkaller\x00', 0xbb8, 0x4a, &(0x7f0000000700)=""/74, 0x41100, 0x18, '\x00', 0x0, 0x18, r3, 0x8, &(0x7f0000000780)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xa, 0x6, 0x9}, 0x10, 0x1206e, r3, 0x0, &(0x7f0000000800)=[r1, r3, 0x1, r2, r2]}, 0x80) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000000980)=0x200) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x5, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x0, 0x40, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r4}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @ldst={0x3, 0x3, 0x3, 0x6, 0x1, 0x100, 0xfffffffffffffff0}]}, &(0x7f00000003c0)='syzkaller\x00', 0xc0, 0x88, &(0x7f0000000400)=""/136, 0x40f00, 0x3, '\x00', r6, 0x22, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0xf, 0x3f, 0xffffff01}, 0x10, r7, r8, 0x0, &(0x7f00000008c0)=[r9]}, 0x80) (async) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r2}, 0x8) (async) r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r11, 0xae03, 0x0) (async) ioctl$SYNC_IOC_MERGE(r10, 0xc0303e03, &(0x7f0000000280)={"891d834fbdde98a023eb401673a9835ad4adaab9322ed0af5ce5f4a193627f31", r11}) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f0000000240)={0x6, 0x9, 0x1}) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000140)=@multiplanar_mmap={0x9272, 0x0, 0x4, 0x10000, 0x200, {0x0, 0x2710}, {0x5, 0x1, 0x3f, 0x3f, 0x9, 0x9, "d0e7c035"}, 0x10000, 0x1, {&(0x7f0000000340)=[{0x1ff, 0x1800, {0x7f}, 0xe7c4}, {0xffff, 0x2, {0x3f87}, 0x9}]}, 0x7, 0x0, r2}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) r12 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r12, 0xae03, 0x0) openat$cgroup_procs(r12, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) 23:36:03 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x32344d59, 0x0, @stepwise}) 23:36:03 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8000000000000000, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) (async) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5}, 0x48) (async) r7 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x401, 0x8, 0x800, 0x0, r6, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0xe}, 0x48) r10 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGETNODEID(r10, 0x89e1, &(0x7f0000000480)={0x4}) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)={0x20c, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4008000) 23:36:03 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, 0x0) 23:36:03 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x3, "475d003f9bb805dfd0f1c62f7200ecff00220000000000000000001de000", 0x31435641}) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000180)=""/4096) 23:36:03 executing program 3: socketpair(0x23, 0xa, 0x7fffffff, &(0x7f0000000100)) 23:36:03 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x3234564e, 0x0, @stepwise}) 23:36:03 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:03 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, 0x0) 23:36:03 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x3, "475d003f9bb805dfd0f1c62f7200ecff00220000000000000000001de000", 0x31435641}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000180)=""/4096) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x3, "475d003f9bb805dfd0f1c62f7200ecff00220000000000000000001de000", 0x31435641}) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000180)=""/4096) (async) 23:36:03 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x9, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) clock_gettime(0x0, &(0x7f0000000000)) (async) bind$pptp(r1, &(0x7f0000000200)={0x18, 0x2, {0x0, @rand_addr=0x64010100}}, 0x1e) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) (async) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x4, 0x0}, 0x8) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_tracing={0x1a, 0x7, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x10001}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0xf}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu={0x7, 0x1, 0x7, 0x3, 0x2, 0xfffffffffffffffe, 0x4}]}, &(0x7f00000006c0)='syzkaller\x00', 0xbb8, 0x4a, &(0x7f0000000700)=""/74, 0x41100, 0x18, '\x00', 0x0, 0x18, r3, 0x8, &(0x7f0000000780)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xa, 0x6, 0x9}, 0x10, 0x1206e, r3, 0x0, &(0x7f0000000800)=[r1, r3, 0x1, r2, r2]}, 0x80) (async) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000000980)=0x200) (async) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x5, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x0, 0x40, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r4}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @ldst={0x3, 0x3, 0x3, 0x6, 0x1, 0x100, 0xfffffffffffffff0}]}, &(0x7f00000003c0)='syzkaller\x00', 0xc0, 0x88, &(0x7f0000000400)=""/136, 0x40f00, 0x3, '\x00', r6, 0x22, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0xf, 0x3f, 0xffffff01}, 0x10, r7, r8, 0x0, &(0x7f00000008c0)=[r9]}, 0x80) (async) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r2}, 0x8) (async) r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r11, 0xae03, 0x0) (async) ioctl$SYNC_IOC_MERGE(r10, 0xc0303e03, &(0x7f0000000280)={"891d834fbdde98a023eb401673a9835ad4adaab9322ed0af5ce5f4a193627f31", r11}) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) (async) ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f0000000240)={0x6, 0x9, 0x1}) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000140)=@multiplanar_mmap={0x9272, 0x0, 0x4, 0x10000, 0x200, {0x0, 0x2710}, {0x5, 0x1, 0x3f, 0x3f, 0x9, 0x9, "d0e7c035"}, 0x10000, 0x1, {&(0x7f0000000340)=[{0x1ff, 0x1800, {0x7f}, 0xe7c4}, {0xffff, 0x2, {0x3f87}, 0x9}]}, 0x7, 0x0, r2}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) r12 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r12, 0xae03, 0x0) (async) openat$cgroup_procs(r12, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) 23:36:03 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r2) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x51, 0x200800) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x60000, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f00000001c0)={0x1, @raw_data="dd745bf504da2869fc48d12acf8dcc3cf3b4ed0179e0e35f6759a562f8fdcd945962d621a28f0633d3bded86364022814437fa6f2c789049e45522f9aac093609f3f56da7de2a4227401586c0cd2f4e087a5779bc1d2db06e8e98b27085287de97578df49b6ba90ff0b67860d5382b124f58efc0eef4704c4bd04e67d5610a73643904616f0fdc5f6b8e2b084a5e76eca42aff3ce3b845c1adc25d3e3661048efc6a0d2e21b781fb81069fb42734a1191430e321ceba71fc0c13a1da82db11ef0f1dc4d69c2e22e7"}) openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) 23:36:03 executing program 3: socketpair(0x23, 0xb, 0x7fffffff, &(0x7f0000000100)) 23:36:03 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000000)=@overlay={0x8, 0x0, 0x4, 0x800, 0x8, {0x0, 0xea60}, {0x3, 0xc, 0x49, 0x1, 0xfb, 0x3, "654682a4"}, 0x9}) 23:36:03 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc0585611, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:36:03 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x33424752, 0x0, @stepwise}) 23:36:03 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:03 executing program 3: socketpair(0x23, 0xc, 0x7fffffff, &(0x7f0000000100)) 23:36:03 executing program 5: read$ptp(0xffffffffffffffff, &(0x7f0000000000)=""/165, 0xa5) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x80180, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000140)) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:03 executing program 2: socketpair(0x23, 0x0, 0x7fffffff, &(0x7f0000000100)) 23:36:04 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x33524742, 0x0, @stepwise}) 23:36:04 executing program 3: socketpair(0x23, 0xd, 0x7fffffff, &(0x7f0000000100)) 23:36:04 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:04 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000000)=@overlay={0x8, 0x0, 0x4, 0x800, 0x8, {0x0, 0xea60}, {0x3, 0xc, 0x49, 0x1, 0xfb, 0x3, "654682a4"}, 0x9}) 23:36:04 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (fail_nth: 1) 23:36:04 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x3, 0x0, "475d003fe11ed59bb804dfd0f1c62f7200180000220000000000002200001de0"}) 23:36:04 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000000)=@overlay={0x8, 0x0, 0x4, 0x800, 0x8, {0x0, 0xea60}, {0x3, 0xc, 0x49, 0x1, 0xfb, 0x3, "654682a4"}, 0x9}) 23:36:04 executing program 5: read$ptp(0xffffffffffffffff, &(0x7f0000000000)=""/165, 0xa5) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x80180, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000140)) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:04 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x33565348, 0x0, @stepwise}) 23:36:04 executing program 3: socketpair(0x23, 0xe, 0x7fffffff, &(0x7f0000000100)) 23:36:04 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x3, 0x0, "475d003fe11ed59bb804dfd0f1c62f7200180000220000000000002200001de0"}) [ 2317.729791] FAULT_INJECTION: forcing a failure. [ 2317.729791] name failslab, interval 1, probability 0, space 0, times 0 [ 2317.777803] CPU: 1 PID: 5122 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0 [ 2317.785644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2317.795007] Call Trace: [ 2317.797623] dump_stack+0x1fc/0x2ef [ 2317.801397] should_fail.cold+0xa/0xf [ 2317.805217] ? setup_fault_attr+0x200/0x200 [ 2317.809568] ? lock_acquire+0x170/0x3c0 [ 2317.813564] __should_failslab+0x115/0x180 [ 2317.817816] should_failslab+0x5/0x10 [ 2317.821639] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 2317.826758] __kmalloc_node+0x38/0x70 [ 2317.830584] kvmalloc_node+0x61/0xf0 [ 2317.834311] ? v4l_querycap+0x340/0x340 [ 2317.838297] video_usercopy+0x3c7/0xfa0 [ 2317.842295] ? v4l_enumstd+0x60/0x60 [ 2317.846034] ? get_pid_task+0xf4/0x190 [ 2317.849933] ? mark_held_locks+0xf0/0xf0 [ 2317.854018] ? proc_fail_nth_write+0x95/0x1d0 [ 2317.858531] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 2317.863475] ? __fdget_pos+0x26f/0x310 [ 2317.867389] ? video_usercopy+0xfa0/0xfa0 [ 2317.871550] v4l2_ioctl+0x147/0x1a0 [ 2317.875192] ? video_devdata+0xa0/0xa0 [ 2317.879096] do_vfs_ioctl+0xcdb/0x12e0 [ 2317.883003] ? lock_downgrade+0x720/0x720 [ 2317.887167] ? check_preemption_disabled+0x41/0x280 [ 2317.892205] ? ioctl_preallocate+0x200/0x200 [ 2317.896643] ? __fget+0x356/0x510 [ 2317.900116] ? do_dup2+0x450/0x450 [ 2317.903666] ? vfs_write+0x393/0x540 [ 2317.907398] ? fput+0x2b/0x190 [ 2317.910613] ksys_ioctl+0x9b/0xc0 [ 2317.914082] __x64_sys_ioctl+0x6f/0xb0 [ 2317.917989] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2317.922587] do_syscall_64+0xf9/0x620 [ 2317.926407] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2317.931609] RIP: 0033:0x7f4de33560c9 [ 2317.935328] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2317.954235] RSP: 002b:00007f4de18c8168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2317.961953] RAX: ffffffffffffffda RBX: 00007f4de3475f80 RCX: 00007f4de33560c9 [ 2317.969239] RDX: 0000000020000140 RSI: 00000000c100565c RDI: 0000000000000003 23:36:04 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x34324142, 0x0, @stepwise}) 23:36:04 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x34324d59, 0x0, @stepwise}) 23:36:04 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x34325241, 0x0, @stepwise}) 23:36:04 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x34325258, 0x0, @stepwise}) 23:36:04 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x3, 0x0, "475d003fe11ed59bb804dfd0f1c62f7200180000220000000000002200001de0"}) [ 2317.976519] RBP: 00007f4de18c81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2317.983797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2317.991094] R13: 00007ffea4b1808f R14: 00007f4de18c8300 R15: 0000000000022000 23:36:04 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (fail_nth: 2) 23:36:04 executing program 3: socketpair(0x23, 0xf, 0x7fffffff, &(0x7f0000000100)) 23:36:04 executing program 5: read$ptp(0xffffffffffffffff, &(0x7f0000000000)=""/165, 0xa5) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x80180, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000140)) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:04 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x41414270}) 23:36:04 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:04 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x3432564e, 0x0, @stepwise}) 23:36:04 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x41414270}) 23:36:04 executing program 3: socketpair(0x23, 0x10, 0x7fffffff, &(0x7f0000000100)) 23:36:04 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:04 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x3, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0, 0x0, 0x1}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 23:36:04 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:04 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x34325842, 0x0, @stepwise}) 23:36:04 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x41414270}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x41414270}) (async) 23:36:04 executing program 3: socketpair(0x23, 0x11, 0x7fffffff, &(0x7f0000000100)) 23:36:04 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x2, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:04 executing program 3: socketpair(0x23, 0x12, 0x7fffffff, &(0x7f0000000100)) 23:36:04 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:36:04 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x34343452, 0x0, @stepwise}) 23:36:04 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 23:36:04 executing program 3: socketpair(0x23, 0x13, 0x7fffffff, &(0x7f0000000100)) 23:36:04 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x3, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0, 0x0, 0x1}}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 23:36:04 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5421, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:04 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x34343459, 0x0, @stepwise}) 23:36:04 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 23:36:04 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x3, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0, 0x0, 0x1}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x3, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0, 0x0, 0x1}}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) 23:36:04 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0xffffffff}, 0x10) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) 23:36:04 executing program 3: socketpair(0x23, 0x14, 0x7fffffff, &(0x7f0000000100)) 23:36:04 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 23:36:04 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0xffffffff}, 0x10) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0xffffffff}, 0x10) (async) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) (async) 23:36:04 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x34424752, 0x0, @stepwise}) 23:36:04 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5450, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:04 executing program 3: socketpair(0x23, 0x15, 0x7fffffff, &(0x7f0000000100)) 23:36:04 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x200, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x31424752}) socket$tipc(0x1e, 0x5, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x2, @pix_mp={0x8, 0xfffffbff, 0x59323259, 0x9, 0x3, [{0x2, 0x9bd}, {0xe6, 0x3}, {0x10001, 0x8}, {0x9, 0x4}, {0x0, 0x2}, {0x0, 0x1000}, {0x1, 0x3}, {0x4, 0x1}], 0x80, 0x2, 0x7, 0x1, 0x4}}) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000200)=0x8, 0x4) r3 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040)=r3, 0x12) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x200, 0x8}, 0xc) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x6, 0x800, 0xffffffff, 0x8, r4, 0x19, '\x00', 0x0, r5, 0x5, 0x1, 0x4, 0x6}, 0x48) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r6, 0xc0405610, &(0x7f0000000340)={0x2, 0x6, 0x4, 0x4800}) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x0) ioctl$UI_SET_PROPBIT(r6, 0x4004556e, 0xf) 23:36:04 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:05 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async, rerun: 32) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async, rerun: 32) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0xffffffff}, 0x10) (async, rerun: 64) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) (rerun: 64) 23:36:05 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x200, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x31424752}) socket$tipc(0x1e, 0x5, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x2, @pix_mp={0x8, 0xfffffbff, 0x59323259, 0x9, 0x3, [{0x2, 0x9bd}, {0xe6, 0x3}, {0x10001, 0x8}, {0x9, 0x4}, {0x0, 0x2}, {0x0, 0x1000}, {0x1, 0x3}, {0x4, 0x1}], 0x80, 0x2, 0x7, 0x1, 0x4}}) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000200)=0x8, 0x4) r3 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040)=r3, 0x12) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x200, 0x8}, 0xc) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x6, 0x800, 0xffffffff, 0x8, r4, 0x19, '\x00', 0x0, r5, 0x5, 0x1, 0x4, 0x6}, 0x48) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r6, 0xc0405610, &(0x7f0000000340)={0x2, 0x6, 0x4, 0x4800}) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x0) ioctl$UI_SET_PROPBIT(r6, 0x4004556e, 0xf) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0xb, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x200, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x31424752}) (async) socket$tipc(0x1e, 0x5, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x2, @pix_mp={0x8, 0xfffffbff, 0x59323259, 0x9, 0x3, [{0x2, 0x9bd}, {0xe6, 0x3}, {0x10001, 0x8}, {0x9, 0x4}, {0x0, 0x2}, {0x0, 0x1000}, {0x1, 0x3}, {0x4, 0x1}], 0x80, 0x2, 0x7, 0x1, 0x4}}) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000200)=0x8, 0x4) (async) gettid() (async) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040)=r3, 0x12) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x200, 0x8}, 0xc) (async) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x6, 0x800, 0xffffffff, 0x8, r4, 0x19, '\x00', 0x0, r5, 0x5, 0x1, 0x4, 0x6}, 0x48) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(r6, 0xc0405610, &(0x7f0000000340)={0x2, 0x6, 0x4, 0x4800}) (async) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x0) (async) ioctl$UI_SET_PROPBIT(r6, 0x4004556e, 0xf) (async) 23:36:05 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x34524742, 0x0, @stepwise}) 23:36:05 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5451, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:05 executing program 3: socketpair(0x23, 0x16, 0x7fffffff, &(0x7f0000000100)) 23:36:05 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x210a00, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000040)=@fd={0x5, 0x1, 0x4, 0x20, 0x1, {0x77359400}, {0x5, 0x8, 0xda, 0xff, 0x0, 0xff, "517eff3c"}, 0xf517, 0x4, {}, 0x1, 0x0, r2}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:05 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x34565348, 0x0, @stepwise}) 23:36:05 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:05 executing program 3: socketpair(0x23, 0x17, 0x7fffffff, &(0x7f0000000100)) 23:36:05 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5452, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:05 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x200, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x31424752}) (async) socket$tipc(0x1e, 0x5, 0x0) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x2, @pix_mp={0x8, 0xfffffbff, 0x59323259, 0x9, 0x3, [{0x2, 0x9bd}, {0xe6, 0x3}, {0x10001, 0x8}, {0x9, 0x4}, {0x0, 0x2}, {0x0, 0x1000}, {0x1, 0x3}, {0x4, 0x1}], 0x80, 0x2, 0x7, 0x1, 0x4}}) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000200)=0x8, 0x4) (async) r3 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040)=r3, 0x12) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x200, 0x8}, 0xc) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x6, 0x800, 0xffffffff, 0x8, r4, 0x19, '\x00', 0x0, r5, 0x5, 0x1, 0x4, 0x6}, 0x48) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r6, 0xc0405610, &(0x7f0000000340)={0x2, 0x6, 0x4, 0x4800}) (async) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x0) ioctl$UI_SET_PROPBIT(r6, 0x4004556e, 0xf) 23:36:05 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x210a00, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000040)=@fd={0x5, 0x1, 0x4, 0x20, 0x1, {0x77359400}, {0x5, 0x8, 0xda, 0xff, 0x0, 0xff, "517eff3c"}, 0xf517, 0x4, {}, 0x1, 0x0, r2}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x210a00, 0x0) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000040)=@fd={0x5, 0x1, 0x4, 0x20, 0x1, {0x77359400}, {0x5, 0x8, 0xda, 0xff, 0x0, 0xff, "517eff3c"}, 0xf517, 0x4, {}, 0x1, 0x0, r2}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:36:05 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) 23:36:05 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x34565559, 0x0, @stepwise}) 23:36:05 executing program 3: socketpair(0x23, 0x18, 0x7fffffff, &(0x7f0000000100)) 23:36:05 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5460, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:05 executing program 1: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)) 23:36:05 executing program 3: socketpair(0x23, 0x19, 0x7fffffff, &(0x7f0000000100)) 23:36:05 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x210a00, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000040)=@fd={0x5, 0x1, 0x4, 0x20, 0x1, {0x77359400}, {0x5, 0x8, 0xda, 0xff, 0x0, 0xff, "517eff3c"}, 0xf517, 0x4, {}, 0x1, 0x0, r2}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x210a00, 0x0) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000040)=@fd={0x5, 0x1, 0x4, 0x20, 0x1, {0x77359400}, {0x5, 0x8, 0xda, 0xff, 0x0, 0xff, "517eff3c"}, 0xf517, 0x4, {}, 0x1, 0x0, r2}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:36:05 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x35315241, 0x0, @stepwise}) 23:36:05 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) bpf$BPF_TASK_FD_QUERY(0x4, 0x0, 0x10) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280), 0x90002, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f0000000180)=0x403, 0x8) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000380)=@multiplanar_mmap={0x2, 0x2, 0x4, 0x1000, 0x6, {0x77359400}, {0x1, 0x1, 0x1, 0x42, 0x3, 0xf9, "2a071bb9"}, 0x6, 0x1, {&(0x7f0000000300)=[{0x9, 0xd82, {0x7fffffffffffffff}, 0xfff}, {0x1f, 0x1, {0x3}, 0x61}]}, 0x833}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast1, @dev}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x8) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) 23:36:05 executing program 1: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)) 23:36:05 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045612, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:05 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x5, 0x1, 0x0, "475d003fe11ed500000022000000000000000500", 0x3231564e}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x8001, 0x3, 0x3, {0x0, @sdr={0x3247504d, 0x3}}, 0xf8}) 23:36:05 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) bpf$BPF_TASK_FD_QUERY(0x4, 0x0, 0x10) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280), 0x90002, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f0000000180)=0x403, 0x8) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000380)=@multiplanar_mmap={0x2, 0x2, 0x4, 0x1000, 0x6, {0x77359400}, {0x1, 0x1, 0x1, 0x42, 0x3, 0xf9, "2a071bb9"}, 0x6, 0x1, {&(0x7f0000000300)=[{0x9, 0xd82, {0x7fffffffffffffff}, 0xfff}, {0x1f, 0x1, {0x3}, 0x61}]}, 0x833}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast1, @dev}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x8) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) (async) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) bpf$BPF_TASK_FD_QUERY(0x4, 0x0, 0x10) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280), 0x90002, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) (async) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f0000000180)=0x403, 0x8) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000380)=@multiplanar_mmap={0x2, 0x2, 0x4, 0x1000, 0x6, {0x77359400}, {0x1, 0x1, 0x1, 0x42, 0x3, 0xf9, "2a071bb9"}, 0x6, 0x1, {&(0x7f0000000300)=[{0x9, 0xd82, {0x7fffffffffffffff}, 0xfff}, {0x1f, 0x1, {0x3}, 0x61}]}, 0x833}) (async) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast1, @dev}, &(0x7f0000000140)=0xc) (async) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x8) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) (async) 23:36:05 executing program 3: socketpair(0x23, 0x1a, 0x7fffffff, &(0x7f0000000100)) 23:36:05 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x35315258, 0x0, @stepwise}) 23:36:05 executing program 1: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) recvmsg$can_bcm(r0, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)) (async) 23:36:05 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:05 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x5, 0x1, 0x0, "475d003fe11ed500000022000000000000000500", 0x3231564e}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x8001, 0x3, 0x3, {0x0, @sdr={0x3247504d, 0x3}}, 0xf8}) 23:36:05 executing program 3: socketpair(0x23, 0x1b, 0x7fffffff, &(0x7f0000000100)) 23:36:05 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40049409, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:05 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) bpf$BPF_TASK_FD_QUERY(0x4, 0x0, 0x10) (async, rerun: 64) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280), 0x90002, 0x0) (async, rerun: 64) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f0000000180)=0x403, 0x8) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000380)=@multiplanar_mmap={0x2, 0x2, 0x4, 0x1000, 0x6, {0x77359400}, {0x1, 0x1, 0x1, 0x42, 0x3, 0xf9, "2a071bb9"}, 0x6, 0x1, {&(0x7f0000000300)=[{0x9, 0xd82, {0x7fffffffffffffff}, 0xfff}, {0x1f, 0x1, {0x3}, 0x61}]}, 0x833}) (async, rerun: 64) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast1, @dev}, &(0x7f0000000140)=0xc) (async, rerun: 64) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x8) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) 23:36:05 executing program 3: socketpair(0x23, 0x1c, 0x7fffffff, &(0x7f0000000100)) 23:36:05 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x5, 0x1, 0x0, "475d003fe11ed500000022000000000000000500", 0x3231564e}) (async, rerun: 32) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x8001, 0x3, 0x3, {0x0, @sdr={0x3247504d, 0x3}}, 0xf8}) (rerun: 32) 23:36:05 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d4e, 0x0, @stepwise}) 23:36:05 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200633000220000000000000000001de0"}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000540)={0x0, @pix={0xb5, 0xfff, 0x52424752, 0x3, 0x1f, 0x7, 0xa, 0x1, 0x0, 0x0, 0x2, 0x1}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000640)={0x41, 0x1, 0x3}, 0x10) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f0000000200)={0xe}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST(r2, 0x40103d02, &(0x7f0000000080)={0x80000000}) 23:36:05 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x4020940d, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:05 executing program 3: socketpair(0x23, 0x1d, 0x7fffffff, &(0x7f0000000100)) 23:36:05 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0045878, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:05 executing program 3: socketpair(0x23, 0x1e, 0x7fffffff, &(0x7f0000000100)) 23:36:05 executing program 5: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x4a140, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000080)={'\x00', 0x8, 0x3, 0xfffffff7}) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000140)={0x3, @vbi={0x28920d31, 0xfffffff8, 0x3c, 0x20385655, [0x6a, 0x3ff], [0xe1c2, 0x1000], 0x1}}) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:05 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (fail_nth: 1) 23:36:05 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x3631564e, 0x0, @stepwise}) 23:36:05 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0045878, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:05 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200633000220000000000000000001de0"}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async, rerun: 64) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000540)={0x0, @pix={0xb5, 0xfff, 0x52424752, 0x3, 0x1f, 0x7, 0xa, 0x1, 0x0, 0x0, 0x2, 0x1}}) (async, rerun: 64) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000640)={0x41, 0x1, 0x3}, 0x10) (async) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x8) (async) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f0000000200)={0xe}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST(r2, 0x40103d02, &(0x7f0000000080)={0x80000000}) 23:36:05 executing program 3: socketpair(0x23, 0x21, 0x7fffffff, &(0x7f0000000100)) 23:36:05 executing program 5: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x4a140, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000080)={'\x00', 0x8, 0x3, 0xfffffff7}) (async, rerun: 64) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async, rerun: 64) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000140)={0x3, @vbi={0x28920d31, 0xfffffff8, 0x3c, 0x20385655, [0x6a, 0x3ff], [0xe1c2, 0x1000], 0x1}}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:05 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:05 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x42474752, 0x0, @stepwise}) 23:36:05 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0145608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:05 executing program 3: socketpair(0x23, 0x22, 0x7fffffff, &(0x7f0000000100)) 23:36:05 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200633000220000000000000000001de0"}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000540)={0x0, @pix={0xb5, 0xfff, 0x52424752, 0x3, 0x1f, 0x7, 0xa, 0x1, 0x0, 0x0, 0x2, 0x1}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000640)={0x41, 0x1, 0x3}, 0x10) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f0000000200)={0xe}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST(r2, 0x40103d02, &(0x7f0000000080)={0x80000000}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200633000220000000000000000001de0"}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) (async) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000540)={0x0, @pix={0xb5, 0xfff, 0x52424752, 0x3, 0x1f, 0x7, 0xa, 0x1, 0x0, 0x0, 0x2, 0x1}}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000640)={0x41, 0x1, 0x3}, 0x10) (async) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x8) (async) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f0000000200)={0xe}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$PTP_EXTTS_REQUEST(r2, 0x40103d02, &(0x7f0000000080)={0x80000000}) (async) 23:36:05 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x2, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:05 executing program 5: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x4a140, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000080)={'\x00', 0x8, 0x3, 0xfffffff7}) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000140)={0x3, @vbi={0x28920d31, 0xfffffff8, 0x3c, 0x20385655, [0x6a, 0x3ff], [0xe1c2, 0x1000], 0x1}}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:05 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:06 executing program 3: socketpair(0x23, 0x23, 0x7fffffff, &(0x7f0000000100)) 23:36:06 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x47425247, 0x0, @stepwise}) 23:36:06 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:06 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x34324d59}) 23:36:06 executing program 3: socketpair(0x23, 0x24, 0x7fffffff, &(0x7f0000000100)) 23:36:06 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:06 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5421, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:06 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:06 executing program 3: socketpair(0x23, 0x25, 0x7fffffff, &(0x7f0000000100)) 23:36:06 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x47524247, 0x0, @stepwise}) 23:36:06 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x34324d59}) 23:36:06 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) 23:36:06 executing program 3: socketpair(0x23, 0x26, 0x7fffffff, &(0x7f0000000100)) 23:36:06 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205649, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:06 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5450, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:06 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x34324d59}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x34324d59}) (async) 23:36:06 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x48524742, 0x0, @stepwise}) 23:36:06 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc020660b, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:06 executing program 3: socketpair(0x23, 0x27, 0x7fffffff, &(0x7f0000000100)) 23:36:06 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x3, @pix_mp={0x80, 0x0, 0x31303553}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x1, @pix_mp={0x0, 0x9, 0x3136564e, 0x1, 0x4, [{0x80000001, 0x8}, {0x8000, 0x4}, {0x4, 0x9}, {0x1118, 0xfffffff9}, {0x7, 0x3}, {0x9c0, 0x5680cdc5}, {0x2, 0x8}, {0x8a5, 0x7}], 0x8, 0x8, 0x4, 0x2, 0x6}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000240)={0x1, @raw_data="ec6f3ca1229396276fffa58906253963bfebf05d96a123a4bf74b822eced332f6f25d43405f87fa4852b7e65e5fcedfb2c14083d8ee896fcd4308d5a8bb01f9c0aada6c397178a8935d58d47620a0bd0d46618ab41c8d086bd519fef8a787a3f7accbba0d8ab575e48123d46c4521548a44604af2429b2bdec2fc854552f2b4eb196a261c3f4e3e78e703d2386773ad7c7e8a17a06cf59b74abddce84f57df191bc3be15d48c842b0841091f0a18b307346c34878622f37a79c6c3928710bb4b4b556bd5699d4fce"}) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x2, @raw_data="a6d63a85d33279cc15bd9b4d887c78e80d9340d47fb4b2caca41288e179f6b9e16fc3dc7141ad0f0c5b78bf3412281a18f4bd4614572043837235b62d07a503a1382cc4549036604a175cff97e6ff5849cc7b16803c10bcb9f8ed2be74b0ad3a2a938d136ce91651b3164020df6cd73309dc1048723c38d71bcebaedd3ffd53a0934956e89d16ed8b5792d7c2490fb1ee0ba7dc20471272f76f996cc92f432edcdfb0b57cbd334b351a7ae066dd5539c7afdd5f22d1f7a2997fd864f5434b8fa704f083e0f41871b"}) 23:36:06 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x2, @pix_mp={0x7, 0x80000001, 0x38414761, 0x5, 0xc, [{0x9}, {0x6, 0x6}, {0x9, 0x5}, {0xc444, 0x9}, {0x2, 0xfffffff7}, {0x8, 0x6}, {0x8001}, {0x32, 0x6}], 0x6, 0x0, 0x6, 0x2, 0x5}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x1, "475d003fffffffffb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:06 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x4f424752, 0x0, @stepwise}) 23:36:06 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5451, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:06 executing program 3: socketpair(0x23, 0x28, 0x7fffffff, &(0x7f0000000100)) 23:36:06 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x3, @pix_mp={0x80, 0x0, 0x31303553}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x1, @pix_mp={0x0, 0x9, 0x3136564e, 0x1, 0x4, [{0x80000001, 0x8}, {0x8000, 0x4}, {0x4, 0x9}, {0x1118, 0xfffffff9}, {0x7, 0x3}, {0x9c0, 0x5680cdc5}, {0x2, 0x8}, {0x8a5, 0x7}], 0x8, 0x8, 0x4, 0x2, 0x6}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000240)={0x1, @raw_data="ec6f3ca1229396276fffa58906253963bfebf05d96a123a4bf74b822eced332f6f25d43405f87fa4852b7e65e5fcedfb2c14083d8ee896fcd4308d5a8bb01f9c0aada6c397178a8935d58d47620a0bd0d46618ab41c8d086bd519fef8a787a3f7accbba0d8ab575e48123d46c4521548a44604af2429b2bdec2fc854552f2b4eb196a261c3f4e3e78e703d2386773ad7c7e8a17a06cf59b74abddce84f57df191bc3be15d48c842b0841091f0a18b307346c34878622f37a79c6c3928710bb4b4b556bd5699d4fce"}) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x2, @raw_data="a6d63a85d33279cc15bd9b4d887c78e80d9340d47fb4b2caca41288e179f6b9e16fc3dc7141ad0f0c5b78bf3412281a18f4bd4614572043837235b62d07a503a1382cc4549036604a175cff97e6ff5849cc7b16803c10bcb9f8ed2be74b0ad3a2a938d136ce91651b3164020df6cd73309dc1048723c38d71bcebaedd3ffd53a0934956e89d16ed8b5792d7c2490fb1ee0ba7dc20471272f76f996cc92f432edcdfb0b57cbd334b351a7ae066dd5539c7afdd5f22d1f7a2997fd864f5434b8fa704f083e0f41871b"}) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x3, @pix_mp={0x80, 0x0, 0x31303553}}) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x1, @pix_mp={0x0, 0x9, 0x3136564e, 0x1, 0x4, [{0x80000001, 0x8}, {0x8000, 0x4}, {0x4, 0x9}, {0x1118, 0xfffffff9}, {0x7, 0x3}, {0x9c0, 0x5680cdc5}, {0x2, 0x8}, {0x8a5, 0x7}], 0x8, 0x8, 0x4, 0x2, 0x6}}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000240)={0x1, @raw_data="ec6f3ca1229396276fffa58906253963bfebf05d96a123a4bf74b822eced332f6f25d43405f87fa4852b7e65e5fcedfb2c14083d8ee896fcd4308d5a8bb01f9c0aada6c397178a8935d58d47620a0bd0d46618ab41c8d086bd519fef8a787a3f7accbba0d8ab575e48123d46c4521548a44604af2429b2bdec2fc854552f2b4eb196a261c3f4e3e78e703d2386773ad7c7e8a17a06cf59b74abddce84f57df191bc3be15d48c842b0841091f0a18b307346c34878622f37a79c6c3928710bb4b4b556bd5699d4fce"}) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x2, @raw_data="a6d63a85d33279cc15bd9b4d887c78e80d9340d47fb4b2caca41288e179f6b9e16fc3dc7141ad0f0c5b78bf3412281a18f4bd4614572043837235b62d07a503a1382cc4549036604a175cff97e6ff5849cc7b16803c10bcb9f8ed2be74b0ad3a2a938d136ce91651b3164020df6cd73309dc1048723c38d71bcebaedd3ffd53a0934956e89d16ed8b5792d7c2490fb1ee0ba7dc20471272f76f996cc92f432edcdfb0b57cbd334b351a7ae066dd5539c7afdd5f22d1f7a2997fd864f5434b8fa704f083e0f41871b"}) (async) 23:36:06 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0285628, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:06 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x2, @pix_mp={0x7, 0x80000001, 0x38414761, 0x5, 0xc, [{0x9}, {0x6, 0x6}, {0x9, 0x5}, {0xc444, 0x9}, {0x2, 0xfffffff7}, {0x8, 0x6}, {0x8001}, {0x32, 0x6}], 0x6, 0x0, 0x6, 0x2, 0x5}}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x1, "475d003fffffffffb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:06 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5452, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:06 executing program 3: socketpair(0x23, 0x29, 0x7fffffff, &(0x7f0000000100)) 23:36:06 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x4f565559, 0x0, @stepwise}) 23:36:06 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x3, @pix_mp={0x80, 0x0, 0x31303553}}) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x1, @pix_mp={0x0, 0x9, 0x3136564e, 0x1, 0x4, [{0x80000001, 0x8}, {0x8000, 0x4}, {0x4, 0x9}, {0x1118, 0xfffffff9}, {0x7, 0x3}, {0x9c0, 0x5680cdc5}, {0x2, 0x8}, {0x8a5, 0x7}], 0x8, 0x8, 0x4, 0x2, 0x6}}) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000240)={0x1, @raw_data="ec6f3ca1229396276fffa58906253963bfebf05d96a123a4bf74b822eced332f6f25d43405f87fa4852b7e65e5fcedfb2c14083d8ee896fcd4308d5a8bb01f9c0aada6c397178a8935d58d47620a0bd0d46618ab41c8d086bd519fef8a787a3f7accbba0d8ab575e48123d46c4521548a44604af2429b2bdec2fc854552f2b4eb196a261c3f4e3e78e703d2386773ad7c7e8a17a06cf59b74abddce84f57df191bc3be15d48c842b0841091f0a18b307346c34878622f37a79c6c3928710bb4b4b556bd5699d4fce"}) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async, rerun: 32) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x2, @raw_data="a6d63a85d33279cc15bd9b4d887c78e80d9340d47fb4b2caca41288e179f6b9e16fc3dc7141ad0f0c5b78bf3412281a18f4bd4614572043837235b62d07a503a1382cc4549036604a175cff97e6ff5849cc7b16803c10bcb9f8ed2be74b0ad3a2a938d136ce91651b3164020df6cd73309dc1048723c38d71bcebaedd3ffd53a0934956e89d16ed8b5792d7c2490fb1ee0ba7dc20471272f76f996cc92f432edcdfb0b57cbd334b351a7ae066dd5539c7afdd5f22d1f7a2997fd864f5434b8fa704f083e0f41871b"}) (rerun: 32) 23:36:06 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0285629, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:06 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x2, @pix_mp={0x7, 0x80000001, 0x38414761, 0x5, 0xc, [{0x9}, {0x6, 0x6}, {0x9, 0x5}, {0xc444, 0x9}, {0x2, 0xfffffff7}, {0x8, 0x6}, {0x8001}, {0x32, 0x6}], 0x6, 0x0, 0x6, 0x2, 0x5}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x1, "475d003fffffffffb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:06 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5460, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:06 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x50323234, 0x0, @stepwise}) 23:36:06 executing program 3: socketpair(0x23, 0x2a, 0x7fffffff, &(0x7f0000000100)) 23:36:06 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x161041, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x0, 0x1001}) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) 23:36:06 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405610, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:06 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x50424752, 0x0, @stepwise}) 23:36:06 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x7ffff}}) 23:36:06 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045612, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:06 executing program 3: socketpair(0x23, 0x2b, 0x7fffffff, &(0x7f0000000100)) 23:36:06 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x7ffff}}) 23:36:06 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x50565559, 0x0, @stepwise}) 23:36:06 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045667, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:06 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0585609, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:06 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x161041, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x0, 0x1001}) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x161041, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000080)) (async) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x0, 0x1001}) (async) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) (async) 23:36:06 executing program 3: socketpair(0x23, 0x2c, 0x7fffffff, &(0x7f0000000100)) 23:36:06 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x51424752, 0x0, @stepwise}) 23:36:06 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x7ffff}}) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x7ffff}}) (async) 23:36:06 executing program 3: socketpair(0x23, 0x2d, 0x7fffffff, &(0x7f0000000100)) 23:36:07 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40049409, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:07 executing program 3: socketpair(0x23, 0x2e, 0x7fffffff, &(0x7f0000000100)) 23:36:07 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:07 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x52424752, 0x0, @stepwise}) 23:36:07 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x161041, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x0, 0x1001}) (async) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) 23:36:07 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x4020940d, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:07 executing program 3: socketpair(0x23, 0x2f, 0x7fffffff, &(0x7f0000000100)) 23:36:07 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0585611, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:07 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x81, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000140)={0x1, @pix={0x7, 0x6, 0x3831354f, 0x9, 0x0, 0x7, 0x2, 0x200, 0x1, 0x6, 0x0, 0x4}}) syz_open_dev$vim2m(&(0x7f0000000080), 0x800, 0x2) syz_open_dev$vim2m(&(0x7f0000000040), 0x49d, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:07 executing program 3: socketpair(0x23, 0x30, 0x7fffffff, &(0x7f0000000100)) 23:36:07 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x55595659, 0x0, @stepwise}) 23:36:07 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x0, @sliced={0x7f, [0x4, 0x4, 0x1, 0x5, 0xbe, 0x18, 0x0, 0x5, 0x1, 0x9, 0x8, 0x8, 0x4400, 0x4, 0xffff, 0x5, 0x64e0, 0xfff7, 0xd0, 0x1, 0x9, 0x0, 0x9, 0x3, 0x8811, 0x101, 0x1, 0x3, 0x40, 0xe7ad, 0xffff, 0x1, 0x0, 0x6, 0x8000, 0x1c, 0x40, 0x6, 0xfffe, 0x0, 0xb213, 0x3, 0x5, 0x8001, 0x365, 0x3, 0x7ff, 0x1ff], 0x40}}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)=@multiplanar_overlay={0x7, 0x2, 0x4, 0x0, 0x7, {0x77359400}, {0x3, 0x2, 0x8, 0x0, 0x1, 0x0, "95ab9508"}, 0x0, 0x3, {&(0x7f0000000000)=[{0x8, 0x1ff80000, {0x5}, 0xb3fc}, {0x2, 0x7, {0x200}, 0x7fffffff}]}, 0x80}) 23:36:07 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0045878, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:07 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:07 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x81, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000140)={0x1, @pix={0x7, 0x6, 0x3831354f, 0x9, 0x0, 0x7, 0x2, 0x200, 0x1, 0x6, 0x0, 0x4}}) (async, rerun: 32) syz_open_dev$vim2m(&(0x7f0000000080), 0x800, 0x2) (rerun: 32) syz_open_dev$vim2m(&(0x7f0000000040), 0x49d, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:07 executing program 3: socketpair(0x23, 0x31, 0x7fffffff, &(0x7f0000000100)) 23:36:07 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0045878, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:07 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x56595559, 0x0, @stepwise}) 23:36:07 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x0, @sliced={0x7f, [0x4, 0x4, 0x1, 0x5, 0xbe, 0x18, 0x0, 0x5, 0x1, 0x9, 0x8, 0x8, 0x4400, 0x4, 0xffff, 0x5, 0x64e0, 0xfff7, 0xd0, 0x1, 0x9, 0x0, 0x9, 0x3, 0x8811, 0x101, 0x1, 0x3, 0x40, 0xe7ad, 0xffff, 0x1, 0x0, 0x6, 0x8000, 0x1c, 0x40, 0x6, 0xfffe, 0x0, 0xb213, 0x3, 0x5, 0x8001, 0x365, 0x3, 0x7ff, 0x1ff], 0x40}}) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)=@multiplanar_overlay={0x7, 0x2, 0x4, 0x0, 0x7, {0x77359400}, {0x3, 0x2, 0x8, 0x0, 0x1, 0x0, "95ab9508"}, 0x0, 0x3, {&(0x7f0000000000)=[{0x8, 0x1ff80000, {0x5}, 0xb3fc}, {0x2, 0x7, {0x200}, 0x7fffffff}]}, 0x80}) 23:36:07 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc1005667, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:07 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x59455247, 0x0, @stepwise}) 23:36:07 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x81, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000140)={0x1, @pix={0x7, 0x6, 0x3831354f, 0x9, 0x0, 0x7, 0x2, 0x200, 0x1, 0x6, 0x0, 0x4}}) syz_open_dev$vim2m(&(0x7f0000000080), 0x800, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000040), 0x49d, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:07 executing program 3: socketpair(0x23, 0x32, 0x7fffffff, &(0x7f0000000100)) 23:36:07 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0145608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:07 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:07 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x0, @sliced={0x7f, [0x4, 0x4, 0x1, 0x5, 0xbe, 0x18, 0x0, 0x5, 0x1, 0x9, 0x8, 0x8, 0x4400, 0x4, 0xffff, 0x5, 0x64e0, 0xfff7, 0xd0, 0x1, 0x9, 0x0, 0x9, 0x3, 0x8811, 0x101, 0x1, 0x3, 0x40, 0xe7ad, 0xffff, 0x1, 0x0, 0x6, 0x8000, 0x1c, 0x40, 0x6, 0xfffe, 0x0, 0xb213, 0x3, 0x5, 0x8001, 0x365, 0x3, 0x7ff, 0x1ff], 0x40}}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)=@multiplanar_overlay={0x7, 0x2, 0x4, 0x0, 0x7, {0x77359400}, {0x3, 0x2, 0x8, 0x0, 0x1, 0x0, "95ab9508"}, 0x0, 0x3, {&(0x7f0000000000)=[{0x8, 0x1ff80000, {0x5}, 0xb3fc}, {0x2, 0x7, {0x200}, 0x7fffffff}]}, 0x80}) 23:36:07 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:07 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x59555956, 0x0, @stepwise}) 23:36:07 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x2, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:07 executing program 3: socketpair(0x23, 0x33, 0x7fffffff, &(0x7f0000000100)) 23:36:07 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x59565955, 0x0, @stepwise}) 23:36:07 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:07 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3982ca12, 0x2) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x100000000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f00000000c0)={0x2, 0x3, 0x0, "d40a83d8ee3a5055318f0d623296cc79cf5aa1485e7cf4abb0c966c08c92b67a", 0x34325842}) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405608, &(0x7f0000000140)={0xfffffffc, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:07 executing program 3: socketpair(0x23, 0x34, 0x7fffffff, &(0x7f0000000100)) 23:36:07 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x1000000, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:07 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0xa0363159, 0x0, @stepwise}) 23:36:07 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205649, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:07 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3982ca12, 0x2) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x100000000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f00000000c0)={0x2, 0x3, 0x0, "d40a83d8ee3a5055318f0d623296cc79cf5aa1485e7cf4abb0c966c08c92b67a", 0x34325842}) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405608, &(0x7f0000000140)={0xfffffffc, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)) (async) syz_open_dev$vim2m(&(0x7f0000000040), 0x3982ca12, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000080), 0x100000000, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f00000000c0)={0x2, 0x3, 0x0, "d40a83d8ee3a5055318f0d623296cc79cf5aa1485e7cf4abb0c966c08c92b67a", 0x34325842}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405608, &(0x7f0000000140)={0xfffffffc, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:36:07 executing program 3: socketpair(0x23, 0x35, 0x7fffffff, &(0x7f0000000100)) 23:36:07 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x2000000, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:07 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc020660b, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:07 executing program 5: r0 = socket(0x9, 0x2, 0x800) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @broadcast, @private}, &(0x7f00000000c0)=0xc) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) r7 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8}, 0x48) r9 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r10}, 0x48) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x1, 0x20, 0x3, 0x800, {{0xe, 0x4, 0x3, 0x2a, 0x38, 0x64, 0x0, 0x1e, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@ra={0x94, 0x4}, @ssrr={0x89, 0xf, 0x39, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast1]}, @ssrr={0x89, 0xf, 0x87, [@remote, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end]}}}}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @remote, @broadcast}, &(0x7f0000000240)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @initdev}, &(0x7f00000002c0)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)={0x5cc, r1, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3f}}}]}}, {{0x8, 0x1, r4}, {0x17c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r8}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x81, 0x8, 0x2, 0xbff7}, {0x7ff, 0x8, 0x4, 0x7}, {0x0, 0x1, 0x1, 0x8}, {0x5, 0xfe, 0x7, 0x80000000}, {0x0, 0x4, 0x0, 0x401}, {0x989f, 0xec, 0x3f, 0x4}, {0xc046, 0x9, 0xff}, {0x5, 0x9, 0x4, 0x7fff}, {0x1, 0x4, 0xff, 0x7f}, {0xcd6b, 0x43, 0x5, 0xa8d2}]}}}]}}, {{0x8, 0x1, r10}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xbe4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffbff}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x26c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3e19}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xf}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x5cc}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) r14 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r14, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:07 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0xb5315241, 0x0, @stepwise}) 23:36:07 executing program 3: socketpair(0x23, 0x36, 0x7fffffff, &(0x7f0000000100)) 23:36:07 executing program 5: r0 = socket(0x9, 0x2, 0x800) (async) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48) (async, rerun: 64) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @broadcast, @private}, &(0x7f00000000c0)=0xc) (async, rerun: 64) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) r7 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8}, 0x48) r9 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r10}, 0x48) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x1, 0x20, 0x3, 0x800, {{0xe, 0x4, 0x3, 0x2a, 0x38, 0x64, 0x0, 0x1e, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@ra={0x94, 0x4}, @ssrr={0x89, 0xf, 0x39, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast1]}, @ssrr={0x89, 0xf, 0x87, [@remote, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end]}}}}}) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @remote, @broadcast}, &(0x7f0000000240)=0xc) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @initdev}, &(0x7f00000002c0)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)={0x5cc, r1, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3f}}}]}}, {{0x8, 0x1, r4}, {0x17c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r8}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x81, 0x8, 0x2, 0xbff7}, {0x7ff, 0x8, 0x4, 0x7}, {0x0, 0x1, 0x1, 0x8}, {0x5, 0xfe, 0x7, 0x80000000}, {0x0, 0x4, 0x0, 0x401}, {0x989f, 0xec, 0x3f, 0x4}, {0xc046, 0x9, 0xff}, {0x5, 0x9, 0x4, 0x7fff}, {0x1, 0x4, 0xff, 0x7f}, {0xcd6b, 0x43, 0x5, 0xa8d2}]}}}]}}, {{0x8, 0x1, r10}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xbe4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffbff}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x26c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3e19}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xf}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x5cc}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) (async) r14 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r14, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:07 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0xb5315258, 0x0, @stepwise}) 23:36:07 executing program 3: socketpair(0x23, 0x37, 0x7fffffff, &(0x7f0000000100)) 23:36:07 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0285628, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:07 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:07 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3982ca12, 0x2) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x100000000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f00000000c0)={0x2, 0x3, 0x0, "d40a83d8ee3a5055318f0d623296cc79cf5aa1485e7cf4abb0c966c08c92b67a", 0x34325842}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405608, &(0x7f0000000140)={0xfffffffc, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:07 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x0, @pix={0xac, 0x4, 0x41414770, 0x6, 0x3ff, 0x72, 0x0, 0x9, 0x0, 0x4, 0x2, 0x6}}) 23:36:07 executing program 3: socketpair(0x23, 0x38, 0x7fffffff, &(0x7f0000000100)) 23:36:07 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:07 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x1, 0x1, "47380300001de00000a4ac7eff11055f1d00"}) 23:36:07 executing program 5: r0 = socket(0x9, 0x2, 0x800) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @broadcast, @private}, &(0x7f00000000c0)=0xc) (async) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) r7 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8}, 0x48) (async, rerun: 64) r9 = socket$l2tp(0x2, 0x2, 0x73) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r10}, 0x48) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x1, 0x20, 0x3, 0x800, {{0xe, 0x4, 0x3, 0x2a, 0x38, 0x64, 0x0, 0x1e, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@ra={0x94, 0x4}, @ssrr={0x89, 0xf, 0x39, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast1]}, @ssrr={0x89, 0xf, 0x87, [@remote, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end]}}}}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @remote, @broadcast}, &(0x7f0000000240)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @initdev}, &(0x7f00000002c0)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)={0x5cc, r1, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3f}}}]}}, {{0x8, 0x1, r4}, {0x17c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r8}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x81, 0x8, 0x2, 0xbff7}, {0x7ff, 0x8, 0x4, 0x7}, {0x0, 0x1, 0x1, 0x8}, {0x5, 0xfe, 0x7, 0x80000000}, {0x0, 0x4, 0x0, 0x401}, {0x989f, 0xec, 0x3f, 0x4}, {0xc046, 0x9, 0xff}, {0x5, 0x9, 0x4, 0x7fff}, {0x1, 0x4, 0xff, 0x7f}, {0xcd6b, 0x43, 0x5, 0xa8d2}]}}}]}}, {{0x8, 0x1, r10}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xbe4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffbff}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x26c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3e19}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xf}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x5cc}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) (async, rerun: 32) r14 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (rerun: 32) ioctl$vim2m_VIDIOC_TRY_FMT(r14, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:07 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0285629, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:07 executing program 3: socketpair(0x23, 0x39, 0x7fffffff, &(0x7f0000000100)) 23:36:07 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x0, @pix={0xac, 0x4, 0x41414770, 0x6, 0x3ff, 0x72, 0x0, 0x9, 0x0, 0x4, 0x2, 0x6}}) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x0, @pix={0xac, 0x4, 0x41414770, 0x6, 0x3ff, 0x72, 0x0, 0x9, 0x0, 0x4, 0x2, 0x6}}) (async) 23:36:07 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x1000000, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:07 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x1, 0x1, "47380300001de00000a4ac7eff11055f1d00"}) 23:36:07 executing program 3: socketpair(0x23, 0x3a, 0x7fffffff, &(0x7f0000000100)) 23:36:07 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405610, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:07 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x1, 0x1, "47380300001de00000a4ac7eff11055f1d00"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x1, 0x1, "47380300001de00000a4ac7eff11055f1d00"}) (async) 23:36:07 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x0, @pix={0xac, 0x4, 0x41414770, 0x6, 0x3ff, 0x72, 0x0, 0x9, 0x0, 0x4, 0x2, 0x6}}) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x0, @pix={0xac, 0x4, 0x41414770, 0x6, 0x3ff, 0x72, 0x0, 0x9, 0x0, 0x4, 0x2, 0x6}}) (async) 23:36:07 executing program 5: ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000040)=0x3) socket(0x1d, 0x4, 0x4) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0x40345622, &(0x7f0000000000)={0xe0, "c1708b7c43e396fa8da6406a4086088666f1c0683ee29bf7aa0c43c415f5f4ef", 0x2, 0x1}) 23:36:07 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x2000000, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:07 executing program 3: socketpair(0x23, 0x3b, 0x7fffffff, &(0x7f0000000100)) 23:36:07 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0585609, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:07 executing program 1: ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, &(0x7f0000000000)={0x81, "b42274a68be5afd742f9975519b2ea64aa3c9a8ca681e65956bbe495396cef3a", 0x2, 0x3, 0x3, 0x100000, 0x2}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000080)={0x9, "6e150513187b0bdb4a0fe6e751c5bb6422ee85828b467f31c033aba31bd28b18", 0x3, 0xfffffffe, 0x3, 0x1000, 0x4000000, 0x2}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:07 executing program 3: socketpair(0x23, 0x3c, 0x7fffffff, &(0x7f0000000100)) 23:36:07 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:07 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x7fff, 0xb40d}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x6e063b24, 0x0, @stepwise}) 23:36:08 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:08 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x7fff, 0xb40d}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x6e063b24, 0x0, @stepwise}) [ 2321.599552] can: request_module (can-proto-4) failed. 23:36:08 executing program 1: ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, &(0x7f0000000000)={0x81, "b42274a68be5afd742f9975519b2ea64aa3c9a8ca681e65956bbe495396cef3a", 0x2, 0x3, 0x3, 0x100000, 0x2}) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000080)={0x9, "6e150513187b0bdb4a0fe6e751c5bb6422ee85828b467f31c033aba31bd28b18", 0x3, 0xfffffffe, 0x3, 0x1000, 0x4000000, 0x2}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:08 executing program 5: ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000040)=0x3) socket(0x1d, 0x4, 0x4) (async, rerun: 64) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (rerun: 64) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0x40345622, &(0x7f0000000000)={0xe0, "c1708b7c43e396fa8da6406a4086088666f1c0683ee29bf7aa0c43c415f5f4ef", 0x2, 0x1}) 23:36:08 executing program 3: socketpair(0x23, 0x3d, 0x7fffffff, &(0x7f0000000100)) 23:36:08 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x2, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:08 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0585611, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:08 executing program 3: socketpair(0x23, 0x3e, 0x7fffffff, &(0x7f0000000100)) 23:36:08 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x7fff, 0xb40d}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x6e063b24, 0x0, @stepwise}) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x7fff, 0xb40d}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x6e063b24, 0x0, @stepwise}) (async) 23:36:08 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x1000000, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:08 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:08 executing program 1: ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, &(0x7f0000000000)={0x81, "b42274a68be5afd742f9975519b2ea64aa3c9a8ca681e65956bbe495396cef3a", 0x2, 0x3, 0x3, 0x100000, 0x2}) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000080)={0x9, "6e150513187b0bdb4a0fe6e751c5bb6422ee85828b467f31c033aba31bd28b18", 0x3, 0xfffffffe, 0x3, 0x1000, 0x4000000, 0x2}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) [ 2321.736696] can: request_module (can-proto-4) failed. 23:36:08 executing program 3: socketpair(0x23, 0x41, 0x7fffffff, &(0x7f0000000100)) 23:36:08 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x2000000, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) [ 2321.781359] can: request_module (can-proto-4) failed. 23:36:08 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000100)={0x1, 0x200}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0x5, 0xdcda}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) [ 2321.839882] can: request_module (can-proto-4) failed. [ 2321.887817] can: request_module (can-proto-4) failed. [ 2321.900461] can: request_module (can-proto-4) failed. [ 2321.916400] can: request_module (can-proto-4) failed. [ 2321.926940] can: request_module (can-proto-4) failed. [ 2321.937529] can: request_module (can-proto-4) failed. [ 2321.948629] can: request_module (can-proto-4) failed. 23:36:08 executing program 3: socketpair(0x23, 0x42, 0x7fffffff, &(0x7f0000000100)) 23:36:08 executing program 5: ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000040)=0x3) socket(0x1d, 0x4, 0x4) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0x40345622, &(0x7f0000000000)={0xe0, "c1708b7c43e396fa8da6406a4086088666f1c0683ee29bf7aa0c43c415f5f4ef", 0x2, 0x1}) 23:36:08 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:08 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0xffffffee, 0x17e9, 0x3, {0x3, @win={{0xfda, 0xfffffff7, 0x8, 0x8}, 0x0, 0xec, &(0x7f0000000080)={{0x99d9b59, 0x25e5, 0x4, 0x2}, &(0x7f0000000040)={{0x0, 0x705, 0x80, 0x8}, &(0x7f0000000000)={{0x7, 0x1, 0x6, 0x80000001}}}}, 0x8000, &(0x7f0000000180)="27d2a5672160d6eb6ca66c1bee03fe11663bec3eb398086fe002e3f9f97764e92987bd3eecee5a7d0b968bf000e06241b8035488ce8e3f8119667febcd6b15a6a97def06f20f695f44020234f864c3cec8dcb60f4595519681a38edbc081e5802f320d76adb02372c7adf94655f57fbf98f82dadea10da8dd4170018a57313c4ac02bdd52b8884", 0xfb}}, 0xffff3443}) 23:36:08 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000100)={0x1, 0x200}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0x5, 0xdcda}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) (async) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000100)={0x1, 0x200}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0x5, 0xdcda}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) 23:36:08 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d023fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:08 executing program 3: socketpair(0x23, 0x43, 0x7fffffff, &(0x7f0000000100)) 23:36:08 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:08 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000100)={0x1, 0x200}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0x5, 0xdcda}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) (async) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000100)={0x1, 0x200}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0x5, 0xdcda}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) 23:36:08 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003f02000000b805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:08 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0xffffffee, 0x17e9, 0x3, {0x3, @win={{0xfda, 0xfffffff7, 0x8, 0x8}, 0x0, 0xec, &(0x7f0000000080)={{0x99d9b59, 0x25e5, 0x4, 0x2}, &(0x7f0000000040)={{0x0, 0x705, 0x80, 0x8}, &(0x7f0000000000)={{0x7, 0x1, 0x6, 0x80000001}}}}, 0x8000, &(0x7f0000000180)="27d2a5672160d6eb6ca66c1bee03fe11663bec3eb398086fe002e3f9f97764e92987bd3eecee5a7d0b968bf000e06241b8035488ce8e3f8119667febcd6b15a6a97def06f20f695f44020234f864c3cec8dcb60f4595519681a38edbc081e5802f320d76adb02372c7adf94655f57fbf98f82dadea10da8dd4170018a57313c4ac02bdd52b8884", 0xfb}}, 0xffff3443}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0xffffffee, 0x17e9, 0x3, {0x3, @win={{0xfda, 0xfffffff7, 0x8, 0x8}, 0x0, 0xec, &(0x7f0000000080)={{0x99d9b59, 0x25e5, 0x4, 0x2}, &(0x7f0000000040)={{0x0, 0x705, 0x80, 0x8}, &(0x7f0000000000)={{0x7, 0x1, 0x6, 0x80000001}}}}, 0x8000, &(0x7f0000000180)="27d2a5672160d6eb6ca66c1bee03fe11663bec3eb398086fe002e3f9f97764e92987bd3eecee5a7d0b968bf000e06241b8035488ce8e3f8119667febcd6b15a6a97def06f20f695f44020234f864c3cec8dcb60f4595519681a38edbc081e5802f320d76adb02372c7adf94655f57fbf98f82dadea10da8dd4170018a57313c4ac02bdd52b8884", 0xfb}}, 0xffff3443}) (async) 23:36:08 executing program 3: socketpair(0x23, 0x44, 0x7fffffff, &(0x7f0000000100)) 23:36:08 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0xc, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:08 executing program 5: ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x5, 0x0, 0x9, 0x4000}) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000140)={0x0, @vbi={0x81, 0x7fffffff, 0x3, 0x59555956, [0x3, 0x7], [0x9, 0x1], 0x108}}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:08 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003f03000000b805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:08 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0xffffffee, 0x17e9, 0x3, {0x3, @win={{0xfda, 0xfffffff7, 0x8, 0x8}, 0x0, 0xec, &(0x7f0000000080)={{0x99d9b59, 0x25e5, 0x4, 0x2}, &(0x7f0000000040)={{0x0, 0x705, 0x80, 0x8}, &(0x7f0000000000)={{0x7, 0x1, 0x6, 0x80000001}}}}, 0x8000, &(0x7f0000000180)="27d2a5672160d6eb6ca66c1bee03fe11663bec3eb398086fe002e3f9f97764e92987bd3eecee5a7d0b968bf000e06241b8035488ce8e3f8119667febcd6b15a6a97def06f20f695f44020234f864c3cec8dcb60f4595519681a38edbc081e5802f320d76adb02372c7adf94655f57fbf98f82dadea10da8dd4170018a57313c4ac02bdd52b8884", 0xfb}}, 0xffff3443}) 23:36:08 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x101, 0x2c, 0x1, {0x2, @pix={0xbc3, 0x3, 0x34433350, 0x1, 0x8000, 0x5c6, 0x0, 0x44be, 0x1, 0x6, 0x0, 0x5}}, 0x70}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, r1, 0x0, 0xc, &(0x7f00000001c0)='/dev/video#\x00'}, 0x30) 23:36:08 executing program 3: socketpair(0x23, 0x45, 0x7fffffff, &(0x7f0000000100)) 23:36:08 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003f04000000b805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:08 executing program 5: ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x5, 0x0, 0x9, 0x4000}) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000140)={0x0, @vbi={0x81, 0x7fffffff, 0x3, 0x59555956, [0x3, 0x7], [0x9, 0x1], 0x108}}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x5, 0x0, 0x9, 0x4000}) (async) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) (async) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000140)={0x0, @vbi={0x81, 0x7fffffff, 0x3, 0x59555956, [0x3, 0x7], [0x9, 0x1], 0x108}}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) 23:36:08 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0xc00, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:08 executing program 3: socketpair(0x23, 0x46, 0x7fffffff, &(0x7f0000000100)) 23:36:08 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "525d003fe11ed5bbb80546d0f1c62f7219000000228000000000000000001de0", 0x30313953}) 23:36:08 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003f05000000b805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:08 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x1000000, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:08 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x101, 0x2c, 0x1, {0x2, @pix={0xbc3, 0x3, 0x34433350, 0x1, 0x8000, 0x5c6, 0x0, 0x44be, 0x1, 0x6, 0x0, 0x5}}, 0x70}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, r1, 0x0, 0xc, &(0x7f00000001c0)='/dev/video#\x00'}, 0x30) 23:36:08 executing program 3: socketpair(0x23, 0x47, 0x7fffffff, &(0x7f0000000100)) 23:36:08 executing program 5: ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x5, 0x0, 0x9, 0x4000}) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000140)={0x0, @vbi={0x81, 0x7fffffff, 0x3, 0x59555956, [0x3, 0x7], [0x9, 0x1], 0x108}}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x5, 0x0, 0x9, 0x4000}) (async) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) (async) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000140)={0x0, @vbi={0x81, 0x7fffffff, 0x3, 0x59555956, [0x3, 0x7], [0x9, 0x1], 0x108}}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) 23:36:08 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003f06000000b805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:08 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "525d003fe11ed5bbb80546d0f1c62f7219000000228000000000000000001de0", 0x30313953}) 23:36:08 executing program 3: socketpair(0x23, 0x48, 0x7fffffff, &(0x7f0000000100)) 23:36:09 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "525d003fe11ed5bbb80546d0f1c62f7219000000228000000000000000001de0", 0x30313953}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "525d003fe11ed5bbb80546d0f1c62f7219000000228000000000000000001de0", 0x30313953}) (async) 23:36:09 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x101, 0x2c, 0x1, {0x2, @pix={0xbc3, 0x3, 0x34433350, 0x1, 0x8000, 0x5c6, 0x0, 0x44be, 0x1, 0x6, 0x0, 0x5}}, 0x70}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, r1, 0x0, 0xc, &(0x7f00000001c0)='/dev/video#\x00'}, 0x30) 23:36:09 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0xe9) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:09 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0xc000000, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:09 executing program 3: socketpair(0x23, 0x49, 0x7fffffff, &(0x7f0000000100)) 23:36:09 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003f07000000b805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:09 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000180)) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x1800, 0x20303159, 0x1, @discrete={0x7fd9, 0x8}}) 23:36:09 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0xe9) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:09 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:09 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) socket(0x15, 0x2, 0x200) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000040)=@mmap={0xcc, 0x1, 0x4, 0x1000, 0x14000000, {0x0, 0xea60}, {0x3, 0x1, 0x8, 0x0, 0x8, 0x0, "76aadd02"}, 0xdf800000, 0x1, {}, 0x1, 0x0, r1}) 23:36:09 executing program 3: socketpair(0x23, 0x4a, 0x7fffffff, &(0x7f0000000100)) 23:36:09 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0xe9) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0xe9) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) 23:36:09 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000180)) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x1800, 0x20303159, 0x1, @discrete={0x7fd9, 0x8}}) 23:36:09 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) socket(0x15, 0x2, 0x200) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000040)=@mmap={0xcc, 0x1, 0x4, 0x1000, 0x14000000, {0x0, 0xea60}, {0x3, 0x1, 0x8, 0x0, 0x8, 0x0, "76aadd02"}, 0xdf800000, 0x1, {}, 0x1, 0x0, r1}) 23:36:09 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003f08000000b805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:09 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0xc, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:09 executing program 3: socketpair(0x23, 0x4b, 0x7fffffff, &(0x7f0000000100)) 23:36:09 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003f09000000b805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:09 executing program 3: socketpair(0x23, 0x4c, 0x7fffffff, &(0x7f0000000100)) 23:36:09 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) socket(0x15, 0x2, 0x200) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000040)=@mmap={0xcc, 0x1, 0x4, 0x1000, 0x14000000, {0x0, 0xea60}, {0x3, 0x1, 0x8, 0x0, 0x8, 0x0, "76aadd02"}, 0xdf800000, 0x1, {}, 0x1, 0x0, r1}) 23:36:09 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0xc00, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:09 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x8, 0x1, 0x1, "ad7cd4b85cf1a11573a36be7caf7d7cf37fbab5d0d286c609c7caa902dfb4e86", 0x39565559}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:09 executing program 3: socketpair(0x23, 0x4d, 0x7fffffff, &(0x7f0000000100)) 23:36:09 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000180)) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x1800, 0x20303159, 0x1, @discrete={0x7fd9, 0x8}}) 23:36:09 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003f0a000000b805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:09 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x8, 0x1, 0x1, "ad7cd4b85cf1a11573a36be7caf7d7cf37fbab5d0d286c609c7caa902dfb4e86", 0x39565559}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) getsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:09 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x1) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x80, 0x36314d59, 0x0, @discrete={0x3ff, 0x101}}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x6) 23:36:09 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x1000000, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:09 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x5, 0x2, 0x0, "0600000000000000b805dfd0f1c62f00000000090000000000000000001de000", 0x7912746b}) 23:36:09 executing program 3: socketpair(0x23, 0x4e, 0x7fffffff, &(0x7f0000000100)) 23:36:09 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003f0b000000b805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:09 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0xc000000, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:09 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async, rerun: 64) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x8, 0x1, 0x1, "ad7cd4b85cf1a11573a36be7caf7d7cf37fbab5d0d286c609c7caa902dfb4e86", 0x39565559}) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) getsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:09 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x1) (async) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10) (async) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x80, 0x36314d59, 0x0, @discrete={0x3ff, 0x101}}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x6) 23:36:09 executing program 3: socketpair(0x23, 0x4f, 0x7fffffff, &(0x7f0000000100)) 23:36:09 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x5, 0x2, 0x0, "0600000000000000b805dfd0f1c62f00000000090000000000000000001de000", 0x7912746b}) 23:36:09 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:09 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003f0c000000b805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:09 executing program 3: socketpair(0x23, 0x50, 0x7fffffff, &(0x7f0000000100)) 23:36:09 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x1) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x80, 0x36314d59, 0x0, @discrete={0x3ff, 0x101}}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x6) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x1) (async) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10) (async) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x80, 0x36314d59, 0x0, @discrete={0x3ff, 0x101}}) (async) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x6) (async) 23:36:09 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) read$ptp(r1, &(0x7f0000000000)=""/91, 0x5b) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x4, 0x0, [{}, {}, {0xfffffffe}]}}) 23:36:09 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0xc, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:09 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003f0d000000b805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:09 executing program 3: socketpair(0x23, 0x51, 0x7fffffff, &(0x7f0000000100)) 23:36:09 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x5, 0x2, 0x0, "0600000000000000b805dfd0f1c62f00000000090000000000000000001de000", 0x7912746b}) 23:36:09 executing program 4: syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) 23:36:09 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) read$ptp(r1, &(0x7f0000000000)=""/91, 0x5b) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x4, 0x0, [{}, {}, {0xfffffffe}]}}) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) read$ptp(r1, &(0x7f0000000000)=""/91, 0x5b) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x4, 0x0, [{}, {}, {0xfffffffe}]}}) (async) 23:36:09 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0xc00, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:09 executing program 3: socketpair(0x23, 0x52, 0x7fffffff, &(0x7f0000000100)) 23:36:09 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7202000000220000000000000000001de0"}) 23:36:09 executing program 4: syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) 23:36:09 executing program 3: socketpair(0x23, 0x53, 0x7fffffff, &(0x7f0000000100)) 23:36:09 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x1000000, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:09 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x5, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:09 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) read$ptp(r1, &(0x7f0000000000)=""/91, 0x5b) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x4, 0x0, [{}, {}, {0xfffffffe}]}}) 23:36:09 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000001220000000000000000001de0"}) 23:36:09 executing program 3: socketpair(0x23, 0x54, 0x7fffffff, &(0x7f0000000100)) 23:36:09 executing program 4: syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) 23:36:09 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0xc000000, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:09 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x5, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:09 executing program 5: ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x5) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x28000) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x1ff}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x24fc}], 0x0, 0x0, 0x6}}) 23:36:09 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000002220000000000000000001de0"}) 23:36:09 executing program 3: socketpair(0x23, 0x55, 0x7fffffff, &(0x7f0000000100)) 23:36:09 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d0c3fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:09 executing program 4: syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31324d4e, 0x0, @stepwise={0x0, 0x0, 0x1}}) clock_gettime(0x0, &(0x7f0000000040)) r1 = syz_open_dev$vim2m(&(0x7f0000000200), 0x4, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000100)=@multiplanar_mmap={0x9, 0x1, 0x4, 0x10, 0x6, {0x0, 0xea60}, {0x6, 0x1, 0x9, 0x63, 0xd2, 0x7, "2f930fcd"}, 0xf76, 0x1, {&(0x7f0000000080)=[{0x4, 0x7fff, {0x8000}, 0x8}, {0x2, 0x1, {0x802}, 0x1000}]}}) 23:36:09 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x5, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:09 executing program 5: ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x5) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x28000) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x1ff}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x24fc}], 0x0, 0x0, 0x6}}) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x5) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x28000) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) (async) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x1ff}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x24fc}], 0x0, 0x0, 0x6}}) (async) 23:36:09 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200020000220000000000000000001de0"}) 23:36:09 executing program 3: socketpair(0x23, 0x56, 0x7fffffff, &(0x7f0000000100)) 23:36:10 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f0000000140)={0x1ff, "604c5c72d9ba8685cfc8455835fece861ec7b01f9584af566f0fd0fd1813f62b", 0x2, 0x40, 0x4, 0x7, 0x4, 0x2, 0xfffffffe, 0x6}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000000)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x3132564e}) 23:36:10 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f720c000000220000000000000000001de0"}) 23:36:10 executing program 4: syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31324d4e, 0x0, @stepwise={0x0, 0x0, 0x1}}) clock_gettime(0x0, &(0x7f0000000040)) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000200), 0x4, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000100)=@multiplanar_mmap={0x9, 0x1, 0x4, 0x10, 0x6, {0x0, 0xea60}, {0x6, 0x1, 0x9, 0x63, 0xd2, 0x7, "2f930fcd"}, 0xf76, 0x1, {&(0x7f0000000080)=[{0x4, 0x7fff, {0x8000}, 0x8}, {0x2, 0x1, {0x802}, 0x1000}]}}) 23:36:10 executing program 5: ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x5) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x28000) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x1ff}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x24fc}], 0x0, 0x0, 0x6}}) 23:36:10 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000200220000000000000000001de0"}) 23:36:10 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f72000c0000220000000000000000001de0"}) 23:36:10 executing program 4: syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31324d4e, 0x0, @stepwise={0x0, 0x0, 0x1}}) (async) clock_gettime(0x0, &(0x7f0000000040)) r1 = syz_open_dev$vim2m(&(0x7f0000000200), 0x4, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000100)=@multiplanar_mmap={0x9, 0x1, 0x4, 0x10, 0x6, {0x0, 0xea60}, {0x6, 0x1, 0x9, 0x63, 0xd2, 0x7, "2f930fcd"}, 0xf76, 0x1, {&(0x7f0000000080)=[{0x4, 0x7fff, {0x8000}, 0x8}, {0x2, 0x1, {0x802}, 0x1000}]}}) 23:36:10 executing program 3: socketpair(0x23, 0x57, 0x7fffffff, &(0x7f0000000100)) 23:36:10 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f0000000140)={0x1ff, "604c5c72d9ba8685cfc8455835fece861ec7b01f9584af566f0fd0fd1813f62b", 0x2, 0x40, 0x4, 0x7, 0x4, 0x2, 0xfffffffe, 0x6}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000000)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x3132564e}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f0000000140)={0x1ff, "604c5c72d9ba8685cfc8455835fece861ec7b01f9584af566f0fd0fd1813f62b", 0x2, 0x40, 0x4, 0x7, 0x4, 0x2, 0xfffffffe, 0x6}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000000)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x3132564e}) (async) 23:36:10 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000080)) 23:36:10 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f0000000140)={0x1ff, "604c5c72d9ba8685cfc8455835fece861ec7b01f9584af566f0fd0fd1813f62b", 0x2, 0x40, 0x4, 0x7, 0x4, 0x2, 0xfffffffe, 0x6}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000000)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x3132564e}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f0000000140)={0x1ff, "604c5c72d9ba8685cfc8455835fece861ec7b01f9584af566f0fd0fd1813f62b", 0x2, 0x40, 0x4, 0x7, 0x4, 0x2, 0xfffffffe, 0x6}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000000)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x3132564e}) (async) 23:36:10 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000002220000000000000000001de0"}) 23:36:10 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0xa0803, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f00000000c0)={{0x0, 0x7}, {0x9, 0x2}, 0x983, 0x1}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000040)='syz1\x00') ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x40000000) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000580)={0x2, @pix_mp={0xfffffffe, 0xfffffff6, 0x0, 0x0, 0x2, [{}, {0x800, 0x4}, {0x1}, {}, {0x0, 0xfffffffc}, {0x6, 0x1}, {}, {0x20000000, 0xfffffffe}], 0x0, 0x0, 0x1, 0x1}}) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000140)={0x20, "ba4acbd1b2f4c70282214c507f1a8871905c413c3a1085f4d7ba4858b5240999", 0x1}) 23:36:10 executing program 3: socketpair(0x23, 0x58, 0x7fffffff, &(0x7f0000000100)) 23:36:10 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000080)) 23:36:10 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000001220000000000000000001de0"}) 23:36:10 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x2, 0x4, 0x1, {0x6ebde9de0ea97f6f, @pix={0xe7e2, 0x200, 0x61170e38, 0x2, 0x7, 0xb4, 0x7, 0x3, 0x0, 0x4, 0x0, 0x4}}, 0x86d5}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x5, @pix={0x0, 0x10001, 0x20343059, 0x2, 0x5, 0x0, 0x8, 0x0, 0x1, 0x2, 0x0, 0x1}}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r2, 0x8010500c, &(0x7f00000001c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 23:36:10 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220200000000000000001de0"}) 23:36:10 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f720000000c220000000000000000001de0"}) 23:36:10 executing program 3: socketpair(0x23, 0x59, 0x7fffffff, &(0x7f0000000100)) 23:36:10 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000080)) 23:36:10 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x2, 0x4, 0x1, {0x6ebde9de0ea97f6f, @pix={0xe7e2, 0x200, 0x61170e38, 0x2, 0x7, 0xb4, 0x7, 0x3, 0x0, 0x4, 0x0, 0x4}}, 0x86d5}) (async) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x5, @pix={0x0, 0x10001, 0x20343059, 0x2, 0x5, 0x0, 0x8, 0x0, 0x1, 0x2, 0x0, 0x1}}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r2, 0x8010500c, &(0x7f00000001c0)) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 23:36:10 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f72000c0000220000000000000000001de0"}) 23:36:10 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0xa0803, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f00000000c0)={{0x0, 0x7}, {0x9, 0x2}, 0x983, 0x1}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000040)='syz1\x00') ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x40000000) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000580)={0x2, @pix_mp={0xfffffffe, 0xfffffff6, 0x0, 0x0, 0x2, [{}, {0x800, 0x4}, {0x1}, {}, {0x0, 0xfffffffc}, {0x6, 0x1}, {}, {0x20000000, 0xfffffffe}], 0x0, 0x0, 0x1, 0x1}}) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000140)={0x20, "ba4acbd1b2f4c70282214c507f1a8871905c413c3a1085f4d7ba4858b5240999", 0x1}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0xa0803, 0x0) (async) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f00000000c0)={{0x0, 0x7}, {0x9, 0x2}, 0x983, 0x1}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000040)='syz1\x00') (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x40000000) (async) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000580)={0x2, @pix_mp={0xfffffffe, 0xfffffff6, 0x0, 0x0, 0x2, [{}, {0x800, 0x4}, {0x1}, {}, {0x0, 0xfffffffc}, {0x6, 0x1}, {}, {0x20000000, 0xfffffffe}], 0x0, 0x0, 0x1, 0x1}}) (async) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000140)={0x20, "ba4acbd1b2f4c70282214c507f1a8871905c413c3a1085f4d7ba4858b5240999", 0x1}) (async) 23:36:10 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000100000000001de0"}) 23:36:10 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000c00220000000000000000001de0"}) 23:36:10 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0xa0803, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f00000000c0)={{0x0, 0x7}, {0x9, 0x2}, 0x983, 0x1}) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000040)='syz1\x00') (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x40000000) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000580)={0x2, @pix_mp={0xfffffffe, 0xfffffff6, 0x0, 0x0, 0x2, [{}, {0x800, 0x4}, {0x1}, {}, {0x0, 0xfffffffc}, {0x6, 0x1}, {}, {0x20000000, 0xfffffffe}], 0x0, 0x0, 0x1, 0x1}}) (async) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000140)={0x20, "ba4acbd1b2f4c70282214c507f1a8871905c413c3a1085f4d7ba4858b5240999", 0x1}) 23:36:10 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000200000000001de0"}) 23:36:10 executing program 3: socketpair(0x23, 0x5a, 0x7fffffff, &(0x7f0000000100)) 23:36:10 executing program 4: syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) syz_open_dev$vim2m(&(0x7f0000000140), 0x401, 0x2) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000001c0)=@multiplanar_mmap={0x7, 0x4, 0x4, 0x70000, 0x1, {0x77359400}, {0x2, 0x0, 0x5, 0x9, 0x2, 0x1f, "ae20c3da"}, 0x6, 0x1, {&(0x7f0000000080)=[{0x7f, 0x6, {0x4c0}, 0x2462}, {0x8000, 0x3, {0x5a}, 0xd9}]}, 0x1f, 0x0, r1}) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x800, 0x36314d59, 0x0, @discrete={0x2, 0x4}}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000040), 0x10) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x0) 23:36:10 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x2, 0x4, 0x1, {0x6ebde9de0ea97f6f, @pix={0xe7e2, 0x200, 0x61170e38, 0x2, 0x7, 0xb4, 0x7, 0x3, 0x0, 0x4, 0x0, 0x4}}, 0x86d5}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x5, @pix={0x0, 0x10001, 0x20343059, 0x2, 0x5, 0x0, 0x8, 0x0, 0x1, 0x2, 0x0, 0x1}}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r2, 0x8010500c, &(0x7f00000001c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x2, 0x4, 0x1, {0x6ebde9de0ea97f6f, @pix={0xe7e2, 0x200, 0x61170e38, 0x2, 0x7, 0xb4, 0x7, 0x3, 0x0, 0x4, 0x0, 0x4}}, 0x86d5}) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x5, @pix={0x0, 0x10001, 0x20343059, 0x2, 0x5, 0x0, 0x8, 0x0, 0x1, 0x2, 0x0, 0x1}}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$SNDCTL_DSP_GETOSPACE(r2, 0x8010500c, &(0x7f00000001c0)) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) 23:36:10 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000c00220000000000000000001de0"}) 23:36:10 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'dvmrp1\x00'}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8009855}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x8000) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x4) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:10 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000001001de0"}) 23:36:10 executing program 4: syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) syz_open_dev$vim2m(&(0x7f0000000140), 0x401, 0x2) (async) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 32) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000001c0)=@multiplanar_mmap={0x7, 0x4, 0x4, 0x70000, 0x1, {0x77359400}, {0x2, 0x0, 0x5, 0x9, 0x2, 0x1f, "ae20c3da"}, 0x6, 0x1, {&(0x7f0000000080)=[{0x7f, 0x6, {0x4c0}, 0x2462}, {0x8000, 0x3, {0x5a}, 0xd9}]}, 0x1f, 0x0, r1}) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async, rerun: 64) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x800, 0x36314d59, 0x0, @discrete={0x2, 0x4}}) (async, rerun: 64) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000040), 0x10) (async) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x0) 23:36:10 executing program 3: socketpair(0x23, 0x5b, 0x7fffffff, &(0x7f0000000100)) 23:36:10 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f720000000c220000000000000000001de0"}) 23:36:10 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'dvmrp1\x00'}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8009855}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x8000) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x4) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:10 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000002001de0"}) 23:36:10 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000000)={0x4, 0x0, 0x1, "475d033fe11ed59bb80500000000000000001de000000400", 0x30364d54}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x3, 0x101, 0x4, {0x1, @raw_data="a7cea467797a221d8edd5dc9a929f720fe4b7e1e682232dff8699b214f360ab539f36f6d9c89221c4cc9b9a02b4f7471ad854294b87e759ef42d77dd004cc4573aa9a2a379180fb52b93411780d26a1de1446b0602f46c9c842f8525087654baace0b04a12b03daca38708e642ec52f7af2aaa18a0e882d4a3895bbb3f47a7057fbdfbff40e61d3d932bd341de43f00de82f1f7d8f28c320b3f32245348f93436392ee0a3eedfaa91ddf2f6981dbd04eeff4164b54e8a6b4978af51f918ef6cfc4c9ab5033f524d8"}, 0x7ffd}) 23:36:10 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f720000000c220000000000000000001de0"}) 23:36:10 executing program 4: syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) syz_open_dev$vim2m(&(0x7f0000000140), 0x401, 0x2) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000001c0)=@multiplanar_mmap={0x7, 0x4, 0x4, 0x70000, 0x1, {0x77359400}, {0x2, 0x0, 0x5, 0x9, 0x2, 0x1f, "ae20c3da"}, 0x6, 0x1, {&(0x7f0000000080)=[{0x7f, 0x6, {0x4c0}, 0x2462}, {0x8000, 0x3, {0x5a}, 0xd9}]}, 0x1f, 0x0, r1}) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x800, 0x36314d59, 0x0, @discrete={0x2, 0x4}}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000040), 0x10) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x0) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000140), 0x401, 0x2) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000001c0)=@multiplanar_mmap={0x7, 0x4, 0x4, 0x70000, 0x1, {0x77359400}, {0x2, 0x0, 0x5, 0x9, 0x2, 0x1f, "ae20c3da"}, 0x6, 0x1, {&(0x7f0000000080)=[{0x7f, 0x6, {0x4c0}, 0x2462}, {0x8000, 0x3, {0x5a}, 0xd9}]}, 0x1f, 0x0, r1}) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x800, 0x36314d59, 0x0, @discrete={0x2, 0x4}}) (async) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000040), 0x10) (async) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x0) (async) 23:36:10 executing program 3: socketpair(0x23, 0x5c, 0x7fffffff, &(0x7f0000000100)) 23:36:10 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220002000000000000001de0"}) 23:36:10 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000000)={0x4, 0x0, 0x1, "475d033fe11ed59bb80500000000000000001de000000400", 0x30364d54}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x3, 0x101, 0x4, {0x1, @raw_data="a7cea467797a221d8edd5dc9a929f720fe4b7e1e682232dff8699b214f360ab539f36f6d9c89221c4cc9b9a02b4f7471ad854294b87e759ef42d77dd004cc4573aa9a2a379180fb52b93411780d26a1de1446b0602f46c9c842f8525087654baace0b04a12b03daca38708e642ec52f7af2aaa18a0e882d4a3895bbb3f47a7057fbdfbff40e61d3d932bd341de43f00de82f1f7d8f28c320b3f32245348f93436392ee0a3eedfaa91ddf2f6981dbd04eeff4164b54e8a6b4978af51f918ef6cfc4c9ab5033f524d8"}, 0x7ffd}) 23:36:10 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'dvmrp1\x00'}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8009855}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x8000) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x4) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:10 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220c00000000000000001de0"}) 23:36:10 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000000)={0x4, 0x0, 0x1, "475d033fe11ed59bb80500000000000000001de000000400", 0x30364d54}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x3, 0x101, 0x4, {0x1, @raw_data="a7cea467797a221d8edd5dc9a929f720fe4b7e1e682232dff8699b214f360ab539f36f6d9c89221c4cc9b9a02b4f7471ad854294b87e759ef42d77dd004cc4573aa9a2a379180fb52b93411780d26a1de1446b0602f46c9c842f8525087654baace0b04a12b03daca38708e642ec52f7af2aaa18a0e882d4a3895bbb3f47a7057fbdfbff40e61d3d932bd341de43f00de82f1f7d8f28c320b3f32245348f93436392ee0a3eedfaa91ddf2f6981dbd04eeff4164b54e8a6b4978af51f918ef6cfc4c9ab5033f524d8"}, 0x7ffd}) 23:36:10 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80000000007, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:36:10 executing program 3: socketpair(0x23, 0x5d, 0x7fffffff, &(0x7f0000000100)) 23:36:10 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f720000000022000c000000000000001de0"}) 23:36:10 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000001000000001de0"}) 23:36:11 executing program 3: socketpair(0x23, 0x5e, 0x7fffffff, &(0x7f0000000100)) 23:36:11 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80000000007, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:36:11 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @raw_data="2c57f50cfa9128d1a0fb6f4c5750151a396d2e65a84c22caa339bc508d41b0a2cba6e88b7740265cefd7a835fb68d0bf9997ce183fb3e906341bc017cef135faa169a306fcb4ec8055a32e2c66bff82f203b3d507caf304ff9ff6f71b94edb9ffdb4110415888c3ce9e472cfc5a99364e19df22d6048777bcb7b2cb176ee1394dc87816c545ff62a31628801e6f110bdd75e277834b68a9df4965fbc716dd20e5f96d5017d0a75c24aa3752535ee231c78c1b22e7fb88b537eff995946912fc6ec6955859cca1c47"}) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:11 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000002000000001de0"}) 23:36:11 executing program 3: socketpair(0x23, 0x5f, 0x7fffffff, &(0x7f0000000100)) 23:36:11 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000100000000001de0"}) 23:36:11 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80000000007, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:36:11 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:11 executing program 3: socketpair(0x23, 0x60, 0x7fffffff, &(0x7f0000000100)) 23:36:11 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @raw_data="2c57f50cfa9128d1a0fb6f4c5750151a396d2e65a84c22caa339bc508d41b0a2cba6e88b7740265cefd7a835fb68d0bf9997ce183fb3e906341bc017cef135faa169a306fcb4ec8055a32e2c66bff82f203b3d507caf304ff9ff6f71b94edb9ffdb4110415888c3ce9e472cfc5a99364e19df22d6048777bcb7b2cb176ee1394dc87816c545ff62a31628801e6f110bdd75e277834b68a9df4965fbc716dd20e5f96d5017d0a75c24aa3752535ee231c78c1b22e7fb88b537eff995946912fc6ec6955859cca1c47"}) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @raw_data="2c57f50cfa9128d1a0fb6f4c5750151a396d2e65a84c22caa339bc508d41b0a2cba6e88b7740265cefd7a835fb68d0bf9997ce183fb3e906341bc017cef135faa169a306fcb4ec8055a32e2c66bff82f203b3d507caf304ff9ff6f71b94edb9ffdb4110415888c3ce9e472cfc5a99364e19df22d6048777bcb7b2cb176ee1394dc87816c545ff62a31628801e6f110bdd75e277834b68a9df4965fbc716dd20e5f96d5017d0a75c24aa3752535ee231c78c1b22e7fb88b537eff995946912fc6ec6955859cca1c47"}) (async) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) 23:36:11 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000011de0"}) 23:36:11 executing program 4: ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x2f) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x280400, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f00000000c0)=0xfffffff8) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x6, 0x3, 0x7, 0x0, 0x9}) 23:36:11 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000c00000000001de0"}) 23:36:11 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x2) (async, rerun: 32) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (rerun: 32) 23:36:11 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000021de0"}) 23:36:11 executing program 3: socketpair(0x23, 0x61, 0x7fffffff, &(0x7f0000000100)) 23:36:11 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000001001de0"}) 23:36:11 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @raw_data="2c57f50cfa9128d1a0fb6f4c5750151a396d2e65a84c22caa339bc508d41b0a2cba6e88b7740265cefd7a835fb68d0bf9997ce183fb3e906341bc017cef135faa169a306fcb4ec8055a32e2c66bff82f203b3d507caf304ff9ff6f71b94edb9ffdb4110415888c3ce9e472cfc5a99364e19df22d6048777bcb7b2cb176ee1394dc87816c545ff62a31628801e6f110bdd75e277834b68a9df4965fbc716dd20e5f96d5017d0a75c24aa3752535ee231c78c1b22e7fb88b537eff995946912fc6ec6955859cca1c47"}) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @raw_data="2c57f50cfa9128d1a0fb6f4c5750151a396d2e65a84c22caa339bc508d41b0a2cba6e88b7740265cefd7a835fb68d0bf9997ce183fb3e906341bc017cef135faa169a306fcb4ec8055a32e2c66bff82f203b3d507caf304ff9ff6f71b94edb9ffdb4110415888c3ce9e472cfc5a99364e19df22d6048777bcb7b2cb176ee1394dc87816c545ff62a31628801e6f110bdd75e277834b68a9df4965fbc716dd20e5f96d5017d0a75c24aa3752535ee231c78c1b22e7fb88b537eff995946912fc6ec6955859cca1c47"}) (async) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) 23:36:11 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000020000000000001de0"}) 23:36:11 executing program 3: socketpair(0x23, 0x62, 0x7fffffff, &(0x7f0000000100)) 23:36:11 executing program 4: ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x2f) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x280400, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f00000000c0)=0xfffffff8) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async, rerun: 32) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) (rerun: 32) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x6, 0x3, 0x7, 0x0, 0x9}) 23:36:11 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f720000000022000000000000000c001de0"}) 23:36:11 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:36:11 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000010000001de0"}) 23:36:11 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) 23:36:11 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f720000000022000c000000000000001de0"}) 23:36:11 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000020000001de0"}) 23:36:11 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:11 executing program 3: socketpair(0x23, 0x63, 0x7fffffff, &(0x7f0000000100)) 23:36:11 executing program 4: ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x2f) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x280400, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f00000000c0)=0xfffffff8) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x6, 0x3, 0x7, 0x0, 0x9}) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x2f) (async) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x280400, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f00000000c0)=0xfffffff8) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x6, 0x3, 0x7, 0x0, 0x9}) (async) 23:36:11 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) 23:36:11 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f72000000002200000c0000000000001de0"}) 23:36:11 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000200000000001de0"}) 23:36:11 executing program 3: socketpair(0x23, 0x64, 0x7fffffff, &(0x7f0000000100)) 23:36:11 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:36:11 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) (async) 23:36:11 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000001000000001de0"}) 23:36:11 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:36:11 executing program 3: socketpair(0x23, 0x65, 0x7fffffff, &(0x7f0000000100)) 23:36:11 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000100001de0"}) 23:36:11 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:36:11 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000001c0)=@mmap={0x0, 0x0, 0x4, 0x0, 0x78, {0x77359400}, {0x3, 0x1, 0x5, 0x1, 0x61, 0x0, "ba31a608"}, 0x7, 0x1, {}, 0x6, 0x0, r2}) ioctl$PTP_PIN_SETFUNC(r2, 0x40603d07, &(0x7f0000000240)={'\x00', 0x9, 0x0, 0xf3d}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x20000000, 0x0, 0x0, 0x0, [{0x0, 0x3}, {}, {0x3}, {0x0, 0x1}]}}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0x0, @raw_data="5e0a8291fed910d4135c8e7ff73602a83ab28274990a37346f88f0a209f271a75f728496fd768747adbe16990711f248553697e5f63550d90ff064033e1edb32a55286805e310d1252cc584d65a1fc0d1e314c97b162daa06d7fcd09ba527d4af2019b8549495d4edf2ab8fb141c409606835939953faaf90099bfcba87bdd9a9852800212bedd186efb465104267c054e83f465dd36f1e30d5e7fa49281897a65513f23981eca13f70869205c6a0d35cdbaa46b519981a2b2577892755aad65583b40ff24adaf9f"}) 23:36:11 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f720000000022000000000c000000001de0"}) 23:36:11 executing program 3: socketpair(0x23, 0x66, 0x7fffffff, &(0x7f0000000100)) 23:36:11 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:36:11 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000200001de0"}) 23:36:11 executing program 3: socketpair(0x23, 0x67, 0x7fffffff, &(0x7f0000000100)) 23:36:11 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000011de0"}) 23:36:11 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000040)) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) 23:36:11 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) socket$inet_dccp(0x2, 0x6, 0x0) 23:36:11 executing program 3: socketpair(0x23, 0x68, 0x7fffffff, &(0x7f0000000100)) 23:36:11 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000001c0)=@mmap={0x0, 0x0, 0x4, 0x0, 0x78, {0x77359400}, {0x3, 0x1, 0x5, 0x1, 0x61, 0x0, "ba31a608"}, 0x7, 0x1, {}, 0x6, 0x0, r2}) ioctl$PTP_PIN_SETFUNC(r2, 0x40603d07, &(0x7f0000000240)={'\x00', 0x9, 0x0, 0xf3d}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x20000000, 0x0, 0x0, 0x0, [{0x0, 0x3}, {}, {0x3}, {0x0, 0x1}]}}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0x0, @raw_data="5e0a8291fed910d4135c8e7ff73602a83ab28274990a37346f88f0a209f271a75f728496fd768747adbe16990711f248553697e5f63550d90ff064033e1edb32a55286805e310d1252cc584d65a1fc0d1e314c97b162daa06d7fcd09ba527d4af2019b8549495d4edf2ab8fb141c409606835939953faaf90099bfcba87bdd9a9852800212bedd186efb465104267c054e83f465dd36f1e30d5e7fa49281897a65513f23981eca13f70869205c6a0d35cdbaa46b519981a2b2577892755aad65583b40ff24adaf9f"}) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000001c0)=@mmap={0x0, 0x0, 0x4, 0x0, 0x78, {0x77359400}, {0x3, 0x1, 0x5, 0x1, 0x61, 0x0, "ba31a608"}, 0x7, 0x1, {}, 0x6, 0x0, r2}) (async) ioctl$PTP_PIN_SETFUNC(r2, 0x40603d07, &(0x7f0000000240)={'\x00', 0x9, 0x0, 0xf3d}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x20000000, 0x0, 0x0, 0x0, [{0x0, 0x3}, {}, {0x3}, {0x0, 0x1}]}}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0x0, @raw_data="5e0a8291fed910d4135c8e7ff73602a83ab28274990a37346f88f0a209f271a75f728496fd768747adbe16990711f248553697e5f63550d90ff064033e1edb32a55286805e310d1252cc584d65a1fc0d1e314c97b162daa06d7fcd09ba527d4af2019b8549495d4edf2ab8fb141c409606835939953faaf90099bfcba87bdd9a9852800212bedd186efb465104267c054e83f465dd36f1e30d5e7fa49281897a65513f23981eca13f70869205c6a0d35cdbaa46b519981a2b2577892755aad65583b40ff24adaf9f"}) (async) 23:36:11 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f72000000002200000000000000000c1de0"}) 23:36:11 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) socket$inet_dccp(0x2, 0x6, 0x0) 23:36:11 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000002000000001de0"}) 23:36:11 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000040)={0x9, 0xc}) 23:36:11 executing program 3: socketpair(0x23, 0x69, 0x7fffffff, &(0x7f0000000100)) 23:36:11 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f72000000002200000c0000000000001de0"}) 23:36:11 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) socket$inet_dccp(0x2, 0x6, 0x0) 23:36:11 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000001001de0"}) 23:36:11 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000040)={0x9, 0xc}) 23:36:11 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000001c0)=@mmap={0x0, 0x0, 0x4, 0x0, 0x78, {0x77359400}, {0x3, 0x1, 0x5, 0x1, 0x61, 0x0, "ba31a608"}, 0x7, 0x1, {}, 0x6, 0x0, r2}) ioctl$PTP_PIN_SETFUNC(r2, 0x40603d07, &(0x7f0000000240)={'\x00', 0x9, 0x0, 0xf3d}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x20000000, 0x0, 0x0, 0x0, [{0x0, 0x3}, {}, {0x3}, {0x0, 0x1}]}}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0x0, @raw_data="5e0a8291fed910d4135c8e7ff73602a83ab28274990a37346f88f0a209f271a75f728496fd768747adbe16990711f248553697e5f63550d90ff064033e1edb32a55286805e310d1252cc584d65a1fc0d1e314c97b162daa06d7fcd09ba527d4af2019b8549495d4edf2ab8fb141c409606835939953faaf90099bfcba87bdd9a9852800212bedd186efb465104267c054e83f465dd36f1e30d5e7fa49281897a65513f23981eca13f70869205c6a0d35cdbaa46b519981a2b2577892755aad65583b40ff24adaf9f"}) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000001c0)=@mmap={0x0, 0x0, 0x4, 0x0, 0x78, {0x77359400}, {0x3, 0x1, 0x5, 0x1, 0x61, 0x0, "ba31a608"}, 0x7, 0x1, {}, 0x6, 0x0, r2}) (async) ioctl$PTP_PIN_SETFUNC(r2, 0x40603d07, &(0x7f0000000240)={'\x00', 0x9, 0x0, 0xf3d}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x20000000, 0x0, 0x0, 0x0, [{0x0, 0x3}, {}, {0x3}, {0x0, 0x1}]}}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0x0, @raw_data="5e0a8291fed910d4135c8e7ff73602a83ab28274990a37346f88f0a209f271a75f728496fd768747adbe16990711f248553697e5f63550d90ff064033e1edb32a55286805e310d1252cc584d65a1fc0d1e314c97b162daa06d7fcd09ba527d4af2019b8549495d4edf2ab8fb141c409606835939953faaf90099bfcba87bdd9a9852800212bedd186efb465104267c054e83f465dd36f1e30d5e7fa49281897a65513f23981eca13f70869205c6a0d35cdbaa46b519981a2b2577892755aad65583b40ff24adaf9f"}) (async) 23:36:11 executing program 3: socketpair(0x23, 0x6a, 0x7fffffff, &(0x7f0000000100)) 23:36:11 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000002001de0"}) 23:36:11 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000040)={0x9, 0xc}) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000040)={0x9, 0xc}) (async) 23:36:11 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x1, 0x3, 0x0, "475d003ffe1ed59bb805dfd0f1ccd21de000", 0x32315258}) 23:36:11 executing program 3: socketpair(0x23, 0x6b, 0x7fffffff, &(0x7f0000000100)) 23:36:11 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000020000001de0"}) 23:36:11 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000c00000000001de0"}) 23:36:11 executing program 5: ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={0x3, 0x3}) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000140)=""/140, 0x8c}, {&(0x7f0000000200)=""/150, 0x96}, {&(0x7f00000000c0)}, {&(0x7f00000002c0)=""/16, 0x10}], 0x5, &(0x7f0000000380)=""/172, 0xac}, 0x103) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:11 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000010000001de0"}) 23:36:11 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x1, 0x3, 0x0, "475d003ffe1ed59bb805dfd0f1ccd21de000", 0x32315258}) 23:36:11 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0x8c3, 0x5}) 23:36:11 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000011de0"}) 23:36:11 executing program 3: socketpair(0x23, 0x6c, 0x7fffffff, &(0x7f0000000100)) 23:36:11 executing program 5: ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={0x3, 0x3}) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000140)=""/140, 0x8c}, {&(0x7f0000000200)=""/150, 0x96}, {&(0x7f00000000c0)}, {&(0x7f00000002c0)=""/16, 0x10}], 0x5, &(0x7f0000000380)=""/172, 0xac}, 0x103) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={0x3, 0x3}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) recvmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000140)=""/140, 0x8c}, {&(0x7f0000000200)=""/150, 0x96}, {&(0x7f00000000c0)}, {&(0x7f00000002c0)=""/16, 0x10}], 0x5, &(0x7f0000000380)=""/172, 0xac}, 0x103) (async) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) 23:36:11 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0x8c3, 0x5}) 23:36:11 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f72000000002200000000000c0000001de0"}) 23:36:11 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x1, 0x3, 0x0, "475d003ffe1ed59bb805dfd0f1ccd21de000", 0x32315258}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x1, 0x3, 0x0, "475d003ffe1ed59bb805dfd0f1ccd21de000", 0x32315258}) (async) 23:36:11 executing program 3: socketpair(0x23, 0x6d, 0x7fffffff, &(0x7f0000000100)) 23:36:11 executing program 5: ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={0x3, 0x3}) (async) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) recvmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000140)=""/140, 0x8c}, {&(0x7f0000000200)=""/150, 0x96}, {&(0x7f00000000c0)}, {&(0x7f00000002c0)=""/16, 0x10}], 0x5, &(0x7f0000000380)=""/172, 0xac}, 0x103) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:12 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000c00000000001de0"}) 23:36:12 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async, rerun: 64) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 64) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0x8c3, 0x5}) 23:36:12 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x4, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x2}]}}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e24, @local}}, 0x66, 0x4f6}, 0x90) 23:36:12 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000021de0"}) 23:36:12 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f720000000022000000000c000000001de0"}) 23:36:12 executing program 3: socketpair(0x23, 0x6e, 0x7fffffff, &(0x7f0000000100)) 23:36:12 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000002c0)=@multiplanar_userptr={0x1, 0x2, 0x4, 0x1000, 0x9e, {r3, r4/1000+60000}, {0x2, 0xc, 0x4c, 0xff, 0x1, 0x40, "06ac2397"}, 0xfffffffc, 0x2, {&(0x7f0000000240)=[{0x4, 0x2, {&(0x7f00000001c0)}, 0x1f}, {0x9, 0x4, {&(0x7f0000000200)}, 0x7}]}, 0x2, 0x0, r5}) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080)) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x0) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x0) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={0xffffffffffffffff, 0xff, 0x10}, 0xc) r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r11, 0xae03, 0x0) r12 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r12, 0xae03, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_tracing={0x1a, 0x7, &(0x7f0000000340)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_val={0x18, 0x8, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0xa3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x6}], &(0x7f0000000380)='GPL\x00', 0x0, 0xfc, &(0x7f00000003c0)=""/252, 0x40f00, 0x7, '\x00', r7, 0x18, r2, 0x8, &(0x7f00000007c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x5, 0x5, 0x0, 0x7}, 0x10, 0x82e2, r1, 0x0, &(0x7f0000000880)=[r8, r9, r10, r1, r11, r12, r1, r5]}, 0x80) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x0) ioctl$PTP_EXTTS_REQUEST(r6, 0x40103d02, &(0x7f0000000040)={0x0, 0xc0724637840e163c}) 23:36:12 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000200001de0"}) 23:36:12 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000100001de0"}) 23:36:12 executing program 3: socketpair(0x23, 0x6f, 0x7fffffff, &(0x7f0000000100)) 23:36:12 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x4, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x2}]}}) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e24, @local}}, 0x66, 0x4f6}, 0x90) 23:36:12 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000100)={0x1, 0x9e, 0x80, 0x80}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x3, 0x3, 0x3}) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0xd3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x3, 0x3, 0x1, "b79f8e69bf7dc783dfe834fe6dd8559ac118eaa0160a7eca38430cb64523f746", 0x43564548}) 23:36:12 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) (async) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) (async, rerun: 32) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000002c0)=@multiplanar_userptr={0x1, 0x2, 0x4, 0x1000, 0x9e, {r3, r4/1000+60000}, {0x2, 0xc, 0x4c, 0xff, 0x1, 0x40, "06ac2397"}, 0xfffffffc, 0x2, {&(0x7f0000000240)=[{0x4, 0x2, {&(0x7f00000001c0)}, 0x1f}, {0x9, 0x4, {&(0x7f0000000200)}, 0x7}]}, 0x2, 0x0, r5}) (async, rerun: 32) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080)) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x0) (async) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x0) (async) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={0xffffffffffffffff, 0xff, 0x10}, 0xc) (async) r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r11, 0xae03, 0x0) r12 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r12, 0xae03, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_tracing={0x1a, 0x7, &(0x7f0000000340)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_val={0x18, 0x8, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0xa3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x6}], &(0x7f0000000380)='GPL\x00', 0x0, 0xfc, &(0x7f00000003c0)=""/252, 0x40f00, 0x7, '\x00', r7, 0x18, r2, 0x8, &(0x7f00000007c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x5, 0x5, 0x0, 0x7}, 0x10, 0x82e2, r1, 0x0, &(0x7f0000000880)=[r8, r9, r10, r1, r11, r12, r1, r5]}, 0x80) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x0) ioctl$PTP_EXTTS_REQUEST(r6, 0x40103d02, &(0x7f0000000040)={0x0, 0xc0724637840e163c}) 23:36:12 executing program 3: socketpair(0x23, 0x70, 0x7fffffff, &(0x7f0000000100)) 23:36:12 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000c00001de0"}) 23:36:12 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000002001de0"}) 23:36:12 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x4, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x2}]}}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e24, @local}}, 0x66, 0x4f6}, 0x90) 23:36:12 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000100)={0x1, 0x9e, 0x80, 0x80}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x3, 0x3, 0x3}) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0xd3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x3, 0x3, 0x1, "b79f8e69bf7dc783dfe834fe6dd8559ac118eaa0160a7eca38430cb64523f746", 0x43564548}) 23:36:12 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000021de0"}) 23:36:12 executing program 3: socketpair(0x23, 0x71, 0x7fffffff, &(0x7f0000000100)) 23:36:12 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000002c0)=@multiplanar_userptr={0x1, 0x2, 0x4, 0x1000, 0x9e, {r3, r4/1000+60000}, {0x2, 0xc, 0x4c, 0xff, 0x1, 0x40, "06ac2397"}, 0xfffffffc, 0x2, {&(0x7f0000000240)=[{0x4, 0x2, {&(0x7f00000001c0)}, 0x1f}, {0x9, 0x4, {&(0x7f0000000200)}, 0x7}]}, 0x2, 0x0, r5}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080)) (async) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) (async) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x0) (async) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x0) (async) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={0xffffffffffffffff, 0xff, 0x10}, 0xc) r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r11, 0xae03, 0x0) r12 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r12, 0xae03, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_tracing={0x1a, 0x7, &(0x7f0000000340)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_val={0x18, 0x8, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0xa3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x6}], &(0x7f0000000380)='GPL\x00', 0x0, 0xfc, &(0x7f00000003c0)=""/252, 0x40f00, 0x7, '\x00', r7, 0x18, r2, 0x8, &(0x7f00000007c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x5, 0x5, 0x0, 0x7}, 0x10, 0x82e2, r1, 0x0, &(0x7f0000000880)=[r8, r9, r10, r1, r11, r12, r1, r5]}, 0x80) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x0) (async) ioctl$PTP_EXTTS_REQUEST(r6, 0x40103d02, &(0x7f0000000040)={0x0, 0xc0724637840e163c}) 23:36:12 executing program 5: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffff}, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0xc0, 0x1, 0x3, 0x425, 0x1, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x5}, 0x48) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000400)={0x0, @multicast2, @private}, &(0x7f0000000440)=0xc) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_ext={0x1c, 0xf, &(0x7f0000000140)=@raw=[@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc3e}, @map_val={0x18, 0x7, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x6}, @alu={0x4, 0x1, 0x1, 0x8, 0x8, 0xffffffffffffffff, 0xffffffffffffffff}, @ldst={0x3, 0x3, 0x6, 0x0, 0xa, 0x50, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x6}, @map_idx={0x18, 0x1}, @map_val={0x18, 0x5, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xfff}, @generic={0xf1, 0x7, 0x6, 0x8001, 0x5}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}], &(0x7f00000000c0)='GPL\x00', 0x10001, 0xea, &(0x7f00000001c0)=""/234, 0xe46be304c81b240b, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x4, 0x70}, 0x10, 0x1a4cd, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=[r2, 0xffffffffffffffff]}, 0x80) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:12 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f720000000022000000000c000000001de0"}) 23:36:12 executing program 3: socketpair(0x23, 0x72, 0x7fffffff, &(0x7f0000000100)) 23:36:12 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000100)={0x1, 0x9e, 0x80, 0x80}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x3, 0x3, 0x3}) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0xd3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x3, 0x3, 0x1, "b79f8e69bf7dc783dfe834fe6dd8559ac118eaa0160a7eca38430cb64523f746", 0x43564548}) 23:36:12 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:12 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f72000000002200000000000c0000001de0"}) 23:36:12 executing program 3: socketpair(0x23, 0x73, 0x7fffffff, &(0x7f0000000100)) 23:36:12 executing program 5: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffff}, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0xc0, 0x1, 0x3, 0x425, 0x1, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x5}, 0x48) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000400)={0x0, @multicast2, @private}, &(0x7f0000000440)=0xc) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_ext={0x1c, 0xf, &(0x7f0000000140)=@raw=[@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc3e}, @map_val={0x18, 0x7, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x6}, @alu={0x4, 0x1, 0x1, 0x8, 0x8, 0xffffffffffffffff, 0xffffffffffffffff}, @ldst={0x3, 0x3, 0x6, 0x0, 0xa, 0x50, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x6}, @map_idx={0x18, 0x1}, @map_val={0x18, 0x5, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xfff}, @generic={0xf1, 0x7, 0x6, 0x8001, 0x5}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}], &(0x7f00000000c0)='GPL\x00', 0x10001, 0xea, &(0x7f00000001c0)=""/234, 0xe46be304c81b240b, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x4, 0x70}, 0x10, 0x1a4cd, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=[r2, 0xffffffffffffffff]}, 0x80) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffff}, 0xc) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0xc0, 0x1, 0x3, 0x425, 0x1, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x5}, 0x48) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000400)={0x0, @multicast2, @private}, &(0x7f0000000440)=0xc) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_ext={0x1c, 0xf, &(0x7f0000000140)=@raw=[@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc3e}, @map_val={0x18, 0x7, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x6}, @alu={0x4, 0x1, 0x1, 0x8, 0x8, 0xffffffffffffffff, 0xffffffffffffffff}, @ldst={0x3, 0x3, 0x6, 0x0, 0xa, 0x50, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x6}, @map_idx={0x18, 0x1}, @map_val={0x18, 0x5, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xfff}, @generic={0xf1, 0x7, 0x6, 0x8001, 0x5}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}], &(0x7f00000000c0)='GPL\x00', 0x10001, 0xea, &(0x7f00000001c0)=""/234, 0xe46be304c81b240b, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x4, 0x70}, 0x10, 0x1a4cd, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=[r2, 0xffffffffffffffff]}, 0x80) (async) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) 23:36:12 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) ioctl$PTP_PIN_GETFUNC(r1, 0xc0603d06, &(0x7f0000000040)={'\x00', 0x200, 0x1, 0x3}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) socket$inet(0x2, 0x5, 0x6) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, &(0x7f0000000180)={0x2, 0xe67a0c0c61fcc0ca, @stop_pts=0x2}) 23:36:12 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0xffff, 0x2) bpf$BPF_TASK_FD_QUERY(0x13, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000002c0)={0x9, 0x3, 0x4, 0x0, 0xf2}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffff8}, [@map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8000}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x81}]}, &(0x7f0000000480)='syzkaller\x00', 0x7, 0x89, &(0x7f00000004c0)=""/137, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0xd, 0x401, 0x714}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[r1, 0xffffffffffffffff, 0x1, r2, 0xffffffffffffffff, r3]}, 0x80) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000700)={0x63, 0x8000, "3e6214bf4304da888989b5bc68b11fdf0d50291fee94dfdb", {0x2f0, 0x400}, 0x40}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000300)={0x1, @vbi={0x6195, 0x1, 0x12, 0x3831354f, [0x7ff, 0x9], [0x7], 0x32}}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000140)) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x35303553, 0x0, @stepwise}) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f00000001c0)={0x1, @raw_data="9b37c77d3e39c2d145a5cb8938a1d936dfc2e4399b01515285000d649016961408d871bf6ca3f395f9ef0249b0d5e0c155292cfcdb5d9f3d5de7071e11726ff49507554d827db8c374cb5900413828aa95b4a9d54dcb9045e70048cc7216c4e75106db8ebd78301467f53684eefac4fea5542465c471beeaad536f5240c6249a11724d07ab680454d6b38a33926780d6aa30ec9331f6d51c0f7265fbd445c1e9bd6f2e71bab8af60ed52d348a342c0d9ffdb5c43f3197dc3d8a21864cdb87f7148ae723b5badd7ef"}) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000040)={0x81e7, 0xffff8247, 0x4, {0x2, @pix_mp={0xccd4, 0xff, 0x42303159, 0x7, 0x6, [{0x800, 0x1}, {0x7, 0x2}, {0x1000, 0x1}, {0x1f, 0x6}, {0x40001000, 0x1}, {0x80000000, 0xa6}, {0x3f, 0x3}, {0x7fff, 0x80}], 0x5, 0x4, 0x8}}, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000780)={0x1, 0x100, 0x2}) 23:36:12 executing program 3: socketpair(0x23, 0x74, 0x7fffffff, &(0x7f0000000100)) 23:36:12 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x2}) 23:36:12 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000001001de0"}) 23:36:12 executing program 5: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffff}, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0xc0, 0x1, 0x3, 0x425, 0x1, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x5}, 0x48) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000400)={0x0, @multicast2, @private}, &(0x7f0000000440)=0xc) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_ext={0x1c, 0xf, &(0x7f0000000140)=@raw=[@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc3e}, @map_val={0x18, 0x7, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x6}, @alu={0x4, 0x1, 0x1, 0x8, 0x8, 0xffffffffffffffff, 0xffffffffffffffff}, @ldst={0x3, 0x3, 0x6, 0x0, 0xa, 0x50, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x6}, @map_idx={0x18, 0x1}, @map_val={0x18, 0x5, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xfff}, @generic={0xf1, 0x7, 0x6, 0x8001, 0x5}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}], &(0x7f00000000c0)='GPL\x00', 0x10001, 0xea, &(0x7f00000001c0)=""/234, 0xe46be304c81b240b, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x4, 0x70}, 0x10, 0x1a4cd, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=[r2, 0xffffffffffffffff]}, 0x80) (async) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:12 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0xffff, 0x2) bpf$BPF_TASK_FD_QUERY(0x13, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000002c0)={0x9, 0x3, 0x4, 0x0, 0xf2}) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffff8}, [@map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8000}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x81}]}, &(0x7f0000000480)='syzkaller\x00', 0x7, 0x89, &(0x7f00000004c0)=""/137, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0xd, 0x401, 0x714}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[r1, 0xffffffffffffffff, 0x1, r2, 0xffffffffffffffff, r3]}, 0x80) (rerun: 64) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000700)={0x63, 0x8000, "3e6214bf4304da888989b5bc68b11fdf0d50291fee94dfdb", {0x2f0, 0x400}, 0x40}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000300)={0x1, @vbi={0x6195, 0x1, 0x12, 0x3831354f, [0x7ff, 0x9], [0x7], 0x32}}) (async) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000140)) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x35303553, 0x0, @stepwise}) (async) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f00000001c0)={0x1, @raw_data="9b37c77d3e39c2d145a5cb8938a1d936dfc2e4399b01515285000d649016961408d871bf6ca3f395f9ef0249b0d5e0c155292cfcdb5d9f3d5de7071e11726ff49507554d827db8c374cb5900413828aa95b4a9d54dcb9045e70048cc7216c4e75106db8ebd78301467f53684eefac4fea5542465c471beeaad536f5240c6249a11724d07ab680454d6b38a33926780d6aa30ec9331f6d51c0f7265fbd445c1e9bd6f2e71bab8af60ed52d348a342c0d9ffdb5c43f3197dc3d8a21864cdb87f7148ae723b5badd7ef"}) (async, rerun: 64) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) (async, rerun: 64) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000040)={0x81e7, 0xffff8247, 0x4, {0x2, @pix_mp={0xccd4, 0xff, 0x42303159, 0x7, 0x6, [{0x800, 0x1}, {0x7, 0x2}, {0x1000, 0x1}, {0x1f, 0x6}, {0x40001000, 0x1}, {0x80000000, 0xa6}, {0x3f, 0x3}, {0x7fff, 0x80}], 0x5, 0x4, 0x8}}, 0x4}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000780)={0x1, 0x100, 0x2}) 23:36:12 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) ioctl$PTP_PIN_GETFUNC(r1, 0xc0603d06, &(0x7f0000000040)={'\x00', 0x200, 0x1, 0x3}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) socket$inet(0x2, 0x5, 0x6) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, &(0x7f0000000180)={0x2, 0xe67a0c0c61fcc0ca, @stop_pts=0x2}) 23:36:12 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f720000000022000000000000000c001de0"}) 23:36:12 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0x3, @vbi={0x1000, 0x400, 0x2, 0x38303553, [0x7, 0x4], [0x3, 0x885], 0x108}}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000140)={0x2, @sdr={0x563e507c, 0x9}}) 23:36:12 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x1000000}) 23:36:12 executing program 3: socketpair(0x23, 0x75, 0x7fffffff, &(0x7f0000000100)) 23:36:12 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f72000000002200000000000c0000001de0"}) 23:36:12 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) ioctl$PTP_PIN_GETFUNC(r1, 0xc0603d06, &(0x7f0000000040)={'\x00', 0x200, 0x1, 0x3}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) socket$inet(0x2, 0x5, 0x6) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, &(0x7f0000000180)={0x2, 0xe67a0c0c61fcc0ca, @stop_pts=0x2}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) (async) ioctl$PTP_PIN_GETFUNC(r1, 0xc0603d06, &(0x7f0000000040)={'\x00', 0x200, 0x1, 0x3}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) socket$inet(0x2, 0x5, 0x6) (async) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, &(0x7f0000000180)={0x2, 0xe67a0c0c61fcc0ca, @stop_pts=0x2}) (async) 23:36:12 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0x3, @vbi={0x1000, 0x400, 0x2, 0x38303553, [0x7, 0x4], [0x3, 0x885], 0x108}}) (async, rerun: 32) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000140)={0x2, @sdr={0x563e507c, 0x9}}) (rerun: 32) 23:36:12 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0xffff, 0x2) bpf$BPF_TASK_FD_QUERY(0x13, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000002c0)={0x9, 0x3, 0x4, 0x0, 0xf2}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffff8}, [@map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8000}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x81}]}, &(0x7f0000000480)='syzkaller\x00', 0x7, 0x89, &(0x7f00000004c0)=""/137, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0xd, 0x401, 0x714}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[r1, 0xffffffffffffffff, 0x1, r2, 0xffffffffffffffff, r3]}, 0x80) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000700)={0x63, 0x8000, "3e6214bf4304da888989b5bc68b11fdf0d50291fee94dfdb", {0x2f0, 0x400}, 0x40}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000300)={0x1, @vbi={0x6195, 0x1, 0x12, 0x3831354f, [0x7ff, 0x9], [0x7], 0x32}}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000140)) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x35303553, 0x0, @stepwise}) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f00000001c0)={0x1, @raw_data="9b37c77d3e39c2d145a5cb8938a1d936dfc2e4399b01515285000d649016961408d871bf6ca3f395f9ef0249b0d5e0c155292cfcdb5d9f3d5de7071e11726ff49507554d827db8c374cb5900413828aa95b4a9d54dcb9045e70048cc7216c4e75106db8ebd78301467f53684eefac4fea5542465c471beeaad536f5240c6249a11724d07ab680454d6b38a33926780d6aa30ec9331f6d51c0f7265fbd445c1e9bd6f2e71bab8af60ed52d348a342c0d9ffdb5c43f3197dc3d8a21864cdb87f7148ae723b5badd7ef"}) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000040)={0x81e7, 0xffff8247, 0x4, {0x2, @pix_mp={0xccd4, 0xff, 0x42303159, 0x7, 0x6, [{0x800, 0x1}, {0x7, 0x2}, {0x1000, 0x1}, {0x1f, 0x6}, {0x40001000, 0x1}, {0x80000000, 0xa6}, {0x3f, 0x3}, {0x7fff, 0x80}], 0x5, 0x4, 0x8}}, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000780)={0x1, 0x100, 0x2}) syz_open_dev$vim2m(&(0x7f0000000180), 0xffff, 0x2) (async) bpf$BPF_TASK_FD_QUERY(0x13, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000002c0)={0x9, 0x3, 0x4, 0x0, 0xf2}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffff8}, [@map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8000}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x81}]}, &(0x7f0000000480)='syzkaller\x00', 0x7, 0x89, &(0x7f00000004c0)=""/137, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0xd, 0x401, 0x714}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[r1, 0xffffffffffffffff, 0x1, r2, 0xffffffffffffffff, r3]}, 0x80) (async) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000700)={0x63, 0x8000, "3e6214bf4304da888989b5bc68b11fdf0d50291fee94dfdb", {0x2f0, 0x400}, 0x40}) (async) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000300)={0x1, @vbi={0x6195, 0x1, 0x12, 0x3831354f, [0x7ff, 0x9], [0x7], 0x32}}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000140)) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x35303553, 0x0, @stepwise}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f00000001c0)={0x1, @raw_data="9b37c77d3e39c2d145a5cb8938a1d936dfc2e4399b01515285000d649016961408d871bf6ca3f395f9ef0249b0d5e0c155292cfcdb5d9f3d5de7071e11726ff49507554d827db8c374cb5900413828aa95b4a9d54dcb9045e70048cc7216c4e75106db8ebd78301467f53684eefac4fea5542465c471beeaad536f5240c6249a11724d07ab680454d6b38a33926780d6aa30ec9331f6d51c0f7265fbd445c1e9bd6f2e71bab8af60ed52d348a342c0d9ffdb5c43f3197dc3d8a21864cdb87f7148ae723b5badd7ef"}) (async) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000040)={0x81e7, 0xffff8247, 0x4, {0x2, @pix_mp={0xccd4, 0xff, 0x42303159, 0x7, 0x6, [{0x800, 0x1}, {0x7, 0x2}, {0x1000, 0x1}, {0x1f, 0x6}, {0x40001000, 0x1}, {0x80000000, 0xa6}, {0x3f, 0x3}, {0x7fff, 0x80}], 0x5, 0x4, 0x8}}, 0x4}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000780)={0x1, 0x100, 0x2}) (async) 23:36:12 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x2000000}) 23:36:12 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000c00001de0"}) 23:36:12 executing program 3: socketpair(0x23, 0x76, 0x7fffffff, &(0x7f0000000100)) 23:36:12 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x5, @pix_mp={0xea, 0x10000, 0x59455247, 0x7, 0x0, [{0x1, 0x10000}, {0xfffffffa, 0x1}, {0x5, 0x9f85}, {0xffff7a18, 0x6}, {0x8000, 0x6}, {0x66f4, 0xe63b}, {0x2a8, 0x100}, {0x8001, 0x6}], 0x40, 0x53, 0x6, 0x2, 0x7}}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0xfffffffc, 0x36314d59, 0x0, @stepwise}) 23:36:12 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000000)={0x0, 0xff, 0x4}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0xf) 23:36:12 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0x3, @vbi={0x1000, 0x400, 0x2, 0x38303553, [0x7, 0x4], [0x3, 0x885], 0x108}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000140)={0x2, @sdr={0x563e507c, 0x9}}) 23:36:12 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000011de0"}) 23:36:12 executing program 3: socketpair(0x23, 0x77, 0x7fffffff, &(0x7f0000000100)) 23:36:12 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000000)={0x0, 0xff, 0x4}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0xf) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000000)={0x0, 0xff, 0x4}) (async) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0xf) (async) 23:36:12 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) clock_gettime(0x0, &(0x7f0000000000)) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f00000000c0)={0xfff, 0x20385655, 0x1, @stepwise={0x0, 0x2, 0x7fff, 0x4, 0x8, 0x6}}) 23:36:12 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x5, @pix_mp={0xea, 0x10000, 0x59455247, 0x7, 0x0, [{0x1, 0x10000}, {0xfffffffa, 0x1}, {0x5, 0x9f85}, {0xffff7a18, 0x6}, {0x8000, 0x6}, {0x66f4, 0xe63b}, {0x2a8, 0x100}, {0x8001, 0x6}], 0x40, 0x53, 0x6, 0x2, 0x7}}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0xfffffffc, 0x36314d59, 0x0, @stepwise}) 23:36:12 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x7ff, 0x0, 0x0, 0x0, [{0x40000000}, {}, {}, {0x0, 0x4}, {0x4000000, 0x8}], 0x0, 0x0, 0x0, 0x2}}) 23:36:12 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f72000000002200000000000000000c1de0"}) 23:36:12 executing program 3: socketpair(0x23, 0x78, 0x7fffffff, &(0x7f0000000100)) 23:36:12 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000000)={0x0, 0xff, 0x4}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0xf) 23:36:12 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async, rerun: 32) clock_gettime(0x0, &(0x7f0000000000)) (async, rerun: 32) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f00000000c0)={0xfff, 0x20385655, 0x1, @stepwise={0x0, 0x2, 0x7fff, 0x4, 0x8, 0x6}}) 23:36:12 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x5, @pix_mp={0xea, 0x10000, 0x59455247, 0x7, 0x0, [{0x1, 0x10000}, {0xfffffffa, 0x1}, {0x5, 0x9f85}, {0xffff7a18, 0x6}, {0x8000, 0x6}, {0x66f4, 0xe63b}, {0x2a8, 0x100}, {0x8001, 0x6}], 0x40, 0x53, 0x6, 0x2, 0x7}}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0xfffffffc, 0x36314d59, 0x0, @stepwise}) syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x5, @pix_mp={0xea, 0x10000, 0x59455247, 0x7, 0x0, [{0x1, 0x10000}, {0xfffffffa, 0x1}, {0x5, 0x9f85}, {0xffff7a18, 0x6}, {0x8000, 0x6}, {0x66f4, 0xe63b}, {0x2a8, 0x100}, {0x8001, 0x6}], 0x40, 0x53, 0x6, 0x2, 0x7}}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0xfffffffc, 0x36314d59, 0x0, @stepwise}) (async) 23:36:12 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x7ff, 0x0, 0x0, 0x0, [{0x40000000}, {}, {}, {0x0, 0x4}, {0x4000000, 0x8}], 0x0, 0x0, 0x0, 0x2}}) 23:36:12 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc100565c, &(0x7f0000000100)={0x400, 0x2, 0x3, "475d003ee11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x30314442}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x3) 23:36:12 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000c00001de0"}) 23:36:12 executing program 3: socketpair(0x23, 0x79, 0x7fffffff, &(0x7f0000000100)) 23:36:12 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) clock_gettime(0x0, &(0x7f0000000000)) (async, rerun: 32) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (rerun: 32) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f00000000c0)={0xfff, 0x20385655, 0x1, @stepwise={0x0, 0x2, 0x7fff, 0x4, 0x8, 0x6}}) 23:36:12 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x8, 0x3147504d, 0x2, @stepwise={0x7, 0x80, 0x1, 0x9, 0x8, 0x200}}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) connect$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1e) 23:36:12 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc100565c, &(0x7f0000000100)={0x400, 0x2, 0x3, "475d003ee11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x30314442}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x3) 23:36:12 executing program 3: socketpair(0x23, 0x7a, 0x7fffffff, &(0x7f0000000100)) 23:36:12 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f720000000022000000000000000c001de0"}) 23:36:12 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x7ff, 0x0, 0x0, 0x0, [{0x40000000}, {}, {}, {0x0, 0x4}, {0x4000000, 0x8}], 0x0, 0x0, 0x0, 0x2}}) 23:36:12 executing program 1: ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000000)) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x4, 0x2, 0x2, 0x0, 0x8}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000080)={0xfffffff8, 0x8}) 23:36:12 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x8, 0x3147504d, 0x2, @stepwise={0x7, 0x80, 0x1, 0x9, 0x8, 0x200}}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) connect$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1e) 23:36:12 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc100565c, &(0x7f0000000100)={0x400, 0x2, 0x3, "475d003ee11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x30314442}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x3) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc100565c, &(0x7f0000000100)={0x400, 0x2, 0x3, "475d003ee11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x30314442}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x3) (async) 23:36:12 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f720000000022000000000000000c001de0"}) 23:36:12 executing program 3: socketpair(0x23, 0x7b, 0x7fffffff, &(0x7f0000000100)) 23:36:13 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x2, 0x2, 0x2, "9d40d50e252095a4a6ed677795eabd82953c5fd0e4f50cad9f8bfb3937e2ae79", 0x33424752}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000040)=@fd={0x2, 0x1, 0x4, 0x0, 0x58, {0x0, 0xea60}, {0x5, 0x8, 0x63, 0x0, 0x3, 0xa4, "bc585312"}, 0x8, 0x4, {}, 0x8}) 23:36:13 executing program 1: ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000000)) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x4, 0x2, 0x2, 0x0, 0x8}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000080)={0xfffffff8, 0x8}) 23:36:13 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x8, 0x3147504d, 0x2, @stepwise={0x7, 0x80, 0x1, 0x9, 0x8, 0x200}}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) connect$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1e) 23:36:13 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f72000000002200000000000000000c1de0"}) 23:36:13 executing program 3: socketpair(0x23, 0x7c, 0x7fffffff, &(0x7f0000000100)) 23:36:13 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x2, 0x2, 0x2, "9d40d50e252095a4a6ed677795eabd82953c5fd0e4f50cad9f8bfb3937e2ae79", 0x33424752}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000040)=@fd={0x2, 0x1, 0x4, 0x0, 0x58, {0x0, 0xea60}, {0x5, 0x8, 0x63, 0x0, 0x3, 0xa4, "bc585312"}, 0x8, 0x4, {}, 0x8}) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x2, 0x2, 0x2, "9d40d50e252095a4a6ed677795eabd82953c5fd0e4f50cad9f8bfb3937e2ae79", 0x33424752}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000040)=@fd={0x2, 0x1, 0x4, 0x0, 0x58, {0x0, 0xea60}, {0x5, 0x8, 0x63, 0x0, 0x3, 0xa4, "bc585312"}, 0x8, 0x4, {}, 0x8}) (async) 23:36:13 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x27}, 0x1000}}, 0x1ff}, 0x90) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0xffff, 0x0, 0x3, {0x1, @raw_data="637e5efb39b64a901466875cdb799d6570b8eaff49ec6401727dd5f9c2c9e586cfb8af7b21a01d9dca92d198f8588456835a476f388d95cec18e2a5ff07d3e90c3a91f04600f5175b398a330d32195b25cbf7109131243f7bf938b6f09ef7ac2205566ce60fedbff9afbb03bc7cf3667f567246f40ec8aa952c4e97358ef5debd388e16bee41cabcb6f6647e589dc5ca8fe5990e0b31a067f6191582aaf4699e4e793bf8b67b651f73d85d7ca66d5b03f0b6142f0eb299c08853d7eb2bc8b52c0165eb1600669726"}}) 23:36:13 executing program 1: ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000000)) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x4, 0x2, 0x2, 0x0, 0x8}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000080)={0xfffffff8, 0x8}) 23:36:13 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000280)) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000080)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x9}, &(0x7f0000000140)=0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={r4, @in={{0x2, 0x4e21, @multicast1}}, 0xfffc}, 0x90) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x20, 0x1, 0x2, {0x2, @sliced={0x2, [0x3ff, 0x9, 0x3ff, 0xfffc, 0x2, 0x9, 0x6, 0x101, 0x3, 0xff73, 0x1, 0xfa65, 0x4, 0x5, 0x2, 0x40, 0x3, 0xc000, 0x6, 0x6, 0x200, 0x81, 0x7f, 0x1, 0x7, 0x1, 0xfffc, 0x1, 0x1000, 0x2, 0xfffa, 0x6, 0x4, 0x3b90, 0x2, 0xb9, 0x100, 0x92, 0xa0, 0x800, 0x8, 0x100, 0x1f, 0x88, 0x81, 0x5, 0x5, 0x3], 0x32a}}, 0x3f}) 23:36:13 executing program 3: socketpair(0x23, 0x7d, 0x7fffffff, &(0x7f0000000100)) 23:36:13 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f72000000002200000000000000000c1de0"}) 23:36:13 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x302081, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:13 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x27}, 0x1000}}, 0x1ff}, 0x90) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0xffff, 0x0, 0x3, {0x1, @raw_data="637e5efb39b64a901466875cdb799d6570b8eaff49ec6401727dd5f9c2c9e586cfb8af7b21a01d9dca92d198f8588456835a476f388d95cec18e2a5ff07d3e90c3a91f04600f5175b398a330d32195b25cbf7109131243f7bf938b6f09ef7ac2205566ce60fedbff9afbb03bc7cf3667f567246f40ec8aa952c4e97358ef5debd388e16bee41cabcb6f6647e589dc5ca8fe5990e0b31a067f6191582aaf4699e4e793bf8b67b651f73d85d7ca66d5b03f0b6142f0eb299c08853d7eb2bc8b52c0165eb1600669726"}}) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x27}, 0x1000}}, 0x1ff}, 0x90) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0xffff, 0x0, 0x3, {0x1, @raw_data="637e5efb39b64a901466875cdb799d6570b8eaff49ec6401727dd5f9c2c9e586cfb8af7b21a01d9dca92d198f8588456835a476f388d95cec18e2a5ff07d3e90c3a91f04600f5175b398a330d32195b25cbf7109131243f7bf938b6f09ef7ac2205566ce60fedbff9afbb03bc7cf3667f567246f40ec8aa952c4e97358ef5debd388e16bee41cabcb6f6647e589dc5ca8fe5990e0b31a067f6191582aaf4699e4e793bf8b67b651f73d85d7ca66d5b03f0b6142f0eb299c08853d7eb2bc8b52c0165eb1600669726"}}) (async) 23:36:13 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000280)) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000080)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x9}, &(0x7f0000000140)=0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={r4, @in={{0x2, 0x4e21, @multicast1}}, 0xfffc}, 0x90) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x20, 0x1, 0x2, {0x2, @sliced={0x2, [0x3ff, 0x9, 0x3ff, 0xfffc, 0x2, 0x9, 0x6, 0x101, 0x3, 0xff73, 0x1, 0xfa65, 0x4, 0x5, 0x2, 0x40, 0x3, 0xc000, 0x6, 0x6, 0x200, 0x81, 0x7f, 0x1, 0x7, 0x1, 0xfffc, 0x1, 0x1000, 0x2, 0xfffa, 0x6, 0x4, 0x3b90, 0x2, 0xb9, 0x100, 0x92, 0xa0, 0x800, 0x8, 0x100, 0x1f, 0x88, 0x81, 0x5, 0x5, 0x3], 0x32a}}, 0x3f}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000280)) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000080)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x9}, &(0x7f0000000140)=0x9c) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={r4, @in={{0x2, 0x4e21, @multicast1}}, 0xfffc}, 0x90) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x20, 0x1, 0x2, {0x2, @sliced={0x2, [0x3ff, 0x9, 0x3ff, 0xfffc, 0x2, 0x9, 0x6, 0x101, 0x3, 0xff73, 0x1, 0xfa65, 0x4, 0x5, 0x2, 0x40, 0x3, 0xc000, 0x6, 0x6, 0x200, 0x81, 0x7f, 0x1, 0x7, 0x1, 0xfffc, 0x1, 0x1000, 0x2, 0xfffa, 0x6, 0x4, 0x3b90, 0x2, 0xb9, 0x100, 0x92, 0xa0, 0x800, 0x8, 0x100, 0x1f, 0x88, 0x81, 0x5, 0x5, 0x3], 0x32a}}, 0x3f}) (async) 23:36:13 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x2, 0x2, 0x2, "9d40d50e252095a4a6ed677795eabd82953c5fd0e4f50cad9f8bfb3937e2ae79", 0x33424752}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000040)=@fd={0x2, 0x1, 0x4, 0x0, 0x58, {0x0, 0xea60}, {0x5, 0x8, 0x63, 0x0, 0x3, 0xa4, "bc585312"}, 0x8, 0x4, {}, 0x8}) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x2, 0x2, 0x2, "9d40d50e252095a4a6ed677795eabd82953c5fd0e4f50cad9f8bfb3937e2ae79", 0x33424752}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000040)=@fd={0x2, 0x1, 0x4, 0x0, 0x58, {0x0, 0xea60}, {0x5, 0x8, 0x63, 0x0, 0x3, 0xa4, "bc585312"}, 0x8, 0x4, {}, 0x8}) (async) 23:36:13 executing program 3: socketpair(0x23, 0x7e, 0x7fffffff, &(0x7f0000000100)) 23:36:13 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x302081, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async, rerun: 64) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (rerun: 64) 23:36:13 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x27}, 0x1000}}, 0x1ff}, 0x90) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0xffff, 0x0, 0x3, {0x1, @raw_data="637e5efb39b64a901466875cdb799d6570b8eaff49ec6401727dd5f9c2c9e586cfb8af7b21a01d9dca92d198f8588456835a476f388d95cec18e2a5ff07d3e90c3a91f04600f5175b398a330d32195b25cbf7109131243f7bf938b6f09ef7ac2205566ce60fedbff9afbb03bc7cf3667f567246f40ec8aa952c4e97358ef5debd388e16bee41cabcb6f6647e589dc5ca8fe5990e0b31a067f6191582aaf4699e4e793bf8b67b651f73d85d7ca66d5b03f0b6142f0eb299c08853d7eb2bc8b52c0165eb1600669726"}}) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x27}, 0x1000}}, 0x1ff}, 0x90) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0xffff, 0x0, 0x3, {0x1, @raw_data="637e5efb39b64a901466875cdb799d6570b8eaff49ec6401727dd5f9c2c9e586cfb8af7b21a01d9dca92d198f8588456835a476f388d95cec18e2a5ff07d3e90c3a91f04600f5175b398a330d32195b25cbf7109131243f7bf938b6f09ef7ac2205566ce60fedbff9afbb03bc7cf3667f567246f40ec8aa952c4e97358ef5debd388e16bee41cabcb6f6647e589dc5ca8fe5990e0b31a067f6191582aaf4699e4e793bf8b67b651f73d85d7ca66d5b03f0b6142f0eb299c08853d7eb2bc8b52c0165eb1600669726"}}) (async) 23:36:13 executing program 3: socketpair(0x23, 0x82, 0x7fffffff, &(0x7f0000000100)) 23:36:13 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:13 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x4fd, 0x1, 0x2}) 23:36:13 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000280)) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000080)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x9}, &(0x7f0000000140)=0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={r4, @in={{0x2, 0x4e21, @multicast1}}, 0xfffc}, 0x90) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x20, 0x1, 0x2, {0x2, @sliced={0x2, [0x3ff, 0x9, 0x3ff, 0xfffc, 0x2, 0x9, 0x6, 0x101, 0x3, 0xff73, 0x1, 0xfa65, 0x4, 0x5, 0x2, 0x40, 0x3, 0xc000, 0x6, 0x6, 0x200, 0x81, 0x7f, 0x1, 0x7, 0x1, 0xfffc, 0x1, 0x1000, 0x2, 0xfffa, 0x6, 0x4, 0x3b90, 0x2, 0xb9, 0x100, 0x92, 0xa0, 0x800, 0x8, 0x100, 0x1f, 0x88, 0x81, 0x5, 0x5, 0x3], 0x32a}}, 0x3f}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000280)) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000080)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x9}, &(0x7f0000000140)=0x9c) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={r4, @in={{0x2, 0x4e21, @multicast1}}, 0xfffc}, 0x90) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x20, 0x1, 0x2, {0x2, @sliced={0x2, [0x3ff, 0x9, 0x3ff, 0xfffc, 0x2, 0x9, 0x6, 0x101, 0x3, 0xff73, 0x1, 0xfa65, 0x4, 0x5, 0x2, 0x40, 0x3, 0xc000, 0x6, 0x6, 0x200, 0x81, 0x7f, 0x1, 0x7, 0x1, 0xfffc, 0x1, 0x1000, 0x2, 0xfffa, 0x6, 0x4, 0x3b90, 0x2, 0xb9, 0x100, 0x92, 0xa0, 0x800, 0x8, 0x100, 0x1f, 0x88, 0x81, 0x5, 0x5, 0x3], 0x32a}}, 0x3f}) (async) 23:36:13 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x302081, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x302081, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:36:13 executing program 3: socketpair(0x23, 0x83, 0x7fffffff, &(0x7f0000000100)) 23:36:13 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x1, @pix={0x7ff, 0x600, 0x584e4f53, 0x9, 0x4, 0xcb30, 0xc, 0x1, 0x0, 0x3, 0x1, 0x2}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000001c0)=@overlay={0x3, 0x1, 0x4, 0x0, 0xffffffff, {0x77359400}, {0x4, 0x0, 0x0, 0x81, 0x6, 0x3, "6972badf"}, 0x8001, 0x3, {}, 0xfffffffd, 0x0, r2}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000140)={0x7, 0x0, 0x2, "95c2ed7bd3be2ad1915fd06707f7be6db76389118d6f5fd257a2f32a2687b22d", 0x34424752}) 23:36:13 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0xc}) 23:36:13 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x4fd, 0x1, 0x2}) 23:36:13 executing program 3: socketpair(0x23, 0x84, 0x7fffffff, &(0x7f0000000100)) 23:36:13 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000000)=0x1, 0x4) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000040)=0x3, 0x4) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:13 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x1, @pix={0x7ff, 0x600, 0x584e4f53, 0x9, 0x4, 0xcb30, 0xc, 0x1, 0x0, 0x3, 0x1, 0x2}}) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000001c0)=@overlay={0x3, 0x1, 0x4, 0x0, 0xffffffff, {0x77359400}, {0x4, 0x0, 0x0, 0x81, 0x6, 0x3, "6972badf"}, 0x8001, 0x3, {}, 0xfffffffd, 0x0, r2}) (async) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) (async, rerun: 32) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000140)={0x7, 0x0, 0x2, "95c2ed7bd3be2ad1915fd06707f7be6db76389118d6f5fd257a2f32a2687b22d", 0x34424752}) (rerun: 32) 23:36:13 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2402, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000080)={0x10001, 0x48524742, 0x0, @discrete={0x6, 0x27b1}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:13 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0xc00}) 23:36:13 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x4fd, 0x1, 0x2}) 23:36:13 executing program 3: socketpair(0x23, 0x85, 0x7fffffff, &(0x7f0000000100)) 23:36:13 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000000)=0x1, 0x4) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000040)=0x3, 0x4) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000040)=0x3, 0x4) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:36:13 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2402, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000080)={0x10001, 0x48524742, 0x0, @discrete={0x6, 0x27b1}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2402, 0x0) (async) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000080)={0x10001, 0x48524742, 0x0, @discrete={0x6, 0x27b1}}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:36:13 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x1000000}) 23:36:13 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x1, @pix={0x7ff, 0x600, 0x584e4f53, 0x9, 0x4, 0xcb30, 0xc, 0x1, 0x0, 0x3, 0x1, 0x2}}) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000001c0)=@overlay={0x3, 0x1, 0x4, 0x0, 0xffffffff, {0x77359400}, {0x4, 0x0, 0x0, 0x81, 0x6, 0x3, "6972badf"}, 0x8001, 0x3, {}, 0xfffffffd, 0x0, r2}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) (async, rerun: 64) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000140)={0x7, 0x0, 0x2, "95c2ed7bd3be2ad1915fd06707f7be6db76389118d6f5fd257a2f32a2687b22d", 0x34424752}) (rerun: 64) 23:36:13 executing program 3: socketpair(0x23, 0x86, 0x7fffffff, &(0x7f0000000100)) 23:36:13 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x100000000004) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f00000000c0)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0x5, 0xfff, 0x2012, 0x5, 0xb, 0x6, 0x2, 0x4}}) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 23:36:13 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000000)=0x1, 0x4) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000040)=0x3, 0x4) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000040)=0x3, 0x4) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:36:13 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2402, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000080)={0x10001, 0x48524742, 0x0, @discrete={0x6, 0x27b1}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:13 executing program 3: socketpair(0x23, 0x87, 0x7fffffff, &(0x7f0000000100)) 23:36:13 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0xc000000}) 23:36:13 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000080)={r3, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000040)={r3, @in6={{0xa, 0x4e20, 0x6, @loopback, 0x3}}, 0x5, 0x100}, 0x90) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:36:13 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "477f003fd7a751220000000800000000001dc0000000000000000100", 0x30314247}) 23:36:13 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000280)={0x1, @vbi={0x8, 0x6, 0xf088, 0x3436324d, [0x8, 0x9], [0x3ff, 0xffe], 0x2}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f00000000c0)) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000080)=0x100) 23:36:13 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x100000000004) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f00000000c0)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0x5, 0xfff, 0x2012, 0x5, 0xb, 0x6, 0x2, 0x4}}) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x100000000004) (async) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f00000000c0)) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0x5, 0xfff, 0x2012, 0x5, 0xb, 0x6, 0x2, 0x4}}) (async) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) 23:36:13 executing program 3: socketpair(0x23, 0x88, 0x7fffffff, &(0x7f0000000100)) 23:36:13 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000080)={r3, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000040)={r3, @in6={{0xa, 0x4e20, 0x6, @loopback, 0x3}}, 0x5, 0x100}, 0x90) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000080)={r3, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x9c) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000040)={r3, @in6={{0xa, 0x4e20, 0x6, @loopback, 0x3}}, 0x5, 0x100}, 0x90) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) 23:36:13 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "477f003fd7a751220000000800000000001dc0000000000000000100", 0x30314247}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "477f003fd7a751220000000800000000001dc0000000000000000100", 0x30314247}) (async) 23:36:13 executing program 0: syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x800, 0x385300) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:13 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000280)={0x1, @vbi={0x8, 0x6, 0xf088, 0x3436324d, [0x8, 0x9], [0x3ff, 0xffe], 0x2}}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f00000000c0)) (async) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000080)=0x100) 23:36:13 executing program 3: socketpair(0x23, 0x89, 0x7fffffff, &(0x7f0000000100)) 23:36:13 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x100000000004) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f00000000c0)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0x5, 0xfff, 0x2012, 0x5, 0xb, 0x6, 0x2, 0x4}}) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x100000000004) (async) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f00000000c0)) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0x5, 0xfff, 0x2012, 0x5, 0xb, 0x6, 0x2, 0x4}}) (async) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) 23:36:13 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "477f003fd7a751220000000800000000001dc0000000000000000100", 0x30314247}) 23:36:13 executing program 0: syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) (async, rerun: 64) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async, rerun: 64) syz_open_dev$dri(&(0x7f0000000000), 0x800, 0x385300) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:13 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000080)={r3, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x9c) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000040)={r3, @in6={{0xa, 0x4e20, 0x6, @loopback, 0x3}}, 0x5, 0x100}, 0x90) (async, rerun: 64) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (rerun: 64) 23:36:13 executing program 3: socketpair(0x23, 0x8a, 0x7fffffff, &(0x7f0000000100)) 23:36:13 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000280)={0x1, @vbi={0x8, 0x6, 0xf088, 0x3436324d, [0x8, 0x9], [0x3ff, 0xffe], 0x2}}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f00000000c0)) (async) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000080)=0x100) 23:36:13 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x4a0040, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x2, 0x1, 0x3, 0x0, 0x3}) 23:36:13 executing program 5: bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x2, @rand_addr=0x64010101}}, 0x1e) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:13 executing program 3: socketpair(0x23, 0x8b, 0x7fffffff, &(0x7f0000000100)) 23:36:13 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0xab0, 0x18}, 0xc) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000080)={0x0, 0x47425247, 0x0, @stepwise}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x2) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0x10000, 0x14}, 0xc) 23:36:13 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x4a0040, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000080)) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x2, 0x1, 0x3, 0x0, 0x3}) 23:36:13 executing program 3: socketpair(0x23, 0x8c, 0x7fffffff, &(0x7f0000000100)) 23:36:13 executing program 5: bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x2, @rand_addr=0x64010101}}, 0x1e) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:13 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x1, 0x1, 0x2, "2aa5c3b68ceb241ab5d78026d7493c82020bb532ae5b0384ec8bf9b3887d8635", 0x30314247}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:14 executing program 0: syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x800, 0x385300) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:14 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0xab0, 0x18}, 0xc) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000080)={0x0, 0x47425247, 0x0, @stepwise}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x2) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0x10000, 0x14}, 0xc) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0xab0, 0x18}, 0xc) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000080)={0x0, 0x47425247, 0x0, @stepwise}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x2) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0x10000, 0x14}, 0xc) (async) 23:36:14 executing program 3: socketpair(0x23, 0x8d, 0x7fffffff, &(0x7f0000000100)) 23:36:14 executing program 5: bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x2, @rand_addr=0x64010101}}, 0x1e) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:14 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x1, 0x1, 0x2, "2aa5c3b68ceb241ab5d78026d7493c82020bb532ae5b0384ec8bf9b3887d8635", 0x30314247}) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:14 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x4a0040, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000080)) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x2, 0x1, 0x3, 0x0, 0x3}) 23:36:14 executing program 3: socketpair(0x23, 0x8e, 0x7fffffff, &(0x7f0000000100)) 23:36:14 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0xab0, 0x18}, 0xc) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000080)={0x0, 0x47425247, 0x0, @stepwise}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x2) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0x10000, 0x14}, 0xc) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0xab0, 0x18}, 0xc) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000080)={0x0, 0x47425247, 0x0, @stepwise}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x2) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0x10000, 0x14}, 0xc) (async) 23:36:14 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000080)=@mmap={0x4, 0x2, 0x4, 0x0, 0xcc19, {r2, r3/1000+60000}, {0x4, 0x2, 0x6, 0x48, 0x1f, 0x20, "19f39d7b"}, 0xffff, 0x1, {}, 0x0, 0x0, r4}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:14 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @pix_mp={0x401, 0x8, 0x0, 0x6, 0xa, [{0x8, 0x4}, {0x7c8, 0x2}, {0xfffffeff, 0x8d}, {0x101, 0x8000}, {0x6, 0xff}, {0x3, 0x9}, {0xfffffc01, 0xfba8}, {0x3f, 0xfffff17f}], 0x7, 0xfc, 0x7, 0x1, 0x5}}) 23:36:14 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x1, 0x1, 0x2, "2aa5c3b68ceb241ab5d78026d7493c82020bb532ae5b0384ec8bf9b3887d8635", 0x30314247}) (async, rerun: 32) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (rerun: 32) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:14 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000000)={0x2, @pix={0x3, 0x4, 0x4c47504a, 0x3, 0x101, 0x0, 0x8, 0xffffffe0, 0x1, 0x7, 0x0, 0x7}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:14 executing program 3: socketpair(0x23, 0x8f, 0x7fffffff, &(0x7f0000000100)) 23:36:14 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000000)={0x2, @pix={0x3, 0x4, 0x4c47504a, 0x3, 0x101, 0x0, 0x8, 0xffffffe0, 0x1, 0x7, 0x0, 0x7}}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:14 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0x7, 0x7fff}) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x898c, 0x20343059, 0x2, @stepwise={0x7, 0xc64, 0x0, 0x800, 0x1, 0xc75}}) 23:36:14 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @pix_mp={0x401, 0x8, 0x0, 0x6, 0xa, [{0x8, 0x4}, {0x7c8, 0x2}, {0xfffffeff, 0x8d}, {0x101, 0x8000}, {0x6, 0xff}, {0x3, 0x9}, {0xfffffc01, 0xfba8}, {0x3f, 0xfffff17f}], 0x7, 0xfc, 0x7, 0x1, 0x5}}) 23:36:14 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async, rerun: 64) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async, rerun: 64) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) (async) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000080)=@mmap={0x4, 0x2, 0x4, 0x0, 0xcc19, {r2, r3/1000+60000}, {0x4, 0x2, 0x6, 0x48, 0x1f, 0x20, "19f39d7b"}, 0xffff, 0x1, {}, 0x0, 0x0, r4}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:14 executing program 3: socketpair(0x23, 0x90, 0x7fffffff, &(0x7f0000000100)) 23:36:14 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0x7, 0x7fff}) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xffffffffffffffff) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x898c, 0x20343059, 0x2, @stepwise={0x7, 0xc64, 0x0, 0x800, 0x1, 0xc75}}) 23:36:14 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000000)={0x2, @pix={0x3, 0x4, 0x4c47504a, 0x3, 0x101, 0x0, 0x8, 0xffffffe0, 0x1, 0x7, 0x0, 0x7}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:14 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000000)={0x0, 0x1, 0x0, "475d003f7b4867ac98439118f1c62f7a00000000220000000000000000001de0", 0x32314d48}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)=@multiplanar_fd={0x6d44b08, 0xfd826d058cf96663, 0x4, 0x100, 0x101, {}, {0x4, 0x8, 0x7, 0xfb, 0x0, 0x5, "bcb30d44"}, 0x8001, 0x4, {&(0x7f0000000140)=[{0x4, 0x0, {r2}, 0x6e4a068a}, {0x9, 0x6f89a20c, {}, 0x7}]}, 0x7, 0x0, r3}) 23:36:14 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async, rerun: 64) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @pix_mp={0x401, 0x8, 0x0, 0x6, 0xa, [{0x8, 0x4}, {0x7c8, 0x2}, {0xfffffeff, 0x8d}, {0x101, 0x8000}, {0x6, 0xff}, {0x3, 0x9}, {0xfffffc01, 0xfba8}, {0x3f, 0xfffff17f}], 0x7, 0xfc, 0x7, 0x1, 0x5}}) (rerun: 64) 23:36:14 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0x7, 0x7fff}) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x898c, 0x20343059, 0x2, @stepwise={0x7, 0xc64, 0x0, 0x800, 0x1, 0xc75}}) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0x7, 0x7fff}) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) add_key$fscrypt_provisioning(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xffffffffffffffff) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x898c, 0x20343059, 0x2, @stepwise={0x7, 0xc64, 0x0, 0x800, 0x1, 0xc75}}) (async) 23:36:14 executing program 3: socketpair(0x23, 0x91, 0x7fffffff, &(0x7f0000000100)) 23:36:14 executing program 0: socket$l2tp(0x2, 0x2, 0x73) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:14 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x800000}]}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x1, @sliced={0x7, [0xffff, 0x9, 0x4, 0x400, 0x3, 0x20, 0xff9b, 0x8, 0x9, 0x86, 0x400, 0x0, 0x1ff, 0x200, 0xab40, 0xd9c, 0x7fff, 0x139, 0x1ff8, 0xb6e, 0xf001, 0x5, 0x2, 0x2, 0xe18, 0x8a, 0x7ff, 0x3, 0x1, 0xff, 0x3, 0x0, 0x80, 0x1, 0x5, 0x9, 0x3, 0xfff, 0x9, 0x8001, 0xffff, 0x4a09, 0x5fb, 0x6, 0x6, 0x95cc, 0x42c, 0x9], 0x3ff}}) 23:36:14 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000000)={0x0, 0x1, 0x0, "475d003f7b4867ac98439118f1c62f7a00000000220000000000000000001de0", 0x32314d48}) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) (async) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) (async, rerun: 64) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)=@multiplanar_fd={0x6d44b08, 0xfd826d058cf96663, 0x4, 0x100, 0x101, {}, {0x4, 0x8, 0x7, 0xfb, 0x0, 0x5, "bcb30d44"}, 0x8001, 0x4, {&(0x7f0000000140)=[{0x4, 0x0, {r2}, 0x6e4a068a}, {0x9, 0x6f89a20c, {}, 0x7}]}, 0x7, 0x0, r3}) (rerun: 64) 23:36:14 executing program 3: socketpair(0x23, 0x92, 0x7fffffff, &(0x7f0000000100)) 23:36:14 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async, rerun: 32) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (rerun: 32) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) (async, rerun: 32) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000080)=@mmap={0x4, 0x2, 0x4, 0x0, 0xcc19, {r2, r3/1000+60000}, {0x4, 0x2, 0x6, 0x48, 0x1f, 0x20, "19f39d7b"}, 0xffff, 0x1, {}, 0x0, 0x0, r4}) (async, rerun: 64) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (rerun: 64) 23:36:14 executing program 0: socket$l2tp(0x2, 0x2, 0x73) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) socket$l2tp(0x2, 0x2, 0x73) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:36:14 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x800000}]}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x1, @sliced={0x7, [0xffff, 0x9, 0x4, 0x400, 0x3, 0x20, 0xff9b, 0x8, 0x9, 0x86, 0x400, 0x0, 0x1ff, 0x200, 0xab40, 0xd9c, 0x7fff, 0x139, 0x1ff8, 0xb6e, 0xf001, 0x5, 0x2, 0x2, 0xe18, 0x8a, 0x7ff, 0x3, 0x1, 0xff, 0x3, 0x0, 0x80, 0x1, 0x5, 0x9, 0x3, 0xfff, 0x9, 0x8001, 0xffff, 0x4a09, 0x5fb, 0x6, 0x6, 0x95cc, 0x42c, 0x9], 0x3ff}}) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x800000}]}}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x1, @sliced={0x7, [0xffff, 0x9, 0x4, 0x400, 0x3, 0x20, 0xff9b, 0x8, 0x9, 0x86, 0x400, 0x0, 0x1ff, 0x200, 0xab40, 0xd9c, 0x7fff, 0x139, 0x1ff8, 0xb6e, 0xf001, 0x5, 0x2, 0x2, 0xe18, 0x8a, 0x7ff, 0x3, 0x1, 0xff, 0x3, 0x0, 0x80, 0x1, 0x5, 0x9, 0x3, 0xfff, 0x9, 0x8001, 0xffff, 0x4a09, 0x5fb, 0x6, 0x6, 0x95cc, 0x42c, 0x9], 0x3ff}}) (async) 23:36:14 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x101, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000080)={r3, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x9c) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000080)={r3, 0x6}, &(0x7f00000000c0)=0x8) 23:36:14 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000000)={0x0, 0x1, 0x0, "475d003f7b4867ac98439118f1c62f7a00000000220000000000000000001de0", 0x32314d48}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) (async, rerun: 32) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 32) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)=@multiplanar_fd={0x6d44b08, 0xfd826d058cf96663, 0x4, 0x100, 0x101, {}, {0x4, 0x8, 0x7, 0xfb, 0x0, 0x5, "bcb30d44"}, 0x8001, 0x4, {&(0x7f0000000140)=[{0x4, 0x0, {r2}, 0x6e4a068a}, {0x9, 0x6f89a20c, {}, 0x7}]}, 0x7, 0x0, r3}) 23:36:14 executing program 3: socketpair(0x23, 0x93, 0x7fffffff, &(0x7f0000000100)) 23:36:14 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x101, 0x0) (async, rerun: 64) r2 = socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 64) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000080)={r3, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x9c) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000080)={r3, 0x6}, &(0x7f00000000c0)=0x8) 23:36:14 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x800000}]}}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x1, @sliced={0x7, [0xffff, 0x9, 0x4, 0x400, 0x3, 0x20, 0xff9b, 0x8, 0x9, 0x86, 0x400, 0x0, 0x1ff, 0x200, 0xab40, 0xd9c, 0x7fff, 0x139, 0x1ff8, 0xb6e, 0xf001, 0x5, 0x2, 0x2, 0xe18, 0x8a, 0x7ff, 0x3, 0x1, 0xff, 0x3, 0x0, 0x80, 0x1, 0x5, 0x9, 0x3, 0xfff, 0x9, 0x8001, 0xffff, 0x4a09, 0x5fb, 0x6, 0x6, 0x95cc, 0x42c, 0x9], 0x3ff}}) 23:36:14 executing program 0: socket$l2tp(0x2, 0x2, 0x73) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:14 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300), 0x101001, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000340)=0x2, 0x4) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$VIDIOC_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000000000)={0x0, @reserved}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000280)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x1, 0x8, {r2, r3/1000+60000}, {0x2, 0x0, 0x9, 0x7f, 0x53, 0x7f, "f3718852"}, 0x47, 0x2, {&(0x7f0000000200)=[{0x5, 0xffff0001, {&(0x7f0000000180)}, 0x5}, {0x6, 0x80000001, {&(0x7f00000001c0)}, 0x9}]}, 0x400}) 23:36:14 executing program 3: socketpair(0x23, 0x94, 0x7fffffff, &(0x7f0000000100)) 23:36:14 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x6, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x31363553}) 23:36:14 executing program 0: setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) connect$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x1, 0x3}}, 0x10) socketpair(0x29, 0xa, 0x27ff, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r1, 0x28, 0x6, &(0x7f0000000140)={0x0, 0x2710}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000040)={0x8000, 0x1, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:14 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x2, 0x2, 0x0, "b7f9e891c952e76977e92add5e98cc00135207a1b74958eeca42efa4c5cbabfe", 0x56544943}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x6}}) 23:36:14 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300), 0x101001, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000340)=0x2, 0x4) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$VIDIOC_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000000000)={0x0, @reserved}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000280)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x1, 0x8, {r2, r3/1000+60000}, {0x2, 0x0, 0x9, 0x7f, 0x53, 0x7f, "f3718852"}, 0x47, 0x2, {&(0x7f0000000200)=[{0x5, 0xffff0001, {&(0x7f0000000180)}, 0x5}, {0x6, 0x80000001, {&(0x7f00000001c0)}, 0x9}]}, 0x400}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300), 0x101001, 0x0) (async) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000340)=0x2, 0x4) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) ioctl$VIDIOC_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000000000)={0x0, @reserved}) (async) clock_gettime(0x0, &(0x7f00000000c0)) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000280)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x1, 0x8, {r2, r3/1000+60000}, {0x2, 0x0, 0x9, 0x7f, 0x53, 0x7f, "f3718852"}, 0x47, 0x2, {&(0x7f0000000200)=[{0x5, 0xffff0001, {&(0x7f0000000180)}, 0x5}, {0x6, 0x80000001, {&(0x7f00000001c0)}, 0x9}]}, 0x400}) (async) 23:36:14 executing program 3: socketpair(0x23, 0x95, 0x7fffffff, &(0x7f0000000100)) 23:36:14 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x101, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000080)={r3, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x9c) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000080)={r3, 0x6}, &(0x7f00000000c0)=0x8) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x101, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000080)={r3, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x9c) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000080)={r3, 0x6}, &(0x7f00000000c0)=0x8) (async) 23:36:14 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x6, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x31363553}) 23:36:14 executing program 0: setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) connect$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x1, 0x3}}, 0x10) socketpair(0x29, 0xa, 0x27ff, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r1, 0x28, 0x6, &(0x7f0000000140)={0x0, 0x2710}, 0x10) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000040)={0x8000, 0x1, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:14 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x8001, 0x36314d4e, 0x2, @discrete={0x8, 0x4}}) ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, &(0x7f0000000040)={0x800, "91fc43d78f3088036b4ad86379d39b0ddaaacff15bf45d7f91182420746d06a2", 0x2, 0x6, 0x40, 0x1000, 0x2}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000140)={0x10001, 0x3, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000001c0)={0x2, @sdr={0x38415262, 0x30}}) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f0000000000)={0x400, "4847785ae6faede38eee294f2d40d9d48237b0de4d73a0044d1e6b09330b1111", 0x3, 0x1}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000100)=0x24f8, 0x4) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r1}, 0x8) ioctl$PTP_SYS_OFFSET_EXTENDED(r2, 0xc4c03d09, &(0x7f0000000300)={0x5}) 23:36:14 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x6, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x31363553}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x6, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x31363553}) (async) 23:36:14 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x2, 0x2, 0x0, "b7f9e891c952e76977e92add5e98cc00135207a1b74958eeca42efa4c5cbabfe", 0x56544943}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x6}}) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x2, 0x2, 0x0, "b7f9e891c952e76977e92add5e98cc00135207a1b74958eeca42efa4c5cbabfe", 0x56544943}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x6}}) (async) 23:36:14 executing program 3: socketpair(0x23, 0x96, 0x7fffffff, &(0x7f0000000100)) 23:36:14 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300), 0x101001, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000340)=0x2, 0x4) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$VIDIOC_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000000000)={0x0, @reserved}) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000280)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x1, 0x8, {r2, r3/1000+60000}, {0x2, 0x0, 0x9, 0x7f, 0x53, 0x7f, "f3718852"}, 0x47, 0x2, {&(0x7f0000000200)=[{0x5, 0xffff0001, {&(0x7f0000000180)}, 0x5}, {0x6, 0x80000001, {&(0x7f00000001c0)}, 0x9}]}, 0x400}) 23:36:14 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x8001, 0x36314d4e, 0x2, @discrete={0x8, 0x4}}) ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, &(0x7f0000000040)={0x800, "91fc43d78f3088036b4ad86379d39b0ddaaacff15bf45d7f91182420746d06a2", 0x2, 0x6, 0x40, 0x1000, 0x2}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000140)={0x10001, 0x3, 0x4, 0x0, 0x7}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000001c0)={0x2, @sdr={0x38415262, 0x30}}) (async, rerun: 32) socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 32) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f0000000000)={0x400, "4847785ae6faede38eee294f2d40d9d48237b0de4d73a0044d1e6b09330b1111", 0x3, 0x1}) (async) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000100)=0x24f8, 0x4) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r1}, 0x8) ioctl$PTP_SYS_OFFSET_EXTENDED(r2, 0xc4c03d09, &(0x7f0000000300)={0x5}) 23:36:14 executing program 0: setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) connect$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x1, 0x3}}, 0x10) socketpair(0x29, 0xa, 0x27ff, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r1, 0x28, 0x6, &(0x7f0000000140)={0x0, 0x2710}, 0x10) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000040)={0x8000, 0x1, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:14 executing program 3: socketpair(0x23, 0x97, 0x7fffffff, &(0x7f0000000100)) 23:36:14 executing program 1: syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x400002) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f0000000140)={'\x00', 0x7734, 0x0, 0x2}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000080)={0x1, 0x2, 0x0, "475d00ad201ed59bb805000000220000fdfffffffdffffffe000", 0x30314742}) 23:36:14 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x3}, 0x10) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000380)={0x0, 0x0, {0x0, 0x9, 0x3001, 0x4, 0x1, 0x8, 0x0, 0x4}}) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000010400000000000009000000186300000800000000000000a9000000184200000700000000000000000000003d160001f7ffffff18290000", @ANYRES32=0x1, @ANYBLOB='\x00\t\x00\x00\x00\x00\x00\x00\x00+\x00\x00', @ANYRES32=0x1, @ANYBLOB="000000000500000085100000fdffffff85100000fbffffff9500007ffffffffffffff90000000000"], &(0x7f0000000480)='GPL\x00', 0x400, 0x3e, &(0x7f00000004c0)=""/62, 0x41100, 0x4, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0xa, 0x3ff, 0x4}, 0x10, 0x23925, r1, 0x0, &(0x7f0000000580)=[0x1, 0x1, r1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1]}, 0x80) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r4, 0xc4c03d09, &(0x7f00000006c0)={0x2}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000680)={r2, r3, 0x7}, 0x10) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xc, &(0x7f0000000040)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4}, @ldst={0x1, 0x0, 0x1, 0x9, 0x9, 0xffffffffffffffe0, 0x8}, @map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x1}, @generic={0x7a, 0x4, 0x8, 0x2, 0xfffffff8}, @map_fd={0x18, 0x8, 0x1, 0x0, 0x1}, @map_fd={0x18, 0x7, 0x1, 0x0, 0x1}], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0xac, &(0x7f0000000180)=""/172, 0x40f00, 0x1, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x10, 0x1f, 0x1}, 0x10, 0xffffffffffffffff}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000340)={r1, r5, 0x0, r6}, 0x10) 23:36:14 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x2, 0x2, 0x0, "b7f9e891c952e76977e92add5e98cc00135207a1b74958eeca42efa4c5cbabfe", 0x56544943}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x6}}) 23:36:14 executing program 3: socketpair(0x23, 0x98, 0x7fffffff, &(0x7f0000000100)) 23:36:14 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x9, "605616ea8ea0a25b54324affe04b47e9c2c3cc3ed03c84354c851532c7dcb00c"}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x3, 0x1, 0x0, "474d043f2b1ed59bb805dfd0f0c62f720008f9fb404c8e00000000000de40600", 0x32315659}) 23:36:14 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x8001, 0x36314d4e, 0x2, @discrete={0x8, 0x4}}) ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, &(0x7f0000000040)={0x800, "91fc43d78f3088036b4ad86379d39b0ddaaacff15bf45d7f91182420746d06a2", 0x2, 0x6, 0x40, 0x1000, 0x2}) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000140)={0x10001, 0x3, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000001c0)={0x2, @sdr={0x38415262, 0x30}}) socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f0000000000)={0x400, "4847785ae6faede38eee294f2d40d9d48237b0de4d73a0044d1e6b09330b1111", 0x3, 0x1}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000100)=0x24f8, 0x4) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r1}, 0x8) ioctl$PTP_SYS_OFFSET_EXTENDED(r2, 0xc4c03d09, &(0x7f0000000300)={0x5}) 23:36:14 executing program 1: syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x400002) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f0000000140)={'\x00', 0x7734, 0x0, 0x2}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000080)={0x1, 0x2, 0x0, "475d00ad201ed59bb805000000220000fdfffffffdffffffe000", 0x30314742}) syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x400002) (async) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f0000000140)={'\x00', 0x7734, 0x0, 0x2}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000080)={0x1, 0x2, 0x0, "475d00ad201ed59bb805000000220000fdfffffffdffffffe000", 0x30314742}) (async)