0x1000, 0x4, {0x77359400}, {0x3, 0x1, 0x80, 0xe0, 0x74, 0x4, "fb232d7a"}, 0x80, 0x2, {}, 0xffff0001}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @sliced={0xbe10, [0x4, 0x6589, 0x800, 0x8000, 0x8, 0xea, 0x2, 0x9, 0x4, 0x81, 0x7f, 0xce, 0xf2, 0x1, 0xb2c, 0x94cd, 0x4, 0xafd6, 0xef47, 0x3, 0x8, 0x8270, 0x7, 0x1800, 0x3, 0xffe1, 0x40, 0xfffb, 0xa, 0xd9a1, 0x14, 0x9, 0x2, 0x0, 0xcf, 0x2, 0xfffc, 0x800, 0x9, 0x8, 0x5, 0x5, 0x1f, 0x401, 0x0, 0x4, 0x4, 0x100], 0x6}}) 23:35:41 executing program 2: r0 = socket(0xf, 0x3, 0x0) (async, rerun: 32) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x24040, 0x0) (rerun: 32) getsockopt$inet_dccp_buf(r1, 0x21, 0x2, &(0x7f0000000100)=""/217, &(0x7f0000000040)=0xd9) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:41 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x3, 0x0, 0xa}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r1, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0], 0x0, 0x8, &(0x7f0000000200)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r1, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) r8 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r9}, 0x48) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000007c0)={'erspan0\x00', &(0x7f0000000780)={'syztnl0\x00', 0x0, 0x7, 0x40, 0x3d, 0x3, {{0x8, 0x4, 0x2, 0x16, 0x20, 0x68, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0xb, 0x66, [@multicast1, @rand_addr=0x64010101]}, @end]}}}}}) r11 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$pptp(r1, &(0x7f0000000dc0)={0x18, 0x2, {0x1, @private=0xa010101}}, 0x1e) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r12}, 0x48) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000e00), 0x40002, 0x0) r13 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r14}, 0x48) r15 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r15, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r17 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) ioctl$VIDIOC_S_TUNER(r17, 0x4054561e, &(0x7f0000000d40)={0x9, "ecef137124c1fd3309473837644281682855732a67151365d1e027a318391d34", 0x0, 0x0, 0xce1, 0x2, 0x2, 0x3, 0xfc08, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r16}, 0x48) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000cc0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000800)=ANY=[@ANYBLOB="6c040000", @ANYRES16=0x0, @ANYBLOB="000227bd7000fddbdf250200000008000100", @ANYRES32=r2, @ANYBLOB="2c01028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400010100003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r4, @ANYBLOB="400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400ff07000008000600", @ANYRES32=r6, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000100000008000600", @ANYRES32=r7, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000001000008000100", @ANYRES32=r9, @ANYBLOB="b800028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000400000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000700000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="9f000100", @ANYRES32=r12, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="3c010280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000100008008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004008000000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b7570000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000700000008000600", @ANYRES32=r16, @ANYBLOB], 0x46c}, 0x1, 0x0, 0x0, 0x800}, 0x20040001) 23:35:41 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0285629, &(0x7f00000001c0)={0x4}) 23:35:41 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:41 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) r1 = socket$inet_sctp(0x2, 0x5, 0x84) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000400), 0x408100, 0x0) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x7, @mcast2, 0x5}}, 0x1, 0xff, 0xffffffff, 0x7, 0x2a, 0x7703, 0x4}, &(0x7f00000002c0)=0x9c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={r2, @in6={{0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x9}}, 0x7fff, 0x4, 0x0, 0xa5, 0x30, 0xffffff00, 0x81}, &(0x7f00000003c0)=0x9c) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)=@userptr={0x1, 0x1, 0x4, 0x1000, 0x4, {0x77359400}, {0x3, 0x1, 0x80, 0xe0, 0x74, 0x4, "fb232d7a"}, 0x80, 0x2, {}, 0xffff0001}) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @sliced={0xbe10, [0x4, 0x6589, 0x800, 0x8000, 0x8, 0xea, 0x2, 0x9, 0x4, 0x81, 0x7f, 0xce, 0xf2, 0x1, 0xb2c, 0x94cd, 0x4, 0xafd6, 0xef47, 0x3, 0x8, 0x8270, 0x7, 0x1800, 0x3, 0xffe1, 0x40, 0xfffb, 0xa, 0xd9a1, 0x14, 0x9, 0x2, 0x0, 0xcf, 0x2, 0xfffc, 0x800, 0x9, 0x8, 0x5, 0x5, 0x1f, 0x401, 0x0, 0x4, 0x4, 0x100], 0x6}}) 23:35:41 executing program 5: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x35323645, 0x6, 0x0, [{0xff, 0xf7}]}}) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000140)=0x5) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x3, 0x40, 0x4, {0x1, @sliced={0xfffd, [0x4, 0xffff, 0x6, 0x1ff, 0xff, 0x8, 0x9, 0xff, 0xee, 0x3, 0xff77, 0xfff, 0x1, 0x5, 0x8, 0x1, 0x3ff, 0x8000, 0x1ff, 0x52f, 0x4, 0xf7, 0x2, 0x100, 0x7, 0x35, 0x1ff, 0x367d, 0x0, 0x7ff, 0x6, 0x3, 0x8000, 0x7f, 0xfff, 0xff89, 0x7be2, 0xfffc, 0x5, 0x4, 0x1ff, 0x0, 0xccde, 0x0, 0x665, 0xf5f5, 0xfff, 0x81], 0x1936}}, 0x2}) 23:35:41 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x3, 0x0, 0xa}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r1, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0], 0x0, 0x8, &(0x7f0000000200)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r1, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) r8 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r9}, 0x48) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000007c0)={'erspan0\x00', &(0x7f0000000780)={'syztnl0\x00', 0x0, 0x7, 0x40, 0x3d, 0x3, {{0x8, 0x4, 0x2, 0x16, 0x20, 0x68, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0xb, 0x66, [@multicast1, @rand_addr=0x64010101]}, @end]}}}}}) r11 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$pptp(r1, &(0x7f0000000dc0)={0x18, 0x2, {0x1, @private=0xa010101}}, 0x1e) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r12}, 0x48) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000e00), 0x40002, 0x0) r13 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r14}, 0x48) r15 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r15, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r17 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) ioctl$VIDIOC_S_TUNER(r17, 0x4054561e, &(0x7f0000000d40)={0x9, "ecef137124c1fd3309473837644281682855732a67151365d1e027a318391d34", 0x0, 0x0, 0xce1, 0x2, 0x2, 0x3, 0xfc08, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r16}, 0x48) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000cc0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000800)=ANY=[@ANYBLOB="6c040000", @ANYRES16=0x0, @ANYBLOB="000227bd7000fddbdf250200000008000100", @ANYRES32=r2, @ANYBLOB="2c01028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400010100003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r4, @ANYBLOB="400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400ff07000008000600", @ANYRES32=r6, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000100000008000600", @ANYRES32=r7, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000001000008000100", @ANYRES32=r9, @ANYBLOB="b800028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000400000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000700000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="9f000100", @ANYRES32=r12, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="3c010280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000100008008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004008000000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b7570000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000700000008000600", @ANYRES32=r16, @ANYBLOB], 0x46c}, 0x1, 0x0, 0x0, 0x800}, 0x20040001) 23:35:41 executing program 2: r0 = socket(0xf, 0x3, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x24040, 0x0) getsockopt$inet_dccp_buf(r1, 0x21, 0x2, &(0x7f0000000100)=""/217, &(0x7f0000000040)=0xd9) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:41 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:41 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0285629, &(0x7f00000001c0)={0x4}) 23:35:41 executing program 3: socket(0x18, 0x0, 0x0) r0 = socket(0xa, 0x3, 0x2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4004001) 23:35:41 executing program 5: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x35323645, 0x6, 0x0, [{0xff, 0xf7}]}}) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000140)=0x5) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x3, 0x40, 0x4, {0x1, @sliced={0xfffd, [0x4, 0xffff, 0x6, 0x1ff, 0xff, 0x8, 0x9, 0xff, 0xee, 0x3, 0xff77, 0xfff, 0x1, 0x5, 0x8, 0x1, 0x3ff, 0x8000, 0x1ff, 0x52f, 0x4, 0xf7, 0x2, 0x100, 0x7, 0x35, 0x1ff, 0x367d, 0x0, 0x7ff, 0x6, 0x3, 0x8000, 0x7f, 0xfff, 0xff89, 0x7be2, 0xfffc, 0x5, 0x4, 0x1ff, 0x0, 0xccde, 0x0, 0x665, 0xf5f5, 0xfff, 0x81], 0x1936}}, 0x2}) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x35323645, 0x6, 0x0, [{0xff, 0xf7}]}}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000140)=0x5) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x3, 0x40, 0x4, {0x1, @sliced={0xfffd, [0x4, 0xffff, 0x6, 0x1ff, 0xff, 0x8, 0x9, 0xff, 0xee, 0x3, 0xff77, 0xfff, 0x1, 0x5, 0x8, 0x1, 0x3ff, 0x8000, 0x1ff, 0x52f, 0x4, 0xf7, 0x2, 0x100, 0x7, 0x35, 0x1ff, 0x367d, 0x0, 0x7ff, 0x6, 0x3, 0x8000, 0x7f, 0xfff, 0xff89, 0x7be2, 0xfffc, 0x5, 0x4, 0x1ff, 0x0, 0xccde, 0x0, 0x665, 0xf5f5, 0xfff, 0x81], 0x1936}}, 0x2}) (async) 23:35:41 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000000)=0x4, 0x4) 23:35:41 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000400), 0x408100, 0x0) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x7, @mcast2, 0x5}}, 0x1, 0xff, 0xffffffff, 0x7, 0x2a, 0x7703, 0x4}, &(0x7f00000002c0)=0x9c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={r2, @in6={{0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x9}}, 0x7fff, 0x4, 0x0, 0xa5, 0x30, 0xffffff00, 0x81}, &(0x7f00000003c0)=0x9c) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)=@userptr={0x1, 0x1, 0x4, 0x1000, 0x4, {0x77359400}, {0x3, 0x1, 0x80, 0xe0, 0x74, 0x4, "fb232d7a"}, 0x80, 0x2, {}, 0xffff0001}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @sliced={0xbe10, [0x4, 0x6589, 0x800, 0x8000, 0x8, 0xea, 0x2, 0x9, 0x4, 0x81, 0x7f, 0xce, 0xf2, 0x1, 0xb2c, 0x94cd, 0x4, 0xafd6, 0xef47, 0x3, 0x8, 0x8270, 0x7, 0x1800, 0x3, 0xffe1, 0x40, 0xfffb, 0xa, 0xd9a1, 0x14, 0x9, 0x2, 0x0, 0xcf, 0x2, 0xfffc, 0x800, 0x9, 0x8, 0x5, 0x5, 0x1f, 0x401, 0x0, 0x4, 0x4, 0x100], 0x6}}) 23:35:42 executing program 2: socket(0x23, 0x3, 0x0) socketpair(0x27, 0x80000, 0x105, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x4a, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 23:35:42 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0285629, &(0x7f00000001c0)={0x4}) 23:35:42 executing program 3: socket(0x18, 0x0, 0x0) r0 = socket(0xa, 0x3, 0x2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4004001) 23:35:42 executing program 5: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x35323645, 0x6, 0x0, [{0xff, 0xf7}]}}) (async) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async, rerun: 32) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000140)=0x5) (rerun: 32) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x3, 0x40, 0x4, {0x1, @sliced={0xfffd, [0x4, 0xffff, 0x6, 0x1ff, 0xff, 0x8, 0x9, 0xff, 0xee, 0x3, 0xff77, 0xfff, 0x1, 0x5, 0x8, 0x1, 0x3ff, 0x8000, 0x1ff, 0x52f, 0x4, 0xf7, 0x2, 0x100, 0x7, 0x35, 0x1ff, 0x367d, 0x0, 0x7ff, 0x6, 0x3, 0x8000, 0x7f, 0xfff, 0xff89, 0x7be2, 0xfffc, 0x5, 0x4, 0x1ff, 0x0, 0xccde, 0x0, 0x665, 0xf5f5, 0xfff, 0x81], 0x1936}}, 0x2}) 23:35:42 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) 23:35:42 executing program 2: socket(0x23, 0x3, 0x0) (async) socketpair(0x27, 0x80000, 0x105, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x4a, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 23:35:42 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4, @pix={0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 23:35:42 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000000)=0x4, 0x4) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000000)=0x4, 0x4) (async) 23:35:42 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) (async) 23:35:42 executing program 3: socket(0x18, 0x0, 0x0) r0 = socket(0xa, 0x3, 0x2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4004001) 23:35:42 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4, @pix={0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 23:35:42 executing program 2: socket(0x23, 0x3, 0x0) (async) socketpair(0x27, 0x80000, 0x105, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x4a, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 23:35:42 executing program 3: socket(0x18, 0x0, 0x0) socket(0xa, 0x3, 0x2) 23:35:42 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000000)=0x4, 0x4) 23:35:42 executing program 5: r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}], 0x10, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000480)={0x28, 0x0, 0x2710, @my=0x1}, 0x10, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="b8030000", @ANYRES16=0x0, @ANYBLOB="040b28bd7000fcdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="6401028074000100240001006270665f686173685f66756e63000000000000000000f9d8ebca386bf75f527953dcc520a800000000000000000000050003000b000000440004000700ff3f0500000001049f3f08000000f9004000dd1900000400801fffffffff50850008030000002000a020ff07000001003d0909000000faff073f050000003800010024000100616374697665706f727400"/172, @ANYRES32=0x0, @ANYBLOB="400001002400010071756575cedd69fd2803b8068891893dd374655f696400000000000000000000ff030000000000000600000000000018000000", @ANYRES64=r0, @ANYRESHEX=r4, @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400ff01000008000100", @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRES32=r1, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000900000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000800000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="4c0001000dbd6bb81492e96dad3d5dc8cfdf240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001006c625f706f72745f737461747300000000050003000b000000080004000200000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB], 0x3b8}, 0x1, 0x0, 0x0, 0x20000821}, 0x200040c0) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"3061ad27fb4832c2995d6bb855b55d796662f4c1b0b50d8043695d0a5031083e"}) 23:35:42 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) 23:35:42 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4, @pix={0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 23:35:42 executing program 3: socket(0xa, 0x3, 0x2) 23:35:42 executing program 2: r0 = socket(0x18, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r1, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000540)=[{}], 0x8, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r4}, 0x8) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="01643d9f", @ANYRES32=0x0], &(0x7f0000000040)=0x8) r8 = socket(0x5, 0x80000, 0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x5, @private1}}, 0x20, 0x8001, 0x6, 0x40000000, 0x80, 0x800, 0x1f}, &(0x7f00000002c0)=0x9c) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000400)={0x0, 0x1}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000300)={r9, @in={{0x2, 0x4e20, @broadcast}}, 0x2, 0xe4}, 0x99) r10 = socket$tipc(0x1e, 0x2, 0x0) accept4$tipc(r10, 0x0, &(0x7f00000003c0), 0x80000) r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r11, 0xae03, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r11, 0x84, 0x8, &(0x7f0000000780), &(0x7f00000007c0)=0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000080)={r7, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x9c) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000080)={r7, 0x6}, &(0x7f0000000100)=0x8) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 23:35:42 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x4, 0x5}) socket$tipc(0x1e, 0xfbf9f4a1704b3c1f, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) 23:35:42 executing program 5: r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}], 0x10, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) (async) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000480)={0x28, 0x0, 0x2710, @my=0x1}, 0x10, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="b8030000", @ANYRES16=0x0, @ANYBLOB="040b28bd7000fcdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="6401028074000100240001006270665f686173685f66756e63000000000000000000f9d8ebca386bf75f527953dcc520a800000000000000000000050003000b000000440004000700ff3f0500000001049f3f08000000f9004000dd1900000400801fffffffff50850008030000002000a020ff07000001003d0909000000faff073f050000003800010024000100616374697665706f727400"/172, @ANYRES32=0x0, @ANYBLOB="400001002400010071756575cedd69fd2803b8068891893dd374655f696400000000000000000000ff030000000000000600000000000018000000", @ANYRES64=r0, @ANYRESHEX=r4, @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400ff01000008000100", @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRES32=r1, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000900000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000800000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="4c0001000dbd6bb81492e96dad3d5dc8cfdf240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001006c625f706f72745f737461747300000000050003000b000000080004000200000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB], 0x3b8}, 0x1, 0x0, 0x0, 0x20000821}, 0x200040c0) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"3061ad27fb4832c2995d6bb855b55d796662f4c1b0b50d8043695d0a5031083e"}) 23:35:42 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) accept4$tipc(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800) socket$inet(0x2, 0x2, 0xd6) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0285629, &(0x7f00000001c0)={0x4}) 23:35:42 executing program 3: socket(0x0, 0x3, 0x2) 23:35:42 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x4, 0x5}) (async) socket$tipc(0x1e, 0xfbf9f4a1704b3c1f, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) (async) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) 23:35:42 executing program 2: r0 = socket(0x18, 0x0, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r1, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000540)=[{}], 0x8, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r4}, 0x8) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="01643d9f", @ANYRES32=0x0], &(0x7f0000000040)=0x8) r8 = socket(0x5, 0x80000, 0x4) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x5, @private1}}, 0x20, 0x8001, 0x6, 0x40000000, 0x80, 0x800, 0x1f}, &(0x7f00000002c0)=0x9c) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000400)={0x0, 0x1}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000300)={r9, @in={{0x2, 0x4e20, @broadcast}}, 0x2, 0xe4}, 0x99) r10 = socket$tipc(0x1e, 0x2, 0x0) accept4$tipc(r10, 0x0, &(0x7f00000003c0), 0x80000) (async) r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r11, 0xae03, 0x0) (async) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r11, 0x84, 0x8, &(0x7f0000000780), &(0x7f00000007c0)=0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000080)={r7, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x9c) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000080)={r7, 0x6}, &(0x7f0000000100)=0x8) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 23:35:42 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) (async) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x4, 0x5}) socket$tipc(0x1e, 0xfbf9f4a1704b3c1f, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) (async) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) 23:35:42 executing program 3: socket(0x0, 0x3, 0x2) 23:35:42 executing program 5: r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}], 0x10, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000480)={0x28, 0x0, 0x2710, @my=0x1}, 0x10, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="b8030000", @ANYRES16=0x0, @ANYBLOB="040b28bd7000fcdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="6401028074000100240001006270665f686173685f66756e63000000000000000000f9d8ebca386bf75f527953dcc520a800000000000000000000050003000b000000440004000700ff3f0500000001049f3f08000000f9004000dd1900000400801fffffffff50850008030000002000a020ff07000001003d0909000000faff073f050000003800010024000100616374697665706f727400"/172, @ANYRES32=0x0, @ANYBLOB="400001002400010071756575cedd69fd2803b8068891893dd374655f696400000000000000000000ff030000000000000600000000000018000000", @ANYRES64=r0, @ANYRESHEX=r4, @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400ff01000008000100", @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRES32=r1, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000900000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000800000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="4c0001000dbd6bb81492e96dad3d5dc8cfdf240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001006c625f706f72745f737461747300000000050003000b000000080004000200000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB], 0x3b8}, 0x1, 0x0, 0x0, 0x20000821}, 0x200040c0) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"3061ad27fb4832c2995d6bb855b55d796662f4c1b0b50d8043695d0a5031083e"}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440), 0x4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}], 0x10, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) (async) socket$l2tp(0x2, 0x2, 0x73) (async) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000480)={0x28, 0x0, 0x2710, @my=0x1}, 0x10, 0x800) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000004c0)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48) (async) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="b8030000", @ANYRES16=0x0, @ANYBLOB="040b28bd7000fcdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="6401028074000100240001006270665f686173685f66756e63000000000000000000f9d8ebca386bf75f527953dcc520a800000000000000000000050003000b000000440004000700ff3f0500000001049f3f08000000f9004000dd1900000400801fffffffff50850008030000002000a020ff07000001003d0909000000faff073f050000003800010024000100616374697665706f727400"/172, @ANYRES32=0x0, @ANYBLOB="400001002400010071756575cedd69fd2803b8068891893dd374655f696400000000000000000000ff030000000000000600000000000018000000", @ANYRES64=r0, @ANYRESHEX=r4, @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400ff01000008000100", @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRES32=r1, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000900000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000800000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="4c0001000dbd6bb81492e96dad3d5dc8cfdf240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001006c625f706f72745f737461747300000000050003000b000000080004000200000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB], 0x3b8}, 0x1, 0x0, 0x0, 0x20000821}, 0x200040c0) (async) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"3061ad27fb4832c2995d6bb855b55d796662f4c1b0b50d8043695d0a5031083e"}) (async) 23:35:42 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) accept4$tipc(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800) socket$inet(0x2, 0x2, 0xd6) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0285629, &(0x7f00000001c0)={0x4}) 23:35:42 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x14100, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5}, 0x48) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000001600)=ANY=[@ANYBLOB="ac48380b32406d86002d384a05f4c8f9ece370ffb64d4879fb42b000fbc47b0708c4fb8f210b1bed8353e6361446453ddbdf497c85f8e19f7511802230acfa"]) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) r8 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r9}, 0x48) r10 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r11}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r2, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000002c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r2, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000500)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000005c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r16 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r16, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r17}, 0x48) r18 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r18, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r20 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r19}, 0x48) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000001580)={0x0, @rand_addr, @multicast2}, &(0x7f00000015c0)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000f00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000800)={0x6b0, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x4}}, {{0x8}, {0x194, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r21}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x54, 0x2, 0x3, 0x8}, {0x7, 0x40, 0x2, 0x8}, {0x80, 0x7f, 0x35, 0x20}, {0x3, 0x7c, 0x2, 0x8}, {0x9, 0xff, 0x1, 0x8000}, {0x1, 0x0, 0xc0, 0x24}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}]}}, {{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r13}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x0, 0x3, 0x6, 0x3}]}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xcb}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x104, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r14}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}]}}, {{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0xffffffffffffffa5, 0x4, 0x1}}, {0x8}}}]}}]}, 0x6b0}, 0x1, 0x0, 0x0, 0x80}, 0x20000002) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x18, 0x80800000, 0x0, 0x8, 0x4a0, r1, 0x2d3033b2, '\x00', 0x0, r2, 0x0, 0x3, 0x3}, 0x48) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r22 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0xc, 0xb, &(0x7f0000000f40)=ANY=[@ANYBLOB="18000000020000000000000004000000950000000000000052800900c100000018500000030000000000000000000000852000000300000018230000", @ANYRES32=r12, @ANYBLOB="00000000ff0f00005595fe901e6bd1165670ff0000000000"], &(0x7f0000000fc0)='GPL\x00', 0xffffffff, 0xdc, &(0x7f0000001000)=""/220, 0x41100, 0x14, '\x00', r17, 0x1e, r2, 0x8, &(0x7f0000001100)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000001140)={0x1, 0x9, 0x8, 0xffffffff}, 0x10, r15, r1, 0x0, &(0x7f0000001180)=[r1, r20, 0xffffffffffffffff, r6, 0xffffffffffffffff, r1, 0x1]}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r22, 0xe0, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001240)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000001280)=[0x0, 0x0, 0x0], &(0x7f00000012c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001300)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000001340), &(0x7f0000001380), 0x8, 0x10, 0x8, 0x8, &(0x7f00000013c0)}}, 0x10) 23:35:42 executing program 2: r0 = socket(0x18, 0x0, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r1, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000540)=[{}], 0x8, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) (async) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r4}, 0x8) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="01643d9f", @ANYRES32=0x0], &(0x7f0000000040)=0x8) (async) r8 = socket(0x5, 0x80000, 0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x5, @private1}}, 0x20, 0x8001, 0x6, 0x40000000, 0x80, 0x800, 0x1f}, &(0x7f00000002c0)=0x9c) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000400)={0x0, 0x1}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000300)={r9, @in={{0x2, 0x4e20, @broadcast}}, 0x2, 0xe4}, 0x99) r10 = socket$tipc(0x1e, 0x2, 0x0) accept4$tipc(r10, 0x0, &(0x7f00000003c0), 0x80000) (async) r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r11, 0xae03, 0x0) (async) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r11, 0x84, 0x8, &(0x7f0000000780), &(0x7f00000007c0)=0x4) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000080)={r7, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x9c) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000080)={r7, 0x6}, &(0x7f0000000100)=0x8) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 23:35:42 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x14100, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) (async) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5}, 0x48) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000001600)=ANY=[@ANYBLOB="ac48380b32406d86002d384a05f4c8f9ece370ffb64d4879fb42b000fbc47b0708c4fb8f210b1bed8353e6361446453ddbdf497c85f8e19f7511802230acfa"]) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) (async) r8 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r9}, 0x48) (async) r10 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r11}, 0x48) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r2, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000002c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r2, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000500)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000005c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) (async) r16 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r16, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r17}, 0x48) r18 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r18, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r20 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r19}, 0x48) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000001580)={0x0, @rand_addr, @multicast2}, &(0x7f00000015c0)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000f00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000800)={0x6b0, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x4}}, {{0x8}, {0x194, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r21}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x54, 0x2, 0x3, 0x8}, {0x7, 0x40, 0x2, 0x8}, {0x80, 0x7f, 0x35, 0x20}, {0x3, 0x7c, 0x2, 0x8}, {0x9, 0xff, 0x1, 0x8000}, {0x1, 0x0, 0xc0, 0x24}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}]}}, {{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r13}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x0, 0x3, 0x6, 0x3}]}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xcb}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x104, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r14}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}]}}, {{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0xffffffffffffffa5, 0x4, 0x1}}, {0x8}}}]}}]}, 0x6b0}, 0x1, 0x0, 0x0, 0x80}, 0x20000002) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x18, 0x80800000, 0x0, 0x8, 0x4a0, r1, 0x2d3033b2, '\x00', 0x0, r2, 0x0, 0x3, 0x3}, 0x48) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) r22 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0xc, 0xb, &(0x7f0000000f40)=ANY=[@ANYBLOB="18000000020000000000000004000000950000000000000052800900c100000018500000030000000000000000000000852000000300000018230000", @ANYRES32=r12, @ANYBLOB="00000000ff0f00005595fe901e6bd1165670ff0000000000"], &(0x7f0000000fc0)='GPL\x00', 0xffffffff, 0xdc, &(0x7f0000001000)=""/220, 0x41100, 0x14, '\x00', r17, 0x1e, r2, 0x8, &(0x7f0000001100)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000001140)={0x1, 0x9, 0x8, 0xffffffff}, 0x10, r15, r1, 0x0, &(0x7f0000001180)=[r1, r20, 0xffffffffffffffff, r6, 0xffffffffffffffff, r1, 0x1]}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r22, 0xe0, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001240)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000001280)=[0x0, 0x0, 0x0], &(0x7f00000012c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001300)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000001340), &(0x7f0000001380), 0x8, 0x10, 0x8, 0x8, &(0x7f00000013c0)}}, 0x10) 23:35:42 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x81, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x2}, {0x3}, {}, {}, {0x0, 0xc3}], 0x0, 0xfe}}) 23:35:42 executing program 3: socket(0x0, 0x3, 0x2) 23:35:42 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x81, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x2}, {0x3}, {}, {}, {0x0, 0xc3}], 0x0, 0xfe}}) 23:35:42 executing program 3: socket(0xa, 0x0, 0x2) 23:35:42 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x8000000000000001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) 23:35:42 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) accept4$tipc(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800) socket$inet(0x2, 0x2, 0xd6) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0285629, &(0x7f00000001c0)={0x4}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) accept4$tipc(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800) (async) socket$inet(0x2, 0x2, 0xd6) (async) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0285629, &(0x7f00000001c0)={0x4}) (async) 23:35:42 executing program 2: r0 = socket(0x29, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040), 0x0, 0x8, &(0x7f0000000180)=[{}, {}], 0x10, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) sendmsg$can_bcm(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x1d, r2}, 0x10, &(0x7f0000000480)={&(0x7f0000000400)={0x4, 0x40, 0x3, {}, {}, {0x4, 0x1, 0x0, 0x1}, 0x1, @canfd={{0x2, 0x1, 0x0, 0x1}, 0x2e, 0x0, 0x0, 0x0, "f3abff899b3bdb919a11ba456b02fc67dcacf9d9c1c1ba9803d238095d03c86aacc279b1b2be7718d4948a6fce06afd35f37dfcab6b8879e5d7a9f968a52e38a"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000040}, 0x200440c1) 23:35:42 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x81, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x2}, {0x3}, {}, {}, {0x0, 0xc3}], 0x0, 0xfe}}) 23:35:42 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x14100, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5}, 0x48) (async) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000001600)=ANY=[@ANYBLOB="ac48380b32406d86002d384a05f4c8f9ece370ffb64d4879fb42b000fbc47b0708c4fb8f210b1bed8353e6361446453ddbdf497c85f8e19f7511802230acfa"]) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) (async) r8 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r9}, 0x48) (async) r10 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r11}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r2, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000002c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r2, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000500)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000005c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r16 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r16, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r17}, 0x48) (async) r18 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r18, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r20 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r19}, 0x48) (async) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000001580)={0x0, @rand_addr, @multicast2}, &(0x7f00000015c0)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000f00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000800)={0x6b0, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x4}}, {{0x8}, {0x194, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r21}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x54, 0x2, 0x3, 0x8}, {0x7, 0x40, 0x2, 0x8}, {0x80, 0x7f, 0x35, 0x20}, {0x3, 0x7c, 0x2, 0x8}, {0x9, 0xff, 0x1, 0x8000}, {0x1, 0x0, 0xc0, 0x24}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}]}}, {{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r13}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x0, 0x3, 0x6, 0x3}]}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xcb}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x104, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r14}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}]}}, {{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0xffffffffffffffa5, 0x4, 0x1}}, {0x8}}}]}}]}, 0x6b0}, 0x1, 0x0, 0x0, 0x80}, 0x20000002) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x18, 0x80800000, 0x0, 0x8, 0x4a0, r1, 0x2d3033b2, '\x00', 0x0, r2, 0x0, 0x3, 0x3}, 0x48) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r22 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0xc, 0xb, &(0x7f0000000f40)=ANY=[@ANYBLOB="18000000020000000000000004000000950000000000000052800900c100000018500000030000000000000000000000852000000300000018230000", @ANYRES32=r12, @ANYBLOB="00000000ff0f00005595fe901e6bd1165670ff0000000000"], &(0x7f0000000fc0)='GPL\x00', 0xffffffff, 0xdc, &(0x7f0000001000)=""/220, 0x41100, 0x14, '\x00', r17, 0x1e, r2, 0x8, &(0x7f0000001100)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000001140)={0x1, 0x9, 0x8, 0xffffffff}, 0x10, r15, r1, 0x0, &(0x7f0000001180)=[r1, r20, 0xffffffffffffffff, r6, 0xffffffffffffffff, r1, 0x1]}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r22, 0xe0, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001240)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000001280)=[0x0, 0x0, 0x0], &(0x7f00000012c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001300)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000001340), &(0x7f0000001380), 0x8, 0x10, 0x8, 0x8, &(0x7f00000013c0)}}, 0x10) 23:35:42 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x8000000000000001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x8000000000000001, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) (async) 23:35:42 executing program 2: r0 = socket(0x29, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040), 0x0, 0x8, &(0x7f0000000180)=[{}, {}], 0x10, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) sendmsg$can_bcm(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x1d, r2}, 0x10, &(0x7f0000000480)={&(0x7f0000000400)={0x4, 0x40, 0x3, {}, {}, {0x4, 0x1, 0x0, 0x1}, 0x1, @canfd={{0x2, 0x1, 0x0, 0x1}, 0x2e, 0x0, 0x0, 0x0, "f3abff899b3bdb919a11ba456b02fc67dcacf9d9c1c1ba9803d238095d03c86aacc279b1b2be7718d4948a6fce06afd35f37dfcab6b8879e5d7a9f968a52e38a"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000040}, 0x200440c1) 23:35:42 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x6a, 0x0, 0x0, 0x0, 0x6, [{}, {0x0, 0x2}, {}, {0xfffffffd}], 0x0, 0x0, 0x0, 0x0, 0x1}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$SNDCTL_DSP_RESET(r1, 0x5000, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x64, 0x8) 23:35:42 executing program 3: socket(0xa, 0x0, 0x2) 23:35:42 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x4c54264b}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000200)={0x0, @sdr={0x50323234}}) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000180)=@multiplanar_mmap={0x6, 0x3, 0x4, 0xe000, 0x2, {r2, r3/1000+10000}, {0x4, 0x1, 0x78, 0x3f, 0x5, 0x1, "bc4cd878"}, 0x3, 0x1, {&(0x7f0000000080)=[{0x78000000, 0xffff, {0x6}, 0x9}, {0x0, 0x4, {0xbd}, 0x8}]}, 0x3, 0x0, r4}) 23:35:42 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x8000000000000001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x8000000000000001, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) (async) 23:35:42 executing program 4: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000500)={0x10000, 0x4}) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000480)={0x0, "2e3c24ba40f1b19b355622e5bbf8d9d166fa2e019f3542958227334265cc5a17", 0x1}) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0285629, &(0x7f00000001c0)={0x4, @sliced={0x7fff, [0x1003, 0x1, 0x1, 0x2, 0xfffd, 0x401, 0x2, 0x2, 0xa630, 0xff, 0x6, 0x73, 0x2, 0x7, 0x6, 0x2, 0x7fff, 0xb41, 0x4, 0x6, 0x6, 0x4010, 0x2, 0x5, 0x7ff, 0x6, 0xf370, 0x9, 0xfb, 0x1, 0x3, 0x4, 0x800, 0x7, 0x8001, 0x1, 0x0, 0xf7, 0x101, 0xdc4d, 0x4, 0x101, 0xffe0, 0x9, 0x2, 0x5, 0x5, 0x1], 0x86f}}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000000)={0x3, @sdr={0x59565955, 0xfffffff9}}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000540)={0xa63, 0x2, "ecad32a62c637fa5f89acbff65d288f7f8e76df814590174", {0x4c7, 0x5e7}, 0xfffffffb}) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000340)=@multiplanar_fd={0x5, 0x6, 0x4, 0x2000, 0x80000001, {r3, r4/1000+60000}, {0x0, 0x2, 0x6, 0x80, 0x7, 0x7, "4c299e02"}, 0x1c, 0x4, {&(0x7f00000002c0)=[{0x1, 0x6bdc, {r5}, 0x1}, {0x7f, 0x9, {}, 0x8}]}, 0x9, 0x0, r6}) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r5}, 0x8) ioctl$vim2m_VIDIOC_QUERYCAP(r7, 0x80685600, &(0x7f00000003c0)) 23:35:42 executing program 2: r0 = socket(0x29, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040), 0x0, 0x8, &(0x7f0000000180)=[{}, {}], 0x10, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) (rerun: 64) sendmsg$can_bcm(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x1d, r2}, 0x10, &(0x7f0000000480)={&(0x7f0000000400)={0x4, 0x40, 0x3, {}, {}, {0x4, 0x1, 0x0, 0x1}, 0x1, @canfd={{0x2, 0x1, 0x0, 0x1}, 0x2e, 0x0, 0x0, 0x0, "f3abff899b3bdb919a11ba456b02fc67dcacf9d9c1c1ba9803d238095d03c86aacc279b1b2be7718d4948a6fce06afd35f37dfcab6b8879e5d7a9f968a52e38a"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000040}, 0x200440c1) 23:35:42 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x4c54264b}) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) (async) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000200)={0x0, @sdr={0x50323234}}) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000180)=@multiplanar_mmap={0x6, 0x3, 0x4, 0xe000, 0x2, {r2, r3/1000+10000}, {0x4, 0x1, 0x78, 0x3f, 0x5, 0x1, "bc4cd878"}, 0x3, 0x1, {&(0x7f0000000080)=[{0x78000000, 0xffff, {0x6}, 0x9}, {0x0, 0x4, {0xbd}, 0x8}]}, 0x3, 0x0, r4}) 23:35:43 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x6a, 0x0, 0x0, 0x0, 0x6, [{}, {0x0, 0x2}, {}, {0xfffffffd}], 0x0, 0x0, 0x0, 0x0, 0x1}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$SNDCTL_DSP_RESET(r1, 0x5000, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x64, 0x8) 23:35:43 executing program 3: socket(0xa, 0x0, 0x2) 23:35:43 executing program 2: r0 = socket(0x18, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x58, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4841}, 0x8a0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x10, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x60, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r2}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4011}, 0x148c4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f00000001c0)={0x77359400}, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:43 executing program 4: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) (async) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000500)={0x10000, 0x4}) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000480)={0x0, "2e3c24ba40f1b19b355622e5bbf8d9d166fa2e019f3542958227334265cc5a17", 0x1}) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0285629, &(0x7f00000001c0)={0x4, @sliced={0x7fff, [0x1003, 0x1, 0x1, 0x2, 0xfffd, 0x401, 0x2, 0x2, 0xa630, 0xff, 0x6, 0x73, 0x2, 0x7, 0x6, 0x2, 0x7fff, 0xb41, 0x4, 0x6, 0x6, 0x4010, 0x2, 0x5, 0x7ff, 0x6, 0xf370, 0x9, 0xfb, 0x1, 0x3, 0x4, 0x800, 0x7, 0x8001, 0x1, 0x0, 0xf7, 0x101, 0xdc4d, 0x4, 0x101, 0xffe0, 0x9, 0x2, 0x5, 0x5, 0x1], 0x86f}}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000000)={0x3, @sdr={0x59565955, 0xfffffff9}}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000540)={0xa63, 0x2, "ecad32a62c637fa5f89acbff65d288f7f8e76df814590174", {0x4c7, 0x5e7}, 0xfffffffb}) (async) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000340)=@multiplanar_fd={0x5, 0x6, 0x4, 0x2000, 0x80000001, {r3, r4/1000+60000}, {0x0, 0x2, 0x6, 0x80, 0x7, 0x7, "4c299e02"}, 0x1c, 0x4, {&(0x7f00000002c0)=[{0x1, 0x6bdc, {r5}, 0x1}, {0x7f, 0x9, {}, 0x8}]}, 0x9, 0x0, r6}) (async) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r5}, 0x8) ioctl$vim2m_VIDIOC_QUERYCAP(r7, 0x80685600, &(0x7f00000003c0)) 23:35:43 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0xf1f, 0x2) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0), 0x400000, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000300)=@multiplanar_userptr={0x4a3, 0x1, 0x4, 0x70000, 0x10001, {0x0, 0xea60}, {0x3, 0x8, 0xb2, 0x86, 0x20, 0xb3, "ddfae958"}, 0xffc0, 0x2, {&(0x7f0000000100)=[{0x3, 0x74, {&(0x7f0000000080)}, 0x6}, {0x3f, 0xffffffff, {&(0x7f00000000c0)}, 0xfff}]}, 0x1000, 0x0, r3}) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x11) 23:35:43 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x6a, 0x0, 0x0, 0x0, 0x6, [{}, {0x0, 0x2}, {}, {0xfffffffd}], 0x0, 0x0, 0x0, 0x0, 0x1}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$SNDCTL_DSP_RESET(r1, 0x5000, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x64, 0x8) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x6a, 0x0, 0x0, 0x0, 0x6, [{}, {0x0, 0x2}, {}, {0xfffffffd}], 0x0, 0x0, 0x0, 0x0, 0x1}}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$SNDCTL_DSP_RESET(r1, 0x5000, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x64, 0x8) (async) 23:35:43 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x4c54264b}) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) (async) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000200)={0x0, @sdr={0x50323234}}) (async) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000180)=@multiplanar_mmap={0x6, 0x3, 0x4, 0xe000, 0x2, {r2, r3/1000+10000}, {0x4, 0x1, 0x78, 0x3f, 0x5, 0x1, "bc4cd878"}, 0x3, 0x1, {&(0x7f0000000080)=[{0x78000000, 0xffff, {0x6}, 0x9}, {0x0, 0x4, {0xbd}, 0x8}]}, 0x3, 0x0, r4}) 23:35:43 executing program 3: socket(0xa, 0x3, 0x0) 23:35:43 executing program 2: r0 = socket(0x18, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x58, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4841}, 0x8a0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x10, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x60, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r2}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4011}, 0x148c4) (async) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f00000001c0)={0x77359400}, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:43 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0xf1f, 0x2) (async) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0), 0x400000, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000300)=@multiplanar_userptr={0x4a3, 0x1, 0x4, 0x70000, 0x10001, {0x0, 0xea60}, {0x3, 0x8, 0xb2, 0x86, 0x20, 0xb3, "ddfae958"}, 0xffc0, 0x2, {&(0x7f0000000100)=[{0x3, 0x74, {&(0x7f0000000080)}, 0x6}, {0x3f, 0xffffffff, {&(0x7f00000000c0)}, 0xfff}]}, 0x1000, 0x0, r3}) (async) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x11) 23:35:43 executing program 4: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) (async) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000500)={0x10000, 0x4}) (async, rerun: 64) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000480)={0x0, "2e3c24ba40f1b19b355622e5bbf8d9d166fa2e019f3542958227334265cc5a17", 0x1}) (async, rerun: 64) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0285629, &(0x7f00000001c0)={0x4, @sliced={0x7fff, [0x1003, 0x1, 0x1, 0x2, 0xfffd, 0x401, 0x2, 0x2, 0xa630, 0xff, 0x6, 0x73, 0x2, 0x7, 0x6, 0x2, 0x7fff, 0xb41, 0x4, 0x6, 0x6, 0x4010, 0x2, 0x5, 0x7ff, 0x6, 0xf370, 0x9, 0xfb, 0x1, 0x3, 0x4, 0x800, 0x7, 0x8001, 0x1, 0x0, 0xf7, 0x101, 0xdc4d, 0x4, 0x101, 0xffe0, 0x9, 0x2, 0x5, 0x5, 0x1], 0x86f}}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000000)={0x3, @sdr={0x59565955, 0xfffffff9}}) (async, rerun: 32) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) (async, rerun: 32) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000540)={0xa63, 0x2, "ecad32a62c637fa5f89acbff65d288f7f8e76df814590174", {0x4c7, 0x5e7}, 0xfffffffb}) (async, rerun: 64) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000340)=@multiplanar_fd={0x5, 0x6, 0x4, 0x2000, 0x80000001, {r3, r4/1000+60000}, {0x0, 0x2, 0x6, 0x80, 0x7, 0x7, "4c299e02"}, 0x1c, 0x4, {&(0x7f00000002c0)=[{0x1, 0x6bdc, {r5}, 0x1}, {0x7f, 0x9, {}, 0x8}]}, 0x9, 0x0, r6}) (async, rerun: 32) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r5}, 0x8) (rerun: 32) ioctl$vim2m_VIDIOC_QUERYCAP(r7, 0x80685600, &(0x7f00000003c0)) 23:35:43 executing program 0: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) getpeername$tipc(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x4) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:43 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0xc, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x1, 0x4, 0x0, 0xffffffffffffffff}, @map_fd={0x18, 0x1}, @map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000080)='syzkaller\x00', 0x6eab3dd3, 0x4b, &(0x7f0000000140)=""/75, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0x1, 0xfffffff7, 0x7fffffff}, 0x10, 0x13e3d, 0xffffffffffffffff, 0x0, &(0x7f0000000200)=[0xffffffffffffffff]}, 0x80) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:35:43 executing program 2: r0 = socket(0x18, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x58, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4841}, 0x8a0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x10, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x60, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r2}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4011}, 0x148c4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f00000001c0)={0x77359400}, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) socket(0x18, 0x0, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x58, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4841}, 0x8a0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x10, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x60, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r2}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4011}, 0x148c4) (async) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f00000001c0)={0x77359400}, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) 23:35:43 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0xf1f, 0x2) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0), 0x400000, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000300)=@multiplanar_userptr={0x4a3, 0x1, 0x4, 0x70000, 0x10001, {0x0, 0xea60}, {0x3, 0x8, 0xb2, 0x86, 0x20, 0xb3, "ddfae958"}, 0xffc0, 0x2, {&(0x7f0000000100)=[{0x3, 0x74, {&(0x7f0000000080)}, 0x6}, {0x3f, 0xffffffff, {&(0x7f00000000c0)}, 0xfff}]}, 0x1000, 0x0, r3}) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x11) syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) (async) syz_open_dev$vim2m(&(0x7f0000000040), 0xf1f, 0x2) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0), 0x400000, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000300)=@multiplanar_userptr={0x4a3, 0x1, 0x4, 0x70000, 0x10001, {0x0, 0xea60}, {0x3, 0x8, 0xb2, 0x86, 0x20, 0xb3, "ddfae958"}, 0xffc0, 0x2, {&(0x7f0000000100)=[{0x3, 0x74, {&(0x7f0000000080)}, 0x6}, {0x3f, 0xffffffff, {&(0x7f00000000c0)}, 0xfff}]}, 0x1000, 0x0, r3}) (async) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x11) (async) 23:35:43 executing program 0: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) getpeername$tipc(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x4) (async) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:43 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4, @sliced={0x4, [0xff02, 0x4, 0x7ff, 0x200, 0x2, 0x9, 0x20, 0x1, 0x0, 0xe4e, 0x3f, 0x458, 0x72be, 0x800, 0x9, 0x400, 0x6, 0x0, 0x100, 0xff01, 0xfffd, 0xffff, 0x101, 0x4, 0x20, 0xfc00, 0x3, 0x4000, 0x2, 0x5, 0x7ff, 0x0, 0xff, 0x3f, 0x20, 0x9, 0x0, 0x3, 0x0, 0x800, 0x2, 0x3ff, 0x3f, 0x1, 0x8, 0xfff9, 0x5, 0x6], 0x9}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000000c0)={0x1, 0x8001, 0x56, 0x100000}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) 23:35:43 executing program 3: socket(0xa, 0x3, 0x0) 23:35:43 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0xc, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x1, 0x4, 0x0, 0xffffffffffffffff}, @map_fd={0x18, 0x1}, @map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000080)='syzkaller\x00', 0x6eab3dd3, 0x4b, &(0x7f0000000140)=""/75, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0x1, 0xfffffff7, 0x7fffffff}, 0x10, 0x13e3d, 0xffffffffffffffff, 0x0, &(0x7f0000000200)=[0xffffffffffffffff]}, 0x80) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0xc, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x1, 0x4, 0x0, 0xffffffffffffffff}, @map_fd={0x18, 0x1}, @map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000080)='syzkaller\x00', 0x6eab3dd3, 0x4b, &(0x7f0000000140)=""/75, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0x1, 0xfffffff7, 0x7fffffff}, 0x10, 0x13e3d, 0xffffffffffffffff, 0x0, &(0x7f0000000200)=[0xffffffffffffffff]}, 0x80) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) 23:35:43 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x2, @pix={0xe7fd, 0x80000000, 0x0, 0x3, 0x7, 0x0, 0xb, 0xffffffff, 0x0, 0x1, 0x2, 0x4}}) 23:35:43 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4, @sliced={0x4, [0xff02, 0x4, 0x7ff, 0x200, 0x2, 0x9, 0x20, 0x1, 0x0, 0xe4e, 0x3f, 0x458, 0x72be, 0x800, 0x9, 0x400, 0x6, 0x0, 0x100, 0xff01, 0xfffd, 0xffff, 0x101, 0x4, 0x20, 0xfc00, 0x3, 0x4000, 0x2, 0x5, 0x7ff, 0x0, 0xff, 0x3f, 0x20, 0x9, 0x0, 0x3, 0x0, 0x800, 0x2, 0x3ff, 0x3f, 0x1, 0x8, 0xfff9, 0x5, 0x6], 0x9}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000000c0)={0x1, 0x8001, 0x56, 0x100000}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4, @sliced={0x4, [0xff02, 0x4, 0x7ff, 0x200, 0x2, 0x9, 0x20, 0x1, 0x0, 0xe4e, 0x3f, 0x458, 0x72be, 0x800, 0x9, 0x400, 0x6, 0x0, 0x100, 0xff01, 0xfffd, 0xffff, 0x101, 0x4, 0x20, 0xfc00, 0x3, 0x4000, 0x2, 0x5, 0x7ff, 0x0, 0xff, 0x3f, 0x20, 0x9, 0x0, 0x3, 0x0, 0x800, 0x2, 0x3ff, 0x3f, 0x1, 0x8, 0xfff9, 0x5, 0x6], 0x9}}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000000c0)={0x1, 0x8001, 0x56, 0x100000}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) (async) 23:35:43 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x2, @pix={0xe7fd, 0x80000000, 0x0, 0x3, 0x7, 0x0, 0xb, 0xffffffff, 0x0, 0x1, 0x2, 0x4}}) 23:35:43 executing program 0: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async, rerun: 64) getpeername$tipc(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x4) (async, rerun: 64) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:43 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x9}}, 0x9, 0x8000, 0x20ee, 0xfff, 0x15b, 0x9, 0x7}, &(0x7f0000000000)=0x9c) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) socketpair(0x8, 0x2, 0x5, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x28, 0x3, 0xffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000d40)=ANY=[@ANYBLOB='gre0\x00'/16, @ANYRES32=0x0, @ANYBLOB="0007004f5a003c00670008032f9078ac14141364017febff00ac14149af4ffffffe0000081e00000018000000007070080000000000000a350e3c6b988173c09e6ed4489bab1089023f88a8fc12261ea0000bbe5fbe46cb769f0000000000000000000f732b13c47df63ce5a6335bf6ad754f688bdfaf26e4165384e0b852681c56415"]}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}], 0x8, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000680)={'syztnl2\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x8010, 0x8000, 0x6, 0x10000, {{0x27, 0x4, 0x3, 0x4, 0x9c, 0x67, 0x0, 0x80, 0x2f, 0x0, @broadcast, @remote, {[@noop, @timestamp={0x44, 0x1c, 0x9b, 0x0, 0x4, [0x1, 0x1, 0x2, 0x5, 0xff, 0x9]}, @timestamp_addr={0x44, 0x2c, 0xc, 0x1, 0x8, [{@multicast1, 0x6}, {@multicast1, 0x7}, {@private=0xa010102, 0x7}, {@remote, 0x9c}, {@local, 0x80000000}]}, @timestamp_addr={0x44, 0x14, 0xbd, 0x1, 0x5, [{@multicast1}, {@multicast2, 0x2}]}, @cipso={0x86, 0x1d, 0x1, [{0x7, 0x11, "52f650021626a85ee46a51d2db9a5a"}, {0x6, 0x6, "d80617df"}]}, @lsrr={0x83, 0xb, 0xe8, [@broadcast, @empty]}]}}}}}) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x0) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000bc0)={0x59f0, 0x0}, 0x8) r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r11, 0xae03, 0x0) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c00)={0xffffffffffffffff, 0x7fffffff, 0x10}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c80)=@bpf_lsm={0x1d, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000007079a9cffa85315e2db03dff00000000", @ANYRES32=r8, @ANYBLOB="00000000000400008500000067000000186700000e0000000000000088bd0000183300000300"/48], &(0x7f0000000a80)='GPL\x00', 0x4, 0x63, &(0x7f0000000ac0)=""/99, 0x41000, 0x4, '\x00', 0x0, 0x1b, r9, 0x8, &(0x7f0000000b40)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000b80)={0x4, 0xc, 0x8000, 0x7}, 0x10, r10, 0x0, 0x0, &(0x7f0000000c40)=[r11, r1, r12]}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) socket$l2tp6(0xa, 0x2, 0x73) r14 = syz_genetlink_get_family_id$team(&(0x7f00000009c0), r3) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000980)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000700)={0x20c, r14, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8, 0x1, r6}, {0x1ac, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x8810}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$VIDIOC_S_OUTPUT(r8, 0xc004562f, &(0x7f0000000d00)=0x9) 23:35:43 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4, @sliced={0x4, [0xff02, 0x4, 0x7ff, 0x200, 0x2, 0x9, 0x20, 0x1, 0x0, 0xe4e, 0x3f, 0x458, 0x72be, 0x800, 0x9, 0x400, 0x6, 0x0, 0x100, 0xff01, 0xfffd, 0xffff, 0x101, 0x4, 0x20, 0xfc00, 0x3, 0x4000, 0x2, 0x5, 0x7ff, 0x0, 0xff, 0x3f, 0x20, 0x9, 0x0, 0x3, 0x0, 0x800, 0x2, 0x3ff, 0x3f, 0x1, 0x8, 0xfff9, 0x5, 0x6], 0x9}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000000c0)={0x1, 0x8001, 0x56, 0x100000}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4, @sliced={0x4, [0xff02, 0x4, 0x7ff, 0x200, 0x2, 0x9, 0x20, 0x1, 0x0, 0xe4e, 0x3f, 0x458, 0x72be, 0x800, 0x9, 0x400, 0x6, 0x0, 0x100, 0xff01, 0xfffd, 0xffff, 0x101, 0x4, 0x20, 0xfc00, 0x3, 0x4000, 0x2, 0x5, 0x7ff, 0x0, 0xff, 0x3f, 0x20, 0x9, 0x0, 0x3, 0x0, 0x800, 0x2, 0x3ff, 0x3f, 0x1, 0x8, 0xfff9, 0x5, 0x6], 0x9}}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000000c0)={0x1, 0x8001, 0x56, 0x100000}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) (async) 23:35:43 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0xc, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x1, 0x4, 0x0, 0xffffffffffffffff}, @map_fd={0x18, 0x1}, @map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000080)='syzkaller\x00', 0x6eab3dd3, 0x4b, &(0x7f0000000140)=""/75, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0x1, 0xfffffff7, 0x7fffffff}, 0x10, 0x13e3d, 0xffffffffffffffff, 0x0, &(0x7f0000000200)=[0xffffffffffffffff]}, 0x80) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:35:43 executing program 3: socket(0xa, 0x3, 0x0) 23:35:43 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x42, 0x228decc88208a676, 0x3, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x20385655}) 23:35:43 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x2, @pix={0xe7fd, 0x80000000, 0x0, 0x3, 0x7, 0x0, 0xb, 0xffffffff, 0x0, 0x1, 0x2, 0x4}}) 23:35:43 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x9}}, 0x9, 0x8000, 0x20ee, 0xfff, 0x15b, 0x9, 0x7}, &(0x7f0000000000)=0x9c) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) (async) socketpair(0x8, 0x2, 0x5, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x28, 0x3, 0xffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000d40)=ANY=[@ANYBLOB='gre0\x00'/16, @ANYRES32=0x0, @ANYBLOB="0007004f5a003c00670008032f9078ac14141364017febff00ac14149af4ffffffe0000081e00000018000000007070080000000000000a350e3c6b988173c09e6ed4489bab1089023f88a8fc12261ea0000bbe5fbe46cb769f0000000000000000000f732b13c47df63ce5a6335bf6ad754f688bdfaf26e4165384e0b852681c56415"]}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}], 0x8, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000680)={'syztnl2\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x8010, 0x8000, 0x6, 0x10000, {{0x27, 0x4, 0x3, 0x4, 0x9c, 0x67, 0x0, 0x80, 0x2f, 0x0, @broadcast, @remote, {[@noop, @timestamp={0x44, 0x1c, 0x9b, 0x0, 0x4, [0x1, 0x1, 0x2, 0x5, 0xff, 0x9]}, @timestamp_addr={0x44, 0x2c, 0xc, 0x1, 0x8, [{@multicast1, 0x6}, {@multicast1, 0x7}, {@private=0xa010102, 0x7}, {@remote, 0x9c}, {@local, 0x80000000}]}, @timestamp_addr={0x44, 0x14, 0xbd, 0x1, 0x5, [{@multicast1}, {@multicast2, 0x2}]}, @cipso={0x86, 0x1d, 0x1, [{0x7, 0x11, "52f650021626a85ee46a51d2db9a5a"}, {0x6, 0x6, "d80617df"}]}, @lsrr={0x83, 0xb, 0xe8, [@broadcast, @empty]}]}}}}}) (async) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x0) (async) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000bc0)={0x59f0, 0x0}, 0x8) r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r11, 0xae03, 0x0) (async) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c00)={0xffffffffffffffff, 0x7fffffff, 0x10}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c80)=@bpf_lsm={0x1d, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000007079a9cffa85315e2db03dff00000000", @ANYRES32=r8, @ANYBLOB="00000000000400008500000067000000186700000e0000000000000088bd0000183300000300"/48], &(0x7f0000000a80)='GPL\x00', 0x4, 0x63, &(0x7f0000000ac0)=""/99, 0x41000, 0x4, '\x00', 0x0, 0x1b, r9, 0x8, &(0x7f0000000b40)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000b80)={0x4, 0xc, 0x8000, 0x7}, 0x10, r10, 0x0, 0x0, &(0x7f0000000c40)=[r11, r1, r12]}, 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) socket$l2tp6(0xa, 0x2, 0x73) (async) r14 = syz_genetlink_get_family_id$team(&(0x7f00000009c0), r3) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000980)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000700)={0x20c, r14, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8, 0x1, r6}, {0x1ac, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x8810}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) ioctl$VIDIOC_S_OUTPUT(r8, 0xc004562f, &(0x7f0000000d00)=0x9) 23:35:43 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x1b) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x4, @pix={0x180, 0x4, 0x38414762, 0x8, 0x2000003, 0xff000000, 0x3, 0x8, 0x1, 0x7, 0x0, 0x4}}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) 23:35:43 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x84000}) 23:35:43 executing program 1: r0 = syz_open_dev$vim2m(0xffffffffffffffff, 0xfffe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) 23:35:43 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x9}}, 0x9, 0x8000, 0x20ee, 0xfff, 0x15b, 0x9, 0x7}, &(0x7f0000000000)=0x9c) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) (async) socketpair(0x8, 0x2, 0x5, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x28, 0x3, 0xffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000d40)=ANY=[@ANYBLOB='gre0\x00'/16, @ANYRES32=0x0, @ANYBLOB="0007004f5a003c00670008032f9078ac14141364017febff00ac14149af4ffffffe0000081e00000018000000007070080000000000000a350e3c6b988173c09e6ed4489bab1089023f88a8fc12261ea0000bbe5fbe46cb769f0000000000000000000f732b13c47df63ce5a6335bf6ad754f688bdfaf26e4165384e0b852681c56415"]}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}], 0x8, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000680)={'syztnl2\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x8010, 0x8000, 0x6, 0x10000, {{0x27, 0x4, 0x3, 0x4, 0x9c, 0x67, 0x0, 0x80, 0x2f, 0x0, @broadcast, @remote, {[@noop, @timestamp={0x44, 0x1c, 0x9b, 0x0, 0x4, [0x1, 0x1, 0x2, 0x5, 0xff, 0x9]}, @timestamp_addr={0x44, 0x2c, 0xc, 0x1, 0x8, [{@multicast1, 0x6}, {@multicast1, 0x7}, {@private=0xa010102, 0x7}, {@remote, 0x9c}, {@local, 0x80000000}]}, @timestamp_addr={0x44, 0x14, 0xbd, 0x1, 0x5, [{@multicast1}, {@multicast2, 0x2}]}, @cipso={0x86, 0x1d, 0x1, [{0x7, 0x11, "52f650021626a85ee46a51d2db9a5a"}, {0x6, 0x6, "d80617df"}]}, @lsrr={0x83, 0xb, 0xe8, [@broadcast, @empty]}]}}}}}) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x0) (async) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x0) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000bc0)={0x59f0, 0x0}, 0x8) (async) r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r11, 0xae03, 0x0) (async) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c00)={0xffffffffffffffff, 0x7fffffff, 0x10}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c80)=@bpf_lsm={0x1d, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000007079a9cffa85315e2db03dff00000000", @ANYRES32=r8, @ANYBLOB="00000000000400008500000067000000186700000e0000000000000088bd0000183300000300"/48], &(0x7f0000000a80)='GPL\x00', 0x4, 0x63, &(0x7f0000000ac0)=""/99, 0x41000, 0x4, '\x00', 0x0, 0x1b, r9, 0x8, &(0x7f0000000b40)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000b80)={0x4, 0xc, 0x8000, 0x7}, 0x10, r10, 0x0, 0x0, &(0x7f0000000c40)=[r11, r1, r12]}, 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) (async) socket$l2tp6(0xa, 0x2, 0x73) r14 = syz_genetlink_get_family_id$team(&(0x7f00000009c0), r3) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000980)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000700)={0x20c, r14, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8, 0x1, r6}, {0x1ac, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x8810}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) ioctl$VIDIOC_S_OUTPUT(r8, 0xc004562f, &(0x7f0000000d00)=0x9) 23:35:43 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x84000}) 23:35:43 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x42, 0x228decc88208a676, 0x3, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x20385655}) 23:35:43 executing program 3: r0 = socket(0x29, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040), 0x0, 0x8, &(0x7f0000000180)=[{}, {}], 0x10, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) sendmsg$can_bcm(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x1d, r2}, 0x10, &(0x7f0000000480)={&(0x7f0000000400)={0x4, 0x40, 0x3, {}, {}, {0x4, 0x1, 0x0, 0x1}, 0x1, @canfd={{0x2, 0x1, 0x0, 0x1}, 0x2e, 0x0, 0x0, 0x0, "f3abff899b3bdb919a11ba456b02fc67dcacf9d9c1c1ba9803d238095d03c86aacc279b1b2be7718d4948a6fce06afd35f37dfcab6b8879e5d7a9f968a52e38a"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000040}, 0x200440c1) 23:35:43 executing program 1: r0 = syz_open_dev$vim2m(0xffffffffffffffff, 0xfffe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) 23:35:43 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x1b) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x4, @pix={0x180, 0x4, 0x38414762, 0x8, 0x2000003, 0xff000000, 0x3, 0x8, 0x1, 0x7, 0x0, 0x4}}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) 23:35:43 executing program 2: r0 = socket(0x18, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:43 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x42, 0x228decc88208a676, 0x3, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x20385655}) 23:35:43 executing program 3: r0 = socket(0x29, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040), 0x0, 0x8, &(0x7f0000000180)=[{}, {}], 0x10, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) sendmsg$can_bcm(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x1d, r2}, 0x10, &(0x7f0000000480)={&(0x7f0000000400)={0x4, 0x40, 0x3, {}, {}, {0x4, 0x1, 0x0, 0x1}, 0x1, @canfd={{0x2, 0x1, 0x0, 0x1}, 0x2e, 0x0, 0x0, 0x0, "f3abff899b3bdb919a11ba456b02fc67dcacf9d9c1c1ba9803d238095d03c86aacc279b1b2be7718d4948a6fce06afd35f37dfcab6b8879e5d7a9f968a52e38a"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000040}, 0x200440c1) 23:35:43 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x84000}) 23:35:43 executing program 1: r0 = syz_open_dev$vim2m(0xffffffffffffffff, 0xfffe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) syz_open_dev$vim2m(0xffffffffffffffff, 0xfffe, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) (async) 23:35:43 executing program 2: r0 = socket(0x18, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x10) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:43 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x1b) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x4, @pix={0x180, 0x4, 0x38414762, 0x8, 0x2000003, 0xff000000, 0x3, 0x8, 0x1, 0x7, 0x0, 0x4}}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) 23:35:43 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000000)) 23:35:43 executing program 5: socket(0x9, 0x5, 0x8) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x5, 0xdc}) 23:35:43 executing program 3: r0 = socket(0x29, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040), 0x0, 0x8, &(0x7f0000000180)=[{}, {}], 0x10, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) sendmsg$can_bcm(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x1d, r2}, 0x10, &(0x7f0000000480)={&(0x7f0000000400)={0x4, 0x40, 0x3, {}, {}, {0x4, 0x1, 0x0, 0x1}, 0x1, @canfd={{0x2, 0x1, 0x0, 0x1}, 0x2e, 0x0, 0x0, 0x0, "f3abff899b3bdb919a11ba456b02fc67dcacf9d9c1c1ba9803d238095d03c86aacc279b1b2be7718d4948a6fce06afd35f37dfcab6b8879e5d7a9f968a52e38a"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000040}, 0x200440c1) 23:35:43 executing program 2: r0 = socket(0x18, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) socket(0x18, 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x10) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) 23:35:43 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000000)) 23:35:43 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x2, @pix={0x6, 0x5, 0x3031334d, 0x3, 0x9, 0x4, 0x3, 0x651c, 0x1, 0x0, 0x1, 0x4}}) 23:35:43 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, &(0x7f0000000080)) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000040)=0x5) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) 23:35:43 executing program 5: socket(0x9, 0x5, 0x8) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x5, 0xdc}) 23:35:43 executing program 2: r0 = socket(0x18, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_dccp_int(r3, 0x21, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400d0}, 0xd188639f478ba79f) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) accept4$vsock_stream(r2, &(0x7f00000002c0)={0x28, 0x0, 0x0, @local}, 0x10, 0x80000) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r6, r5, 0x0, 0x8, &(0x7f0000000300)='!@[\x12,\\-\x00'}, 0x30) r7 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000380)=0x1000, 0x4) getsockopt$inet_dccp_buf(r7, 0x21, 0xd, &(0x7f0000000200)=""/81, &(0x7f0000000280)=0x51) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r4) 23:35:43 executing program 3: r0 = socket(0x29, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040), 0x0, 0x8, &(0x7f0000000180)=[{}, {}], 0x10, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) 23:35:43 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x2, @pix={0x6, 0x5, 0x3031334d, 0x3, 0x9, 0x4, 0x3, 0x651c, 0x1, 0x0, 0x1, 0x4}}) 23:35:43 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, &(0x7f0000000080)) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000040)=0x5) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, &(0x7f0000000080)) (async) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000040)=0x5) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) (async) 23:35:43 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000000)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000000)) (async) 23:35:44 executing program 5: socket(0x9, 0x5, 0x8) (async, rerun: 64) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (rerun: 64) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async, rerun: 32) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x5, 0xdc}) (rerun: 32) 23:35:44 executing program 2: r0 = socket(0x18, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_dccp_int(r3, 0x21, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400d0}, 0xd188639f478ba79f) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) accept4$vsock_stream(r2, &(0x7f00000002c0)={0x28, 0x0, 0x0, @local}, 0x10, 0x80000) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r6, r5, 0x0, 0x8, &(0x7f0000000300)='!@[\x12,\\-\x00'}, 0x30) r7 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000380)=0x1000, 0x4) getsockopt$inet_dccp_buf(r7, 0x21, 0xd, &(0x7f0000000200)=""/81, &(0x7f0000000280)=0x51) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r4) socket(0x18, 0x0, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) (async) socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)) (async) getsockopt$inet_dccp_int(r3, 0x21, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400d0}, 0xd188639f478ba79f) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) (async) accept4$vsock_stream(r2, &(0x7f00000002c0)={0x28, 0x0, 0x0, @local}, 0x10, 0x80000) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) gettid() (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r6, r5, 0x0, 0x8, &(0x7f0000000300)='!@[\x12,\\-\x00'}, 0x30) (async) socket$inet_dccp(0x2, 0x6, 0x0) (async) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000380)=0x1000, 0x4) (async) getsockopt$inet_dccp_buf(r7, 0x21, 0xd, &(0x7f0000000200)=""/81, &(0x7f0000000280)=0x51) (async) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r4) (async) 23:35:44 executing program 3: r0 = socket(0x29, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) 23:35:44 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x1, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:44 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x2, @pix={0x6, 0x5, 0x3031334d, 0x3, 0x9, 0x4, 0x3, 0x651c, 0x1, 0x0, 0x1, 0x4}}) 23:35:44 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x1, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:44 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) (async, rerun: 64) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 64) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, &(0x7f0000000080)) (async) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000040)=0x5) (async, rerun: 64) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) (rerun: 64) 23:35:44 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x8001, 0x0, 0x1, "2ccb754af9e68da627e03b86bf29e6757e6f92c2d31a87362faca283bd51b6c6", 0x34343459}) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x9, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000300)={0x0, 0x6, 0x9, 0x80000}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000140)=0x6, 0x4) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000040)={0x3, @pix_mp={0xf265, 0xff, 0x3231564e, 0x9, 0xa, [{0x3f, 0x4}, {0x5, 0x1}, {0xe2, 0x8}, {0x3, 0x2}, {0x1, 0x8}, {0x7, 0x2ec}, {0x2, 0x80000000}, {0x5, 0x8000}], 0xb1, 0x81, 0x1, 0x1, 0x1}}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000380)={0x750, 0x1, 0x2, "d850ad0f719d2e76ca727d0219c51b32bf5171b24c8b8fcf984ab2cb6b1eb329", 0x584e4f53}) 23:35:44 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x1, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:44 executing program 3: r0 = socket(0x29, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 23:35:44 executing program 2: r0 = socket(0x18, 0x0, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) (async) socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_dccp_int(r3, 0x21, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400d0}, 0xd188639f478ba79f) (async) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) accept4$vsock_stream(r2, &(0x7f00000002c0)={0x28, 0x0, 0x0, @local}, 0x10, 0x80000) (async) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r6 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r6, r5, 0x0, 0x8, &(0x7f0000000300)='!@[\x12,\\-\x00'}, 0x30) r7 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000380)=0x1000, 0x4) (async) getsockopt$inet_dccp_buf(r7, 0x21, 0xd, &(0x7f0000000200)=""/81, &(0x7f0000000280)=0x51) (async) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r4) 23:35:44 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000040)=@userptr={0x3, 0x3, 0x4, 0x4, 0xffff, {}, {0x5, 0x8, 0x9, 0x0, 0x5, 0x4, "5d951a0d"}, 0x1fb2, 0x2, {}, 0x2b069cdc}) 23:35:44 executing program 3: r0 = socket(0x29, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:44 executing program 1: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0xa, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000700)=[{}], 0x8, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) 23:35:44 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000040)=@userptr={0x3, 0x3, 0x4, 0x4, 0xffff, {}, {0x5, 0x8, 0x9, 0x0, 0x5, 0x4, "5d951a0d"}, 0x1fb2, 0x2, {}, 0x2b069cdc}) 23:35:44 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x8001, 0x0, 0x1, "2ccb754af9e68da627e03b86bf29e6757e6f92c2d31a87362faca283bd51b6c6", 0x34343459}) (async) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x9, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000300)={0x0, 0x6, 0x9, 0x80000}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000140)=0x6, 0x4) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000040)={0x3, @pix_mp={0xf265, 0xff, 0x3231564e, 0x9, 0xa, [{0x3f, 0x4}, {0x5, 0x1}, {0xe2, 0x8}, {0x3, 0x2}, {0x1, 0x8}, {0x7, 0x2ec}, {0x2, 0x80000000}, {0x5, 0x8000}], 0xb1, 0x81, 0x1, 0x1, 0x1}}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz0\x00', 0x200002, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000380)={0x750, 0x1, 0x2, "d850ad0f719d2e76ca727d0219c51b32bf5171b24c8b8fcf984ab2cb6b1eb329", 0x584e4f53}) 23:35:44 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000002c0)={0x2, @pix_mp={0xe8}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x101, 0x3, 0x1, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:44 executing program 2: r0 = socket(0x18, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x44) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) r2 = socket$pptp(0x18, 0x1, 0x2) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r3, 0x28, 0x6, &(0x7f0000000040)={0x0, 0xea60}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) r7 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000680)={0x34c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0xf0, 0x2, 0x0, 0x1, [{0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x2, 0x58, 0x8, 0x8001}, {0x1ff, 0x9, 0x70, 0x8}, {0x80, 0x71, 0x5, 0xffff}, {0xa40, 0x8, 0x2, 0x6}, {0xffff, 0x9, 0x1, 0x7}, {0x3, 0x3a, 0x5}, {0xd2c, 0xc6, 0x2, 0x7}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x0, 0xf, 0x4, 0x7}, {0x6, 0x1, 0x5, 0xae41}, {0x7, 0x0, 0x7f, 0x1}, {0x7, 0x3, 0x80, 0x4}, {0x3, 0x7, 0x3, 0xffff}]}}}]}}, {{0x8, 0x1, r8}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x1, 0x3, 0x20, 0x2d}, {0x1, 0x0, 0x1, 0x4}, {0x8000, 0x6, 0x8, 0x800}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}]}, 0x34c}}, 0x14) connect$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @empty}}, 0x1e) 23:35:44 executing program 3: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:44 executing program 1: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0xa, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000700)=[{}], 0x8, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) 23:35:44 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000040)=@userptr={0x3, 0x3, 0x4, 0x4, 0xffff, {}, {0x5, 0x8, 0x9, 0x0, 0x5, 0x4, "5d951a0d"}, 0x1fb2, 0x2, {}, 0x2b069cdc}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000040)=@userptr={0x3, 0x3, 0x4, 0x4, 0xffff, {}, {0x5, 0x8, 0x9, 0x0, 0x5, 0x4, "5d951a0d"}, 0x1fb2, 0x2, {}, 0x2b069cdc}) (async) 23:35:44 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x8001, 0x0, 0x1, "2ccb754af9e68da627e03b86bf29e6757e6f92c2d31a87362faca283bd51b6c6", 0x34343459}) (async) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x9, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000300)={0x0, 0x6, 0x9, 0x80000}) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) (async) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000140)=0x6, 0x4) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000040)={0x3, @pix_mp={0xf265, 0xff, 0x3231564e, 0x9, 0xa, [{0x3f, 0x4}, {0x5, 0x1}, {0xe2, 0x8}, {0x3, 0x2}, {0x1, 0x8}, {0x7, 0x2ec}, {0x2, 0x80000000}, {0x5, 0x8000}], 0xb1, 0x81, 0x1, 0x1, 0x1}}) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000380)={0x750, 0x1, 0x2, "d850ad0f719d2e76ca727d0219c51b32bf5171b24c8b8fcf984ab2cb6b1eb329", 0x584e4f53}) 23:35:44 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async, rerun: 32) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (rerun: 32) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000002c0)={0x2, @pix_mp={0xe8}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x101, 0x3, 0x1, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:44 executing program 2: r0 = socket(0x18, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x44) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) r2 = socket$pptp(0x18, 0x1, 0x2) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r3, 0x28, 0x6, &(0x7f0000000040)={0x0, 0xea60}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) r7 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000680)={0x34c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0xf0, 0x2, 0x0, 0x1, [{0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x2, 0x58, 0x8, 0x8001}, {0x1ff, 0x9, 0x70, 0x8}, {0x80, 0x71, 0x5, 0xffff}, {0xa40, 0x8, 0x2, 0x6}, {0xffff, 0x9, 0x1, 0x7}, {0x3, 0x3a, 0x5}, {0xd2c, 0xc6, 0x2, 0x7}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x0, 0xf, 0x4, 0x7}, {0x6, 0x1, 0x5, 0xae41}, {0x7, 0x0, 0x7f, 0x1}, {0x7, 0x3, 0x80, 0x4}, {0x3, 0x7, 0x3, 0xffff}]}}}]}}, {{0x8, 0x1, r8}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x1, 0x3, 0x20, 0x2d}, {0x1, 0x0, 0x1, 0x4}, {0x8000, 0x6, 0x8, 0x800}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}]}, 0x34c}}, 0x14) connect$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @empty}}, 0x1e) socket(0x18, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x44) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) (async) socket$pptp(0x18, 0x1, 0x2) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) (async) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r3, 0x28, 0x6, &(0x7f0000000040)={0x0, 0xea60}, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) (async) socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) (async) socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8}, 0x48) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) (async) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000680)={0x34c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0xf0, 0x2, 0x0, 0x1, [{0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x2, 0x58, 0x8, 0x8001}, {0x1ff, 0x9, 0x70, 0x8}, {0x80, 0x71, 0x5, 0xffff}, {0xa40, 0x8, 0x2, 0x6}, {0xffff, 0x9, 0x1, 0x7}, {0x3, 0x3a, 0x5}, {0xd2c, 0xc6, 0x2, 0x7}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x0, 0xf, 0x4, 0x7}, {0x6, 0x1, 0x5, 0xae41}, {0x7, 0x0, 0x7f, 0x1}, {0x7, 0x3, 0x80, 0x4}, {0x3, 0x7, 0x3, 0xffff}]}}}]}}, {{0x8, 0x1, r8}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x1, 0x3, 0x20, 0x2d}, {0x1, 0x0, 0x1, 0x4}, {0x8000, 0x6, 0x8, 0x800}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}]}, 0x34c}}, 0x14) (async) connect$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @empty}}, 0x1e) (async) 23:35:44 executing program 3: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:44 executing program 1: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0xa, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000700)=[{}], 0x8, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0xa, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000700)=[{}], 0x8, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) (async) syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) (async) 23:35:44 executing program 5: syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x2, @pix_mp={0x1, 0x0, 0x33424752, 0x8, 0x1, [{}, {}, {}, {}, {}, {}, {0xfff}]}}) 23:35:44 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000000)='syz0\x00') 23:35:44 executing program 3: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:44 executing program 2: r0 = socket(0x18, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x44) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) r2 = socket$pptp(0x18, 0x1, 0x2) (async) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) (async) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r3, 0x28, 0x6, &(0x7f0000000040)={0x0, 0xea60}, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) (async) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) (async) r7 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8}, 0x48) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000680)={0x34c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0xf0, 0x2, 0x0, 0x1, [{0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x2, 0x58, 0x8, 0x8001}, {0x1ff, 0x9, 0x70, 0x8}, {0x80, 0x71, 0x5, 0xffff}, {0xa40, 0x8, 0x2, 0x6}, {0xffff, 0x9, 0x1, 0x7}, {0x3, 0x3a, 0x5}, {0xd2c, 0xc6, 0x2, 0x7}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x0, 0xf, 0x4, 0x7}, {0x6, 0x1, 0x5, 0xae41}, {0x7, 0x0, 0x7f, 0x1}, {0x7, 0x3, 0x80, 0x4}, {0x3, 0x7, 0x3, 0xffff}]}}}]}}, {{0x8, 0x1, r8}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x1, 0x3, 0x20, 0x2d}, {0x1, 0x0, 0x1, 0x4}, {0x8000, 0x6, 0x8, 0x800}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}]}, 0x34c}}, 0x14) connect$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @empty}}, 0x1e) 23:35:44 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000000)='syz0\x00') syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) (async) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000000)='syz0\x00') (async) 23:35:44 executing program 5: syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x2, @pix_mp={0x1, 0x0, 0x33424752, 0x8, 0x1, [{}, {}, {}, {}, {}, {}, {0xfff}]}}) 23:35:44 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000002c0)={0x2, @pix_mp={0xe8}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x101, 0x3, 0x1, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000002c0)={0x2, @pix_mp={0xe8}}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x101, 0x3, 0x1, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:35:44 executing program 3: r0 = socket(0x0, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:44 executing program 1: ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000100)) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0xb00, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x4, 0x434, 0x6, {}, {r1, r2/1000+60000}, {0x2, 0x1, 0x1}, 0x1, @canfd={{}, 0x1a, 0x2, 0x0, 0x0, "86c7359f7cfb17f0b620e6ff466743f93a8d1c9e21739a538e4494068607b842105b9fd62af98bb6e891243956ab05471d7f0841d252004532ac090b7be4a67f"}}, 0x80}}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0285628, &(0x7f0000000000)={0x1, @sliced={0x7, [0x0, 0x2, 0x2, 0x7, 0x8898, 0x81, 0x8, 0x40, 0x20, 0x4, 0x1, 0x24, 0xdd, 0x7, 0x0, 0x800, 0x7fff, 0x3, 0x4, 0x8100, 0x6, 0x1f, 0x0, 0x30, 0x8, 0x4, 0x80, 0x6, 0x88, 0x9, 0x2, 0x6, 0xd2d, 0x6, 0x2, 0x0, 0x7f, 0xf9, 0x4, 0x69ca, 0x800, 0x3, 0x800, 0x8, 0x9e, 0x67ba, 0x2, 0x8], 0xff}}) 23:35:44 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000000)='syz0\x00') 23:35:44 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000200)) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)=@userptr={0x2003f, 0x2, 0x4, 0x10000, 0x4, {0x0, 0xea60}, {0x4, 0x2, 0x5, 0x7, 0xff, 0xff, "00c23577"}, 0x100, 0x2, {&(0x7f0000000240)}, 0x41}) r1 = socket(0x4, 0x2, 0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:44 executing program 5: syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async, rerun: 32) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xffffffffffffffff, 0x2) (rerun: 32) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x2, @pix_mp={0x1, 0x0, 0x33424752, 0x8, 0x1, [{}, {}, {}, {}, {}, {}, {0xfff}]}}) 23:35:44 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x2, 0xa034}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x2, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x32525942}) 23:35:44 executing program 1: ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000100)) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0xb00, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x4, 0x434, 0x6, {}, {r1, r2/1000+60000}, {0x2, 0x1, 0x1}, 0x1, @canfd={{}, 0x1a, 0x2, 0x0, 0x0, "86c7359f7cfb17f0b620e6ff466743f93a8d1c9e21739a538e4494068607b842105b9fd62af98bb6e891243956ab05471d7f0841d252004532ac090b7be4a67f"}}, 0x80}}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0285628, &(0x7f0000000000)={0x1, @sliced={0x7, [0x0, 0x2, 0x2, 0x7, 0x8898, 0x81, 0x8, 0x40, 0x20, 0x4, 0x1, 0x24, 0xdd, 0x7, 0x0, 0x800, 0x7fff, 0x3, 0x4, 0x8100, 0x6, 0x1f, 0x0, 0x30, 0x8, 0x4, 0x80, 0x6, 0x88, 0x9, 0x2, 0x6, 0xd2d, 0x6, 0x2, 0x0, 0x7f, 0xf9, 0x4, 0x69ca, 0x800, 0x3, 0x800, 0x8, 0x9e, 0x67ba, 0x2, 0x8], 0xff}}) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000100)) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0xb00, 0x0) (async) clock_gettime(0x0, &(0x7f00000001c0)) (async) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x4, 0x434, 0x6, {}, {r1, r2/1000+60000}, {0x2, 0x1, 0x1}, 0x1, @canfd={{}, 0x1a, 0x2, 0x0, 0x0, "86c7359f7cfb17f0b620e6ff466743f93a8d1c9e21739a538e4494068607b842105b9fd62af98bb6e891243956ab05471d7f0841d252004532ac090b7be4a67f"}}, 0x80}}, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0285628, &(0x7f0000000000)={0x1, @sliced={0x7, [0x0, 0x2, 0x2, 0x7, 0x8898, 0x81, 0x8, 0x40, 0x20, 0x4, 0x1, 0x24, 0xdd, 0x7, 0x0, 0x800, 0x7fff, 0x3, 0x4, 0x8100, 0x6, 0x1f, 0x0, 0x30, 0x8, 0x4, 0x80, 0x6, 0x88, 0x9, 0x2, 0x6, 0xd2d, 0x6, 0x2, 0x0, 0x7f, 0xf9, 0x4, 0x69ca, 0x800, 0x3, 0x800, 0x8, 0x9e, 0x67ba, 0x2, 0x8], 0xff}}) (async) 23:35:44 executing program 4: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000040)={0x3, 0xff, "6c63fac456c8fa751bd3aa0543b9c54ca3299923f0990c3d", {0x81, 0xff}, 0x8}) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0285629, &(0x7f00000001c0)={0x4}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 23:35:44 executing program 3: r0 = socket(0x0, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:44 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000200)) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)=@userptr={0x2003f, 0x2, 0x4, 0x10000, 0x4, {0x0, 0xea60}, {0x4, 0x2, 0x5, 0x7, 0xff, 0xff, "00c23577"}, 0x100, 0x2, {&(0x7f0000000240)}, 0x41}) r1 = socket(0x4, 0x2, 0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) clock_gettime(0x0, &(0x7f0000000040)) (async) clock_gettime(0x0, &(0x7f0000000200)) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)=@userptr={0x2003f, 0x2, 0x4, 0x10000, 0x4, {0x0, 0xea60}, {0x4, 0x2, 0x5, 0x7, 0xff, 0xff, "00c23577"}, 0x100, 0x2, {&(0x7f0000000240)}, 0x41}) (async) socket(0x4, 0x2, 0x4) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) 23:35:44 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x2, 0xa034}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x2, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x32525942}) 23:35:44 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f00000000c0)={0x0, "27c86802e76545484bcc725c6bb4631a07f22eeff63bc6aa668e71a8a1309adb", 0x3}) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000040)={0x40, 0x800, "92d9421d4de9dab10b5ad295651612795b10c9a395b7b660", {0xfffff716, 0x81}, 0x5}) 23:35:44 executing program 1: ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000100)) (async) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0xb00, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x4, 0x434, 0x6, {}, {r1, r2/1000+60000}, {0x2, 0x1, 0x1}, 0x1, @canfd={{}, 0x1a, 0x2, 0x0, 0x0, "86c7359f7cfb17f0b620e6ff466743f93a8d1c9e21739a538e4494068607b842105b9fd62af98bb6e891243956ab05471d7f0841d252004532ac090b7be4a67f"}}, 0x80}}, 0x0) (async, rerun: 64) r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) (rerun: 64) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0285628, &(0x7f0000000000)={0x1, @sliced={0x7, [0x0, 0x2, 0x2, 0x7, 0x8898, 0x81, 0x8, 0x40, 0x20, 0x4, 0x1, 0x24, 0xdd, 0x7, 0x0, 0x800, 0x7fff, 0x3, 0x4, 0x8100, 0x6, 0x1f, 0x0, 0x30, 0x8, 0x4, 0x80, 0x6, 0x88, 0x9, 0x2, 0x6, 0xd2d, 0x6, 0x2, 0x0, 0x7f, 0xf9, 0x4, 0x69ca, 0x800, 0x3, 0x800, 0x8, 0x9e, 0x67ba, 0x2, 0x8], 0xff}}) 23:35:44 executing program 4: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000040)={0x3, 0xff, "6c63fac456c8fa751bd3aa0543b9c54ca3299923f0990c3d", {0x81, 0xff}, 0x8}) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0285629, &(0x7f00000001c0)={0x4}) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 23:35:44 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000200)) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)=@userptr={0x2003f, 0x2, 0x4, 0x10000, 0x4, {0x0, 0xea60}, {0x4, 0x2, 0x5, 0x7, 0xff, 0xff, "00c23577"}, 0x100, 0x2, {&(0x7f0000000240)}, 0x41}) r1 = socket(0x4, 0x2, 0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) clock_gettime(0x0, &(0x7f0000000040)) (async) clock_gettime(0x0, &(0x7f0000000200)) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)=@userptr={0x2003f, 0x2, 0x4, 0x10000, 0x4, {0x0, 0xea60}, {0x4, 0x2, 0x5, 0x7, 0xff, 0xff, "00c23577"}, 0x100, 0x2, {&(0x7f0000000240)}, 0x41}) (async) socket(0x4, 0x2, 0x4) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) 23:35:44 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x2, 0xa034}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x2, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x32525942}) 23:35:44 executing program 3: r0 = socket(0x0, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:44 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f00000000c0)={0x0, "27c86802e76545484bcc725c6bb4631a07f22eeff63bc6aa668e71a8a1309adb", 0x3}) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000040)={0x40, 0x800, "92d9421d4de9dab10b5ad295651612795b10c9a395b7b660", {0xfffff716, 0x81}, 0x5}) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f00000000c0)={0x0, "27c86802e76545484bcc725c6bb4631a07f22eeff63bc6aa668e71a8a1309adb", 0x3}) (async) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000040)={0x40, 0x800, "92d9421d4de9dab10b5ad295651612795b10c9a395b7b660", {0xfffff716, 0x81}, 0x5}) (async) 23:35:44 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000040)=0x8aa, 0x8) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) 23:35:45 executing program 4: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000040)={0x3, 0xff, "6c63fac456c8fa751bd3aa0543b9c54ca3299923f0990c3d", {0x81, 0xff}, 0x8}) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0285629, &(0x7f00000001c0)={0x4}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000040)={0x3, 0xff, "6c63fac456c8fa751bd3aa0543b9c54ca3299923f0990c3d", {0x81, 0xff}, 0x8}) (async) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0285629, &(0x7f00000001c0)={0x4}) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) 23:35:45 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) connect$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x3, @local}}, 0x1e) 23:35:45 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000040)=0x8aa, 0x8) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) 23:35:45 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f00000000c0)={0x0, "27c86802e76545484bcc725c6bb4631a07f22eeff63bc6aa668e71a8a1309adb", 0x3}) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000040)={0x40, 0x800, "92d9421d4de9dab10b5ad295651612795b10c9a395b7b660", {0xfffff716, 0x81}, 0x5}) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f00000000c0)={0x0, "27c86802e76545484bcc725c6bb4631a07f22eeff63bc6aa668e71a8a1309adb", 0x3}) (async) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000040)={0x40, 0x800, "92d9421d4de9dab10b5ad295651612795b10c9a395b7b660", {0xfffff716, 0x81}, 0x5}) (async) 23:35:45 executing program 3: r0 = socket(0x29, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:45 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x6, @sliced={0x0, [0x6, 0x1fe0, 0x6, 0x7fff, 0x4, 0x0, 0x6b, 0xffff, 0xffff, 0x2, 0x3, 0x9, 0x9065, 0x8, 0x8000, 0xceb6, 0x2, 0x2, 0x5, 0xd3, 0x800, 0x7e2, 0x2, 0x8001, 0x9, 0x81, 0x4, 0x1f, 0x8, 0x100, 0xf26, 0xcbc, 0xe8, 0x7, 0x400, 0x874e, 0x9, 0x1189, 0x0, 0x800, 0x1f, 0x2, 0x5, 0x1, 0x81, 0x400, 0x1, 0x1], 0x5}}) 23:35:45 executing program 2: r0 = socket(0x18, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @empty, @local}, &(0x7f0000000100)=0xc) 23:35:45 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) connect$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x3, @local}}, 0x1e) 23:35:45 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000140)={0x2, @sliced={0x6dc9, [0x9000, 0x7, 0x7, 0x2, 0x37, 0x66c, 0x6, 0x1000, 0xe2, 0x1, 0x7, 0x5, 0xa4, 0xec18, 0x0, 0xed2, 0x4, 0x9, 0x9, 0xa9e8, 0xc1, 0x94f, 0x401, 0x80, 0x7, 0xff, 0x8, 0x3, 0x6, 0x2d, 0x3f, 0x4, 0x0, 0x81, 0x7fff, 0x4, 0x6, 0x6, 0x3, 0xff, 0x83, 0x0, 0x5f, 0x40, 0x1, 0x4, 0x2], 0xf3}}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x1, 0x0, 0x4, 0x0, 0x4}) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @host}, 0x10) 23:35:45 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000040)=0x8aa, 0x8) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000040)=0x8aa, 0x8) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) (async) 23:35:45 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x6, @sliced={0x0, [0x6, 0x1fe0, 0x6, 0x7fff, 0x4, 0x0, 0x6b, 0xffff, 0xffff, 0x2, 0x3, 0x9, 0x9065, 0x8, 0x8000, 0xceb6, 0x2, 0x2, 0x5, 0xd3, 0x800, 0x7e2, 0x2, 0x8001, 0x9, 0x81, 0x4, 0x1f, 0x8, 0x100, 0xf26, 0xcbc, 0xe8, 0x7, 0x400, 0x874e, 0x9, 0x1189, 0x0, 0x800, 0x1f, 0x2, 0x5, 0x1, 0x81, 0x400, 0x1, 0x1], 0x5}}) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x6, @sliced={0x0, [0x6, 0x1fe0, 0x6, 0x7fff, 0x4, 0x0, 0x6b, 0xffff, 0xffff, 0x2, 0x3, 0x9, 0x9065, 0x8, 0x8000, 0xceb6, 0x2, 0x2, 0x5, 0xd3, 0x800, 0x7e2, 0x2, 0x8001, 0x9, 0x81, 0x4, 0x1f, 0x8, 0x100, 0xf26, 0xcbc, 0xe8, 0x7, 0x400, 0x874e, 0x9, 0x1189, 0x0, 0x800, 0x1f, 0x2, 0x5, 0x1, 0x81, 0x400, 0x1, 0x1], 0x5}}) (async) 23:35:45 executing program 3: r0 = socket(0x29, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:45 executing program 2: r0 = socket(0x18, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @empty, @local}, &(0x7f0000000100)=0xc) 23:35:45 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000140)={0x2, @sliced={0x6dc9, [0x9000, 0x7, 0x7, 0x2, 0x37, 0x66c, 0x6, 0x1000, 0xe2, 0x1, 0x7, 0x5, 0xa4, 0xec18, 0x0, 0xed2, 0x4, 0x9, 0x9, 0xa9e8, 0xc1, 0x94f, 0x401, 0x80, 0x7, 0xff, 0x8, 0x3, 0x6, 0x2d, 0x3f, 0x4, 0x0, 0x81, 0x7fff, 0x4, 0x6, 0x6, 0x3, 0xff, 0x83, 0x0, 0x5f, 0x40, 0x1, 0x4, 0x2], 0xf3}}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x1, 0x0, 0x4, 0x0, 0x4}) (async) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @host}, 0x10) 23:35:45 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) 23:35:45 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) connect$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x3, @local}}, 0x1e) 23:35:45 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x6, @sliced={0x0, [0x6, 0x1fe0, 0x6, 0x7fff, 0x4, 0x0, 0x6b, 0xffff, 0xffff, 0x2, 0x3, 0x9, 0x9065, 0x8, 0x8000, 0xceb6, 0x2, 0x2, 0x5, 0xd3, 0x800, 0x7e2, 0x2, 0x8001, 0x9, 0x81, 0x4, 0x1f, 0x8, 0x100, 0xf26, 0xcbc, 0xe8, 0x7, 0x400, 0x874e, 0x9, 0x1189, 0x0, 0x800, 0x1f, 0x2, 0x5, 0x1, 0x81, 0x400, 0x1, 0x1], 0x5}}) 23:35:45 executing program 3: r0 = socket(0x29, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:45 executing program 2: r0 = socket(0x18, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @empty, @local}, &(0x7f0000000100)=0xc) 23:35:45 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000140)={0x2, @sliced={0x6dc9, [0x9000, 0x7, 0x7, 0x2, 0x37, 0x66c, 0x6, 0x1000, 0xe2, 0x1, 0x7, 0x5, 0xa4, 0xec18, 0x0, 0xed2, 0x4, 0x9, 0x9, 0xa9e8, 0xc1, 0x94f, 0x401, 0x80, 0x7, 0xff, 0x8, 0x3, 0x6, 0x2d, 0x3f, 0x4, 0x0, 0x81, 0x7fff, 0x4, 0x6, 0x6, 0x3, 0xff, 0x83, 0x0, 0x5f, 0x40, 0x1, 0x4, 0x2], 0xf3}}) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x1, 0x0, 0x4, 0x0, 0x4}) (async) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @host}, 0x10) 23:35:45 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) 23:35:45 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) setsockopt$inet_dccp_buf(r0, 0x21, 0xf, &(0x7f0000000000)="7bc9ba30f01e45ac326954c1fb49bfc14743021f82c3c2fabb260c6fb94ac01a761f5a5478838638fadc16834fdb82d7de1cde7a352267645610cdaf4ef2441f2cc549d3a3e22bf76a2e57acf37dd82f02cbcf36655ef4d7bd9cc0dc771234381c1f0f9d280466ee9ce3080029206c6b5e64eaf4b0a4d183d98c550cbd722d5a27c467d7a93207e1eeebfb54c398ff0253e449fcac96da68e3e7a2dc9f2a121ee25b8b3e83b2f8", 0xa7) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:45 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x10001, 0x2, 0x2, 0x0, 0x5}) 23:35:45 executing program 3: socket(0x29, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:45 executing program 2: r0 = socket(0x18, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x10) 23:35:45 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) (async) 23:35:45 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) setsockopt$inet_dccp_buf(r0, 0x21, 0xf, &(0x7f0000000000)="7bc9ba30f01e45ac326954c1fb49bfc14743021f82c3c2fabb260c6fb94ac01a761f5a5478838638fadc16834fdb82d7de1cde7a352267645610cdaf4ef2441f2cc549d3a3e22bf76a2e57acf37dd82f02cbcf36655ef4d7bd9cc0dc771234381c1f0f9d280466ee9ce3080029206c6b5e64eaf4b0a4d183d98c550cbd722d5a27c467d7a93207e1eeebfb54c398ff0253e449fcac96da68e3e7a2dc9f2a121ee25b8b3e83b2f8", 0xa7) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) setsockopt$inet_dccp_buf(r0, 0x21, 0xf, &(0x7f0000000000)="7bc9ba30f01e45ac326954c1fb49bfc14743021f82c3c2fabb260c6fb94ac01a761f5a5478838638fadc16834fdb82d7de1cde7a352267645610cdaf4ef2441f2cc549d3a3e22bf76a2e57acf37dd82f02cbcf36655ef4d7bd9cc0dc771234381c1f0f9d280466ee9ce3080029206c6b5e64eaf4b0a4d183d98c550cbd722d5a27c467d7a93207e1eeebfb54c398ff0253e449fcac96da68e3e7a2dc9f2a121ee25b8b3e83b2f8", 0xa7) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:35:45 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x7, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x3}, {0x8}, {0x0, 0xfffffffc}, {0xfffffffc}, {0x3}, {}, {0x0, 0x8}]}}) 23:35:45 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x10001, 0x2, 0x2, 0x0, 0x5}) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x10001, 0x2, 0x2, 0x0, 0x5}) (async) 23:35:45 executing program 3: socket(0x29, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:45 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x7}, &(0x7f0000000140)=0x8) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000003c0)=@userptr={0x8000, 0x1, 0x4, 0x10, 0x0, {0x0, 0xea60}, {0x3, 0x1, 0x7, 0x2, 0x0, 0x1, "0afdb2da"}, 0x4, 0x2, {&(0x7f0000000380)}, 0xfffffffc, 0x0, r4}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000080)=@mmap={0xf3, 0x0, 0x4, 0x40, 0x7, {r2, r3/1000+10000}, {0x2, 0x2, 0x80, 0x43, 0x0, 0x5e, "87ee9dc7"}, 0x2, 0x1, {}, 0x2, 0x0, r4}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) 23:35:45 executing program 2: r0 = socket(0x18, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x10) socket(0x18, 0x0, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x10) (async) 23:35:45 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x7, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x3}, {0x8}, {0x0, 0xfffffffc}, {0xfffffffc}, {0x3}, {}, {0x0, 0x8}]}}) 23:35:45 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x10001, 0x2, 0x2, 0x0, 0x5}) 23:35:45 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) setsockopt$inet_dccp_buf(r0, 0x21, 0xf, &(0x7f0000000000)="7bc9ba30f01e45ac326954c1fb49bfc14743021f82c3c2fabb260c6fb94ac01a761f5a5478838638fadc16834fdb82d7de1cde7a352267645610cdaf4ef2441f2cc549d3a3e22bf76a2e57acf37dd82f02cbcf36655ef4d7bd9cc0dc771234381c1f0f9d280466ee9ce3080029206c6b5e64eaf4b0a4d183d98c550cbd722d5a27c467d7a93207e1eeebfb54c398ff0253e449fcac96da68e3e7a2dc9f2a121ee25b8b3e83b2f8", 0xa7) (async, rerun: 32) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (rerun: 32) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:45 executing program 3: socket(0x29, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:45 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x7}, &(0x7f0000000140)=0x8) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000003c0)=@userptr={0x8000, 0x1, 0x4, 0x10, 0x0, {0x0, 0xea60}, {0x3, 0x1, 0x7, 0x2, 0x0, 0x1, "0afdb2da"}, 0x4, 0x2, {&(0x7f0000000380)}, 0xfffffffc, 0x0, r4}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000080)=@mmap={0xf3, 0x0, 0x4, 0x40, 0x7, {r2, r3/1000+10000}, {0x2, 0x2, 0x80, 0x43, 0x0, 0x5e, "87ee9dc7"}, 0x2, 0x1, {}, 0x2, 0x0, r4}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) clock_gettime(0x0, &(0x7f0000000000)) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x7}, &(0x7f0000000140)=0x8) (async) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000003c0)=@userptr={0x8000, 0x1, 0x4, 0x10, 0x0, {0x0, 0xea60}, {0x3, 0x1, 0x7, 0x2, 0x0, 0x1, "0afdb2da"}, 0x4, 0x2, {&(0x7f0000000380)}, 0xfffffffc, 0x0, r4}) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000080)=@mmap={0xf3, 0x0, 0x4, 0x40, 0x7, {r2, r3/1000+10000}, {0x2, 0x2, 0x80, 0x43, 0x0, 0x5e, "87ee9dc7"}, 0x2, 0x1, {}, 0x2, 0x0, r4}) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) (async) 23:35:45 executing program 2: r0 = socket(0x18, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x10) 23:35:45 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x7, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x3}, {0x8}, {0x0, 0xfffffffc}, {0xfffffffc}, {0x3}, {}, {0x0, 0x8}]}}) 23:35:45 executing program 3: r0 = socket(0x29, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) 23:35:45 executing program 4: ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x56) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000000)={0xf, 0x3, 0x4}) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) 23:35:45 executing program 2: r0 = socket(0x17, 0x0, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:45 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) (async) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x7}, &(0x7f0000000140)=0x8) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000003c0)=@userptr={0x8000, 0x1, 0x4, 0x10, 0x0, {0x0, 0xea60}, {0x3, 0x1, 0x7, 0x2, 0x0, 0x1, "0afdb2da"}, 0x4, 0x2, {&(0x7f0000000380)}, 0xfffffffc, 0x0, r4}) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000080)=@mmap={0xf3, 0x0, 0x4, 0x40, 0x7, {r2, r3/1000+10000}, {0x2, 0x2, 0x80, 0x43, 0x0, 0x5e, "87ee9dc7"}, 0x2, 0x1, {}, 0x2, 0x0, r4}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) 23:35:45 executing program 4: ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x56) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000000)={0xf, 0x3, 0x4}) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x56) (async) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000000)={0xf, 0x3, 0x4}) (async) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) (async) 23:35:45 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x0, @raw_data="51c6de4e66642871261a53f5db2c9b89f2f818cbf02d886ce3694e2fac455bbf4c3096cf73e160f379163ed5b47eef419009cbebb93dabbf53afe6b245e8d39927d8821495e821a25b7a5e2f498e5e68515f6ad437426f5c99a28f57180df2b8096a9a98759439324b11db8121f4ea68657cb20a44aa76181af52b86333e8a247e82f05ef5229931f7a0f55efaa012053eac639719d357b48817223a6b282367146df07bc1122e3a3555271de35b85c3b34775f436d10abff5a391fdc483d36d290c729adad16b73"}) 23:35:45 executing program 3: r0 = socket(0x29, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) 23:35:45 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x2, @raw_data="1501cb0456dbe8015918b455c2f2ffed0f73e8f4e7052abcea0c6cc4d436f65a81fa1c238ee2a0fa952f348dbc8416153381d25d96262086ff4848d1752d517466aa1588063b63144134d73f69896b16c32485e57925a7513461f70729e784f5aa67c92c4f8e1a3a33ed3a4c1054dbbb829ff69663cda95018af141a2b34e806cee9661b350483af1088edc99602c71523985717a646bc0d73f2dd68d24bd8ddc6c477b925448c7124d16c2246e01d73c7091837b5736eb6b6aa16a4e0054a34dde3f0a19280a6d7"}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000080)=0x3ff, 0x4) 23:35:45 executing program 2: r0 = socket(0x17, 0x0, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:45 executing program 4: ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x56) (async) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000000)={0xf, 0x3, 0x4}) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) 23:35:45 executing program 1: ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_dccp_int(r0, 0x21, 0x11, &(0x7f0000000100)=0x3, 0x4) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000000)={0x1, @pix={0xf9a, 0x9, 0x37303250, 0x2, 0x4, 0x6, 0x3, 0x1ff, 0x0, 0x1, 0x1, 0x6}}) 23:35:45 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x0, @raw_data="51c6de4e66642871261a53f5db2c9b89f2f818cbf02d886ce3694e2fac455bbf4c3096cf73e160f379163ed5b47eef419009cbebb93dabbf53afe6b245e8d39927d8821495e821a25b7a5e2f498e5e68515f6ad437426f5c99a28f57180df2b8096a9a98759439324b11db8121f4ea68657cb20a44aa76181af52b86333e8a247e82f05ef5229931f7a0f55efaa012053eac639719d357b48817223a6b282367146df07bc1122e3a3555271de35b85c3b34775f436d10abff5a391fdc483d36d290c729adad16b73"}) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x0, @raw_data="51c6de4e66642871261a53f5db2c9b89f2f818cbf02d886ce3694e2fac455bbf4c3096cf73e160f379163ed5b47eef419009cbebb93dabbf53afe6b245e8d39927d8821495e821a25b7a5e2f498e5e68515f6ad437426f5c99a28f57180df2b8096a9a98759439324b11db8121f4ea68657cb20a44aa76181af52b86333e8a247e82f05ef5229931f7a0f55efaa012053eac639719d357b48817223a6b282367146df07bc1122e3a3555271de35b85c3b34775f436d10abff5a391fdc483d36d290c729adad16b73"}) (async) 23:35:45 executing program 3: r0 = socket(0x29, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) 23:35:45 executing program 2: r0 = socket(0x17, 0x0, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) socket(0x17, 0x0, 0x1) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) 23:35:45 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) socket$tipc(0x1e, 0x2, 0x0) 23:35:45 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x2, @raw_data="1501cb0456dbe8015918b455c2f2ffed0f73e8f4e7052abcea0c6cc4d436f65a81fa1c238ee2a0fa952f348dbc8416153381d25d96262086ff4848d1752d517466aa1588063b63144134d73f69896b16c32485e57925a7513461f70729e784f5aa67c92c4f8e1a3a33ed3a4c1054dbbb829ff69663cda95018af141a2b34e806cee9661b350483af1088edc99602c71523985717a646bc0d73f2dd68d24bd8ddc6c477b925448c7124d16c2246e01d73c7091837b5736eb6b6aa16a4e0054a34dde3f0a19280a6d7"}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000080)=0x3ff, 0x4) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x2, @raw_data="1501cb0456dbe8015918b455c2f2ffed0f73e8f4e7052abcea0c6cc4d436f65a81fa1c238ee2a0fa952f348dbc8416153381d25d96262086ff4848d1752d517466aa1588063b63144134d73f69896b16c32485e57925a7513461f70729e784f5aa67c92c4f8e1a3a33ed3a4c1054dbbb829ff69663cda95018af141a2b34e806cee9661b350483af1088edc99602c71523985717a646bc0d73f2dd68d24bd8ddc6c477b925448c7124d16c2246e01d73c7091837b5736eb6b6aa16a4e0054a34dde3f0a19280a6d7"}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000080)=0x3ff, 0x4) (async) 23:35:45 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x0, @raw_data="51c6de4e66642871261a53f5db2c9b89f2f818cbf02d886ce3694e2fac455bbf4c3096cf73e160f379163ed5b47eef419009cbebb93dabbf53afe6b245e8d39927d8821495e821a25b7a5e2f498e5e68515f6ad437426f5c99a28f57180df2b8096a9a98759439324b11db8121f4ea68657cb20a44aa76181af52b86333e8a247e82f05ef5229931f7a0f55efaa012053eac639719d357b48817223a6b282367146df07bc1122e3a3555271de35b85c3b34775f436d10abff5a391fdc483d36d290c729adad16b73"}) 23:35:45 executing program 1: ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) (async) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_dccp_int(r0, 0x21, 0x11, &(0x7f0000000100)=0x3, 0x4) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000000)={0x1, @pix={0xf9a, 0x9, 0x37303250, 0x2, 0x4, 0x6, 0x3, 0x1ff, 0x0, 0x1, 0x1, 0x6}}) 23:35:45 executing program 3: r0 = socket(0x29, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 23:35:46 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x30324c4a, 0x0, 0xa, [{}, {0xffffffff}, {}, {0x0, 0x7fffffff}, {0x0, 0x2}, {0x1}, {}, {0x0, 0x9}], 0x0, 0x0, 0x8, 0x0, 0x6}}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0xe14, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000140)={0x1, @pix={0xffffffc1, 0x40, 0x36314d4e, 0x7, 0x0, 0x3, 0xb, 0x5, 0x0, 0x6, 0x2, 0x5}}) 23:35:46 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) (async) socket$tipc(0x1e, 0x2, 0x0) 23:35:46 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x2, @raw_data="1501cb0456dbe8015918b455c2f2ffed0f73e8f4e7052abcea0c6cc4d436f65a81fa1c238ee2a0fa952f348dbc8416153381d25d96262086ff4848d1752d517466aa1588063b63144134d73f69896b16c32485e57925a7513461f70729e784f5aa67c92c4f8e1a3a33ed3a4c1054dbbb829ff69663cda95018af141a2b34e806cee9661b350483af1088edc99602c71523985717a646bc0d73f2dd68d24bd8ddc6c477b925448c7124d16c2246e01d73c7091837b5736eb6b6aa16a4e0054a34dde3f0a19280a6d7"}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000080)=0x3ff, 0x4) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x2, @raw_data="1501cb0456dbe8015918b455c2f2ffed0f73e8f4e7052abcea0c6cc4d436f65a81fa1c238ee2a0fa952f348dbc8416153381d25d96262086ff4848d1752d517466aa1588063b63144134d73f69896b16c32485e57925a7513461f70729e784f5aa67c92c4f8e1a3a33ed3a4c1054dbbb829ff69663cda95018af141a2b34e806cee9661b350483af1088edc99602c71523985717a646bc0d73f2dd68d24bd8ddc6c477b925448c7124d16c2246e01d73c7091837b5736eb6b6aa16a4e0054a34dde3f0a19280a6d7"}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000080)=0x3ff, 0x4) (async) 23:35:46 executing program 1: ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) (async) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_dccp_int(r0, 0x21, 0x11, &(0x7f0000000100)=0x3, 0x4) (async) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000000)={0x1, @pix={0xf9a, 0x9, 0x37303250, 0x2, 0x4, 0x6, 0x3, 0x1ff, 0x0, 0x1, 0x1, 0x6}}) 23:35:46 executing program 2: r0 = socket(0x18, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000480)={0x0, 0x0, {0x0, 0x6, 0x2002, 0x8, 0x5, 0x2, 0x2, 0x7}}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5}, 0x48) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x274, r2, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x214, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x586}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x274}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:46 executing program 3: r0 = socket(0x29, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 23:35:46 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x30324c4a, 0x0, 0xa, [{}, {0xffffffff}, {}, {0x0, 0x7fffffff}, {0x0, 0x2}, {0x1}, {}, {0x0, 0x9}], 0x0, 0x0, 0x8, 0x0, 0x6}}) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0xe14, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000140)={0x1, @pix={0xffffffc1, 0x40, 0x36314d4e, 0x7, 0x0, 0x3, 0xb, 0x5, 0x0, 0x6, 0x2, 0x5}}) 23:35:46 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xffff, 0x1ff}) 23:35:46 executing program 2: r0 = socket(0x18, 0x0, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) (async) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={0x0, @local, @local}, &(0x7f0000000140)=0xc) (async) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000480)={0x0, 0x0, {0x0, 0x6, 0x2002, 0x8, 0x5, 0x2, 0x2, 0x7}}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5}, 0x48) (async) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x274, r2, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x214, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x586}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x274}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:46 executing program 3: r0 = socket(0x29, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 23:35:46 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) socket$tipc(0x1e, 0x2, 0x0) 23:35:46 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xffff, 0x1ff}) 23:35:46 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @sliced={0x81cb, [0x8, 0x1f, 0x7, 0x2, 0x74, 0x1, 0x3f, 0x7, 0x6, 0x2, 0x9, 0xf0, 0x2, 0x40, 0x6, 0x8, 0x6, 0x20, 0x527e, 0x1, 0x6, 0x40, 0x4, 0x44, 0x8001, 0x1, 0x5, 0x1ff, 0x6, 0x7, 0x9, 0x5, 0x20, 0x1000, 0x6, 0x1, 0xbf25, 0x401, 0xfe, 0x3f, 0x7ff, 0x2, 0x100, 0xff, 0x6, 0x8000, 0xfffe, 0xffff], 0x3ff}}) 23:35:46 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x30324c4a, 0x0, 0xa, [{}, {0xffffffff}, {}, {0x0, 0x7fffffff}, {0x0, 0x2}, {0x1}, {}, {0x0, 0x9}], 0x0, 0x0, 0x8, 0x0, 0x6}}) (async, rerun: 64) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0xe14, 0x2) (rerun: 64) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000140)={0x1, @pix={0xffffffc1, 0x40, 0x36314d4e, 0x7, 0x0, 0x3, 0xb, 0x5, 0x0, 0x6, 0x2, 0x5}}) 23:35:46 executing program 4: syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x1, @win={{0x6, 0x101, 0x40, 0x5}, 0xa, 0x800, &(0x7f0000000100)={{0x7, 0x7, 0x1, 0x5732}, &(0x7f00000000c0)={{0x8000, 0x1, 0x5, 0x80000001}, &(0x7f0000000080)={{0x1ff, 0x0, 0xffffffff, 0xc4}}}}, 0x2, &(0x7f0000000140)="54ba65c93bdb1e5387a361edc155c6eb10fa6b689174760e6235320bf2d85271", 0x9}}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 23:35:46 executing program 2: r0 = socket(0x18, 0x0, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={0x0, @local, @local}, &(0x7f0000000140)=0xc) (async, rerun: 32) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000480)={0x0, 0x0, {0x0, 0x6, 0x2002, 0x8, 0x5, 0x2, 0x2, 0x7}}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5}, 0x48) (async) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x274, r2, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x214, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x586}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x274}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:46 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x44) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) r2 = socket$pptp(0x18, 0x1, 0x2) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r3, 0x28, 0x6, &(0x7f0000000040)={0x0, 0xea60}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) r7 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000680)={0x34c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0xf0, 0x2, 0x0, 0x1, [{0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x2, 0x58, 0x8, 0x8001}, {0x1ff, 0x9, 0x70, 0x8}, {0x80, 0x71, 0x5, 0xffff}, {0xa40, 0x8, 0x2, 0x6}, {0xffff, 0x9, 0x1, 0x7}, {0x3, 0x3a, 0x5}, {0xd2c, 0xc6, 0x2, 0x7}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x0, 0xf, 0x4, 0x7}, {0x6, 0x1, 0x5, 0xae41}, {0x7, 0x0, 0x7f, 0x1}, {0x7, 0x3, 0x80, 0x4}, {0x3, 0x7, 0x3, 0xffff}]}}}]}}, {{0x8, 0x1, r8}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x1, 0x3, 0x20, 0x2d}, {0x1, 0x0, 0x1, 0x4}, {0x8000, 0x6, 0x8, 0x800}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}]}, 0x34c}}, 0x14) connect$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @empty}}, 0x1e) 23:35:46 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xffff, 0x1ff}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xffff, 0x1ff}) (async) 23:35:46 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @sliced={0x81cb, [0x8, 0x1f, 0x7, 0x2, 0x74, 0x1, 0x3f, 0x7, 0x6, 0x2, 0x9, 0xf0, 0x2, 0x40, 0x6, 0x8, 0x6, 0x20, 0x527e, 0x1, 0x6, 0x40, 0x4, 0x44, 0x8001, 0x1, 0x5, 0x1ff, 0x6, 0x7, 0x9, 0x5, 0x20, 0x1000, 0x6, 0x1, 0xbf25, 0x401, 0xfe, 0x3f, 0x7ff, 0x2, 0x100, 0xff, 0x6, 0x8000, 0xfffe, 0xffff], 0x3ff}}) 23:35:46 executing program 4: syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x1, @win={{0x6, 0x101, 0x40, 0x5}, 0xa, 0x800, &(0x7f0000000100)={{0x7, 0x7, 0x1, 0x5732}, &(0x7f00000000c0)={{0x8000, 0x1, 0x5, 0x80000001}, &(0x7f0000000080)={{0x1ff, 0x0, 0xffffffff, 0xc4}}}}, 0x2, &(0x7f0000000140)="54ba65c93bdb1e5387a361edc155c6eb10fa6b689174760e6235320bf2d85271", 0x9}}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x1, @win={{0x6, 0x101, 0x40, 0x5}, 0xa, 0x800, &(0x7f0000000100)={{0x7, 0x7, 0x1, 0x5732}, &(0x7f00000000c0)={{0x8000, 0x1, 0x5, 0x80000001}, &(0x7f0000000080)={{0x1ff, 0x0, 0xffffffff, 0xc4}}}}, 0x2, &(0x7f0000000140)="54ba65c93bdb1e5387a361edc155c6eb10fa6b689174760e6235320bf2d85271", 0x9}}) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) 23:35:46 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200), 0x420500, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000240)={0x8, 0x6}) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f0000000280)={'\x00', 0xffffffff, 0x2, 0x3}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0xb00, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000440)=@userptr={0x8c, 0x3, 0x4, 0x100, 0x81, {r3, r4/1000+10000}, {0x2, 0x0, 0xe0, 0x9, 0x3, 0x5, "97eda66b"}, 0x93, 0x2, {&(0x7f00000003c0)}, 0xef, 0x0, r5}) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, &(0x7f0000000000)={0x40000000, 0x101, "8200e7ba5ae9fa7baea950a8c14db1d062457fee52c5f85cb0a2ef71c6ed7420", 0x6, 0x100, 0x4000, 0x8001, 0xdb, 0x3, 0xfffff800, 0x6, [0x1cf, 0x80000001, 0x9, 0xffffff81]}) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000180)={0x0, 0x0, {0x6, 0x7f, 0x1015, 0x9, 0x3, 0x3, 0x1}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x0) ioctl$PTP_PIN_SETFUNC2(r6, 0x40603d10, &(0x7f0000000300)={'\x00', 0x7, 0x1, 0x6}) 23:35:46 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x44) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) r2 = socket$pptp(0x18, 0x1, 0x2) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r3, 0x28, 0x6, &(0x7f0000000040)={0x0, 0xea60}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) r7 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000680)={0x34c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0xf0, 0x2, 0x0, 0x1, [{0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x2, 0x58, 0x8, 0x8001}, {0x1ff, 0x9, 0x70, 0x8}, {0x80, 0x71, 0x5, 0xffff}, {0xa40, 0x8, 0x2, 0x6}, {0xffff, 0x9, 0x1, 0x7}, {0x3, 0x3a, 0x5}, {0xd2c, 0xc6, 0x2, 0x7}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x0, 0xf, 0x4, 0x7}, {0x6, 0x1, 0x5, 0xae41}, {0x7, 0x0, 0x7f, 0x1}, {0x7, 0x3, 0x80, 0x4}, {0x3, 0x7, 0x3, 0xffff}]}}}]}}, {{0x8, 0x1, r8}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x1, 0x3, 0x20, 0x2d}, {0x1, 0x0, 0x1, 0x4}, {0x8000, 0x6, 0x8, 0x800}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}]}, 0x34c}}, 0x14) connect$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @empty}}, 0x1e) 23:35:46 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000000)) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:35:46 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @sliced={0x81cb, [0x8, 0x1f, 0x7, 0x2, 0x74, 0x1, 0x3f, 0x7, 0x6, 0x2, 0x9, 0xf0, 0x2, 0x40, 0x6, 0x8, 0x6, 0x20, 0x527e, 0x1, 0x6, 0x40, 0x4, 0x44, 0x8001, 0x1, 0x5, 0x1ff, 0x6, 0x7, 0x9, 0x5, 0x20, 0x1000, 0x6, 0x1, 0xbf25, 0x401, 0xfe, 0x3f, 0x7ff, 0x2, 0x100, 0xff, 0x6, 0x8000, 0xfffe, 0xffff], 0x3ff}}) 23:35:46 executing program 2: r0 = socket(0x18, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x402400, 0x0) setsockopt$inet_dccp_int(r1, 0x21, 0x6, &(0x7f0000000000)=0x100, 0x4) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000229bd7000fcdbdf25010000001400080067656e6576653100001f62f296e49ed74a0000000000000008001800e0000001050022000100000014002000fe8800000000000000000000000000010600020001000000060002000100000005001200000000000c0016000000000000001c0006000300ff000000"], 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x40840) 23:35:46 executing program 4: syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x1, @win={{0x6, 0x101, 0x40, 0x5}, 0xa, 0x800, &(0x7f0000000100)={{0x7, 0x7, 0x1, 0x5732}, &(0x7f00000000c0)={{0x8000, 0x1, 0x5, 0x80000001}, &(0x7f0000000080)={{0x1ff, 0x0, 0xffffffff, 0xc4}}}}, 0x2, &(0x7f0000000140)="54ba65c93bdb1e5387a361edc155c6eb10fa6b689174760e6235320bf2d85271", 0x9}}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 23:35:46 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200), 0x420500, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000240)={0x8, 0x6}) (async) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f0000000280)={'\x00', 0xffffffff, 0x2, 0x3}) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) (async) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0xb00, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000440)=@userptr={0x8c, 0x3, 0x4, 0x100, 0x81, {r3, r4/1000+10000}, {0x2, 0x0, 0xe0, 0x9, 0x3, 0x5, "97eda66b"}, 0x93, 0x2, {&(0x7f00000003c0)}, 0xef, 0x0, r5}) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, &(0x7f0000000000)={0x40000000, 0x101, "8200e7ba5ae9fa7baea950a8c14db1d062457fee52c5f85cb0a2ef71c6ed7420", 0x6, 0x100, 0x4000, 0x8001, 0xdb, 0x3, 0xfffff800, 0x6, [0x1cf, 0x80000001, 0x9, 0xffffff81]}) (async) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000180)={0x0, 0x0, {0x6, 0x7f, 0x1015, 0x9, 0x3, 0x3, 0x1}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x0) ioctl$PTP_PIN_SETFUNC2(r6, 0x40603d10, &(0x7f0000000300)={'\x00', 0x7, 0x1, 0x6}) 23:35:46 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xa) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0285628, &(0x7f00000001c0)={0x0, @pix_mp={0x5, 0x76046e8c, 0x33363248, 0x2, 0x5, [{0x9, 0x4}, {0x8, 0x7fff}, {0xff, 0x9}, {0x5}, {0xffff, 0x6}, {0x2, 0x9}, {0x1, 0x1}, {0x1, 0x7fffffff}], 0x80, 0x0, 0x1, 0x0, 0x7}}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x32001, 0x0) 23:35:46 executing program 2: r0 = socket(0x18, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x402400, 0x0) setsockopt$inet_dccp_int(r1, 0x21, 0x6, &(0x7f0000000000)=0x100, 0x4) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000229bd7000fcdbdf25010000001400080067656e6576653100001f62f296e49ed74a0000000000000008001800e0000001050022000100000014002000fe8800000000000000000000000000010600020001000000060002000100000005001200000000000c0016000000000000001c0006000300ff000000"], 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x40840) socket(0x18, 0x0, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x402400, 0x0) (async) setsockopt$inet_dccp_int(r1, 0x21, 0x6, &(0x7f0000000000)=0x100, 0x4) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000229bd7000fcdbdf25010000001400080067656e6576653100001f62f296e49ed74a0000000000000008001800e0000001050022000100000014002000fe8800000000000000000000000000010600020001000000060002000100000005001200000000000c0016000000000000001c0006000300ff000000"], 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x40840) (async) 23:35:46 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000000)) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000000)) (async) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) 23:35:46 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x44) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) r2 = socket$pptp(0x18, 0x1, 0x2) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r3, 0x28, 0x6, &(0x7f0000000040)={0x0, 0xea60}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) r7 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000680)={0x34c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0xf0, 0x2, 0x0, 0x1, [{0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x2, 0x58, 0x8, 0x8001}, {0x1ff, 0x9, 0x70, 0x8}, {0x80, 0x71, 0x5, 0xffff}, {0xa40, 0x8, 0x2, 0x6}, {0xffff, 0x9, 0x1, 0x7}, {0x3, 0x3a, 0x5}, {0xd2c, 0xc6, 0x2, 0x7}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x0, 0xf, 0x4, 0x7}, {0x6, 0x1, 0x5, 0xae41}, {0x7, 0x0, 0x7f, 0x1}, {0x7, 0x3, 0x80, 0x4}, {0x3, 0x7, 0x3, 0xffff}]}}}]}}, {{0x8, 0x1, r8}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x1, 0x3, 0x20, 0x2d}, {0x1, 0x0, 0x1, 0x4}, {0x8000, 0x6, 0x8, 0x800}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}]}, 0x34c}}, 0x14) connect$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @empty}}, 0x1e) 23:35:46 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x0, @vbi={0x1ff, 0x3986, 0x9, 0x48524742, [0x86f6], [0x0, 0x62c65d7c], 0x1}}) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0285629, &(0x7f00000001c0)={0x4}) 23:35:46 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200), 0x420500, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000240)={0x8, 0x6}) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f0000000280)={'\x00', 0xffffffff, 0x2, 0x3}) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0xb00, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000440)=@userptr={0x8c, 0x3, 0x4, 0x100, 0x81, {r3, r4/1000+10000}, {0x2, 0x0, 0xe0, 0x9, 0x3, 0x5, "97eda66b"}, 0x93, 0x2, {&(0x7f00000003c0)}, 0xef, 0x0, r5}) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, &(0x7f0000000000)={0x40000000, 0x101, "8200e7ba5ae9fa7baea950a8c14db1d062457fee52c5f85cb0a2ef71c6ed7420", 0x6, 0x100, 0x4000, 0x8001, 0xdb, 0x3, 0xfffff800, 0x6, [0x1cf, 0x80000001, 0x9, 0xffffff81]}) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000180)={0x0, 0x0, {0x6, 0x7f, 0x1015, 0x9, 0x3, 0x3, 0x1}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x0) (async) ioctl$PTP_PIN_SETFUNC2(r6, 0x40603d10, &(0x7f0000000300)={'\x00', 0x7, 0x1, 0x6}) 23:35:46 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xa) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0285628, &(0x7f00000001c0)={0x0, @pix_mp={0x5, 0x76046e8c, 0x33363248, 0x2, 0x5, [{0x9, 0x4}, {0x8, 0x7fff}, {0xff, 0x9}, {0x5}, {0xffff, 0x6}, {0x2, 0x9}, {0x1, 0x1}, {0x1, 0x7fffffff}], 0x80, 0x0, 0x1, 0x0, 0x7}}) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x32001, 0x0) 23:35:46 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x0, @vbi={0x1ff, 0x3986, 0x9, 0x48524742, [0x86f6], [0x0, 0x62c65d7c], 0x1}}) (async, rerun: 32) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (rerun: 32) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0285629, &(0x7f00000001c0)={0x4}) 23:35:46 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x44) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) socket$pptp(0x18, 0x1, 0x2) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, &(0x7f0000000040)={0x0, 0xea60}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5}, 0x48) r6 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000680)={0x34c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0xf0, 0x2, 0x0, 0x1, [{0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x2, 0x58, 0x8, 0x8001}, {0x1ff, 0x9, 0x70, 0x8}, {0x80, 0x71, 0x5, 0xffff}, {0xa40, 0x8, 0x2, 0x6}, {0xffff, 0x9, 0x1, 0x7}, {0x3, 0x3a, 0x5}, {0xd2c, 0xc6, 0x2, 0x7}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x0, 0xf, 0x4, 0x7}, {0x6, 0x1, 0x5, 0xae41}, {0x7, 0x0, 0x7f, 0x1}, {0x7, 0x3, 0x80, 0x4}, {0x3, 0x7, 0x3, 0xffff}]}}}]}}, {{0x8, 0x1, r7}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x1, 0x3, 0x20, 0x2d}, {0x1, 0x0, 0x1, 0x4}, {0x8000, 0x6, 0x8, 0x800}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}]}, 0x34c}}, 0x14) 23:35:46 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000000)) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000000)) (async) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) 23:35:46 executing program 2: r0 = socket(0x18, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x402400, 0x0) setsockopt$inet_dccp_int(r1, 0x21, 0x6, &(0x7f0000000000)=0x100, 0x4) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000229bd7000fcdbdf25010000001400080067656e6576653100001f62f296e49ed74a0000000000000008001800e0000001050022000100000014002000fe8800000000000000000000000000010600020001000000060002000100000005001200000000000c0016000000000000001c0006000300ff000000"], 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x40840) socket(0x18, 0x0, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x402400, 0x0) (async) setsockopt$inet_dccp_int(r1, 0x21, 0x6, &(0x7f0000000000)=0x100, 0x4) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000229bd7000fcdbdf25010000001400080067656e6576653100001f62f296e49ed74a0000000000000008001800e0000001050022000100000014002000fe8800000000000000000000000000010600020001000000060002000100000005001200000000000c0016000000000000001c0006000300ff000000"], 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x40840) (async) 23:35:46 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000280)=@multiplanar_overlay={0x1000, 0x3, 0x4, 0x0, 0x3f, {r1, r2/1000+60000}, {0x3, 0x8, 0x3f, 0x24, 0x8, 0x4, "e2c00196"}, 0xef, 0x3, {&(0x7f0000000200)=[{0x0, 0x2, {0x101}}, {0x20, 0x9, {0x7}, 0x5}]}, 0x7, 0x0, r3}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012dbd7000ffdbdf25010000000c000f00060000000000000008000900000000001400080064766d7270300000000000000000000005000400000000000af822000000000005001300080000000500050001000000080011000000000005002100000000000500220000000000"], 0x74}, 0x1, 0x0, 0x0, 0x14}, 0x20000000) 23:35:46 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xa) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0285628, &(0x7f00000001c0)={0x0, @pix_mp={0x5, 0x76046e8c, 0x33363248, 0x2, 0x5, [{0x9, 0x4}, {0x8, 0x7fff}, {0xff, 0x9}, {0x5}, {0xffff, 0x6}, {0x2, 0x9}, {0x1, 0x1}, {0x1, 0x7fffffff}], 0x80, 0x0, 0x1, 0x0, 0x7}}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x32001, 0x0) 23:35:46 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x44) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) socket$pptp(0x18, 0x1, 0x2) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, &(0x7f0000000040)={0x0, 0xea60}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) 23:35:46 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x0, @vbi={0x1ff, 0x3986, 0x9, 0x48524742, [0x86f6], [0x0, 0x62c65d7c], 0x1}}) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0285629, &(0x7f00000001c0)={0x4}) syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x0, @vbi={0x1ff, 0x3986, 0x9, 0x48524742, [0x86f6], [0x0, 0x62c65d7c], 0x1}}) (async) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0285629, &(0x7f00000001c0)={0x4}) (async) 23:35:46 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:35:46 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000280)=@multiplanar_overlay={0x1000, 0x3, 0x4, 0x0, 0x3f, {r1, r2/1000+60000}, {0x3, 0x8, 0x3f, 0x24, 0x8, 0x4, "e2c00196"}, 0xef, 0x3, {&(0x7f0000000200)=[{0x0, 0x2, {0x101}}, {0x20, 0x9, {0x7}, 0x5}]}, 0x7, 0x0, r3}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012dbd7000ffdbdf25010000000c000f00060000000000000008000900000000001400080064766d7270300000000000000000000005000400000000000af822000000000005001300080000000500050001000000080011000000000005002100000000000500220000000000"], 0x74}, 0x1, 0x0, 0x0, 0x14}, 0x20000000) 23:35:46 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x200040, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8) getsockname$tipc(r2, &(0x7f00000000c0)=@name, &(0x7f0000000100)=0x10) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x86, 0x0, 0x0, "4788e204385ca0aea6c229f4c65a1ce8857989323b07347c662bd7bec3918188", 0x4745504a}) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) accept4$tipc(r3, &(0x7f0000000140)=@id, &(0x7f00000002c0)=0x10, 0x80800) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000300)={r1}, 0x8) setsockopt$TIPC_MCAST_BROADCAST(r3, 0x10f, 0x85) 23:35:46 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x44) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) socket$pptp(0x18, 0x1, 0x2) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, &(0x7f0000000040)={0x0, 0xea60}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) 23:35:46 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000440)={0x3, 0x7, 0x1, 0x80}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000000c0)=[{}], 0x8, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) 23:35:46 executing program 2: r0 = socket(0x18, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000480)={r1}, 0x8) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f00000004c0)={0x4, "a73772c4290436e681cdf11c5e7f96a5dbed33e13aa8d0dfd5a84eb92f623984", 0x3, 0x0, 0xe88, 0x1000, 0x2}) connect$can_bcm(r1, &(0x7f0000000040), 0x10) recvmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x880, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r3}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r1, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000600)=[{}], 0x8, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x10, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) clock_gettime(0x0, &(0x7f0000000880)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000980)={&(0x7f0000000840)={0x1d, r5}, 0x10, &(0x7f0000000940)={&(0x7f00000008c0)={0x2, 0x801, 0xff, {r6, r7/1000+10000}, {0x0, 0x2710}, {0x1, 0x1, 0x0, 0x1}, 0x1, @can={{0x1, 0x0, 0x1, 0x1}, 0x6, 0x2, 0x0, 0x0, "343e3e72a3f77571"}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x80) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xffffffffffffffff) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000380), &(0x7f00000003c0)=0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:46 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) 23:35:46 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x200040, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8) getsockname$tipc(r2, &(0x7f00000000c0)=@name, &(0x7f0000000100)=0x10) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x86, 0x0, 0x0, "4788e204385ca0aea6c229f4c65a1ce8857989323b07347c662bd7bec3918188", 0x4745504a}) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) accept4$tipc(r3, &(0x7f0000000140)=@id, &(0x7f00000002c0)=0x10, 0x80800) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000300)={r1}, 0x8) setsockopt$TIPC_MCAST_BROADCAST(r3, 0x10f, 0x85) syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x200040, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8) (async) getsockname$tipc(r2, &(0x7f00000000c0)=@name, &(0x7f0000000100)=0x10) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x86, 0x0, 0x0, "4788e204385ca0aea6c229f4c65a1ce8857989323b07347c662bd7bec3918188", 0x4745504a}) (async) socket$tipc(0x1e, 0x2, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) (async) accept4$tipc(r3, &(0x7f0000000140)=@id, &(0x7f00000002c0)=0x10, 0x80800) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000300)={r1}, 0x8) (async) setsockopt$TIPC_MCAST_BROADCAST(r3, 0x10f, 0x85) (async) 23:35:46 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) (async) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000280)=@multiplanar_overlay={0x1000, 0x3, 0x4, 0x0, 0x3f, {r1, r2/1000+60000}, {0x3, 0x8, 0x3f, 0x24, 0x8, 0x4, "e2c00196"}, 0xef, 0x3, {&(0x7f0000000200)=[{0x0, 0x2, {0x101}}, {0x20, 0x9, {0x7}, 0x5}]}, 0x7, 0x0, r3}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012dbd7000ffdbdf25010000000c000f00060000000000000008000900000000001400080064766d7270300000000000000000000005000400000000000af822000000000005001300080000000500050001000000080011000000000005002100000000000500220000000000"], 0x74}, 0x1, 0x0, 0x0, 0x14}, 0x20000000) 23:35:47 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x44) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) socket$pptp(0x18, 0x1, 0x2) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, &(0x7f0000000040)={0x0, 0xea60}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)) 23:35:47 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000440)={0x3, 0x7, 0x1, 0x80}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000000c0)=[{}], 0x8, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) 23:35:47 executing program 2: r0 = socket(0x18, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000480)={r1}, 0x8) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f00000004c0)={0x4, "a73772c4290436e681cdf11c5e7f96a5dbed33e13aa8d0dfd5a84eb92f623984", 0x3, 0x0, 0xe88, 0x1000, 0x2}) connect$can_bcm(r1, &(0x7f0000000040), 0x10) recvmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x880, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r3}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r1, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000600)=[{}], 0x8, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x10, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) clock_gettime(0x0, &(0x7f0000000880)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000980)={&(0x7f0000000840)={0x1d, r5}, 0x10, &(0x7f0000000940)={&(0x7f00000008c0)={0x2, 0x801, 0xff, {r6, r7/1000+10000}, {0x0, 0x2710}, {0x1, 0x1, 0x0, 0x1}, 0x1, @can={{0x1, 0x0, 0x1, 0x1}, 0x6, 0x2, 0x0, 0x0, "343e3e72a3f77571"}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x80) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xffffffffffffffff) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000380), &(0x7f00000003c0)=0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) socket(0x18, 0x0, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000480)={r1}, 0x8) (async) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f00000004c0)={0x4, "a73772c4290436e681cdf11c5e7f96a5dbed33e13aa8d0dfd5a84eb92f623984", 0x3, 0x0, 0xe88, 0x1000, 0x2}) (async) connect$can_bcm(r1, &(0x7f0000000040), 0x10) (async) recvmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x880, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r3}, 0x8) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r1, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000600)=[{}], 0x8, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x10, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) (async) clock_gettime(0x0, &(0x7f0000000880)) (async) sendmsg$can_bcm(r1, &(0x7f0000000980)={&(0x7f0000000840)={0x1d, r5}, 0x10, &(0x7f0000000940)={&(0x7f00000008c0)={0x2, 0x801, 0xff, {r6, r7/1000+10000}, {0x0, 0x2710}, {0x1, 0x1, 0x0, 0x1}, 0x1, @can={{0x1, 0x0, 0x1, 0x1}, 0x6, 0x2, 0x0, 0x0, "343e3e72a3f77571"}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x80) (async) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xffffffffffffffff) (async) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000380), &(0x7f00000003c0)=0x4) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) 23:35:47 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:35:47 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x200040, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8) getsockname$tipc(r2, &(0x7f00000000c0)=@name, &(0x7f0000000100)=0x10) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x86, 0x0, 0x0, "4788e204385ca0aea6c229f4c65a1ce8857989323b07347c662bd7bec3918188", 0x4745504a}) (async) r3 = socket$tipc(0x1e, 0x2, 0x0) (async) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) accept4$tipc(r3, &(0x7f0000000140)=@id, &(0x7f00000002c0)=0x10, 0x80800) (async) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000300)={r1}, 0x8) (async) setsockopt$TIPC_MCAST_BROADCAST(r3, 0x10f, 0x85) 23:35:47 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x9) 23:35:47 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000440)={0x3, 0x7, 0x1, 0x80}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000000c0)=[{}], 0x8, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000440)={0x3, 0x7, 0x1, 0x80}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000000c0)=[{}], 0x8, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) (async) 23:35:47 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x44) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) socket$pptp(0x18, 0x1, 0x2) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, &(0x7f0000000040)={0x0, 0xea60}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) socket$l2tp(0x2, 0x2, 0x73) 23:35:47 executing program 2: r0 = socket(0x18, 0x0, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000480)={r1}, 0x8) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f00000004c0)={0x4, "a73772c4290436e681cdf11c5e7f96a5dbed33e13aa8d0dfd5a84eb92f623984", 0x3, 0x0, 0xe88, 0x1000, 0x2}) connect$can_bcm(r1, &(0x7f0000000040), 0x10) recvmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x880, 0x0) (async) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r3}, 0x8) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r1, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000600)=[{}], 0x8, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x10, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) clock_gettime(0x0, &(0x7f0000000880)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000980)={&(0x7f0000000840)={0x1d, r5}, 0x10, &(0x7f0000000940)={&(0x7f00000008c0)={0x2, 0x801, 0xff, {r6, r7/1000+10000}, {0x0, 0x2710}, {0x1, 0x1, 0x0, 0x1}, 0x1, @can={{0x1, 0x0, 0x1, 0x1}, 0x6, 0x2, 0x0, 0x0, "343e3e72a3f77571"}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x80) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xffffffffffffffff) (async) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000380), &(0x7f00000003c0)=0x4) (async, rerun: 64) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (rerun: 64) 23:35:47 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000080)=@id, &(0x7f00000000c0)=0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) syz_open_dev$ndb(&(0x7f0000000280), 0x0, 0xd4042) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000180)={0x3, 0x1, @start={0x8001}}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000200)={0x400, "a018377a30234991a638bfa1f0c54308840816875828f077f03ed5ef693f0433", 0x1, 0x8, 0x2, 0x3200e0, 0x10021, 0x4}) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000040)={0x1, 0x20303159, 0x1, @stepwise={0x1, 0x101, 0xfff, 0x5, 0x5cb, 0x4}}) 23:35:47 executing program 1: syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000002c0)=@fd={0x80, 0x0, 0x4, 0x4000, 0x4, {r1, r2/1000+60000}, {0x1, 0xc, 0x3, 0xfe, 0x0, 0x6, "d1319264"}, 0xaebf, 0x4, {}, 0xff}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @win={{0xc7, 0xfffffff7, 0x101, 0x2}, 0x3, 0x9, &(0x7f0000000080)={{0x9, 0x8, 0x7, 0x800}, &(0x7f0000000040)={{0x4, 0x1, 0x1, 0x7ff}, &(0x7f0000000000)={{0x3ff, 0x800101, 0x1}}}}, 0x81, &(0x7f0000000140)="8655ae732a728868ca16ce715c8973ff260670fbbc714d2c1a"}}) r3 = syz_open_dev$vim2m(&(0x7f0000000340), 0x3, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000480)={0xf6cb, 0xfff, 0x4, {0x1, @win={{0x7, 0x2, 0x6, 0x1}, 0x4, 0x1f, &(0x7f0000000400)={{0x6, 0x1, 0x80000001, 0x7c000}, &(0x7f00000003c0)={{0x10001, 0xa184, 0x1, 0x4}, &(0x7f0000000380)={{0x8bf0, 0x3ff, 0x0, 0x7}}}}, 0x0, &(0x7f0000000440)="b3", 0x2}}, 0x5}) 23:35:47 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x9) 23:35:47 executing program 4: r0 = socket(0x18, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000480)={r1}, 0x8) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f00000004c0)={0x4, "a73772c4290436e681cdf11c5e7f96a5dbed33e13aa8d0dfd5a84eb92f623984", 0x3, 0x0, 0xe88, 0x1000, 0x2}) connect$can_bcm(r1, &(0x7f0000000040), 0x10) recvmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x880, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r3}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r1, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000600)=[{}], 0x8, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x10, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) clock_gettime(0x0, &(0x7f0000000880)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000980)={&(0x7f0000000840)={0x1d, r5}, 0x10, &(0x7f0000000940)={&(0x7f00000008c0)={0x2, 0x801, 0xff, {r6, r7/1000+10000}, {0x0, 0x2710}, {0x1, 0x1, 0x0, 0x1}, 0x1, @can={{0x1, 0x0, 0x1, 0x1}, 0x6, 0x2, 0x0, 0x0, "343e3e72a3f77571"}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x80) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xffffffffffffffff) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000380), &(0x7f00000003c0)=0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:47 executing program 2: r0 = socket(0x18, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)) getsockname$tipc(r0, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x3) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:47 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x44) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) socket$pptp(0x18, 0x1, 0x2) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, &(0x7f0000000040)={0x0, 0xea60}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) 23:35:47 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000080)=@id, &(0x7f00000000c0)=0x10) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) syz_open_dev$ndb(&(0x7f0000000280), 0x0, 0xd4042) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000180)={0x3, 0x1, @start={0x8001}}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000200)={0x400, "a018377a30234991a638bfa1f0c54308840816875828f077f03ed5ef693f0433", 0x1, 0x8, 0x2, 0x3200e0, 0x10021, 0x4}) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000040)={0x1, 0x20303159, 0x1, @stepwise={0x1, 0x101, 0xfff, 0x5, 0x5cb, 0x4}}) 23:35:47 executing program 1: syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000002c0)=@fd={0x80, 0x0, 0x4, 0x4000, 0x4, {r1, r2/1000+60000}, {0x1, 0xc, 0x3, 0xfe, 0x0, 0x6, "d1319264"}, 0xaebf, 0x4, {}, 0xff}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @win={{0xc7, 0xfffffff7, 0x101, 0x2}, 0x3, 0x9, &(0x7f0000000080)={{0x9, 0x8, 0x7, 0x800}, &(0x7f0000000040)={{0x4, 0x1, 0x1, 0x7ff}, &(0x7f0000000000)={{0x3ff, 0x800101, 0x1}}}}, 0x81, &(0x7f0000000140)="8655ae732a728868ca16ce715c8973ff260670fbbc714d2c1a"}}) (async) r3 = syz_open_dev$vim2m(&(0x7f0000000340), 0x3, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000480)={0xf6cb, 0xfff, 0x4, {0x1, @win={{0x7, 0x2, 0x6, 0x1}, 0x4, 0x1f, &(0x7f0000000400)={{0x6, 0x1, 0x80000001, 0x7c000}, &(0x7f00000003c0)={{0x10001, 0xa184, 0x1, 0x4}, &(0x7f0000000380)={{0x8bf0, 0x3ff, 0x0, 0x7}}}}, 0x0, &(0x7f0000000440)="b3", 0x2}}, 0x5}) 23:35:47 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x9) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x9) (async) 23:35:47 executing program 4: r0 = socket(0x18, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000480)={r1}, 0x8) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f00000004c0)={0x4, "a73772c4290436e681cdf11c5e7f96a5dbed33e13aa8d0dfd5a84eb92f623984", 0x3, 0x0, 0xe88, 0x1000, 0x2}) connect$can_bcm(r1, &(0x7f0000000040), 0x10) recvmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x880, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r3}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r1, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000600)=[{}], 0x8, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x10, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) clock_gettime(0x0, &(0x7f0000000880)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000980)={&(0x7f0000000840)={0x1d, r5}, 0x10, &(0x7f0000000940)={&(0x7f00000008c0)={0x2, 0x801, 0xff, {r6, r7/1000+10000}, {0x0, 0x2710}, {0x1, 0x1, 0x0, 0x1}, 0x1, @can={{0x1, 0x0, 0x1, 0x1}, 0x6, 0x2, 0x0, 0x0, "343e3e72a3f77571"}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x80) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xffffffffffffffff) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000380), &(0x7f00000003c0)=0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:47 executing program 2: r0 = socket(0x18, 0x0, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)) (async) getsockname$tipc(r0, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x3) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:47 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x44) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) socket$pptp(0x18, 0x1, 0x2) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, &(0x7f0000000040)={0x0, 0xea60}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)) 23:35:47 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000080)=@id, &(0x7f00000000c0)=0x10) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) syz_open_dev$ndb(&(0x7f0000000280), 0x0, 0xd4042) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000180)={0x3, 0x1, @start={0x8001}}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000200)={0x400, "a018377a30234991a638bfa1f0c54308840816875828f077f03ed5ef693f0433", 0x1, 0x8, 0x2, 0x3200e0, 0x10021, 0x4}) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000040)={0x1, 0x20303159, 0x1, @stepwise={0x1, 0x101, 0xfff, 0x5, 0x5cb, 0x4}}) 23:35:47 executing program 1: syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000002c0)=@fd={0x80, 0x0, 0x4, 0x4000, 0x4, {r1, r2/1000+60000}, {0x1, 0xc, 0x3, 0xfe, 0x0, 0x6, "d1319264"}, 0xaebf, 0x4, {}, 0xff}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @win={{0xc7, 0xfffffff7, 0x101, 0x2}, 0x3, 0x9, &(0x7f0000000080)={{0x9, 0x8, 0x7, 0x800}, &(0x7f0000000040)={{0x4, 0x1, 0x1, 0x7ff}, &(0x7f0000000000)={{0x3ff, 0x800101, 0x1}}}}, 0x81, &(0x7f0000000140)="8655ae732a728868ca16ce715c8973ff260670fbbc714d2c1a"}}) (async) r3 = syz_open_dev$vim2m(&(0x7f0000000340), 0x3, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000480)={0xf6cb, 0xfff, 0x4, {0x1, @win={{0x7, 0x2, 0x6, 0x1}, 0x4, 0x1f, &(0x7f0000000400)={{0x6, 0x1, 0x80000001, 0x7c000}, &(0x7f00000003c0)={{0x10001, 0xa184, 0x1, 0x4}, &(0x7f0000000380)={{0x8bf0, 0x3ff, 0x0, 0x7}}}}, 0x0, &(0x7f0000000440)="b3", 0x2}}, 0x5}) 23:35:47 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x44) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) socket$pptp(0x18, 0x1, 0x2) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, &(0x7f0000000040)={0x0, 0xea60}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) socket$l2tp(0x2, 0x2, 0x73) 23:35:47 executing program 2: r0 = socket(0x18, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)) (async) getsockname$tipc(r0, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x3) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:47 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x1, [{}, {}, {}, {0xfffffffc}]}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x20, 0x1, 0x1}) 23:35:47 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x145000, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x2, "350c8f218fdf2fe349f510698c0b8e427b618c69529b694cff11a7098ab4b759"}) 23:35:47 executing program 4: r0 = socket(0x18, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000480)={r1}, 0x8) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f00000004c0)={0x4, "a73772c4290436e681cdf11c5e7f96a5dbed33e13aa8d0dfd5a84eb92f623984", 0x3, 0x0, 0xe88, 0x1000, 0x2}) connect$can_bcm(r1, &(0x7f0000000040), 0x10) recvmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x880, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r3}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r1, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000600)=[{}], 0x8, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x10, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) clock_gettime(0x0, &(0x7f0000000880)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000980)={&(0x7f0000000840)={0x1d, r5}, 0x10, &(0x7f0000000940)={&(0x7f00000008c0)={0x2, 0x801, 0xff, {r6, r7/1000+10000}, {0x0, 0x2710}, {0x1, 0x1, 0x0, 0x1}, 0x1, @can={{0x1, 0x0, 0x1, 0x1}, 0x6, 0x2, 0x0, 0x0, "343e3e72a3f77571"}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x80) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xffffffffffffffff) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000380), &(0x7f00000003c0)=0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:47 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000300)={0x1, 0x0, 0x6, 0x80}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @win={{0x8000, 0x1f, 0x7, 0x3}, 0x3, 0x10000, &(0x7f0000000040)={{0x5, 0x2, 0x2c, 0x8}, &(0x7f0000000000)={{0xd789, 0xf3, 0x8001, 0x8}}}, 0xa, &(0x7f0000000080)="07e99dd830af47f00601cd98602045fb5de1de53f15440d1f14d6ff0d644e7d6d303c81a6264ac1e6fb949149d9740ca264e9bd7cd432be1ab86a496111800bbf9ccc613962ee94910715331619ce4e7a7bb016760be2a5db22a1be09ee7bb9e14bc5b709a9aaecb208ee985a96b5adc3a5493617faf5149dc874de4cc443ff497a2e30b8134590a1b900d104bc686629986cb72c37c0332facdc5de298367f68ba11c0fdcdf67e399a49e90af22b2355c95eb806acb88872425ad8d61ba8a7a171b3426142a27364f0aa9a471b18c", 0x3}}) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f00000002c0)) 23:35:47 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x44) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) socket$pptp(0x18, 0x1, 0x2) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, &(0x7f0000000040)={0x0, 0xea60}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) 23:35:47 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x145000, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x2, "350c8f218fdf2fe349f510698c0b8e427b618c69529b694cff11a7098ab4b759"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x145000, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x2, "350c8f218fdf2fe349f510698c0b8e427b618c69529b694cff11a7098ab4b759"}) (async) 23:35:47 executing program 2: r0 = socket(0x18, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x1) 23:35:47 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x1, [{}, {}, {}, {0xfffffffc}]}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x20, 0x1, 0x1}) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x1, [{}, {}, {}, {0xfffffffc}]}}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x20, 0x1, 0x1}) (async) 23:35:47 executing program 4: r0 = socket(0x18, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000480)={r1}, 0x8) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f00000004c0)={0x4, "a73772c4290436e681cdf11c5e7f96a5dbed33e13aa8d0dfd5a84eb92f623984", 0x3, 0x0, 0xe88, 0x1000, 0x2}) connect$can_bcm(r1, &(0x7f0000000040), 0x10) recvmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x880, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r3}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r1, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000600)=[{}], 0x8, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x10, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) clock_gettime(0x0, &(0x7f0000000880)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000980)={&(0x7f0000000840)={0x1d, r5}, 0x10, &(0x7f0000000940)={&(0x7f00000008c0)={0x2, 0x801, 0xff, {r6, r7/1000+10000}, {0x0, 0x2710}, {0x1, 0x1, 0x0, 0x1}, 0x1, @can={{0x1, 0x0, 0x1, 0x1}, 0x6, 0x2, 0x0, 0x0, "343e3e72a3f77571"}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x80) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xffffffffffffffff) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000380), &(0x7f00000003c0)=0x4) 23:35:47 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000300)={0x1, 0x0, 0x6, 0x80}) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @win={{0x8000, 0x1f, 0x7, 0x3}, 0x3, 0x10000, &(0x7f0000000040)={{0x5, 0x2, 0x2c, 0x8}, &(0x7f0000000000)={{0xd789, 0xf3, 0x8001, 0x8}}}, 0xa, &(0x7f0000000080)="07e99dd830af47f00601cd98602045fb5de1de53f15440d1f14d6ff0d644e7d6d303c81a6264ac1e6fb949149d9740ca264e9bd7cd432be1ab86a496111800bbf9ccc613962ee94910715331619ce4e7a7bb016760be2a5db22a1be09ee7bb9e14bc5b709a9aaecb208ee985a96b5adc3a5493617faf5149dc874de4cc443ff497a2e30b8134590a1b900d104bc686629986cb72c37c0332facdc5de298367f68ba11c0fdcdf67e399a49e90af22b2355c95eb806acb88872425ad8d61ba8a7a171b3426142a27364f0aa9a471b18c", 0x3}}) (async) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f00000002c0)) 23:35:47 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x44) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) socket$pptp(0x18, 0x1, 0x2) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) 23:35:47 executing program 2: r0 = socket(0x18, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x1) 23:35:47 executing program 4: r0 = socket(0x18, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000480)={r1}, 0x8) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f00000004c0)={0x4, "a73772c4290436e681cdf11c5e7f96a5dbed33e13aa8d0dfd5a84eb92f623984", 0x3, 0x0, 0xe88, 0x1000, 0x2}) connect$can_bcm(r1, &(0x7f0000000040), 0x10) recvmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x880, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r3}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r1, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000600)=[{}], 0x8, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x10, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) clock_gettime(0x0, &(0x7f0000000880)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000980)={&(0x7f0000000840)={0x1d, r5}, 0x10, &(0x7f0000000940)={&(0x7f00000008c0)={0x2, 0x801, 0xff, {r6, r7/1000+10000}, {0x0, 0x2710}, {0x1, 0x1, 0x0, 0x1}, 0x1, @can={{0x1, 0x0, 0x1, 0x1}, 0x6, 0x2, 0x0, 0x0, "343e3e72a3f77571"}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x80) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xffffffffffffffff) 23:35:47 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x1, [{}, {}, {}, {0xfffffffc}]}}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x20, 0x1, 0x1}) 23:35:47 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000300)={0x1, 0x0, 0x6, 0x80}) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @win={{0x8000, 0x1f, 0x7, 0x3}, 0x3, 0x10000, &(0x7f0000000040)={{0x5, 0x2, 0x2c, 0x8}, &(0x7f0000000000)={{0xd789, 0xf3, 0x8001, 0x8}}}, 0xa, &(0x7f0000000080)="07e99dd830af47f00601cd98602045fb5de1de53f15440d1f14d6ff0d644e7d6d303c81a6264ac1e6fb949149d9740ca264e9bd7cd432be1ab86a496111800bbf9ccc613962ee94910715331619ce4e7a7bb016760be2a5db22a1be09ee7bb9e14bc5b709a9aaecb208ee985a96b5adc3a5493617faf5149dc874de4cc443ff497a2e30b8134590a1b900d104bc686629986cb72c37c0332facdc5de298367f68ba11c0fdcdf67e399a49e90af22b2355c95eb806acb88872425ad8d61ba8a7a171b3426142a27364f0aa9a471b18c", 0x3}}) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f00000002c0)) 23:35:47 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x44) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) socket$pptp(0x18, 0x1, 0x2) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) 23:35:47 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x145000, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x2, "350c8f218fdf2fe349f510698c0b8e427b618c69529b694cff11a7098ab4b759"}) 23:35:47 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0xffff7246, 0x3, 0x0, "22f5af15c482e19cfe02ff327e3940f1b5211994345e2fc30eccbb1062f798c7", 0x50313134}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @win={{0x3, 0x60466d3a, 0x9, 0x2}, 0x7, 0x8, &(0x7f00000002c0)={{0x1, 0xe7a, 0x7, 0xc8000000}, &(0x7f0000000040)={{0xc9f9, 0x5, 0x10001, 0x80}, &(0x7f0000000000)={{0x3ff, 0x101, 0x0, 0x9}}}}, 0x7ff, &(0x7f00000000c0)="53fce2769bf9c9df84767a2656a697d417f831502b3be2e9bcd5ab516741bf82dd8acbdf9d95c40615f8f5852de3fd1d1a1d50f597a85e080ef3facbba648d1afe5bf250f49602e025a1e1b12b4a24ff7ccb095463c8ec991cd1a24890c5a304c0187ea5fda0806764a03d15abfaac104180ae59f49eb6a195ee0a0071f7b4276ef3b730220de700"/151, 0x2}}) 23:35:47 executing program 5: ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000080)=0x1) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000140)={0xd}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000480)={0x3, @sdr={0x43564548, 0x4}}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000040)) 23:35:47 executing program 4: r0 = socket(0x18, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000480)={r1}, 0x8) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f00000004c0)={0x4, "a73772c4290436e681cdf11c5e7f96a5dbed33e13aa8d0dfd5a84eb92f623984", 0x3, 0x0, 0xe88, 0x1000, 0x2}) connect$can_bcm(r1, &(0x7f0000000040), 0x10) recvmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x880, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r3}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r1, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000600)=[{}], 0x8, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x10, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) clock_gettime(0x0, &(0x7f0000000880)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000980)={&(0x7f0000000840)={0x1d, r4}, 0x10, &(0x7f0000000940)={&(0x7f00000008c0)={0x2, 0x801, 0xff, {r5, r6/1000+10000}, {0x0, 0x2710}, {0x1, 0x1, 0x0, 0x1}, 0x1, @can={{0x1, 0x0, 0x1, 0x1}, 0x6, 0x2, 0x0, 0x0, "343e3e72a3f77571"}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x80) 23:35:47 executing program 2: r0 = socket(0x18, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x1) 23:35:47 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x44) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) socket$pptp(0x18, 0x1, 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) 23:35:47 executing program 5: ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000080)=0x1) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000140)={0xd}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000480)={0x3, @sdr={0x43564548, 0x4}}) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000040)) 23:35:47 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0xffff7246, 0x3, 0x0, "22f5af15c482e19cfe02ff327e3940f1b5211994345e2fc30eccbb1062f798c7", 0x50313134}) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @win={{0x3, 0x60466d3a, 0x9, 0x2}, 0x7, 0x8, &(0x7f00000002c0)={{0x1, 0xe7a, 0x7, 0xc8000000}, &(0x7f0000000040)={{0xc9f9, 0x5, 0x10001, 0x80}, &(0x7f0000000000)={{0x3ff, 0x101, 0x0, 0x9}}}}, 0x7ff, &(0x7f00000000c0)="53fce2769bf9c9df84767a2656a697d417f831502b3be2e9bcd5ab516741bf82dd8acbdf9d95c40615f8f5852de3fd1d1a1d50f597a85e080ef3facbba648d1afe5bf250f49602e025a1e1b12b4a24ff7ccb095463c8ec991cd1a24890c5a304c0187ea5fda0806764a03d15abfaac104180ae59f49eb6a195ee0a0071f7b4276ef3b730220de700"/151, 0x2}}) 23:35:47 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:47 executing program 4: r0 = socket(0x18, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000480)={r1}, 0x8) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f00000004c0)={0x4, "a73772c4290436e681cdf11c5e7f96a5dbed33e13aa8d0dfd5a84eb92f623984", 0x3, 0x0, 0xe88, 0x1000, 0x2}) connect$can_bcm(r1, &(0x7f0000000040), 0x10) recvmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x880, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r3}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r1, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000600)=[{}], 0x8, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x10, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) clock_gettime(0x0, &(0x7f0000000880)) 23:35:47 executing program 5: ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000080)=0x1) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000140)={0xd}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000480)={0x3, @sdr={0x43564548, 0x4}}) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000040)) 23:35:47 executing program 2: r0 = socket(0x18, 0x800, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x11800, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1}}, 0x5, 0x101}, 0x90) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:47 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0xffff7246, 0x3, 0x0, "22f5af15c482e19cfe02ff327e3940f1b5211994345e2fc30eccbb1062f798c7", 0x50313134}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @win={{0x3, 0x60466d3a, 0x9, 0x2}, 0x7, 0x8, &(0x7f00000002c0)={{0x1, 0xe7a, 0x7, 0xc8000000}, &(0x7f0000000040)={{0xc9f9, 0x5, 0x10001, 0x80}, &(0x7f0000000000)={{0x3ff, 0x101, 0x0, 0x9}}}}, 0x7ff, &(0x7f00000000c0)="53fce2769bf9c9df84767a2656a697d417f831502b3be2e9bcd5ab516741bf82dd8acbdf9d95c40615f8f5852de3fd1d1a1d50f597a85e080ef3facbba648d1afe5bf250f49602e025a1e1b12b4a24ff7ccb095463c8ec991cd1a24890c5a304c0187ea5fda0806764a03d15abfaac104180ae59f49eb6a195ee0a0071f7b4276ef3b730220de700"/151, 0x2}}) syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0xffff7246, 0x3, 0x0, "22f5af15c482e19cfe02ff327e3940f1b5211994345e2fc30eccbb1062f798c7", 0x50313134}) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @win={{0x3, 0x60466d3a, 0x9, 0x2}, 0x7, 0x8, &(0x7f00000002c0)={{0x1, 0xe7a, 0x7, 0xc8000000}, &(0x7f0000000040)={{0xc9f9, 0x5, 0x10001, 0x80}, &(0x7f0000000000)={{0x3ff, 0x101, 0x0, 0x9}}}}, 0x7ff, &(0x7f00000000c0)="53fce2769bf9c9df84767a2656a697d417f831502b3be2e9bcd5ab516741bf82dd8acbdf9d95c40615f8f5852de3fd1d1a1d50f597a85e080ef3facbba648d1afe5bf250f49602e025a1e1b12b4a24ff7ccb095463c8ec991cd1a24890c5a304c0187ea5fda0806764a03d15abfaac104180ae59f49eb6a195ee0a0071f7b4276ef3b730220de700"/151, 0x2}}) (async) 23:35:48 executing program 4: r0 = socket(0x18, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000480)={r1}, 0x8) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f00000004c0)={0x4, "a73772c4290436e681cdf11c5e7f96a5dbed33e13aa8d0dfd5a84eb92f623984", 0x3, 0x0, 0xe88, 0x1000, 0x2}) connect$can_bcm(r1, &(0x7f0000000040), 0x10) recvmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x880, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r3}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r1, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000600)=[{}], 0x8, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x10, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) 23:35:48 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x44) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) 23:35:48 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:35:48 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000140)={0xd}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f0000000000)) 23:35:48 executing program 2: r0 = socket(0x18, 0x800, 0x0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x11800, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1}}, 0x5, 0x101}, 0x90) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:48 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x4, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0xd80, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0xe8000, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r2, r3, 0x0, r4}, 0x10) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000080)=@userptr={0x3, 0x1, 0x4, 0x2, 0x400, {0x77359400}, {0x5, 0x1, 0x8, 0x35, 0x4, 0x6, "95b7b58f"}, 0x1, 0x2, {&(0x7f0000000040)}, 0x4d6f}) 23:35:48 executing program 4: r0 = socket(0x18, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000480)={r1}, 0x8) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f00000004c0)={0x4, "a73772c4290436e681cdf11c5e7f96a5dbed33e13aa8d0dfd5a84eb92f623984", 0x3, 0x0, 0xe88, 0x1000, 0x2}) connect$can_bcm(r1, &(0x7f0000000040), 0x10) recvmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x880, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r3}, 0x8) 23:35:48 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x44) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) 23:35:48 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000140)={0xd}) (async, rerun: 64) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f0000000000)) 23:35:48 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x4, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0xd80, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0xe8000, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r2, r3, 0x0, r4}, 0x10) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000080)=@userptr={0x3, 0x1, 0x4, 0x2, 0x400, {0x77359400}, {0x5, 0x1, 0x8, 0x35, 0x4, 0x6, "95b7b58f"}, 0x1, 0x2, {&(0x7f0000000040)}, 0x4d6f}) syz_open_dev$vim2m(&(0x7f0000000180), 0x4, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0xd80, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0xe8000, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r2, r3, 0x0, r4}, 0x10) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000080)=@userptr={0x3, 0x1, 0x4, 0x2, 0x400, {0x77359400}, {0x5, 0x1, 0x8, 0x35, 0x4, 0x6, "95b7b58f"}, 0x1, 0x2, {&(0x7f0000000040)}, 0x4d6f}) (async) 23:35:48 executing program 2: r0 = socket(0x18, 0x800, 0x0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x11800, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1}}, 0x5, 0x101}, 0x90) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:48 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:35:48 executing program 4: r0 = socket(0x18, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000480)={r1}, 0x8) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f00000004c0)={0x4, "a73772c4290436e681cdf11c5e7f96a5dbed33e13aa8d0dfd5a84eb92f623984", 0x3, 0x0, 0xe88, 0x1000, 0x2}) connect$can_bcm(r1, &(0x7f0000000040), 0x10) recvmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x880, 0x0) 23:35:48 executing program 3: r0 = socket(0x18, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) 23:35:48 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x2000000) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x1b2) 23:35:48 executing program 4: r0 = socket(0x18, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000480)={r1}, 0x8) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f00000004c0)={0x4, "a73772c4290436e681cdf11c5e7f96a5dbed33e13aa8d0dfd5a84eb92f623984", 0x3, 0x0, 0xe88, 0x1000, 0x2}) connect$can_bcm(r1, &(0x7f0000000040), 0x10) recvmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 23:35:48 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000140)={0xd}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f0000000000)) 23:35:48 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000100)={0x9, 0x4, {0x56, 0x4, 0x8, {0x383e, 0x3e3d}, {0x3ff, 0x8}, @rumble={0x1f, 0x4}}, {0x53, 0x2, 0x6, {0x0, 0x240}, {0x0, 0x1}, @ramp={0x5, 0x7, {0x7, 0x200, 0x3ee, 0x3ff}}}}) r1 = socket(0x18, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:48 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x4, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) (async) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0xd80, 0x0) (async, rerun: 32) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0xe8000, 0x0) (async, rerun: 32) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r2, r3, 0x0, r4}, 0x10) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000080)=@userptr={0x3, 0x1, 0x4, 0x2, 0x400, {0x77359400}, {0x5, 0x1, 0x8, 0x35, 0x4, 0x6, "95b7b58f"}, 0x1, 0x2, {&(0x7f0000000040)}, 0x4d6f}) 23:35:48 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) 23:35:48 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x2000000) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x1b2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x2000000) (async) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x1b2) (async) 23:35:48 executing program 4: r0 = socket(0x18, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000480)={r1}, 0x8) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f00000004c0)={0x4, "a73772c4290436e681cdf11c5e7f96a5dbed33e13aa8d0dfd5a84eb92f623984", 0x3, 0x0, 0xe88, 0x1000, 0x2}) connect$can_bcm(r1, &(0x7f0000000040), 0x10) recvmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) 23:35:48 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7}, {0x0, 0x4}, {}, {0x400000}, {0x2}, {}, {0xdbef}, {0x0, 0xff}], 0x0, 0x0, 0x0, 0x2}}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x80000000, 0x7f}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000280)={0x1, "7107ba8ef682c2ba04cb085dc54b01e396c8cbb74ee90b53610bbaeb839b18ff", 0x0, 0x1}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000540)=0x1) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1ff, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f00000000c0)=0x3) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = accept4$tipc(r1, 0x0, &(0x7f0000000300), 0x80800) sendmsg$tipc(r5, &(0x7f0000000500)={&(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x4, 0x4}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000380)="f2e02cebb2c777db390f33723514def3fb772a6961cb55fbe071e98b8b251e0796ed", 0x22}, {&(0x7f00000003c0)="51968c9b78051fa78c6b284a252701d79a6603418a5bbf2f54f74dd31915ee04e36626ec2510d6911a8ce41ffa05b6ad2bc5dd1090dfc8ffae389193f8938a0b61dab0d7b8f02d67b82abbd9433828b3d13b70e997162549ad320f7f22de1ea2311e6a02a3b43262acefb0d851e9862947390caf73157bc1020b946ce598c9e2b33d16151367191dbdcbbaae104aa9ff33e09a66b1d694484d66777051e66ccf3c23e621b2e1db7c6082e87af5fcde1630ac01df32957d7aae4e606e7767c996e89db591abbcc5913ce4970409bd2a6b", 0xd0}], 0x2, &(0x7f0000000680)="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", 0x1000, 0x81}, 0x1) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000140)={0x1, @pix={0x4, 0xffff0001, 0x59455247, 0x25fc2247ab3b41d2, 0x0, 0x9e, 0x2, 0x1, 0x1, 0x4, 0x6, 0x4}}) setsockopt$inet_dccp_int(r1, 0x21, 0x11, &(0x7f0000001680)=0x6, 0x4) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000002c0)={0x8, 0x2, 0x2, "e46b8dd010a282b1bc9d03be9464378398c37548b18ecd33867fb62f5598143d", 0x47314356}) 23:35:48 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000100)={0x9, 0x4, {0x56, 0x4, 0x8, {0x383e, 0x3e3d}, {0x3ff, 0x8}, @rumble={0x1f, 0x4}}, {0x53, 0x2, 0x6, {0x0, 0x240}, {0x0, 0x1}, @ramp={0x5, 0x7, {0x7, 0x200, 0x3ee, 0x3ff}}}}) (async) r1 = socket(0x18, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:48 executing program 3: ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) 23:35:48 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x2, 0x5, 0x4, {0x2, @sliced={0x96, [0x101, 0x3, 0x4, 0x401, 0x5892, 0xfff, 0x7, 0x8, 0x3, 0x6, 0x0, 0x3, 0x1, 0x2, 0x8, 0x4, 0x5, 0xffff, 0x7, 0x101, 0x905, 0x1000, 0x0, 0xcc, 0x6d, 0x7e, 0x6, 0x8, 0x5, 0x93, 0x5, 0x0, 0x800, 0x4, 0x6b6e, 0x2, 0x5, 0xd812, 0x57b, 0x1, 0x9, 0x159e, 0x0, 0x800, 0x957a, 0x6, 0xfffe, 0x4], 0x80}}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)=@userptr={0x40, 0x2, 0x4, 0x2, 0x0, {}, {0x3, 0x2, 0x3, 0x9e, 0x0, 0x1f, "0f953082"}, 0x8, 0x2, {}, 0x5, 0x0, r1}) 23:35:48 executing program 4: r0 = socket(0x18, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000480)={r1}, 0x8) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f00000004c0)={0x4, "a73772c4290436e681cdf11c5e7f96a5dbed33e13aa8d0dfd5a84eb92f623984", 0x3, 0x0, 0xe88, 0x1000, 0x2}) recvmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) 23:35:48 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x2000000) (async) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x1b2) 23:35:48 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7}, {0x0, 0x4}, {}, {0x400000}, {0x2}, {}, {0xdbef}, {0x0, 0xff}], 0x0, 0x0, 0x0, 0x2}}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x80000000, 0x7f}) (async, rerun: 64) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000280)={0x1, "7107ba8ef682c2ba04cb085dc54b01e396c8cbb74ee90b53610bbaeb839b18ff", 0x0, 0x1}) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000540)=0x1) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1ff, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f00000000c0)=0x3) (async) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = accept4$tipc(r1, 0x0, &(0x7f0000000300), 0x80800) sendmsg$tipc(r5, &(0x7f0000000500)={&(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x4, 0x4}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000380)="f2e02cebb2c777db390f33723514def3fb772a6961cb55fbe071e98b8b251e0796ed", 0x22}, {&(0x7f00000003c0)="51968c9b78051fa78c6b284a252701d79a6603418a5bbf2f54f74dd31915ee04e36626ec2510d6911a8ce41ffa05b6ad2bc5dd1090dfc8ffae389193f8938a0b61dab0d7b8f02d67b82abbd9433828b3d13b70e997162549ad320f7f22de1ea2311e6a02a3b43262acefb0d851e9862947390caf73157bc1020b946ce598c9e2b33d16151367191dbdcbbaae104aa9ff33e09a66b1d694484d66777051e66ccf3c23e621b2e1db7c6082e87af5fcde1630ac01df32957d7aae4e606e7767c996e89db591abbcc5913ce4970409bd2a6b", 0xd0}], 0x2, &(0x7f0000000680)="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", 0x1000, 0x81}, 0x1) (async) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000140)={0x1, @pix={0x4, 0xffff0001, 0x59455247, 0x25fc2247ab3b41d2, 0x0, 0x9e, 0x2, 0x1, 0x1, 0x4, 0x6, 0x4}}) (async) setsockopt$inet_dccp_int(r1, 0x21, 0x11, &(0x7f0000001680)=0x6, 0x4) (async, rerun: 64) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000002c0)={0x8, 0x2, 0x2, "e46b8dd010a282b1bc9d03be9464378398c37548b18ecd33867fb62f5598143d", 0x47314356}) (rerun: 64) 23:35:48 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x2, 0x5, 0x4, {0x2, @sliced={0x96, [0x101, 0x3, 0x4, 0x401, 0x5892, 0xfff, 0x7, 0x8, 0x3, 0x6, 0x0, 0x3, 0x1, 0x2, 0x8, 0x4, 0x5, 0xffff, 0x7, 0x101, 0x905, 0x1000, 0x0, 0xcc, 0x6d, 0x7e, 0x6, 0x8, 0x5, 0x93, 0x5, 0x0, 0x800, 0x4, 0x6b6e, 0x2, 0x5, 0xd812, 0x57b, 0x1, 0x9, 0x159e, 0x0, 0x800, 0x957a, 0x6, 0xfffe, 0x4], 0x80}}}) (async, rerun: 32) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) (rerun: 32) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)=@userptr={0x40, 0x2, 0x4, 0x2, 0x0, {}, {0x3, 0x2, 0x3, 0x9e, 0x0, 0x1f, "0f953082"}, 0x8, 0x2, {}, 0x5, 0x0, r1}) 23:35:48 executing program 3: ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) 23:35:48 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000100)={0x9, 0x4, {0x56, 0x4, 0x8, {0x383e, 0x3e3d}, {0x3ff, 0x8}, @rumble={0x1f, 0x4}}, {0x53, 0x2, 0x6, {0x0, 0x240}, {0x0, 0x1}, @ramp={0x5, 0x7, {0x7, 0x200, 0x3ee, 0x3ff}}}}) (async, rerun: 32) r1 = socket(0x18, 0x0, 0x0) (rerun: 32) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:48 executing program 4: r0 = socket(0x18, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000480)={r1}, 0x8) recvmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) 23:35:48 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x48524742}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) 23:35:48 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7}, {0x0, 0x4}, {}, {0x400000}, {0x2}, {}, {0xdbef}, {0x0, 0xff}], 0x0, 0x0, 0x0, 0x2}}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x80000000, 0x7f}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000280)={0x1, "7107ba8ef682c2ba04cb085dc54b01e396c8cbb74ee90b53610bbaeb839b18ff", 0x0, 0x1}) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000540)=0x1) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1ff, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f00000000c0)=0x3) (async) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r5 = accept4$tipc(r1, 0x0, &(0x7f0000000300), 0x80800) sendmsg$tipc(r5, &(0x7f0000000500)={&(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x4, 0x4}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000380)="f2e02cebb2c777db390f33723514def3fb772a6961cb55fbe071e98b8b251e0796ed", 0x22}, {&(0x7f00000003c0)="51968c9b78051fa78c6b284a252701d79a6603418a5bbf2f54f74dd31915ee04e36626ec2510d6911a8ce41ffa05b6ad2bc5dd1090dfc8ffae389193f8938a0b61dab0d7b8f02d67b82abbd9433828b3d13b70e997162549ad320f7f22de1ea2311e6a02a3b43262acefb0d851e9862947390caf73157bc1020b946ce598c9e2b33d16151367191dbdcbbaae104aa9ff33e09a66b1d694484d66777051e66ccf3c23e621b2e1db7c6082e87af5fcde1630ac01df32957d7aae4e606e7767c996e89db591abbcc5913ce4970409bd2a6b", 0xd0}], 0x2, &(0x7f0000000680)="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", 0x1000, 0x81}, 0x1) (async) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000140)={0x1, @pix={0x4, 0xffff0001, 0x59455247, 0x25fc2247ab3b41d2, 0x0, 0x9e, 0x2, 0x1, 0x1, 0x4, 0x6, 0x4}}) (async, rerun: 32) setsockopt$inet_dccp_int(r1, 0x21, 0x11, &(0x7f0000001680)=0x6, 0x4) (rerun: 32) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000002c0)={0x8, 0x2, 0x2, "e46b8dd010a282b1bc9d03be9464378398c37548b18ecd33867fb62f5598143d", 0x47314356}) 23:35:48 executing program 3: ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) 23:35:48 executing program 2: r0 = socket(0x18, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x18) 23:35:48 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x48524742}) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) 23:35:48 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x2, 0x5, 0x4, {0x2, @sliced={0x96, [0x101, 0x3, 0x4, 0x401, 0x5892, 0xfff, 0x7, 0x8, 0x3, 0x6, 0x0, 0x3, 0x1, 0x2, 0x8, 0x4, 0x5, 0xffff, 0x7, 0x101, 0x905, 0x1000, 0x0, 0xcc, 0x6d, 0x7e, 0x6, 0x8, 0x5, 0x93, 0x5, 0x0, 0x800, 0x4, 0x6b6e, 0x2, 0x5, 0xd812, 0x57b, 0x1, 0x9, 0x159e, 0x0, 0x800, 0x957a, 0x6, 0xfffe, 0x4], 0x80}}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)=@userptr={0x40, 0x2, 0x4, 0x2, 0x0, {}, {0x3, 0x2, 0x3, 0x9e, 0x0, 0x1f, "0f953082"}, 0x8, 0x2, {}, 0x5, 0x0, r1}) syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x2, 0x5, 0x4, {0x2, @sliced={0x96, [0x101, 0x3, 0x4, 0x401, 0x5892, 0xfff, 0x7, 0x8, 0x3, 0x6, 0x0, 0x3, 0x1, 0x2, 0x8, 0x4, 0x5, 0xffff, 0x7, 0x101, 0x905, 0x1000, 0x0, 0xcc, 0x6d, 0x7e, 0x6, 0x8, 0x5, 0x93, 0x5, 0x0, 0x800, 0x4, 0x6b6e, 0x2, 0x5, 0xd812, 0x57b, 0x1, 0x9, 0x159e, 0x0, 0x800, 0x957a, 0x6, 0xfffe, 0x4], 0x80}}}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)=@userptr={0x40, 0x2, 0x4, 0x2, 0x0, {}, {0x3, 0x2, 0x3, 0x9e, 0x0, 0x1f, "0f953082"}, 0x8, 0x2, {}, 0x5, 0x0, r1}) (async) 23:35:48 executing program 4: r0 = socket(0x18, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) 23:35:48 executing program 3: r0 = socket(0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) 23:35:48 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x8000) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000040)={0x5, 0x30364d54, 0x3, @discrete={0x8144, 0x666f}}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x600001, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:35:48 executing program 2: r0 = socket(0x18, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x18) 23:35:48 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x48524742}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x48524742}) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) (async) 23:35:48 executing program 1: r0 = socket(0x18, 0x800, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x11800, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1}}, 0x5, 0x101}, 0x90) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:48 executing program 3: r0 = socket(0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) 23:35:48 executing program 4: r0 = socket(0x18, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) 23:35:48 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x8000) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000040)={0x5, 0x30364d54, 0x3, @discrete={0x8144, 0x666f}}) (async) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x600001, 0x0) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:35:49 executing program 2: r0 = socket(0x18, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x18) socket(0x18, 0x0, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x18) (async) 23:35:49 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000200)={0x9, 0x80000000}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000240)=@fd={0x4, 0x0, 0x4, 0x0, 0x7, {}, {0x2, 0x2, 0x6, 0x2, 0x9, 0x1f, "58b8dd93"}, 0x2, 0x4, {}, 0x3ff}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb800"}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000180)=0x1) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x3, @sliced={0x400, [0x2, 0xfff, 0x6, 0x9, 0x3, 0x2, 0xffbd, 0x9, 0x1, 0x101, 0x1ff, 0x401, 0x8, 0xc592, 0x3, 0x8001, 0x1, 0x118, 0x5, 0xc4b3, 0x6, 0x8, 0x2, 0x8, 0x7f, 0x6, 0x0, 0x6, 0x8, 0x2, 0x4, 0x1cc1, 0x7, 0x3, 0x3, 0x1, 0x8, 0x80, 0x100, 0x6, 0x100, 0xffff, 0x1, 0x7, 0x8, 0xfffc, 0x5, 0x3], 0x81}}) 23:35:49 executing program 4: r0 = socket(0x18, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) 23:35:49 executing program 1: r0 = socket(0x18, 0x800, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x11800, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1}}, 0x5, 0x101}, 0x90) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:49 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000200)={0x9, 0x80000000}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000240)=@fd={0x4, 0x0, 0x4, 0x0, 0x7, {}, {0x2, 0x2, 0x6, 0x2, 0x9, 0x1f, "58b8dd93"}, 0x2, 0x4, {}, 0x3ff}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb800"}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000180)=0x1) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x3, @sliced={0x400, [0x2, 0xfff, 0x6, 0x9, 0x3, 0x2, 0xffbd, 0x9, 0x1, 0x101, 0x1ff, 0x401, 0x8, 0xc592, 0x3, 0x8001, 0x1, 0x118, 0x5, 0xc4b3, 0x6, 0x8, 0x2, 0x8, 0x7f, 0x6, 0x0, 0x6, 0x8, 0x2, 0x4, 0x1cc1, 0x7, 0x3, 0x3, 0x1, 0x8, 0x80, 0x100, 0x6, 0x100, 0xffff, 0x1, 0x7, 0x8, 0xfffc, 0x5, 0x3], 0x81}}) 23:35:49 executing program 3: r0 = socket(0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) 23:35:49 executing program 2: r0 = socket(0x18, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:49 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x8000) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000040)={0x5, 0x30364d54, 0x3, @discrete={0x8144, 0x666f}}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x600001, 0x0) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:35:49 executing program 4: r0 = socket(0x18, 0x0, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) 23:35:49 executing program 1: r0 = socket(0x18, 0x800, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x11800, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1}}, 0x5, 0x101}, 0x90) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:49 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000200)={0x9, 0x80000000}) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000240)=@fd={0x4, 0x0, 0x4, 0x0, 0x7, {}, {0x2, 0x2, 0x6, 0x2, 0x9, 0x1f, "58b8dd93"}, 0x2, 0x4, {}, 0x3ff}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb800"}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000180)=0x1) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x3, @sliced={0x400, [0x2, 0xfff, 0x6, 0x9, 0x3, 0x2, 0xffbd, 0x9, 0x1, 0x101, 0x1ff, 0x401, 0x8, 0xc592, 0x3, 0x8001, 0x1, 0x118, 0x5, 0xc4b3, 0x6, 0x8, 0x2, 0x8, 0x7f, 0x6, 0x0, 0x6, 0x8, 0x2, 0x4, 0x1cc1, 0x7, 0x3, 0x3, 0x1, 0x8, 0x80, 0x100, 0x6, 0x100, 0xffff, 0x1, 0x7, 0x8, 0xfffc, 0x5, 0x3], 0x81}}) 23:35:49 executing program 3: socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) 23:35:49 executing program 2: r0 = socket(0x18, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:49 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x0, @pix_mp={0x200, 0x3f, 0x0, 0x0, 0x0, [{0x6}, {}, {}, {}, {0x0, 0x8000}, {}, {0x1}], 0x0, 0x0, 0x2}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0x1, 0x5}) 23:35:49 executing program 4: recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) 23:35:49 executing program 1: r0 = socket(0x18, 0x800, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x11800, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:49 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x8, 0xfff, 0x3, {0x0, @pix_mp={0x1, 0x7, 0x3436324d, 0x3, 0x2, [{0xfffffff9, 0x100}, {0x1f, 0x40}, {0xc81, 0x7}, {0x8001, 0x2}, {0x9, 0xffff}, {0x6ac, 0x4}, {0x0, 0x3}, {0x0, 0x2}], 0x4, 0x2, 0x0, 0x2}}, 0x1301}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x1, 0x3, 0x0, "475d003fe11ed59bb805dfd0f1c62f66c7800000220000000000000000001de0", 0x30385056}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f00000000c0)=0x1) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000080)={0x5, 0x2, 0x2, "6510994c0a67f1ce626279ada56e39e172988a71ead6edd00b2ddbc4fda49928", 0x3631564e}) 23:35:49 executing program 2: r0 = socket(0x18, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:49 executing program 3: socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) 23:35:49 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x0, @pix_mp={0x200, 0x3f, 0x0, 0x0, 0x0, [{0x6}, {}, {}, {}, {0x0, 0x8000}, {}, {0x1}], 0x0, 0x0, 0x2}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0x1, 0x5}) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x0, @pix_mp={0x200, 0x3f, 0x0, 0x0, 0x0, [{0x6}, {}, {}, {}, {0x0, 0x8000}, {}, {0x1}], 0x0, 0x0, 0x2}}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0x1, 0x5}) (async) 23:35:49 executing program 4: recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) 23:35:49 executing program 1: r0 = socket(0x18, 0x800, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x11800, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:49 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x8, 0xfff, 0x3, {0x0, @pix_mp={0x1, 0x7, 0x3436324d, 0x3, 0x2, [{0xfffffff9, 0x100}, {0x1f, 0x40}, {0xc81, 0x7}, {0x8001, 0x2}, {0x9, 0xffff}, {0x6ac, 0x4}, {0x0, 0x3}, {0x0, 0x2}], 0x4, 0x2, 0x0, 0x2}}, 0x1301}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x1, 0x3, 0x0, "475d003fe11ed59bb805dfd0f1c62f66c7800000220000000000000000001de0", 0x30385056}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f00000000c0)=0x1) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000080)={0x5, 0x2, 0x2, "6510994c0a67f1ce626279ada56e39e172988a71ead6edd00b2ddbc4fda49928", 0x3631564e}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x8, 0xfff, 0x3, {0x0, @pix_mp={0x1, 0x7, 0x3436324d, 0x3, 0x2, [{0xfffffff9, 0x100}, {0x1f, 0x40}, {0xc81, 0x7}, {0x8001, 0x2}, {0x9, 0xffff}, {0x6ac, 0x4}, {0x0, 0x3}, {0x0, 0x2}], 0x4, 0x2, 0x0, 0x2}}, 0x1301}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x1, 0x3, 0x0, "475d003fe11ed59bb805dfd0f1c62f66c7800000220000000000000000001de0", 0x30385056}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f00000000c0)=0x1) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000080)={0x5, 0x2, 0x2, "6510994c0a67f1ce626279ada56e39e172988a71ead6edd00b2ddbc4fda49928", 0x3631564e}) (async) 23:35:49 executing program 3: socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) 23:35:49 executing program 2: r0 = socket(0x18, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x44) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) socket$pptp(0x18, 0x1, 0x2) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, &(0x7f0000000040)={0x0, 0xea60}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) 23:35:49 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x0, @pix_mp={0x200, 0x3f, 0x0, 0x0, 0x0, [{0x6}, {}, {}, {}, {0x0, 0x8000}, {}, {0x1}], 0x0, 0x0, 0x2}}) (async, rerun: 32) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 32) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0x1, 0x5}) 23:35:49 executing program 4: recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) 23:35:49 executing program 1: r0 = socket(0x18, 0x800, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x11800, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:49 executing program 2: r0 = socket(0x18, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)) getsockname$tipc(r0, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x3) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:49 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x8, 0xfff, 0x3, {0x0, @pix_mp={0x1, 0x7, 0x3436324d, 0x3, 0x2, [{0xfffffff9, 0x100}, {0x1f, 0x40}, {0xc81, 0x7}, {0x8001, 0x2}, {0x9, 0xffff}, {0x6ac, 0x4}, {0x0, 0x3}, {0x0, 0x2}], 0x4, 0x2, 0x0, 0x2}}, 0x1301}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x1, 0x3, 0x0, "475d003fe11ed59bb805dfd0f1c62f66c7800000220000000000000000001de0", 0x30385056}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f00000000c0)=0x1) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000080)={0x5, 0x2, 0x2, "6510994c0a67f1ce626279ada56e39e172988a71ead6edd00b2ddbc4fda49928", 0x3631564e}) 23:35:49 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 23:35:49 executing program 4: r0 = socket(0x0, 0x0, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) 23:35:49 executing program 1: r0 = socket(0x18, 0x800, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:49 executing program 2: r0 = socket(0x18, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)) getsockname$tipc(r0, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x3) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:49 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x2}]}}) 23:35:49 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x1, @vbi={0x9, 0x8001, 0x401, 0x31435641, [0x3], [0xfff], 0x2}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:49 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 23:35:49 executing program 1: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:49 executing program 4: r0 = socket(0x0, 0x0, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) 23:35:49 executing program 2: r0 = socket(0x18, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)) getsockname$tipc(r0, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x3) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:49 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x1, @vbi={0x9, 0x8001, 0x401, 0x31435641, [0x3], [0xfff], 0x2}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x1, @vbi={0x9, 0x8001, 0x401, 0x31435641, [0x3], [0xfff], 0x2}}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:35:49 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x2}]}}) 23:35:49 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 23:35:50 executing program 2: r0 = socket(0x18, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)) getsockname$tipc(r0, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x3) 23:35:50 executing program 1: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:50 executing program 4: r0 = socket(0x0, 0x0, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) 23:35:50 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x1, @vbi={0x9, 0x8001, 0x401, 0x31435641, [0x3], [0xfff], 0x2}}) (async, rerun: 64) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (rerun: 64) 23:35:50 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x2}]}}) 23:35:50 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) 23:35:50 executing program 1: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:50 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x4, 0x3, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x38414262}) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000000)=0x10000) 23:35:50 executing program 2: r0 = socket(0x18, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)) getsockname$tipc(r0, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) 23:35:50 executing program 4: socket(0x18, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) 23:35:50 executing program 5: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)={0x800}, 0x8) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x82081, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x2dcc, 0x1, 0x1, "1af9abe043490780aad84f4ad2ba75d5eb0d4cb299df3b7cf54651b60119f918", 0x38414761}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x2, 0x18}, 0xc) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2000000}]}}) 23:35:50 executing program 1: r0 = socket(0x0, 0x800, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:50 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) 23:35:50 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x4, 0x3, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x38414262}) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000000)=0x10000) 23:35:50 executing program 2: r0 = socket(0x18, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)) getsockname$tipc(r0, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 23:35:50 executing program 5: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)={0x800}, 0x8) (async) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x82081, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x2dcc, 0x1, 0x1, "1af9abe043490780aad84f4ad2ba75d5eb0d4cb299df3b7cf54651b60119f918", 0x38414761}) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x2, 0x18}, 0xc) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2000000}]}}) 23:35:50 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) 23:35:50 executing program 1: r0 = socket(0x0, 0x800, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:50 executing program 4: socket(0x18, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) 23:35:50 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x4, 0x3, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x38414262}) (async) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000000)=0x10000) 23:35:50 executing program 2: r0 = socket(0x18, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)) getsockname$tipc(r0, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) 23:35:50 executing program 5: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)={0x800}, 0x8) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x82081, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x2dcc, 0x1, 0x1, "1af9abe043490780aad84f4ad2ba75d5eb0d4cb299df3b7cf54651b60119f918", 0x38414761}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x2, 0x18}, 0xc) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2000000}]}}) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)={0x800}, 0x8) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x82081, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x2dcc, 0x1, 0x1, "1af9abe043490780aad84f4ad2ba75d5eb0d4cb299df3b7cf54651b60119f918", 0x38414761}) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x2, 0x18}, 0xc) (async) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2000000}]}}) (async) 23:35:50 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x80, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) 23:35:50 executing program 4: socket(0x18, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) 23:35:50 executing program 1: r0 = socket(0x0, 0x800, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:50 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x584e4f53}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x1f, 0x2, 0x1}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000080)={0xd, 0x7, {0x52, 0x7, 0x7, {0xd2f}, {0x5, 0xfffe}, @period={0x7, 0x0, 0x81, 0x7, 0x800, {0x5, 0x6, 0x0, 0xfb5f}, 0x3, &(0x7f0000000040)=[0xd4c, 0x3ff, 0xff1f]}}, {0x55, 0x444, 0x0, {0x416e, 0x4}, {0x6}, @const={0x401, {0x63d, 0x5, 0x101, 0x2}}}}) 23:35:50 executing program 2: r0 = socket(0x18, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) getsockname$tipc(r0, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) 23:35:50 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x1000000009, 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x80000000, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1ffffffff, 0x2) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000240)=""/74) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)=@mmap={0x200, 0x3, 0x4, 0x10, 0xffffffff, {r3, r4/1000+10000}, {0x3, 0x0, 0xfd, 0x80, 0x18, 0x0, "f26d4006"}, 0x2, 0x1, {}, 0x5}) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x105200, 0x0) bind$tipc(r5, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x2}, 0x10) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix={0x4, 0x4, 0x34363248, 0x4, 0x400, 0x0, 0x4, 0x4, 0x0, 0x3, 0x0, 0x1}}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) 23:35:50 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x7f, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) 23:35:50 executing program 4: r0 = socket(0x18, 0x0, 0x0) recvmsg$can_bcm(r0, 0x0, 0x2020) 23:35:50 executing program 2: r0 = socket(0x18, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockname$tipc(r0, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) 23:35:50 executing program 1: r0 = socket(0x18, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:50 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x1000000009, 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x80000000, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1ffffffff, 0x2) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000240)=""/74) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)=@mmap={0x200, 0x3, 0x4, 0x10, 0xffffffff, {r3, r4/1000+10000}, {0x3, 0x0, 0xfd, 0x80, 0x18, 0x0, "f26d4006"}, 0x2, 0x1, {}, 0x5}) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x105200, 0x0) bind$tipc(r5, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x2}, 0x10) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix={0x4, 0x4, 0x34363248, 0x4, 0x400, 0x0, 0x4, 0x4, 0x0, 0x3, 0x0, 0x1}}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) syz_open_dev$vim2m(&(0x7f0000000200), 0x1000000009, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x80000000, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000080), 0x1ffffffff, 0x2) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) (async) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000240)=""/74) (async) clock_gettime(0x0, &(0x7f00000000c0)) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)=@mmap={0x200, 0x3, 0x4, 0x10, 0xffffffff, {r3, r4/1000+10000}, {0x3, 0x0, 0xfd, 0x80, 0x18, 0x0, "f26d4006"}, 0x2, 0x1, {}, 0x5}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x105200, 0x0) (async) bind$tipc(r5, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x2}, 0x10) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix={0x4, 0x4, 0x34363248, 0x4, 0x400, 0x0, 0x4, 0x4, 0x0, 0x3, 0x0, 0x1}}) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) 23:35:50 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x1, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) 23:35:50 executing program 4: r0 = socket(0x18, 0x0, 0x0) recvmsg$can_bcm(r0, 0x0, 0x2020) 23:35:50 executing program 1: r0 = socket(0x18, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:50 executing program 2: r0 = socket(0x18, 0x0, 0x0) getsockname$tipc(r0, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) 23:35:50 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x584e4f53}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x1f, 0x2, 0x1}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async, rerun: 32) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000080)={0xd, 0x7, {0x52, 0x7, 0x7, {0xd2f}, {0x5, 0xfffe}, @period={0x7, 0x0, 0x81, 0x7, 0x800, {0x5, 0x6, 0x0, 0xfb5f}, 0x3, &(0x7f0000000040)=[0xd4c, 0x3ff, 0xff1f]}}, {0x55, 0x444, 0x0, {0x416e, 0x4}, {0x6}, @const={0x401, {0x63d, 0x5, 0x101, 0x2}}}}) (rerun: 32) 23:35:50 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) 23:35:50 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x1000000009, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x80000000, 0x2) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1ffffffff, 0x2) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000240)=""/74) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)=@mmap={0x200, 0x3, 0x4, 0x10, 0xffffffff, {r3, r4/1000+10000}, {0x3, 0x0, 0xfd, 0x80, 0x18, 0x0, "f26d4006"}, 0x2, 0x1, {}, 0x5}) (async) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x105200, 0x0) bind$tipc(r5, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x2}, 0x10) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix={0x4, 0x4, 0x34363248, 0x4, 0x400, 0x0, 0x4, 0x4, 0x0, 0x3, 0x0, 0x1}}) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) 23:35:50 executing program 4: r0 = socket(0x18, 0x0, 0x0) recvmsg$can_bcm(r0, 0x0, 0x2020) 23:35:51 executing program 1: r0 = socket(0x18, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:51 executing program 2: getsockname$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) 23:35:51 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x50, 0x4, 0x0, 0x0, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) 23:35:51 executing program 4: r0 = socket(0x18, 0x0, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/185, 0xb9}], 0x2, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) 23:35:51 executing program 2: getsockname$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) 23:35:51 executing program 1: socket(0x18, 0x800, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:51 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x1, @raw_data="d6d547b7ae078ffb5727e60fb33bbb63e1a7fa9a64fdb790d6f0d12fd10c323c372bce5dfff7c719711fb03acc33785574fa0c4f4be1fc6de2b35e383dc22bd0f8dc9de0699058d83d3f32aea5611060c3df40a6a64bd6cffe52957aad4d63bad6717a05dd6d1271f825a3fb449feff5ad3065e5b70ad3bc388c2b49a0254b32e0b865b34aebfe69aaf31e66e6807fcfadeef43ef15657c424bb11adc66c503e6fe40437a4df688ff47764434af12bbe2392a77e354df85f6601f55500"}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x4}]}}) 23:35:51 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x50, 0x4, 0x0, 0x0, 0x140, 0x0, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) 23:35:51 executing program 2: getsockname$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) 23:35:51 executing program 4: r0 = socket(0x18, 0x0, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/42, 0x2a}, 0x2020) 23:35:51 executing program 1: socket(0x18, 0x800, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:51 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x584e4f53}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x1f, 0x2, 0x1}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000080)={0xd, 0x7, {0x52, 0x7, 0x7, {0xd2f}, {0x5, 0xfffe}, @period={0x7, 0x0, 0x81, 0x7, 0x800, {0x5, 0x6, 0x0, 0xfb5f}, 0x3, &(0x7f0000000040)=[0xd4c, 0x3ff, 0xff1f]}}, {0x55, 0x444, 0x0, {0x416e, 0x4}, {0x6}, @const={0x401, {0x63d, 0x5, 0x101, 0x2}}}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x584e4f53}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x1f, 0x2, 0x1}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000080)={0xd, 0x7, {0x52, 0x7, 0x7, {0xd2f}, {0x5, 0xfffe}, @period={0x7, 0x0, 0x81, 0x7, 0x800, {0x5, 0x6, 0x0, 0xfb5f}, 0x3, &(0x7f0000000040)=[0xd4c, 0x3ff, 0xff1f]}}, {0x55, 0x444, 0x0, {0x416e, 0x4}, {0x6}, @const={0x401, {0x63d, 0x5, 0x101, 0x2}}}}) (async) 23:35:51 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x50, 0x4, 0x0, 0x0, 0x140, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) 23:35:51 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x1, @raw_data="d6d547b7ae078ffb5727e60fb33bbb63e1a7fa9a64fdb790d6f0d12fd10c323c372bce5dfff7c719711fb03acc33785574fa0c4f4be1fc6de2b35e383dc22bd0f8dc9de0699058d83d3f32aea5611060c3df40a6a64bd6cffe52957aad4d63bad6717a05dd6d1271f825a3fb449feff5ad3065e5b70ad3bc388c2b49a0254b32e0b865b34aebfe69aaf31e66e6807fcfadeef43ef15657c424bb11adc66c503e6fe40437a4df688ff47764434af12bbe2392a77e354df85f6601f55500"}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x4}]}}) 23:35:51 executing program 4: r0 = socket(0x18, 0x0, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x2020) 23:35:51 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x50, 0x4, 0x0, 0x0, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) 23:35:51 executing program 1: socket(0x18, 0x800, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:35:51 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x1, @raw_data="d6d547b7ae078ffb5727e60fb33bbb63e1a7fa9a64fdb790d6f0d12fd10c323c372bce5dfff7c719711fb03acc33785574fa0c4f4be1fc6de2b35e383dc22bd0f8dc9de0699058d83d3f32aea5611060c3df40a6a64bd6cffe52957aad4d63bad6717a05dd6d1271f825a3fb449feff5ad3065e5b70ad3bc388c2b49a0254b32e0b865b34aebfe69aaf31e66e6807fcfadeef43ef15657c424bb11adc66c503e6fe40437a4df688ff47764434af12bbe2392a77e354df85f6601f55500"}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x4}]}}) 23:35:51 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x3d, 0x4, 0x0, 0x0, 0xf4, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}]}}}}}) 23:35:51 executing program 2: r0 = socket(0x0, 0x0, 0x0) getsockname$tipc(r0, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) 23:35:51 executing program 4: r0 = socket(0x18, 0x0, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 23:35:51 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x1, @sliced={0x333, [0xffc, 0x0, 0x3, 0x0, 0x9, 0x1, 0x3d, 0x6000, 0xff, 0x7, 0x3ff, 0x0, 0x12, 0x91, 0x400, 0x9, 0x4f27, 0x6, 0x7f, 0x370d, 0x7f, 0x1c, 0x4, 0xc04, 0xfff8, 0xcac9, 0xa74, 0x7, 0x7f, 0x9, 0x8, 0x4e, 0x8, 0x826, 0x0, 0x7, 0x5, 0x423, 0xffff, 0x7, 0x0, 0x6, 0x9, 0x1, 0x6, 0x6, 0x7, 0x4], 0x7fff}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x5, 0x200, 0x4, {0x1, @vbi={0x1, 0x8d72, 0x401, 0x30395056, [0x1, 0x1f], [0x1], 0x1}}, 0x6}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0), 0x101002, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000200)={0x401, 0xff}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000180)=0x1) 23:35:51 executing program 1: r0 = socket(0x18, 0x800, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) 23:35:51 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x39, 0x4, 0x0, 0x0, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}]}}}}}) 23:35:51 executing program 4: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x50, 0x4, 0x0, 0x39, 0x140, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x4, [0x80000001, 0x4, 0xe0a4, 0x58, 0x7, 0x81, 0x6, 0x20, 0xf, 0x1]}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x3, 0x3, 0xfff]}, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x1, [{@broadcast, 0x7}, {@empty, 0x10000}, {@private=0xa010100, 0x5}, {@local, 0x48}, {@broadcast, 0x4}, {@local, 0x101}, {@multicast1}, {@multicast1, 0x8}, {@remote, 0x5d1e}]}]}}}}}) 23:35:51 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x1, @sliced={0x333, [0xffc, 0x0, 0x3, 0x0, 0x9, 0x1, 0x3d, 0x6000, 0xff, 0x7, 0x3ff, 0x0, 0x12, 0x91, 0x400, 0x9, 0x4f27, 0x6, 0x7f, 0x370d, 0x7f, 0x1c, 0x4, 0xc04, 0xfff8, 0xcac9, 0xa74, 0x7, 0x7f, 0x9, 0x8, 0x4e, 0x8, 0x826, 0x0, 0x7, 0x5, 0x423, 0xffff, 0x7, 0x0, 0x6, 0x9, 0x1, 0x6, 0x6, 0x7, 0x4], 0x7fff}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x5, 0x200, 0x4, {0x1, @vbi={0x1, 0x8d72, 0x401, 0x30395056, [0x1, 0x1f], [0x1], 0x1}}, 0x6}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0), 0x101002, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000200)={0x401, 0xff}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000180)=0x1) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x1, @sliced={0x333, [0xffc, 0x0, 0x3, 0x0, 0x9, 0x1, 0x3d, 0x6000, 0xff, 0x7, 0x3ff, 0x0, 0x12, 0x91, 0x400, 0x9, 0x4f27, 0x6, 0x7f, 0x370d, 0x7f, 0x1c, 0x4, 0xc04, 0xfff8, 0xcac9, 0xa74, 0x7, 0x7f, 0x9, 0x8, 0x4e, 0x8, 0x826, 0x0, 0x7, 0x5, 0x423, 0xffff, 0x7, 0x0, 0x6, 0x9, 0x1, 0x6, 0x6, 0x7, 0x4], 0x7fff}}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x5, 0x200, 0x4, {0x1, @vbi={0x1, 0x8d72, 0x401, 0x30395056, [0x1, 0x1f], [0x1], 0x1}}, 0x6}) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0), 0x101002, 0x0) (async) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000200)={0x401, 0xff}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000180)=0x1) (async) 23:35:51 executing program 1: r0 = socket(0x18, 0x800, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) 23:35:51 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) syz_open_dev$vim2m(&(0x7f0000000280), 0x4, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000140)={0x0, @pix={0x5, 0x80000000, 0x32315659, 0x2, 0x9, 0x2, 0x4, 0x9, 0x1, 0x8, 0x2, 0x1}}) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x400000001042049) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [], 0x80}}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) connect$can_bcm(r3, &(0x7f00000002c0), 0x10) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000340)=0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000080)=@fd={0x0, 0x0, 0x4, 0x0, 0x81, {0x77359400}, {0x5, 0x0, 0x40, 0x8, 0xf3, 0x0, "75eb426d"}, 0x2}) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 23:35:51 executing program 2: r0 = socket(0x0, 0x0, 0x0) getsockname$tipc(r0, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) 23:35:51 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2e, 0x4, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}, @lsrr={0x83, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}]}}}}}) 23:35:51 executing program 4: r0 = socket(0x18, 0x0, 0x0) getsockname$tipc(r0, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) 23:35:51 executing program 2: r0 = socket(0x0, 0x0, 0x0) getsockname$tipc(r0, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) 23:35:51 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x27, 0x4, 0x0, 0x0, 0x9c, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x11, "dc57dd5d4d98287e5d42c83dd0216c"}, {0x2, 0x9, "e23a4b6e62b85a"}, {0x7, 0xc, "ffda142e080f9d09e642"}, {0x7, 0x9, "499720ac1e30b1"}, {0x2, 0xa, "f237a13199679ae2"}]}]}}}}}) 23:35:51 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x1, @sliced={0x333, [0xffc, 0x0, 0x3, 0x0, 0x9, 0x1, 0x3d, 0x6000, 0xff, 0x7, 0x3ff, 0x0, 0x12, 0x91, 0x400, 0x9, 0x4f27, 0x6, 0x7f, 0x370d, 0x7f, 0x1c, 0x4, 0xc04, 0xfff8, 0xcac9, 0xa74, 0x7, 0x7f, 0x9, 0x8, 0x4e, 0x8, 0x826, 0x0, 0x7, 0x5, 0x423, 0xffff, 0x7, 0x0, 0x6, 0x9, 0x1, 0x6, 0x6, 0x7, 0x4], 0x7fff}}) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async, rerun: 64) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x5, 0x200, 0x4, {0x1, @vbi={0x1, 0x8d72, 0x401, 0x30395056, [0x1, 0x1f], [0x1], 0x1}}, 0x6}) (async, rerun: 64) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0), 0x101002, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000200)={0x401, 0xff}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000180)=0x1) 23:35:51 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) syz_open_dev$vim2m(&(0x7f0000000280), 0x4, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) (async, rerun: 32) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000140)={0x0, @pix={0x5, 0x80000000, 0x32315659, 0x2, 0x9, 0x2, 0x4, 0x9, 0x1, 0x8, 0x2, 0x1}}) (async, rerun: 32) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x400000001042049) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [], 0x80}}) (async, rerun: 64) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 64) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) (async) connect$can_bcm(r3, &(0x7f00000002c0), 0x10) (async) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000340)=0x2) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000080)=@fd={0x0, 0x0, 0x4, 0x0, 0x81, {0x77359400}, {0x5, 0x0, 0x40, 0x8, 0xf3, 0x0, "75eb426d"}, 0x2}) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 23:35:51 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x584e4f53}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x1f, 0x2, 0x1}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000080)={0xd, 0x7, {0x52, 0x7, 0x7, {0xd2f}, {0x5, 0xfffe}, @period={0x7, 0x0, 0x81, 0x7, 0x800, {0x5, 0x6, 0x0, 0xfb5f}, 0x3, &(0x7f0000000040)=[0xd4c, 0x3ff, 0xff1f]}}, {0x55, 0x444, 0x0, {0x416e, 0x4}, {0x6}, @const={0x401, {0x63d, 0x5, 0x101, 0x2}}}}) 23:35:51 executing program 1: r0 = socket(0x18, 0x800, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) 23:35:51 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x10400, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000280)=@userptr={0x8001, 0x0, 0x4, 0x100, 0x97dd, {}, {0x1, 0x0, 0x4, 0x0, 0x2, 0x7f, "73357795"}, 0x3f, 0x2, {&(0x7f0000000240)}, 0x9397}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f00000000c0)=0x7f) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) ioctl$VIDIOC_S_TUNER(r3, 0x4054561e, &(0x7f0000000180)={0x4, "4023516c6dc45bf4329f6c5411ab96c528bb7e60fd1c8e9007b003d836be6cf0", 0x5, 0x4, 0x6, 0x21, 0x4, 0x4, 0x18000000, 0x4}) 23:35:51 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x18, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}, @timestamp={0x44, 0x20, 0x76, 0x0, 0x6, [0x9e67, 0x1000, 0x5, 0x1c00, 0xffffffff, 0x7, 0x3]}]}}}}}) 23:35:52 executing program 2: socket(0x18, 0x0, 0x0) getsockname$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) 23:35:52 executing program 1: r0 = socket(0x18, 0x800, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 23:35:52 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x10400, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000280)=@userptr={0x8001, 0x0, 0x4, 0x100, 0x97dd, {}, {0x1, 0x0, 0x4, 0x0, 0x2, 0x7f, "73357795"}, 0x3f, 0x2, {&(0x7f0000000240)}, 0x9397}) (async, rerun: 32) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) (rerun: 32) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f00000000c0)=0x7f) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) (async) ioctl$VIDIOC_S_TUNER(r3, 0x4054561e, &(0x7f0000000180)={0x4, "4023516c6dc45bf4329f6c5411ab96c528bb7e60fd1c8e9007b003d836be6cf0", 0x5, 0x4, 0x6, 0x21, 0x4, 0x4, 0x18000000, 0x4}) 23:35:52 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x10, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x1, [{@loopback, 0xce7}]}]}}}}}) 23:35:52 executing program 2: socket(0x18, 0x0, 0x0) getsockname$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) 23:35:52 executing program 1: r0 = socket(0x18, 0x800, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 23:35:52 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xd, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ac}]}]}}}}}) 23:35:52 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) syz_open_dev$vim2m(&(0x7f0000000280), 0x4, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000140)={0x0, @pix={0x5, 0x80000000, 0x32315659, 0x2, 0x9, 0x2, 0x4, 0x9, 0x1, 0x8, 0x2, 0x1}}) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x400000001042049) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [], 0x80}}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) connect$can_bcm(r3, &(0x7f00000002c0), 0x10) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000340)=0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000080)=@fd={0x0, 0x0, 0x4, 0x0, 0x81, {0x77359400}, {0x5, 0x0, 0x40, 0x8, 0xf3, 0x0, "75eb426d"}, 0x2}) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000280), 0x4, 0x2) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000140)={0x0, @pix={0x5, 0x80000000, 0x32315659, 0x2, 0x9, 0x2, 0x4, 0x9, 0x1, 0x8, 0x2, 0x1}}) (async) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x400000001042049) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [], 0x80}}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) (async) connect$can_bcm(r3, &(0x7f00000002c0), 0x10) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000340)=0x2) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000080)=@fd={0x0, 0x0, 0x4, 0x0, 0x81, {0x77359400}, {0x5, 0x0, 0x40, 0x8, 0xf3, 0x0, "75eb426d"}, 0x2}) (async) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) (async) 23:35:52 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x584e4f53}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x1f, 0x2, 0x1}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000080)={0xd, 0x7, {0x52, 0x7, 0x7, {0xd2f}, {0x5, 0xfffe}, @period={0x7, 0x0, 0x81, 0x7, 0x800, {0x5, 0x6, 0x0, 0xfb5f}, 0x3, &(0x7f0000000040)=[0xd4c, 0x3ff, 0xff1f]}}, {0x55, 0x444, 0x0, {0x416e, 0x4}, {0x6}, @const={0x401, {0x63d, 0x5, 0x101, 0x2}}}}) 23:35:52 executing program 2: socket(0x18, 0x0, 0x0) getsockname$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) 23:35:52 executing program 1: r0 = socket(0x18, 0x800, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 23:35:52 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x10400, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000280)=@userptr={0x8001, 0x0, 0x4, 0x100, 0x97dd, {}, {0x1, 0x0, 0x4, 0x0, 0x2, 0x7f, "73357795"}, 0x3f, 0x2, {&(0x7f0000000240)}, 0x9397}) (async, rerun: 32) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) (rerun: 32) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f00000000c0)=0x7f) (async) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) (async) ioctl$VIDIOC_S_TUNER(r3, 0x4054561e, &(0x7f0000000180)={0x4, "4023516c6dc45bf4329f6c5411ab96c528bb7e60fd1c8e9007b003d836be6cf0", 0x5, 0x4, 0x6, 0x21, 0x4, 0x4, 0x18000000, 0x4}) 23:35:52 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @broadcast, {[@end]}}}}}) 23:35:52 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000000)={0x5, @vbi={0x1, 0x1, 0xffffffff, 0x34343459, [0x7f, 0xffff5e29], [0x6, 0x75], 0x1}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0xfffffffd, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:52 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @broadcast}}}}) 23:35:52 executing program 2: r0 = socket(0x18, 0x0, 0x0) getsockname$tipc(r0, 0x0, &(0x7f0000000040)) 23:35:52 executing program 1: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) 23:35:52 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000000)={0x5, @vbi={0x1, 0x1, 0xffffffff, 0x34343459, [0x7f, 0xffff5e29], [0x6, 0x75], 0x1}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0xfffffffd, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:52 executing program 2: r0 = socket(0x18, 0x0, 0x0) getsockname$tipc(r0, 0x0, 0x0) 23:35:52 executing program 5: setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000000)=0x376, 0x8) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0xa, [{}, {}, {}, {}, {}, {0xfffffffd}]}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) 23:35:52 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000040)=@userptr={0x3, 0x3, 0x4, 0x4, 0xffff, {}, {0x5, 0x8, 0x9, 0x0, 0x5, 0x4, "5d951a0d"}, 0x1fb2, 0x2, {}, 0x2b069cdc}) 23:35:52 executing program 3: r0 = socket(0x18, 0x0, 0x0) getsockname$tipc(r0, 0x0, &(0x7f0000000040)) 23:35:52 executing program 1: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) 23:35:52 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000000)={0x5, @vbi={0x1, 0x1, 0xffffffff, 0x34343459, [0x7f, 0xffff5e29], [0x6, 0x75], 0x1}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0xfffffffd, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000000)={0x5, @vbi={0x1, 0x1, 0xffffffff, 0x34343459, [0x7f, 0xffff5e29], [0x6, 0x75], 0x1}}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0xfffffffd, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:35:52 executing program 5: setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000000)=0x376, 0x8) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0xa, [{}, {}, {}, {}, {}, {0xfffffffd}]}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000000)=0x376, 0x8) (async) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0xa, [{}, {}, {}, {}, {}, {0xfffffffd}]}}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) (async) 23:35:52 executing program 1: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) 23:35:52 executing program 2: r0 = socket(0x18, 0x0, 0x0) getsockname$tipc(r0, 0x0, 0x0) 23:35:52 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_dccp_int(r3, 0x21, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400d0}, 0xd188639f478ba79f) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) accept4$vsock_stream(r2, &(0x7f00000002c0)={0x28, 0x0, 0x0, @local}, 0x10, 0x80000) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r6, r5, 0x0, 0x8, &(0x7f0000000300)='!@[\x12,\\-\x00'}, 0x30) r7 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000380)=0x1000, 0x4) getsockopt$inet_dccp_buf(r7, 0x21, 0xd, &(0x7f0000000200)=""/81, &(0x7f0000000280)=0x51) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r4) 23:35:52 executing program 5: setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000000)=0x376, 0x8) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0xa, [{}, {}, {}, {}, {}, {0xfffffffd}]}}) (async, rerun: 64) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) 23:35:52 executing program 4: r0 = syz_open_dev$vim2m(0xffffffffffffffff, 0xfffe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) 23:35:52 executing program 1: ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) 23:35:52 executing program 2: r0 = socket(0x18, 0x0, 0x0) getsockname$tipc(r0, 0x0, 0x0) 23:35:52 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x78082, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000200)=@multiplanar_userptr={0x1f, 0x1, 0x4, 0x100, 0x20, {0x77359400}, {0x1, 0xc, 0xfb, 0xe6, 0x6, 0xb7, "a3f24ca3"}, 0x4, 0x2, {&(0x7f0000000180)=[{0xffff32db, 0x80, {&(0x7f0000000040)}, 0x5}, {0x3ff, 0x8, {&(0x7f0000000080)}, 0x3ff}]}, 0xffff, 0x0, r2}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5}, 0x48) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_tracing={0x1a, 0xd, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000008d00000018630000100000000000000006000000183500000500000000000000000000007a000000957c40000000000018470000070000000000000000000000186700001000000000000000010001009500"/104], &(0x7f0000000980)='syzkaller\x00', 0x6, 0x8, &(0x7f00000009c0)=""/8, 0x40f00, 0x2, '\x00', r5, 0x19, r2, 0x8, &(0x7f0000000a00)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000a40)={0x2, 0x3, 0x40, 0x1}, 0x10, 0x1c675, 0xffffffffffffffff, 0x0, &(0x7f0000000a80)=[r6]}, 0x80) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000b40)={r1}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_ext={0x1c, 0xc, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd96, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_idx={0x18, 0x0, 0x5, 0x0, 0xb}, @jmp={0x5, 0x1, 0x0, 0xe, 0xa, 0xfffffffffffffff4, 0x4}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xa, 0xa, 0x5, 0x1, 0x8}, @generic={0x3, 0x9, 0x9, 0x3ff, 0x6}]}, &(0x7f00000007c0)='GPL\x00', 0x7f, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0x10, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000008c0)={0x5, 0x9, 0x4c, 0x401}, 0x10, 0x17b3f, r7, 0x0, &(0x7f0000000b80)=[r8]}, 0x80) r9 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r10}, 0x48) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000000700)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f00000003c0)={0x2c8, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x230, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x867}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x4000}, 0x4004000) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r11, 0xae03, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000c40)) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000280)={0x1, @vbi={0xff, 0x1000, 0x7, 0x41416770, [0x1d0d9037, 0x6f3], [0x1], 0x13a}}) 23:35:52 executing program 4: r0 = syz_open_dev$vim2m(0xffffffffffffffff, 0xfffe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) 23:35:52 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"eaa1fe54881501c649e49c36f3dd74044e37367827fe7989bb9cb940b7f1ea5a", 0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000040)={"07cf87e66641e7f787faaf1c31c06eef9af37c3e3de585b559d9a74a98baa799", r2}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x9) 23:35:52 executing program 1: ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) 23:35:52 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000000)=0x4, 0x4) 23:35:52 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x78082, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000200)=@multiplanar_userptr={0x1f, 0x1, 0x4, 0x100, 0x20, {0x77359400}, {0x1, 0xc, 0xfb, 0xe6, 0x6, 0xb7, "a3f24ca3"}, 0x4, 0x2, {&(0x7f0000000180)=[{0xffff32db, 0x80, {&(0x7f0000000040)}, 0x5}, {0x3ff, 0x8, {&(0x7f0000000080)}, 0x3ff}]}, 0xffff, 0x0, r2}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5}, 0x48) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_tracing={0x1a, 0xd, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000008d00000018630000100000000000000006000000183500000500000000000000000000007a000000957c40000000000018470000070000000000000000000000186700001000000000000000010001009500"/104], &(0x7f0000000980)='syzkaller\x00', 0x6, 0x8, &(0x7f00000009c0)=""/8, 0x40f00, 0x2, '\x00', r5, 0x19, r2, 0x8, &(0x7f0000000a00)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000a40)={0x2, 0x3, 0x40, 0x1}, 0x10, 0x1c675, 0xffffffffffffffff, 0x0, &(0x7f0000000a80)=[r6]}, 0x80) (async) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000b40)={r1}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_ext={0x1c, 0xc, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd96, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_idx={0x18, 0x0, 0x5, 0x0, 0xb}, @jmp={0x5, 0x1, 0x0, 0xe, 0xa, 0xfffffffffffffff4, 0x4}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xa, 0xa, 0x5, 0x1, 0x8}, @generic={0x3, 0x9, 0x9, 0x3ff, 0x6}]}, &(0x7f00000007c0)='GPL\x00', 0x7f, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0x10, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000008c0)={0x5, 0x9, 0x4c, 0x401}, 0x10, 0x17b3f, r7, 0x0, &(0x7f0000000b80)=[r8]}, 0x80) (async) r9 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r10}, 0x48) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000000700)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f00000003c0)={0x2c8, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x230, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x867}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x4000}, 0x4004000) (async) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) (async) r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r11, 0xae03, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000c40)) (async) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000280)={0x1, @vbi={0xff, 0x1000, 0x7, 0x41416770, [0x1d0d9037, 0x6f3], [0x1], 0x13a}}) 23:35:52 executing program 4: r0 = syz_open_dev$vim2m(0xffffffffffffffff, 0xfffe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) 23:35:52 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_dccp_int(r3, 0x21, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400d0}, 0xd188639f478ba79f) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) accept4$vsock_stream(r2, &(0x7f00000002c0)={0x28, 0x0, 0x0, @local}, 0x10, 0x80000) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r6, r5, 0x0, 0x8, &(0x7f0000000300)='!@[\x12,\\-\x00'}, 0x30) r7 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000380)=0x1000, 0x4) getsockopt$inet_dccp_buf(r7, 0x21, 0xd, &(0x7f0000000200)=""/81, &(0x7f0000000280)=0x51) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r4) 23:35:52 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"eaa1fe54881501c649e49c36f3dd74044e37367827fe7989bb9cb940b7f1ea5a", 0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async, rerun: 64) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000040)={"07cf87e66641e7f787faaf1c31c06eef9af37c3e3de585b559d9a74a98baa799", r2}) (async, rerun: 64) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x9) 23:35:52 executing program 1: ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) 23:35:52 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x78082, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000200)=@multiplanar_userptr={0x1f, 0x1, 0x4, 0x100, 0x20, {0x77359400}, {0x1, 0xc, 0xfb, 0xe6, 0x6, 0xb7, "a3f24ca3"}, 0x4, 0x2, {&(0x7f0000000180)=[{0xffff32db, 0x80, {&(0x7f0000000040)}, 0x5}, {0x3ff, 0x8, {&(0x7f0000000080)}, 0x3ff}]}, 0xffff, 0x0, r2}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5}, 0x48) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_tracing={0x1a, 0xd, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000008d00000018630000100000000000000006000000183500000500000000000000000000007a000000957c40000000000018470000070000000000000000000000186700001000000000000000010001009500"/104], &(0x7f0000000980)='syzkaller\x00', 0x6, 0x8, &(0x7f00000009c0)=""/8, 0x40f00, 0x2, '\x00', r5, 0x19, r2, 0x8, &(0x7f0000000a00)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000a40)={0x2, 0x3, 0x40, 0x1}, 0x10, 0x1c675, 0xffffffffffffffff, 0x0, &(0x7f0000000a80)=[r6]}, 0x80) (async) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000b40)={r1}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_ext={0x1c, 0xc, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd96, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_idx={0x18, 0x0, 0x5, 0x0, 0xb}, @jmp={0x5, 0x1, 0x0, 0xe, 0xa, 0xfffffffffffffff4, 0x4}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xa, 0xa, 0x5, 0x1, 0x8}, @generic={0x3, 0x9, 0x9, 0x3ff, 0x6}]}, &(0x7f00000007c0)='GPL\x00', 0x7f, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0x10, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000008c0)={0x5, 0x9, 0x4c, 0x401}, 0x10, 0x17b3f, r7, 0x0, &(0x7f0000000b80)=[r8]}, 0x80) r9 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r10}, 0x48) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000000700)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f00000003c0)={0x2c8, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x230, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x867}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x4000}, 0x4004000) (async) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) (async) r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r11, 0xae03, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000c40)) (async) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000280)={0x1, @vbi={0xff, 0x1000, 0x7, 0x41416770, [0x1d0d9037, 0x6f3], [0x1], 0x13a}}) 23:35:52 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x8, 0x36314d59, 0x2, @stepwise={0x6d1, 0x10001, 0x8, 0x1}}) 23:35:53 executing program 4: syz_open_dev$vim2m(0xffffffffffffffff, 0xfffe, 0x2) 23:35:53 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async, rerun: 32) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"eaa1fe54881501c649e49c36f3dd74044e37367827fe7989bb9cb940b7f1ea5a", 0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000040)={"07cf87e66641e7f787faaf1c31c06eef9af37c3e3de585b559d9a74a98baa799", r2}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x9) 23:35:53 executing program 1: r0 = socket(0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) 23:35:53 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_dccp_int(r3, 0x21, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400d0}, 0xd188639f478ba79f) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) accept4$vsock_stream(r2, &(0x7f00000002c0)={0x28, 0x0, 0x0, @local}, 0x10, 0x80000) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r6, r5, 0x0, 0x8, &(0x7f0000000300)='!@[\x12,\\-\x00'}, 0x30) r7 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000380)=0x1000, 0x4) getsockopt$inet_dccp_buf(r7, 0x21, 0xd, &(0x7f0000000200)=""/81, &(0x7f0000000280)=0x51) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r4) 23:35:53 executing program 4: syz_open_dev$vim2m(0xffffffffffffffff, 0x0, 0x2) 23:35:53 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x8, 0x36314d59, 0x2, @stepwise={0x6d1, 0x10001, 0x8, 0x1}}) 23:35:53 executing program 1: r0 = socket(0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) 23:35:53 executing program 0: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:53 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x2, @win={{0x38f6, 0x6, 0x2, 0x80000000}, 0x5, 0x1, &(0x7f00000000c0)={{0x40, 0xfffffffe, 0xffffffff, 0x16b}, &(0x7f0000000140)={{0xf3c8, 0xfffffffd, 0x6}, &(0x7f0000000040)={{0x4a91, 0x1000, 0x3, 0x1}}}}, 0x2, &(0x7f0000000000)="7a6f7f2befdb3cc7a556c32f6fcf85d006c26dd100", 0x3}}) 23:35:53 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x4}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x8, 0x36314d59, 0x2, @stepwise={0x6d1, 0x10001, 0x8, 0x1}}) 23:35:53 executing program 1: r0 = socket(0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) 23:35:53 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x9, @pix_mp}) 23:35:53 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x2, @win={{0x38f6, 0x6, 0x2, 0x80000000}, 0x5, 0x1, &(0x7f00000000c0)={{0x40, 0xfffffffe, 0xffffffff, 0x16b}, &(0x7f0000000140)={{0xf3c8, 0xfffffffd, 0x6}, &(0x7f0000000040)={{0x4a91, 0x1000, 0x3, 0x1}}}}, 0x2, &(0x7f0000000000)="7a6f7f2befdb3cc7a556c32f6fcf85d006c26dd100", 0x3}}) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x2, @win={{0x38f6, 0x6, 0x2, 0x80000000}, 0x5, 0x1, &(0x7f00000000c0)={{0x40, 0xfffffffe, 0xffffffff, 0x16b}, &(0x7f0000000140)={{0xf3c8, 0xfffffffd, 0x6}, &(0x7f0000000040)={{0x4a91, 0x1000, 0x3, 0x1}}}}, 0x2, &(0x7f0000000000)="7a6f7f2befdb3cc7a556c32f6fcf85d006c26dd100", 0x3}}) (async) 23:35:53 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_dccp_int(r3, 0x21, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400d0}, 0xd188639f478ba79f) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) accept4$vsock_stream(r2, &(0x7f00000002c0)={0x28, 0x0, 0x0, @local}, 0x10, 0x80000) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r6, r5, 0x0, 0x8, &(0x7f0000000300)='!@[\x12,\\-\x00'}, 0x30) r7 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000380)=0x1000, 0x4) getsockopt$inet_dccp_buf(r7, 0x21, 0xd, &(0x7f0000000200)=""/81, &(0x7f0000000280)=0x51) 23:35:53 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x8, 0x36314d59, 0x2, @stepwise={0x6d1, 0x10001, 0x8, 0x1}}) 23:35:53 executing program 0: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:53 executing program 1: socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) 23:35:53 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x2, @win={{0x38f6, 0x6, 0x2, 0x80000000}, 0x5, 0x1, &(0x7f00000000c0)={{0x40, 0xfffffffe, 0xffffffff, 0x16b}, &(0x7f0000000140)={{0xf3c8, 0xfffffffd, 0x6}, &(0x7f0000000040)={{0x4a91, 0x1000, 0x3, 0x1}}}}, 0x2, &(0x7f0000000000)="7a6f7f2befdb3cc7a556c32f6fcf85d006c26dd100", 0x3}}) 23:35:53 executing program 0: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:53 executing program 2: ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000000)={0x8, 0x36314d59, 0x2, @stepwise={0x6d1, 0x10001, 0x8, 0x1}}) 23:35:53 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x9, @pix_mp}) 23:35:53 executing program 1: socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) 23:35:53 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_dccp_int(r3, 0x21, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400d0}, 0xd188639f478ba79f) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) accept4$vsock_stream(r2, &(0x7f00000002c0)={0x28, 0x0, 0x0, @local}, 0x10, 0x80000) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r6, r5, 0x0, 0x8, &(0x7f0000000300)='!@[\x12,\\-\x00'}, 0x30) socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000380)=0x1000, 0x4) 23:35:53 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x80}, {0x4001}, {0xfffffffc}], 0x0, 0x9, 0x8}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000000)={0x7, 0x7ff, 0x4, {0x3, @vbi={0x919b, 0x0, 0xe0, 0x42303159, [0xf92b, 0x40], [0x0, 0xfffffffb], 0x1}}, 0x8}) 23:35:53 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x9, @pix_mp}) 23:35:53 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0xffffffff, 0x1, 0x0, "475d003fe11ed59bb805dfd0f1c605000000fe00220000000000000000001de0", 0x3031334d}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x0, @raw_data="c989128cf0dfb1f10e286f94a1f3cbd7d106de9dfd995742e1a59dac18934d905c94a3b6c5a287f59994a7586dfff00da531d05a4460189e70bf85ccac1bdf69801957ffc4c60b48bc98a79f27a5f5405f70e70b3f71113c2d71e04491003be757edee651aea9ee677c7fb8b88bb5b7c20a06faa4afa5319646071dc4555bdf577e967c07e8e1b204ceb93136e961f12ffc462466cd7cae01b555979664ce830c815d7238d4b2d74fdf96548333335328e4c7b91db0a086ea4d43ef47469cc8978142d23d72c95bc"}) 23:35:53 executing program 2: ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000000)={0x8, 0x36314d59, 0x2, @stepwise={0x6d1, 0x10001, 0x8, 0x1}}) 23:35:53 executing program 1: socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) 23:35:53 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x80}, {0x4001}, {0xfffffffc}], 0x0, 0x9, 0x8}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000000)={0x7, 0x7ff, 0x4, {0x3, @vbi={0x919b, 0x0, 0xe0, 0x42303159, [0xf92b, 0x40], [0x0, 0xfffffffb], 0x1}}, 0x8}) 23:35:53 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_dccp_int(r3, 0x21, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400d0}, 0xd188639f478ba79f) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) accept4$vsock_stream(r2, &(0x7f00000002c0)={0x28, 0x0, 0x0, @local}, 0x10, 0x80000) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r6, r5, 0x0, 0x8, &(0x7f0000000300)='!@[\x12,\\-\x00'}, 0x30) socket$inet_dccp(0x2, 0x6, 0x0) 23:35:53 executing program 4: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000580)={0x9, @pix_mp}) 23:35:53 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0xffffffff, 0x1, 0x0, "475d003fe11ed59bb805dfd0f1c605000000fe00220000000000000000001de0", 0x3031334d}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x0, @raw_data="c989128cf0dfb1f10e286f94a1f3cbd7d106de9dfd995742e1a59dac18934d905c94a3b6c5a287f59994a7586dfff00da531d05a4460189e70bf85ccac1bdf69801957ffc4c60b48bc98a79f27a5f5405f70e70b3f71113c2d71e04491003be757edee651aea9ee677c7fb8b88bb5b7c20a06faa4afa5319646071dc4555bdf577e967c07e8e1b204ceb93136e961f12ffc462466cd7cae01b555979664ce830c815d7238d4b2d74fdf96548333335328e4c7b91db0a086ea4d43ef47469cc8978142d23d72c95bc"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0xffffffff, 0x1, 0x0, "475d003fe11ed59bb805dfd0f1c605000000fe00220000000000000000001de0", 0x3031334d}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x0, @raw_data="c989128cf0dfb1f10e286f94a1f3cbd7d106de9dfd995742e1a59dac18934d905c94a3b6c5a287f59994a7586dfff00da531d05a4460189e70bf85ccac1bdf69801957ffc4c60b48bc98a79f27a5f5405f70e70b3f71113c2d71e04491003be757edee651aea9ee677c7fb8b88bb5b7c20a06faa4afa5319646071dc4555bdf577e967c07e8e1b204ceb93136e961f12ffc462466cd7cae01b555979664ce830c815d7238d4b2d74fdf96548333335328e4c7b91db0a086ea4d43ef47469cc8978142d23d72c95bc"}) (async) 23:35:53 executing program 1: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 23:35:53 executing program 2: ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000000)={0x8, 0x36314d59, 0x2, @stepwise={0x6d1, 0x10001, 0x8, 0x1}}) 23:35:53 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x80}, {0x4001}, {0xfffffffc}], 0x0, 0x9, 0x8}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000000)={0x7, 0x7ff, 0x4, {0x3, @vbi={0x919b, 0x0, 0xe0, 0x42303159, [0xf92b, 0x40], [0x0, 0xfffffffb], 0x1}}, 0x8}) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x80}, {0x4001}, {0xfffffffc}], 0x0, 0x9, 0x8}}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000000)={0x7, 0x7ff, 0x4, {0x3, @vbi={0x919b, 0x0, 0xe0, 0x42303159, [0xf92b, 0x40], [0x0, 0xfffffffb], 0x1}}, 0x8}) (async) 23:35:53 executing program 4: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000580)={0x9, @pix_mp}) 23:35:53 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_dccp_int(r3, 0x21, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400d0}, 0xd188639f478ba79f) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) accept4$vsock_stream(r2, &(0x7f00000002c0)={0x28, 0x0, 0x0, @local}, 0x10, 0x80000) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r6, r5, 0x0, 0x8, &(0x7f0000000300)='!@[\x12,\\-\x00'}, 0x30) 23:35:53 executing program 2: r0 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x8, 0x36314d59, 0x2, @stepwise={0x6d1, 0x10001, 0x8, 0x1}}) 23:35:53 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0xffffffff, 0x1, 0x0, "475d003fe11ed59bb805dfd0f1c605000000fe00220000000000000000001de0", 0x3031334d}) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x0, @raw_data="c989128cf0dfb1f10e286f94a1f3cbd7d106de9dfd995742e1a59dac18934d905c94a3b6c5a287f59994a7586dfff00da531d05a4460189e70bf85ccac1bdf69801957ffc4c60b48bc98a79f27a5f5405f70e70b3f71113c2d71e04491003be757edee651aea9ee677c7fb8b88bb5b7c20a06faa4afa5319646071dc4555bdf577e967c07e8e1b204ceb93136e961f12ffc462466cd7cae01b555979664ce830c815d7238d4b2d74fdf96548333335328e4c7b91db0a086ea4d43ef47469cc8978142d23d72c95bc"}) 23:35:53 executing program 1: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 23:35:53 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x6}}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) 23:35:53 executing program 2: r0 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x8, 0x36314d59, 0x2, @stepwise={0x6d1, 0x10001, 0x8, 0x1}}) 23:35:53 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_dccp_int(r3, 0x21, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400d0}, 0xd188639f478ba79f) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) accept4$vsock_stream(r2, &(0x7f00000002c0)={0x28, 0x0, 0x0, @local}, 0x10, 0x80000) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) gettid() 23:35:53 executing program 4: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000580)={0x9, @pix_mp}) 23:35:53 executing program 1: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 23:35:53 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000000)={0x2, @pix_mp={0x8, 0xfffffffd, 0x37303250, 0x2, 0x5, [{0x0, 0x7fffffff}, {0x1, 0x400}, {0x1, 0x1f}, {0x2, 0xf3d5}, {0x0, 0x8}, {0xc9, 0x6}, {0x1, 0x1}, {0x6, 0x200}], 0x2, 0x5, 0x1, 0x1811df204ecf53ab}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x2, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:53 executing program 2: r0 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x8, 0x36314d59, 0x2, @stepwise={0x6d1, 0x10001, 0x8, 0x1}}) 23:35:54 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_dccp_int(r3, 0x21, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400d0}, 0xd188639f478ba79f) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) accept4$vsock_stream(r2, &(0x7f00000002c0)={0x28, 0x0, 0x0, @local}, 0x10, 0x80000) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 23:35:54 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x6}}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x6}}) (async) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) (async) 23:35:54 executing program 4: r0 = syz_open_dev$vim2m(0x0, 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x9, @pix_mp}) 23:35:54 executing program 1: r0 = socket(0x18, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xf0ff7f) 23:35:54 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000000)={0x2, @pix_mp={0x8, 0xfffffffd, 0x37303250, 0x2, 0x5, [{0x0, 0x7fffffff}, {0x1, 0x400}, {0x1, 0x1f}, {0x2, 0xf3d5}, {0x0, 0x8}, {0xc9, 0x6}, {0x1, 0x1}, {0x6, 0x200}], 0x2, 0x5, 0x1, 0x1811df204ecf53ab}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x2, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000000)={0x2, @pix_mp={0x8, 0xfffffffd, 0x37303250, 0x2, 0x5, [{0x0, 0x7fffffff}, {0x1, 0x400}, {0x1, 0x1f}, {0x2, 0xf3d5}, {0x0, 0x8}, {0xc9, 0x6}, {0x1, 0x1}, {0x6, 0x200}], 0x2, 0x5, 0x1, 0x1811df204ecf53ab}}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x2, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:35:54 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x8, 0x36314d59, 0x2, @stepwise={0x6d1, 0x10001, 0x8, 0x1}}) 23:35:54 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x6}}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x6}}) (async) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) (async) 23:35:54 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_dccp_int(r3, 0x21, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400d0}, 0xd188639f478ba79f) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) accept4$vsock_stream(r2, &(0x7f00000002c0)={0x28, 0x0, 0x0, @local}, 0x10, 0x80000) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) 23:35:54 executing program 4: r0 = syz_open_dev$vim2m(0x0, 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x9, @pix_mp}) 23:35:54 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285667, &(0x7f00000001c0)={0x0, @pix={0xe7ff}}) 23:35:54 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000000)={0x2, @pix_mp={0x8, 0xfffffffd, 0x37303250, 0x2, 0x5, [{0x0, 0x7fffffff}, {0x1, 0x400}, {0x1, 0x1f}, {0x2, 0xf3d5}, {0x0, 0x8}, {0xc9, 0x6}, {0x1, 0x1}, {0x6, 0x200}], 0x2, 0x5, 0x1, 0x1811df204ecf53ab}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x2, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:54 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x8, 0x36314d59, 0x2, @stepwise={0x6d1, 0x10001, 0x8, 0x1}}) 23:35:54 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_dccp_int(r3, 0x21, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400d0}, 0xd188639f478ba79f) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) accept4$vsock_stream(r2, &(0x7f00000002c0)={0x28, 0x0, 0x0, @local}, 0x10, 0x80000) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 23:35:54 executing program 4: r0 = syz_open_dev$vim2m(0x0, 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x9, @pix_mp}) 23:35:54 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:54 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000140)={0x0, 0xff, 0x9e, 0x4000}) ioctl$PTP_ENABLE_PPS(r0, 0x40043d04, 0x1) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000180)=0x75706cf23ce0c2a0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x2) ioctl$PTP_ENABLE_PPS(r1, 0x40043d04, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f00000001c0)={0xa21, 0x3234564e, 0x3, @stepwise={0x7, 0x7f, 0x1, 0x401, 0x6, 0x8}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x1, 0x9598033cdf91d447, 0x3, "475d0088e11ed59bb805dfd0f1000000000000000000008000"}) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 23:35:54 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0xe62d, 0x2) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)=@mmap={0x7ff, 0x3, 0x4, 0x4, 0x0, {0x77359400}, {0xf, 0x1, 0x5, 0x8, 0x0, 0x1, "7716ef09"}, 0x1, 0x1, {}, 0x2, 0x0, r2}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000080)=@userptr={0x8651, 0x3, 0x4, 0x0, 0x4, {0x77359400}, {0x3, 0x0, 0xff, 0x0, 0x5, 0x2, "d316305f"}, 0x6, 0x2, {&(0x7f0000000040)}, 0x800, 0x0, r2}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x0, @pix_mp={0x100000, 0xfffffffc, 0x0, 0x0, 0x0, [{0x0, 0x6}, {0x0, 0xfffff800}, {}, {}, {0x0, 0x5}, {0x5, 0x4}, {0x200}, {0xfffffffe, 0x6}], 0x0, 0x1, 0x0, 0x0, 0x6}}) 23:35:54 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x9, @pix_mp}) 23:35:54 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x8, 0x36314d59, 0x2, @stepwise={0x6d1, 0x10001, 0x8, 0x1}}) 23:35:54 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:54 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_dccp_int(r3, 0x21, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400d0}, 0xd188639f478ba79f) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) accept4$vsock_stream(r2, &(0x7f00000002c0)={0x28, 0x0, 0x0, @local}, 0x10, 0x80000) 23:35:54 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000140)={0x0, 0xff, 0x9e, 0x4000}) ioctl$PTP_ENABLE_PPS(r0, 0x40043d04, 0x1) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000180)=0x75706cf23ce0c2a0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x2) (async) ioctl$PTP_ENABLE_PPS(r1, 0x40043d04, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async, rerun: 64) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f00000001c0)={0xa21, 0x3234564e, 0x3, @stepwise={0x7, 0x7f, 0x1, 0x401, 0x6, 0x8}}) (rerun: 64) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x1, 0x9598033cdf91d447, 0x3, "475d0088e11ed59bb805dfd0f1000000000000000000008000"}) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 23:35:54 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0xe62d, 0x2) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)=@mmap={0x7ff, 0x3, 0x4, 0x4, 0x0, {0x77359400}, {0xf, 0x1, 0x5, 0x8, 0x0, 0x1, "7716ef09"}, 0x1, 0x1, {}, 0x2, 0x0, r2}) (async) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000080)=@userptr={0x8651, 0x3, 0x4, 0x0, 0x4, {0x77359400}, {0x3, 0x0, 0xff, 0x0, 0x5, 0x2, "d316305f"}, 0x6, 0x2, {&(0x7f0000000040)}, 0x800, 0x0, r2}) (async, rerun: 32) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x0, @pix_mp={0x100000, 0xfffffffc, 0x0, 0x0, 0x0, [{0x0, 0x6}, {0x0, 0xfffff800}, {}, {}, {0x0, 0x5}, {0x5, 0x4}, {0x200}, {0xfffffffe, 0x6}], 0x0, 0x1, 0x0, 0x0, 0x6}}) (rerun: 32) 23:35:54 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x9, @pix_mp}) 23:35:54 executing program 2: syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000000)={0x8, 0x36314d59, 0x2, @stepwise={0x6d1, 0x10001, 0x8, 0x1}}) 23:35:54 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) (async) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000140)={0x0, 0xff, 0x9e, 0x4000}) (async) ioctl$PTP_ENABLE_PPS(r0, 0x40043d04, 0x1) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000180)=0x75706cf23ce0c2a0) (async, rerun: 64) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x2) (async, rerun: 64) ioctl$PTP_ENABLE_PPS(r1, 0x40043d04, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f00000001c0)={0xa21, 0x3234564e, 0x3, @stepwise={0x7, 0x7f, 0x1, 0x401, 0x6, 0x8}}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x1, 0x9598033cdf91d447, 0x3, "475d0088e11ed59bb805dfd0f1000000000000000000008000"}) (async, rerun: 32) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (rerun: 32) 23:35:54 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async, rerun: 32) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0xe62d, 0x2) (rerun: 32) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async, rerun: 64) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)=@mmap={0x7ff, 0x3, 0x4, 0x4, 0x0, {0x77359400}, {0xf, 0x1, 0x5, 0x8, 0x0, 0x1, "7716ef09"}, 0x1, 0x1, {}, 0x2, 0x0, r2}) (rerun: 64) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000080)=@userptr={0x8651, 0x3, 0x4, 0x0, 0x4, {0x77359400}, {0x3, 0x0, 0xff, 0x0, 0x5, 0x2, "d316305f"}, 0x6, 0x2, {&(0x7f0000000040)}, 0x800, 0x0, r2}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x0, @pix_mp={0x100000, 0xfffffffc, 0x0, 0x0, 0x0, [{0x0, 0x6}, {0x0, 0xfffff800}, {}, {}, {0x0, 0x5}, {0x5, 0x4}, {0x200}, {0xfffffffe, 0x6}], 0x0, 0x1, 0x0, 0x0, 0x6}}) 23:35:54 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:54 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_dccp_int(r2, 0x21, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400d0}, 0xd188639f478ba79f) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) 23:35:54 executing program 2: syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000000)={0x8, 0x36314d59, 0x2, @stepwise={0x6d1, 0x10001, 0x8, 0x1}}) 23:35:54 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x9, @pix_mp}) 23:35:54 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x38) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0x1, 0x3}) 23:35:54 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="00020000", @ANYRES16=0x0, @ANYBLOB="08002dbd7000fcdbdf250000000008000100", @ANYRES32=r1, @ANYBLOB="7400028038000100240001006c625f73746174725f726566726573685f696e74657276616c000000000000000500030003000000080004000900000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000800000008000100", @ANYRES32=0x0, @ANYBLOB="6801028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400190c00003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040002000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000700000008000600", @ANYRES32=r3, @ANYBLOB="38000100240001006d636173745f72650000696e5f696e74657276616c0000000000000000000000050003000300000008000400ffffffff40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e0000"], 0x200}, 0x1, 0x0, 0x0, 0x40011}, 0x20048004) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:35:54 executing program 1: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405608, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:54 executing program 2: syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000000)={0x8, 0x36314d59, 0x2, @stepwise={0x6d1, 0x10001, 0x8, 0x1}}) 23:35:54 executing program 4: syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000580)={0x9, @pix_mp}) 23:35:54 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_dccp_int(r2, 0x21, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400d0}, 0xd188639f478ba79f) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 23:35:54 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x38) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0x1, 0x3}) 23:35:54 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="00020000", @ANYRES16=0x0, @ANYBLOB="08002dbd7000fcdbdf250000000008000100", @ANYRES32=r1, @ANYBLOB="7400028038000100240001006c625f73746174725f726566726573685f696e74657276616c000000000000000500030003000000080004000900000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000800000008000100", @ANYRES32=0x0, @ANYBLOB="6801028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400190c00003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040002000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000700000008000600", @ANYRES32=r3, @ANYBLOB="38000100240001006d636173745f72650000696e5f696e74657276616c0000000000000000000000050003000300000008000400ffffffff40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e0000"], 0x200}, 0x1, 0x0, 0x0, 0x40011}, 0x20048004) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48) (async) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="00020000", @ANYRES16=0x0, @ANYBLOB="08002dbd7000fcdbdf250000000008000100", @ANYRES32=r1, @ANYBLOB="7400028038000100240001006c625f73746174725f726566726573685f696e74657276616c000000000000000500030003000000080004000900000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000800000008000100", @ANYRES32=0x0, @ANYBLOB="6801028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400190c00003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040002000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000700000008000600", @ANYRES32=r3, @ANYBLOB="38000100240001006d636173745f72650000696e5f696e74657276616c0000000000000000000000050003000300000008000400ffffffff40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e0000"], 0x200}, 0x1, 0x0, 0x0, 0x40011}, 0x20048004) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) 23:35:54 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0) 23:35:54 executing program 1: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405608, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:54 executing program 4: syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000580)={0x9, @pix_mp}) 23:35:54 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x38) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0x1, 0x3}) 23:35:54 executing program 3: r0 = socket(0x18, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_dccp_int(r2, 0x21, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400d0}, 0xd188639f478ba79f) 23:35:54 executing program 1: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405608, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:55 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0) 23:35:55 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48) (async) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="00020000", @ANYRES16=0x0, @ANYBLOB="08002dbd7000fcdbdf250000000008000100", @ANYRES32=r1, @ANYBLOB="7400028038000100240001006c625f73746174725f726566726573685f696e74657276616c000000000000000500030003000000080004000900000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000800000008000100", @ANYRES32=0x0, @ANYBLOB="6801028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400190c00003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040002000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000700000008000600", @ANYRES32=r3, @ANYBLOB="38000100240001006d636173745f72650000696e5f696e74657276616c0000000000000000000000050003000300000008000400ffffffff40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e0000"], 0x200}, 0x1, 0x0, 0x0, 0x40011}, 0x20048004) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:35:55 executing program 4: syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000580)={0x9, @pix_mp}) 23:35:55 executing program 3: socket(0x18, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_dccp_int(r1, 0x21, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) 23:35:55 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:55 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0) 23:35:55 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x2, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:55 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0xfffffffc}], 0x0, 0x0, 0x0, 0x0, 0x4}}) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f00000000c0)=0x3) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x1, @win={{0xffffffff, 0x2, 0x9, 0x400}, 0x1, 0x1, &(0x7f0000000080)={{0x4, 0x9, 0x1, 0x5}, &(0x7f0000000040)={{0xfff, 0x0, 0x1, 0xfffff8db}}}, 0x617, &(0x7f0000000140)="78c52f775276bb955fe12ca6b4c16bf6e700416528c0f5bb23d5a39457402d3d58a9478a10cd56f06dec6b231ada99e4893555e1874626da231fd451c25b0e1feac2a23748c1dc136f37b6da9c43ec41fd2a999b2b1f0f284ac5530ba59636e9ebbb2d360a297294da3a265ff5aad85f6a6467591d8b89c965c4b92ae4783fa5a8511dd954f60fa8c592ae493fbb6b9589336546abe4529ec6ca52a01ab2677b55a0fa89776aa1d866f6af1baeeb2184e8de4c440a42edbd2dc60c570a7f38827f4f791622d9f36e4a7499192044df022659256b7b90c1e72c6b4a0a5581af529b866ca4a152261d60d682bedec8fdbeb6b958bb57d2", 0x8}}) 23:35:55 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:55 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x2, @stepwise={0x6d1, 0x10001, 0x8, 0x1}}) 23:35:55 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0xfffffffc}], 0x0, 0x0, 0x0, 0x0, 0x4}}) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f00000000c0)=0x3) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x1, @win={{0xffffffff, 0x2, 0x9, 0x400}, 0x1, 0x1, &(0x7f0000000080)={{0x4, 0x9, 0x1, 0x5}, &(0x7f0000000040)={{0xfff, 0x0, 0x1, 0xfffff8db}}}, 0x617, &(0x7f0000000140)="78c52f775276bb955fe12ca6b4c16bf6e700416528c0f5bb23d5a39457402d3d58a9478a10cd56f06dec6b231ada99e4893555e1874626da231fd451c25b0e1feac2a23748c1dc136f37b6da9c43ec41fd2a999b2b1f0f284ac5530ba59636e9ebbb2d360a297294da3a265ff5aad85f6a6467591d8b89c965c4b92ae4783fa5a8511dd954f60fa8c592ae493fbb6b9589336546abe4529ec6ca52a01ab2677b55a0fa89776aa1d866f6af1baeeb2184e8de4c440a42edbd2dc60c570a7f38827f4f791622d9f36e4a7499192044df022659256b7b90c1e72c6b4a0a5581af529b866ca4a152261d60d682bedec8fdbeb6b958bb57d2", 0x8}}) 23:35:55 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) 23:35:55 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x2, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:55 executing program 3: socket(0x18, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)) 23:35:55 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x0, 0x2, @stepwise={0x6d1, 0x10001, 0x8, 0x1}}) 23:35:55 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:55 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) 23:35:55 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0xfffffffc}], 0x0, 0x0, 0x0, 0x0, 0x4}}) (async) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f00000000c0)=0x3) (async) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x1, @win={{0xffffffff, 0x2, 0x9, 0x400}, 0x1, 0x1, &(0x7f0000000080)={{0x4, 0x9, 0x1, 0x5}, &(0x7f0000000040)={{0xfff, 0x0, 0x1, 0xfffff8db}}}, 0x617, &(0x7f0000000140)="78c52f775276bb955fe12ca6b4c16bf6e700416528c0f5bb23d5a39457402d3d58a9478a10cd56f06dec6b231ada99e4893555e1874626da231fd451c25b0e1feac2a23748c1dc136f37b6da9c43ec41fd2a999b2b1f0f284ac5530ba59636e9ebbb2d360a297294da3a265ff5aad85f6a6467591d8b89c965c4b92ae4783fa5a8511dd954f60fa8c592ae493fbb6b9589336546abe4529ec6ca52a01ab2677b55a0fa89776aa1d866f6af1baeeb2184e8de4c440a42edbd2dc60c570a7f38827f4f791622d9f36e4a7499192044df022659256b7b90c1e72c6b4a0a5581af529b866ca4a152261d60d682bedec8fdbeb6b958bb57d2", 0x8}}) 23:35:55 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x2, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:55 executing program 3: socket(0x18, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)) 23:35:55 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x0, 0x2, @stepwise={0x6d1, 0x10001, 0x8, 0x1}}) 23:35:55 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405608, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:55 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x1, 0x10000, 0x8003f, 0x4080}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000140)={0x2, @raw_data="7845b7c063e7846b6c9dbc970af7854f2ee2bbf566601e08aa2f97764694e5a0c1d7394607a1d5996f86c35c3caf976228fb80da8a9fa95f05605cbdd5f8b51c6f697ff4c1b5386855d3703d536289450792f3981f8abdefe8e522fbfacd6ece9eefc1d23da4771221d6fe5de59b3a098f5b3ca8f835747830e49ed162cfbb592338aedc67655a17778ae8d279965a8117d120c3e8b4334386a12fdc284ad731bef033ede0799e8cee78ddfc08a2badf0ed3d483a89d1b9d5ec9fc3ca0d8613e40519e708b9e7c77"}) 23:35:55 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) 23:35:55 executing program 3: socket(0x18, 0x0, 0x0) socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)) 23:35:55 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000180)={0x3, "63a7f476df65274e85efc0c6f3e44d31bc8481b8578e29f6b069e8359048a1bc", 0x3, 0x200, 0x6, 0x3, 0x4, 0x2, 0x7ff, 0xd94}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f00000000c0)=0x7) 23:35:55 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x0, 0x2, @stepwise={0x6d1, 0x10001, 0x8, 0x1}}) 23:35:55 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async, rerun: 64) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x1, 0x10000, 0x8003f, 0x4080}) (rerun: 64) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000140)={0x2, @raw_data="7845b7c063e7846b6c9dbc970af7854f2ee2bbf566601e08aa2f97764694e5a0c1d7394607a1d5996f86c35c3caf976228fb80da8a9fa95f05605cbdd5f8b51c6f697ff4c1b5386855d3703d536289450792f3981f8abdefe8e522fbfacd6ece9eefc1d23da4771221d6fe5de59b3a098f5b3ca8f835747830e49ed162cfbb592338aedc67655a17778ae8d279965a8117d120c3e8b4334386a12fdc284ad731bef033ede0799e8cee78ddfc08a2badf0ed3d483a89d1b9d5ec9fc3ca0d8613e40519e708b9e7c77"}) 23:35:55 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405608, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:55 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise={0x6d1, 0x10001, 0x8, 0x1}}) 23:35:55 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x0, @pix_mp}) 23:35:55 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000180)={0x3, "63a7f476df65274e85efc0c6f3e44d31bc8481b8578e29f6b069e8359048a1bc", 0x3, 0x200, 0x6, 0x3, 0x4, 0x2, 0x7ff, 0xd94}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async, rerun: 64) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f00000000c0)=0x7) 23:35:55 executing program 3: socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)) 23:35:55 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise={0x0, 0x10001, 0x8, 0x1}}) 23:35:55 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405608, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:55 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x0, @pix_mp}) 23:35:55 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x1, 0x10000, 0x8003f, 0x4080}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000140)={0x2, @raw_data="7845b7c063e7846b6c9dbc970af7854f2ee2bbf566601e08aa2f97764694e5a0c1d7394607a1d5996f86c35c3caf976228fb80da8a9fa95f05605cbdd5f8b51c6f697ff4c1b5386855d3703d536289450792f3981f8abdefe8e522fbfacd6ece9eefc1d23da4771221d6fe5de59b3a098f5b3ca8f835747830e49ed162cfbb592338aedc67655a17778ae8d279965a8117d120c3e8b4334386a12fdc284ad731bef033ede0799e8cee78ddfc08a2badf0ed3d483a89d1b9d5ec9fc3ca0d8613e40519e708b9e7c77"}) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x1, 0x10000, 0x8003f, 0x4080}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000140)={0x2, @raw_data="7845b7c063e7846b6c9dbc970af7854f2ee2bbf566601e08aa2f97764694e5a0c1d7394607a1d5996f86c35c3caf976228fb80da8a9fa95f05605cbdd5f8b51c6f697ff4c1b5386855d3703d536289450792f3981f8abdefe8e522fbfacd6ece9eefc1d23da4771221d6fe5de59b3a098f5b3ca8f835747830e49ed162cfbb592338aedc67655a17778ae8d279965a8117d120c3e8b4334386a12fdc284ad731bef033ede0799e8cee78ddfc08a2badf0ed3d483a89d1b9d5ec9fc3ca0d8613e40519e708b9e7c77"}) (async) 23:35:55 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise={0x0, 0x0, 0x8, 0x1}}) 23:35:55 executing program 3: socketpair(0x0, 0x4, 0x7fffffff, &(0x7f0000000100)) 23:35:55 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000180)={0x3, "63a7f476df65274e85efc0c6f3e44d31bc8481b8578e29f6b069e8359048a1bc", 0x3, 0x200, 0x6, 0x3, 0x4, 0x2, 0x7ff, 0xd94}) (async, rerun: 64) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) (async, rerun: 64) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f00000000c0)=0x7) 23:35:55 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise={0x0, 0x0, 0x0, 0x1}}) 23:35:55 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, 0x0) 23:35:55 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x0, @pix_mp}) 23:35:55 executing program 5: syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0xd17b) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x3, @pix_mp={0x0, 0x0, 0x38414762, 0x0, 0x0, [{}, {0xffff}, {0x0, 0x7}, {}, {}, {}, {}, {0x14000}], 0x0, 0x0, 0x8, 0x0, 0x2}}) 23:35:55 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@multiplanar_overlay={0x2, 0x3, 0x4, 0x0, 0xff, {r2, r3/1000+10000}, {0x1, 0x2, 0x80, 0xf7, 0xb9, 0x0, "678e86bb"}, 0x7, 0x3, {&(0x7f0000000040)=[{0x7f, 0x401, {0xa5ab}, 0x4}, {0x400, 0x80000000, {0x7}, 0x80000000}]}, 0x6, 0x0, r4}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x1, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:55 executing program 3: socketpair(0x0, 0x4, 0x7fffffff, &(0x7f0000000100)) 23:35:55 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:35:55 executing program 4: socketpair(0x0, 0x4, 0x7fffffff, &(0x7f0000000100)) 23:35:55 executing program 5: syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0xd17b) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x3, @pix_mp={0x0, 0x0, 0x38414762, 0x0, 0x0, [{}, {0xffff}, {0x0, 0x7}, {}, {}, {}, {}, {0x14000}], 0x0, 0x0, 0x8, 0x0, 0x2}}) 23:35:55 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) (async) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@multiplanar_overlay={0x2, 0x3, 0x4, 0x0, 0xff, {r2, r3/1000+10000}, {0x1, 0x2, 0x80, 0xf7, 0xb9, 0x0, "678e86bb"}, 0x7, 0x3, {&(0x7f0000000040)=[{0x7f, 0x401, {0xa5ab}, 0x4}, {0x400, 0x80000000, {0x7}, 0x80000000}]}, 0x6, 0x0, r4}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x1, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:55 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, 0x0) 23:35:56 executing program 3: socketpair(0x0, 0x4, 0x7fffffff, &(0x7f0000000100)) 23:35:56 executing program 2: socket(0x18, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_dccp_int(r1, 0x21, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) 23:35:56 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x2, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:56 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) (async) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@multiplanar_overlay={0x2, 0x3, 0x4, 0x0, 0xff, {r2, r3/1000+10000}, {0x1, 0x2, 0x80, 0xf7, 0xb9, 0x0, "678e86bb"}, 0x7, 0x3, {&(0x7f0000000040)=[{0x7f, 0x401, {0xa5ab}, 0x4}, {0x400, 0x80000000, {0x7}, 0x80000000}]}, 0x6, 0x0, r4}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x1, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:56 executing program 4: r0 = socket(0x18, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_dccp_int(r3, 0x21, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400d0}, 0xd188639f478ba79f) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) accept4$vsock_stream(r2, &(0x7f00000002c0)={0x28, 0x0, 0x0, @local}, 0x10, 0x80000) 23:35:56 executing program 2: socket(0x18, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_dccp_int(r1, 0x21, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) 23:35:56 executing program 5: syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0xd17b) (async) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x3, @pix_mp={0x0, 0x0, 0x38414762, 0x0, 0x0, [{}, {0xffff}, {0x0, 0x7}, {}, {}, {}, {}, {0x14000}], 0x0, 0x0, 0x8, 0x0, 0x2}}) 23:35:56 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x10000, 0x4}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) write$uinput_user_dev(r2, &(0x7f0000000180)={'syz1\x00', {0x4, 0x5, 0x5, 0x1}, 0x4b, [0x0, 0x5, 0x9, 0x7, 0x4, 0x3, 0x9, 0x8, 0x352, 0x7, 0x8, 0x7, 0x5, 0x6, 0xb1, 0x2, 0x4c7c2202, 0x2, 0x2d99839b, 0x7, 0xff, 0x10001, 0x9, 0x2, 0xa3e5, 0x40, 0xfff, 0x401, 0x8, 0x5, 0x1, 0x80000000, 0x3, 0x8000, 0xffffffff, 0x7039, 0x7, 0x6, 0x1f, 0x8001, 0x0, 0xfffffffb, 0x409, 0x0, 0xfff, 0x7fff, 0x86a6, 0x4, 0x8, 0x4, 0x4, 0x5, 0xca89, 0xff, 0x200, 0x1, 0x8, 0x8, 0x3, 0x748, 0x4, 0x1, 0x1, 0xfffffffc], [0x0, 0xd0, 0x6, 0x8, 0x8, 0x464, 0x8001, 0x8001, 0x1, 0x5, 0x4, 0x80000001, 0x1000, 0x0, 0x6, 0x8, 0x100, 0xfffffffa, 0xb8f5, 0x4, 0x0, 0x1, 0x8, 0xc7ed, 0xffffffff, 0x7f, 0x6, 0x7, 0x9, 0xef, 0x0, 0x80000001, 0x63, 0x2, 0x2, 0x40, 0x4, 0xff, 0x4, 0xdc, 0x1ee, 0x3f, 0x81, 0x4, 0x101, 0x401, 0xffffffff, 0x0, 0x1ff, 0x80, 0xfffffffd, 0x7, 0x4, 0x3, 0x7, 0x200, 0x2f12aca1, 0x200, 0x7fffffff, 0x9, 0x40, 0x5, 0x3f, 0x9], [0xd4, 0x4, 0x7, 0x1ff, 0x5, 0x20, 0x6, 0x400, 0xc5, 0x400, 0x7, 0xffff, 0x401, 0x6, 0x4, 0x6, 0x0, 0x3, 0x2, 0x101, 0x7, 0x1000, 0x8000, 0x4, 0xfffff001, 0x8, 0x59, 0x2, 0x0, 0xfffffffb, 0x20, 0xabb, 0x2, 0x1, 0x0, 0x56, 0x7f, 0x2, 0x26, 0x0, 0x6, 0xb8, 0x8, 0xfffffffd, 0x9, 0xfff, 0x34, 0x9, 0x0, 0x101, 0xe80c, 0x5, 0x3, 0xffffff80, 0x40, 0x10001, 0x8001, 0x8, 0x7, 0x0, 0x9, 0x4, 0x200, 0x8], [0x1, 0x3, 0x0, 0x0, 0x0, 0x100, 0x7, 0x17, 0x1, 0x9, 0x80000001, 0x40, 0x8, 0x1000, 0x4, 0x80000000, 0x1, 0x8, 0x2, 0x5, 0x9, 0x96, 0xebe0, 0x1, 0x5, 0x8, 0x9, 0x7, 0xfffffffd, 0xffffffff, 0x7fffffff, 0x0, 0x9, 0xfff, 0x8, 0x1, 0x401, 0x1d73, 0x2, 0x3, 0xfff, 0x5635, 0x80000001, 0x3, 0x5, 0x243, 0x7, 0x2, 0xffffffff, 0x5, 0x2, 0x2, 0x20000000, 0x8, 0x2, 0xffffffff, 0xfffffff9, 0x8, 0x6, 0x4, 0xfffffffd, 0x203, 0x8, 0x48]}, 0x4a8) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_ERASE(r1, 0xc06855c8, &(0x7f0000000040)) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000600)={0x2, 0x4, 0x3, 0x0, 0x7}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x3c) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000640)={r2}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000680)={0x0, 0xd0}, &(0x7f00000006c0)=0x8) 23:35:56 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0585609, &(0x7f0000000580)={0x1, @pix_mp}) 23:35:56 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x6, 0x0, [{}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x8000}]}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x1, 0x0, 0x3ff, 0x880}) 23:35:56 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, 0x0) 23:35:56 executing program 3: socketpair(0x23, 0x0, 0x7fffffff, &(0x7f0000000100)) 23:35:56 executing program 2: socket(0x18, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_dccp_int(r1, 0x21, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) 23:35:56 executing program 4: r0 = socket(0x18, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x300}, 0x0) 23:35:56 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x10000, 0x4}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) write$uinput_user_dev(r2, &(0x7f0000000180)={'syz1\x00', {0x4, 0x5, 0x5, 0x1}, 0x4b, [0x0, 0x5, 0x9, 0x7, 0x4, 0x3, 0x9, 0x8, 0x352, 0x7, 0x8, 0x7, 0x5, 0x6, 0xb1, 0x2, 0x4c7c2202, 0x2, 0x2d99839b, 0x7, 0xff, 0x10001, 0x9, 0x2, 0xa3e5, 0x40, 0xfff, 0x401, 0x8, 0x5, 0x1, 0x80000000, 0x3, 0x8000, 0xffffffff, 0x7039, 0x7, 0x6, 0x1f, 0x8001, 0x0, 0xfffffffb, 0x409, 0x0, 0xfff, 0x7fff, 0x86a6, 0x4, 0x8, 0x4, 0x4, 0x5, 0xca89, 0xff, 0x200, 0x1, 0x8, 0x8, 0x3, 0x748, 0x4, 0x1, 0x1, 0xfffffffc], [0x0, 0xd0, 0x6, 0x8, 0x8, 0x464, 0x8001, 0x8001, 0x1, 0x5, 0x4, 0x80000001, 0x1000, 0x0, 0x6, 0x8, 0x100, 0xfffffffa, 0xb8f5, 0x4, 0x0, 0x1, 0x8, 0xc7ed, 0xffffffff, 0x7f, 0x6, 0x7, 0x9, 0xef, 0x0, 0x80000001, 0x63, 0x2, 0x2, 0x40, 0x4, 0xff, 0x4, 0xdc, 0x1ee, 0x3f, 0x81, 0x4, 0x101, 0x401, 0xffffffff, 0x0, 0x1ff, 0x80, 0xfffffffd, 0x7, 0x4, 0x3, 0x7, 0x200, 0x2f12aca1, 0x200, 0x7fffffff, 0x9, 0x40, 0x5, 0x3f, 0x9], [0xd4, 0x4, 0x7, 0x1ff, 0x5, 0x20, 0x6, 0x400, 0xc5, 0x400, 0x7, 0xffff, 0x401, 0x6, 0x4, 0x6, 0x0, 0x3, 0x2, 0x101, 0x7, 0x1000, 0x8000, 0x4, 0xfffff001, 0x8, 0x59, 0x2, 0x0, 0xfffffffb, 0x20, 0xabb, 0x2, 0x1, 0x0, 0x56, 0x7f, 0x2, 0x26, 0x0, 0x6, 0xb8, 0x8, 0xfffffffd, 0x9, 0xfff, 0x34, 0x9, 0x0, 0x101, 0xe80c, 0x5, 0x3, 0xffffff80, 0x40, 0x10001, 0x8001, 0x8, 0x7, 0x0, 0x9, 0x4, 0x200, 0x8], [0x1, 0x3, 0x0, 0x0, 0x0, 0x100, 0x7, 0x17, 0x1, 0x9, 0x80000001, 0x40, 0x8, 0x1000, 0x4, 0x80000000, 0x1, 0x8, 0x2, 0x5, 0x9, 0x96, 0xebe0, 0x1, 0x5, 0x8, 0x9, 0x7, 0xfffffffd, 0xffffffff, 0x7fffffff, 0x0, 0x9, 0xfff, 0x8, 0x1, 0x401, 0x1d73, 0x2, 0x3, 0xfff, 0x5635, 0x80000001, 0x3, 0x5, 0x243, 0x7, 0x2, 0xffffffff, 0x5, 0x2, 0x2, 0x20000000, 0x8, 0x2, 0xffffffff, 0xfffffff9, 0x8, 0x6, 0x4, 0xfffffffd, 0x203, 0x8, 0x48]}, 0x4a8) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$UI_END_FF_ERASE(r1, 0xc06855c8, &(0x7f0000000040)) (async) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000600)={0x2, 0x4, 0x3, 0x0, 0x7}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x3c) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000640)={r2}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000680)={0x0, 0xd0}, &(0x7f00000006c0)=0x8) 23:35:56 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x6, 0x0, [{}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x8000}]}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x1, 0x0, 0x3ff, 0x880}) 23:35:56 executing program 3: socketpair(0x23, 0x0, 0x0, &(0x7f0000000100)) 23:35:56 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x10000, 0x4}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) write$uinput_user_dev(r2, &(0x7f0000000180)={'syz1\x00', {0x4, 0x5, 0x5, 0x1}, 0x4b, [0x0, 0x5, 0x9, 0x7, 0x4, 0x3, 0x9, 0x8, 0x352, 0x7, 0x8, 0x7, 0x5, 0x6, 0xb1, 0x2, 0x4c7c2202, 0x2, 0x2d99839b, 0x7, 0xff, 0x10001, 0x9, 0x2, 0xa3e5, 0x40, 0xfff, 0x401, 0x8, 0x5, 0x1, 0x80000000, 0x3, 0x8000, 0xffffffff, 0x7039, 0x7, 0x6, 0x1f, 0x8001, 0x0, 0xfffffffb, 0x409, 0x0, 0xfff, 0x7fff, 0x86a6, 0x4, 0x8, 0x4, 0x4, 0x5, 0xca89, 0xff, 0x200, 0x1, 0x8, 0x8, 0x3, 0x748, 0x4, 0x1, 0x1, 0xfffffffc], [0x0, 0xd0, 0x6, 0x8, 0x8, 0x464, 0x8001, 0x8001, 0x1, 0x5, 0x4, 0x80000001, 0x1000, 0x0, 0x6, 0x8, 0x100, 0xfffffffa, 0xb8f5, 0x4, 0x0, 0x1, 0x8, 0xc7ed, 0xffffffff, 0x7f, 0x6, 0x7, 0x9, 0xef, 0x0, 0x80000001, 0x63, 0x2, 0x2, 0x40, 0x4, 0xff, 0x4, 0xdc, 0x1ee, 0x3f, 0x81, 0x4, 0x101, 0x401, 0xffffffff, 0x0, 0x1ff, 0x80, 0xfffffffd, 0x7, 0x4, 0x3, 0x7, 0x200, 0x2f12aca1, 0x200, 0x7fffffff, 0x9, 0x40, 0x5, 0x3f, 0x9], [0xd4, 0x4, 0x7, 0x1ff, 0x5, 0x20, 0x6, 0x400, 0xc5, 0x400, 0x7, 0xffff, 0x401, 0x6, 0x4, 0x6, 0x0, 0x3, 0x2, 0x101, 0x7, 0x1000, 0x8000, 0x4, 0xfffff001, 0x8, 0x59, 0x2, 0x0, 0xfffffffb, 0x20, 0xabb, 0x2, 0x1, 0x0, 0x56, 0x7f, 0x2, 0x26, 0x0, 0x6, 0xb8, 0x8, 0xfffffffd, 0x9, 0xfff, 0x34, 0x9, 0x0, 0x101, 0xe80c, 0x5, 0x3, 0xffffff80, 0x40, 0x10001, 0x8001, 0x8, 0x7, 0x0, 0x9, 0x4, 0x200, 0x8], [0x1, 0x3, 0x0, 0x0, 0x0, 0x100, 0x7, 0x17, 0x1, 0x9, 0x80000001, 0x40, 0x8, 0x1000, 0x4, 0x80000000, 0x1, 0x8, 0x2, 0x5, 0x9, 0x96, 0xebe0, 0x1, 0x5, 0x8, 0x9, 0x7, 0xfffffffd, 0xffffffff, 0x7fffffff, 0x0, 0x9, 0xfff, 0x8, 0x1, 0x401, 0x1d73, 0x2, 0x3, 0xfff, 0x5635, 0x80000001, 0x3, 0x5, 0x243, 0x7, 0x2, 0xffffffff, 0x5, 0x2, 0x2, 0x20000000, 0x8, 0x2, 0xffffffff, 0xfffffff9, 0x8, 0x6, 0x4, 0xfffffffd, 0x203, 0x8, 0x48]}, 0x4a8) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_ERASE(r1, 0xc06855c8, &(0x7f0000000040)) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000600)={0x2, 0x4, 0x3, 0x0, 0x7}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x3c) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000640)={r2}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000680)={0x0, 0xd0}, &(0x7f00000006c0)=0x8) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x10000, 0x4}) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) write$uinput_user_dev(r2, &(0x7f0000000180)={'syz1\x00', {0x4, 0x5, 0x5, 0x1}, 0x4b, [0x0, 0x5, 0x9, 0x7, 0x4, 0x3, 0x9, 0x8, 0x352, 0x7, 0x8, 0x7, 0x5, 0x6, 0xb1, 0x2, 0x4c7c2202, 0x2, 0x2d99839b, 0x7, 0xff, 0x10001, 0x9, 0x2, 0xa3e5, 0x40, 0xfff, 0x401, 0x8, 0x5, 0x1, 0x80000000, 0x3, 0x8000, 0xffffffff, 0x7039, 0x7, 0x6, 0x1f, 0x8001, 0x0, 0xfffffffb, 0x409, 0x0, 0xfff, 0x7fff, 0x86a6, 0x4, 0x8, 0x4, 0x4, 0x5, 0xca89, 0xff, 0x200, 0x1, 0x8, 0x8, 0x3, 0x748, 0x4, 0x1, 0x1, 0xfffffffc], [0x0, 0xd0, 0x6, 0x8, 0x8, 0x464, 0x8001, 0x8001, 0x1, 0x5, 0x4, 0x80000001, 0x1000, 0x0, 0x6, 0x8, 0x100, 0xfffffffa, 0xb8f5, 0x4, 0x0, 0x1, 0x8, 0xc7ed, 0xffffffff, 0x7f, 0x6, 0x7, 0x9, 0xef, 0x0, 0x80000001, 0x63, 0x2, 0x2, 0x40, 0x4, 0xff, 0x4, 0xdc, 0x1ee, 0x3f, 0x81, 0x4, 0x101, 0x401, 0xffffffff, 0x0, 0x1ff, 0x80, 0xfffffffd, 0x7, 0x4, 0x3, 0x7, 0x200, 0x2f12aca1, 0x200, 0x7fffffff, 0x9, 0x40, 0x5, 0x3f, 0x9], [0xd4, 0x4, 0x7, 0x1ff, 0x5, 0x20, 0x6, 0x400, 0xc5, 0x400, 0x7, 0xffff, 0x401, 0x6, 0x4, 0x6, 0x0, 0x3, 0x2, 0x101, 0x7, 0x1000, 0x8000, 0x4, 0xfffff001, 0x8, 0x59, 0x2, 0x0, 0xfffffffb, 0x20, 0xabb, 0x2, 0x1, 0x0, 0x56, 0x7f, 0x2, 0x26, 0x0, 0x6, 0xb8, 0x8, 0xfffffffd, 0x9, 0xfff, 0x34, 0x9, 0x0, 0x101, 0xe80c, 0x5, 0x3, 0xffffff80, 0x40, 0x10001, 0x8001, 0x8, 0x7, 0x0, 0x9, 0x4, 0x200, 0x8], [0x1, 0x3, 0x0, 0x0, 0x0, 0x100, 0x7, 0x17, 0x1, 0x9, 0x80000001, 0x40, 0x8, 0x1000, 0x4, 0x80000000, 0x1, 0x8, 0x2, 0x5, 0x9, 0x96, 0xebe0, 0x1, 0x5, 0x8, 0x9, 0x7, 0xfffffffd, 0xffffffff, 0x7fffffff, 0x0, 0x9, 0xfff, 0x8, 0x1, 0x401, 0x1d73, 0x2, 0x3, 0xfff, 0x5635, 0x80000001, 0x3, 0x5, 0x243, 0x7, 0x2, 0xffffffff, 0x5, 0x2, 0x2, 0x20000000, 0x8, 0x2, 0xffffffff, 0xfffffff9, 0x8, 0x6, 0x4, 0xfffffffd, 0x203, 0x8, 0x48]}, 0x4a8) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$UI_END_FF_ERASE(r1, 0xc06855c8, &(0x7f0000000040)) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000600)={0x2, 0x4, 0x3, 0x0, 0x7}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x3c) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000640)={r2}, 0x8) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000680)={0x0, 0xd0}, &(0x7f00000006c0)=0x8) (async) 23:35:56 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40049409, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:56 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:56 executing program 2: socket(0x18, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)) 23:35:56 executing program 3: socketpair(0x23, 0x0, 0x0, &(0x7f0000000100)) 23:35:56 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x6, 0x0, [{}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x8000}]}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x1, 0x0, 0x3ff, 0x880}) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x6, 0x0, [{}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x8000}]}}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x1, 0x0, 0x3ff, 0x880}) (async) 23:35:56 executing program 4: r0 = socket(0x18, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xffffff7f00000000}}, 0x0) 23:35:56 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x31363553}) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 23:35:56 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:56 executing program 5: recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000000)=@hci, 0x80, &(0x7f0000001680)=[{&(0x7f0000000080)=""/40, 0x28}, {&(0x7f0000000140)=""/65, 0x41}, {&(0x7f0000001c80)=""/4103, 0x1007}, {&(0x7f00000001c0)=""/96, 0x60}, {&(0x7f0000000240)=""/83, 0x53}, {&(0x7f00000002c0)=""/120, 0x78}, {&(0x7f0000000340)=""/195, 0xc3}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f00000000c0)=""/59, 0x3b}], 0x9, &(0x7f0000000680)=""/108, 0x6c}, 0x41) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=@base={0x1c, 0xff, 0x6, 0x1, 0x400, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001800), 0x48000, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x40600, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000001bc0)={0x1, 0xf1}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@bloom_filter={0x1e, 0x5, 0x8, 0x100, 0x108, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1, 0x4}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b40)={0x6, 0x9, &(0x7f0000001c00)=ANY=[@ANYBLOB="78580c001900008b18000000", @ANYRES32=r1, @ANYBLOB="000000e3d10000008520000085e8b5dcb1d6b40dde226a890000000000000000000020000000f42830b60000447d263e28c656005d6a180a8233aec78a80c5ef0f3391aa", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\t\x00'], &(0x7f00000018c0)='syzkaller\x00', 0xffff, 0xe5, &(0x7f0000001900)=""/229, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001a00)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000001a40)={0x0, 0xc, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001b00)=[r3]}, 0x80) 23:35:56 executing program 2: socket(0x18, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)) 23:35:56 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (fail_nth: 1) 23:35:56 executing program 3: socketpair(0x23, 0x0, 0x0, &(0x7f0000000100)) 23:35:56 executing program 5: recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000000)=@hci, 0x80, &(0x7f0000001680)=[{&(0x7f0000000080)=""/40, 0x28}, {&(0x7f0000000140)=""/65, 0x41}, {&(0x7f0000001c80)=""/4103, 0x1007}, {&(0x7f00000001c0)=""/96, 0x60}, {&(0x7f0000000240)=""/83, 0x53}, {&(0x7f00000002c0)=""/120, 0x78}, {&(0x7f0000000340)=""/195, 0xc3}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f00000000c0)=""/59, 0x3b}], 0x9, &(0x7f0000000680)=""/108, 0x6c}, 0x41) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=@base={0x1c, 0xff, 0x6, 0x1, 0x400, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48) (async) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001800), 0x48000, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x40600, 0x0) (async) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000001bc0)={0x1, 0xf1}) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@bloom_filter={0x1e, 0x5, 0x8, 0x100, 0x108, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1, 0x4}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b40)={0x6, 0x9, &(0x7f0000001c00)=ANY=[@ANYBLOB="78580c001900008b18000000", @ANYRES32=r1, @ANYBLOB="000000e3d10000008520000085e8b5dcb1d6b40dde226a890000000000000000000020000000f42830b60000447d263e28c656005d6a180a8233aec78a80c5ef0f3391aa", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\t\x00'], &(0x7f00000018c0)='syzkaller\x00', 0xffff, 0xe5, &(0x7f0000001900)=""/229, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001a00)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000001a40)={0x0, 0xc, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001b00)=[r3]}, 0x80) 23:35:56 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (fail_nth: 1) 23:35:56 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x31363553}) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x31363553}) (async) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) 23:35:56 executing program 3: socketpair(0x23, 0x0, 0x7fffffff, 0x0) 23:35:56 executing program 5: recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000000)=@hci, 0x80, &(0x7f0000001680)=[{&(0x7f0000000080)=""/40, 0x28}, {&(0x7f0000000140)=""/65, 0x41}, {&(0x7f0000001c80)=""/4103, 0x1007}, {&(0x7f00000001c0)=""/96, 0x60}, {&(0x7f0000000240)=""/83, 0x53}, {&(0x7f00000002c0)=""/120, 0x78}, {&(0x7f0000000340)=""/195, 0xc3}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f00000000c0)=""/59, 0x3b}], 0x9, &(0x7f0000000680)=""/108, 0x6c}, 0x41) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=@base={0x1c, 0xff, 0x6, 0x1, 0x400, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48) (async, rerun: 32) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001800), 0x48000, 0x0) (rerun: 32) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x40600, 0x0) (async) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000001bc0)={0x1, 0xf1}) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@bloom_filter={0x1e, 0x5, 0x8, 0x100, 0x108, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1, 0x4}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b40)={0x6, 0x9, &(0x7f0000001c00)=ANY=[@ANYBLOB="78580c001900008b18000000", @ANYRES32=r1, @ANYBLOB="000000e3d10000008520000085e8b5dcb1d6b40dde226a890000000000000000000020000000f42830b60000447d263e28c656005d6a180a8233aec78a80c5ef0f3391aa", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\t\x00'], &(0x7f00000018c0)='syzkaller\x00', 0xffff, 0xe5, &(0x7f0000001900)=""/229, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001a00)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000001a40)={0x0, 0xc, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001b00)=[r3]}, 0x80) 23:35:56 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:35:56 executing program 2: socket(0x18, 0x0, 0x0) socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)) 23:35:56 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:56 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x31363553}) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 23:35:56 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0x2, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:35:56 executing program 3: socketpair(0x23, 0x0, 0x7fffffff, 0x0) 23:35:56 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0xfffffffd}]}}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x1, 0xab}) 23:35:56 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x2, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:56 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0x5421, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:35:56 executing program 2: socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)) 23:35:56 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0xfffffffd}]}}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x1, 0xab}) 23:35:56 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x620040, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, [@map_fd={0x18, 0x2, 0x1, 0x0, r2}, @alu={0x4, 0x0, 0x8, 0x8, 0x6, 0x0, 0x10}, @generic={0x81, 0x5, 0x8, 0x9, 0x10001}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000000c0)='GPL\x00', 0xffffffff, 0x97, &(0x7f0000000180)=""/151, 0x5db5dbe243c47599, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x4, 0x3ce8, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0x1]}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000380)={r0, r1, 0x0, r3}, 0x10) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "47ecfe3f0000350000000000f1c60672000013002200000000000000001de000", 0x50565559}) 23:35:56 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5421, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:56 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0x5450, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:35:56 executing program 3: socketpair(0x23, 0x0, 0x7fffffff, 0x0) 23:35:56 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0xfffffffd}]}}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x1, 0xab}) 23:35:56 executing program 2: socketpair(0x0, 0x4, 0x7fffffff, &(0x7f0000000100)) 23:35:56 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5450, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:57 executing program 3: socketpair(0x23, 0x0, 0x7fffffff, &(0x7f0000000100)) (fail_nth: 1) 23:35:57 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x620040, 0x0) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, [@map_fd={0x18, 0x2, 0x1, 0x0, r2}, @alu={0x4, 0x0, 0x8, 0x8, 0x6, 0x0, 0x10}, @generic={0x81, 0x5, 0x8, 0x9, 0x10001}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000000c0)='GPL\x00', 0xffffffff, 0x97, &(0x7f0000000180)=""/151, 0x5db5dbe243c47599, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x4, 0x3ce8, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0x1]}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000380)={r0, r1, 0x0, r3}, 0x10) (async) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "47ecfe3f0000350000000000f1c60672000013002200000000000000001de000", 0x50565559}) 23:35:57 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5451, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:57 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0x5451, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:35:57 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x3}]}}) 23:35:57 executing program 2: socketpair(0x0, 0x4, 0x7fffffff, &(0x7f0000000100)) [ 2310.641164] FAULT_INJECTION: forcing a failure. [ 2310.641164] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2310.699922] CPU: 0 PID: 4353 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 2310.707756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2310.717122] Call Trace: [ 2310.719723] dump_stack+0x1fc/0x2ef [ 2310.723367] should_fail.cold+0xa/0xf [ 2310.727178] ? lock_acquire+0x170/0x3c0 [ 2310.731161] ? setup_fault_attr+0x200/0x200 [ 2310.735503] __alloc_pages_nodemask+0x239/0x2890 [ 2310.740268] ? __lock_acquire+0x6de/0x3ff0 [ 2310.744526] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2310.749413] ? mark_held_locks+0xf0/0xf0 [ 2310.753501] ? __lock_acquire+0x6de/0x3ff0 [ 2310.757758] alloc_pages_current+0x193/0x2a0 [ 2310.762171] ? mark_held_locks+0xf0/0xf0 [ 2310.766240] __pmd_alloc+0x37/0x440 [ 2310.769880] __handle_mm_fault+0x1760/0x41c0 [ 2310.774297] ? vm_insert_page+0x9c0/0x9c0 [ 2310.778450] ? __lock_acquire+0x6de/0x3ff0 [ 2310.782706] ? check_preemption_disabled+0x41/0x280 [ 2310.787736] handle_mm_fault+0x436/0xb10 [ 2310.791815] __do_page_fault+0x68e/0xd60 23:35:57 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x620040, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, [@map_fd={0x18, 0x2, 0x1, 0x0, r2}, @alu={0x4, 0x0, 0x8, 0x8, 0x6, 0x0, 0x10}, @generic={0x81, 0x5, 0x8, 0x9, 0x10001}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000000c0)='GPL\x00', 0xffffffff, 0x97, &(0x7f0000000180)=""/151, 0x5db5dbe243c47599, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x4, 0x3ce8, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0x1]}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000380)={r0, r1, 0x0, r3}, 0x10) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "47ecfe3f0000350000000000f1c60672000013002200000000000000001de000", 0x50565559}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x620040, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, [@map_fd={0x18, 0x2, 0x1, 0x0, r2}, @alu={0x4, 0x0, 0x8, 0x8, 0x6, 0x0, 0x10}, @generic={0x81, 0x5, 0x8, 0x9, 0x10001}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000000c0)='GPL\x00', 0xffffffff, 0x97, &(0x7f0000000180)=""/151, 0x5db5dbe243c47599, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x4, 0x3ce8, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0x1]}, 0x80) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000380)={r0, r1, 0x0, r3}, 0x10) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "47ecfe3f0000350000000000f1c60672000013002200000000000000001de000", 0x50565559}) (async) 23:35:57 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0x5452, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) [ 2310.795890] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2310.800908] ? spurious_fault+0x840/0x840 [ 2310.805480] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2310.805503] page_fault+0x1e/0x30 23:35:57 executing program 2: socketpair(0x0, 0x4, 0x7fffffff, &(0x7f0000000100)) 23:35:57 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5452, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) [ 2310.805517] RIP: 0010:__put_user_4+0x1c/0x30 [ 2310.805531] Code: 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 c0 df 01 00 48 8b 9b 98 14 00 00 48 83 eb 03 48 39 d9 73 3c 0f 01 cb <89> 01 31 c0 0f 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 65 48 23:35:57 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0x5460, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:35:57 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5460, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:57 executing program 3: socketpair(0x23, 0x0, 0x7fffffff, &(0x7f0000000100)) (fail_nth: 2) 23:35:57 executing program 2: socketpair(0x23, 0x0, 0x7fffffff, &(0x7f0000000100)) [ 2310.805538] RSP: 0018:ffff888022e17e28 EFLAGS: 00050297 [ 2310.805549] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020000100 23:35:57 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045612, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:57 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0x40049409, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) [ 2310.805557] RDX: 0000000000000058 RSI: ffffffff866de86b RDI: 0000000000000286 [ 2310.805565] RBP: 0000000000000000 R08: ffffffff8cd41898 R09: 0000000000000000 [ 2310.805573] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000004 [ 2310.805583] R13: 0000000000000005 R14: 0000000000000000 R15: dffffc0000000000 [ 2310.805610] ? __sys_socketpair+0xfb/0x570 [ 2310.805632] __sys_socketpair+0x107/0x570 [ 2310.805648] ? __ia32_sys_socket+0xb0/0xb0 [ 2310.805663] ? ksys_write+0x1c8/0x2a0 [ 2310.805681] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2310.805696] __x64_sys_socketpair+0x93/0xf0 [ 2310.805708] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2310.805717] do_syscall_64+0xf9/0x620 [ 2310.805730] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2310.805740] RIP: 0033:0x7fcd11dfc0c9 [ 2310.805754] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2310.805762] RSP: 002b:00007fcd1036e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 2310.805775] RAX: ffffffffffffffda RBX: 00007fcd11f1bf80 RCX: 00007fcd11dfc0c9 [ 2310.805782] RDX: 000000007fffffff RSI: 0000000000000000 RDI: 0000000000000023 [ 2310.805789] RBP: 00007fcd1036e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2310.805796] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 2310.805802] R13: 00007ffda60a98df R14: 00007fcd1036e300 R15: 0000000000022000 [ 2311.026238] FAULT_INJECTION: forcing a failure. [ 2311.026238] name failslab, interval 1, probability 0, space 0, times 0 [ 2311.026258] CPU: 0 PID: 4405 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 2311.026267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2311.026272] Call Trace: [ 2311.026291] dump_stack+0x1fc/0x2ef [ 2311.026320] should_fail.cold+0xa/0xf [ 2311.026340] ? setup_fault_attr+0x200/0x200 [ 2311.026356] ? lock_acquire+0x170/0x3c0 [ 2311.026378] __should_failslab+0x115/0x180 [ 2311.026396] should_failslab+0x5/0x10 [ 2311.026409] kmem_cache_alloc+0x277/0x370 [ 2311.026426] __pmd_alloc+0xbb/0x440 [ 2311.026444] __handle_mm_fault+0x1760/0x41c0 [ 2311.026463] ? vm_insert_page+0x9c0/0x9c0 [ 2311.026477] ? __lock_acquire+0x6de/0x3ff0 [ 2311.026505] ? check_preemption_disabled+0x41/0x280 [ 2311.026525] handle_mm_fault+0x436/0xb10 [ 2311.026545] __do_page_fault+0x68e/0xd60 [ 2311.026567] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2311.026582] ? spurious_fault+0x840/0x840 [ 2311.026597] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2311.026618] page_fault+0x1e/0x30 [ 2311.026631] RIP: 0010:__put_user_4+0x1c/0x30 [ 2311.026643] Code: 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 c0 df 01 00 48 8b 9b 98 14 00 00 48 83 eb 03 48 39 d9 73 3c 0f 01 cb <89> 01 31 c0 0f 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 65 48 [ 2311.026651] RSP: 0018:ffff8880b321fe28 EFLAGS: 00050297 [ 2311.026662] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020000100 [ 2311.026686] RDX: 0000000000000058 RSI: ffffffff866de86b RDI: 0000000000000286 [ 2311.026695] RBP: 0000000000000000 R08: ffffffff8cd41898 R09: 0000000000000000 [ 2311.026703] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000004 [ 2311.026711] R13: 0000000000000005 R14: 0000000000000000 R15: dffffc0000000000 [ 2311.026733] ? __sys_socketpair+0xfb/0x570 [ 2311.026748] __sys_socketpair+0x107/0x570 [ 2311.026765] ? __ia32_sys_socket+0xb0/0xb0 [ 2311.026781] ? ksys_write+0x1c8/0x2a0 [ 2311.026799] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2311.026815] __x64_sys_socketpair+0x93/0xf0 [ 2311.026830] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2311.026839] do_syscall_64+0xf9/0x620 [ 2311.026852] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2311.026863] RIP: 0033:0x7fcd11dfc0c9 [ 2311.026876] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2311.026883] RSP: 002b:00007fcd1036e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 2311.026897] RAX: ffffffffffffffda RBX: 00007fcd11f1bf80 RCX: 00007fcd11dfc0c9 23:35:57 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x3}]}}) 23:35:57 executing program 3: socketpair(0x23, 0x0, 0x7fffffff, &(0x7f0000000100)) (fail_nth: 3) 23:35:57 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r2, r1, 0x0, r1}, 0x10) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000080)=@multiplanar_overlay={0x26c5, 0x0, 0x4, 0x8, 0x0, {0x77359400}, {0x5, 0x2, 0x1f, 0x81, 0x20, 0x12, "9e268860"}, 0x3, 0x3, {&(0x7f0000000000)=[{0xf6dd5d2, 0xf5, {0x9}, 0x8}, {0x4, 0x10001, {0x9}, 0x4}]}, 0xff}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:57 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:57 executing program 2: socketpair(0x23, 0x0, 0x0, &(0x7f0000000100)) 23:35:57 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0x4020940d, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) [ 2311.026905] RDX: 000000007fffffff RSI: 0000000000000000 RDI: 0000000000000023 [ 2311.026913] RBP: 00007fcd1036e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2311.026922] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 2311.026930] R13: 00007ffda60a98df R14: 00007fcd1036e300 R15: 0000000000022000 23:35:57 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc0045878, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) [ 2311.527328] FAULT_INJECTION: forcing a failure. [ 2311.527328] name failslab, interval 1, probability 0, space 0, times 0 [ 2311.577749] CPU: 1 PID: 4418 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 2311.585580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2311.594959] Call Trace: [ 2311.594987] dump_stack+0x1fc/0x2ef [ 2311.595013] should_fail.cold+0xa/0xf [ 2311.595037] ? setup_fault_attr+0x200/0x200 [ 2311.595053] ? lock_acquire+0x170/0x3c0 [ 2311.595073] __should_failslab+0x115/0x180 [ 2311.595090] should_failslab+0x5/0x10 [ 2311.595104] kmem_cache_alloc+0x277/0x370 [ 2311.595123] __anon_vma_prepare+0x5d/0x560 [ 2311.595143] do_huge_pmd_anonymous_page+0x106e/0x1e60 [ 2311.595157] ? lock_downgrade+0x720/0x720 [ 2311.595175] ? lock_acquire+0x170/0x3c0 [ 2311.643031] ? __pmd_alloc+0x147/0x440 [ 2311.646945] ? prep_transhuge_page+0xa0/0xa0 [ 2311.651362] ? do_raw_spin_unlock+0x171/0x230 [ 2311.655867] ? _raw_spin_unlock+0x29/0x40 [ 2311.660027] __handle_mm_fault+0x289c/0x41c0 [ 2311.664444] ? vm_insert_page+0x9c0/0x9c0 [ 2311.668598] ? __lock_acquire+0x6de/0x3ff0 [ 2311.672856] ? check_preemption_disabled+0x41/0x280 23:35:58 executing program 2: socketpair(0x23, 0x0, 0x0, &(0x7f0000000100)) 23:35:58 executing program 2: socketpair(0x23, 0x0, 0x0, &(0x7f0000000100)) 23:35:58 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x3}]}}) [ 2311.677885] handle_mm_fault+0x436/0xb10 [ 2311.681957] __do_page_fault+0x68e/0xd60 [ 2311.686030] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2311.691053] ? spurious_fault+0x840/0x840 [ 2311.695209] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2311.700071] page_fault+0x1e/0x30 [ 2311.703529] RIP: 0010:__put_user_4+0x1c/0x30 [ 2311.707938] Code: 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 c0 df 01 00 48 8b 9b 98 14 00 00 48 83 eb 03 48 39 d9 73 3c 0f 01 cb <89> 01 31 c0 0f 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 65 48 [ 2311.726841] RSP: 0018:ffff8880a2107e28 EFLAGS: 00050297 [ 2311.732211] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020000100 [ 2311.739492] RDX: 0000000000000058 RSI: ffffffff866de86b RDI: 0000000000000286 [ 2311.746769] RBP: 0000000000000000 R08: ffffffff8cd41898 R09: 0000000000000000 [ 2311.754063] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000004 [ 2311.754075] R13: 0000000000000005 R14: 0000000000000000 R15: dffffc0000000000 [ 2311.768623] ? __sys_socketpair+0xfb/0x570 [ 2311.772878] __sys_socketpair+0x107/0x570 23:35:58 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc0045878, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:35:58 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40049409, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:58 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @vbi={0xffffffff, 0x7, 0x20, 0x32315659, [0xb71a, 0x2], [0x200, 0x7], 0x2}}) [ 2311.777061] ? __ia32_sys_socket+0xb0/0xb0 [ 2311.777079] ? ksys_write+0x1c8/0x2a0 23:35:58 executing program 3: socketpair(0x23, 0x0, 0x7fffffff, &(0x7f0000000100)) (fail_nth: 4) [ 2311.777100] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2311.777118] __x64_sys_socketpair+0x93/0xf0 [ 2311.777135] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2311.777151] do_syscall_64+0xf9/0x620 [ 2311.777169] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2311.777181] RIP: 0033:0x7fcd11dfc0c9 [ 2311.777195] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2311.777204] RSP: 002b:00007fcd1036e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 2311.777217] RAX: ffffffffffffffda RBX: 00007fcd11f1bf80 RCX: 00007fcd11dfc0c9 [ 2311.777231] RDX: 000000007fffffff RSI: 0000000000000000 RDI: 0000000000000023 [ 2311.777239] RBP: 00007fcd1036e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2311.777247] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 2311.777255] R13: 00007ffda60a98df R14: 00007fcd1036e300 R15: 0000000000022000 [ 2311.892451] FAULT_INJECTION: forcing a failure. [ 2311.892451] name failslab, interval 1, probability 0, space 0, times 0 [ 2311.892470] CPU: 1 PID: 4453 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 2311.892478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2311.892484] Call Trace: [ 2311.892502] dump_stack+0x1fc/0x2ef [ 2311.892523] should_fail.cold+0xa/0xf [ 2311.892541] ? setup_fault_attr+0x200/0x200 [ 2311.892556] ? lock_acquire+0x170/0x3c0 [ 2311.892575] __should_failslab+0x115/0x180 [ 2311.892591] should_failslab+0x5/0x10 [ 2311.892605] kmem_cache_alloc+0x277/0x370 [ 2311.892620] __anon_vma_prepare+0x2d3/0x560 [ 2311.892639] do_huge_pmd_anonymous_page+0x106e/0x1e60 [ 2311.892654] ? lock_downgrade+0x720/0x720 [ 2311.892667] ? lock_acquire+0x170/0x3c0 [ 2311.892680] ? __pmd_alloc+0x147/0x440 [ 2311.892696] ? prep_transhuge_page+0xa0/0xa0 [ 2311.892708] ? do_raw_spin_unlock+0x171/0x230 [ 2311.892721] ? _raw_spin_unlock+0x29/0x40 [ 2311.892737] __handle_mm_fault+0x289c/0x41c0 [ 2311.892755] ? vm_insert_page+0x9c0/0x9c0 [ 2311.892779] ? __lock_acquire+0x6de/0x3ff0 [ 2311.892810] ? check_preemption_disabled+0x41/0x280 [ 2311.892830] handle_mm_fault+0x436/0xb10 [ 2311.892851] __do_page_fault+0x68e/0xd60 [ 2311.892871] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2311.892886] ? spurious_fault+0x840/0x840 [ 2311.892900] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2311.892920] page_fault+0x1e/0x30 [ 2311.892932] RIP: 0010:__put_user_4+0x1c/0x30 [ 2311.892944] Code: 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 c0 df 01 00 48 8b 9b 98 14 00 00 48 83 eb 03 48 39 d9 73 3c 0f 01 cb <89> 01 31 c0 0f 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 65 48 [ 2311.892952] RSP: 0018:ffff88809f37fe28 EFLAGS: 00050297 [ 2311.892963] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020000100 [ 2311.892971] RDX: 0000000000000058 RSI: ffffffff866de86b RDI: 0000000000000286 [ 2311.892978] RBP: 0000000000000000 R08: ffffffff8cd41898 R09: 0000000000000000 [ 2311.892986] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000004 [ 2311.892993] R13: 0000000000000005 R14: 0000000000000000 R15: dffffc0000000000 [ 2311.893013] ? __sys_socketpair+0xfb/0x570 [ 2311.893029] __sys_socketpair+0x107/0x570 [ 2311.893044] ? __ia32_sys_socket+0xb0/0xb0 [ 2311.893061] ? ksys_write+0x1c8/0x2a0 [ 2311.893080] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2311.893097] __x64_sys_socketpair+0x93/0xf0 [ 2311.893112] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2311.893124] do_syscall_64+0xf9/0x620 [ 2311.893140] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2311.893149] RIP: 0033:0x7fcd11dfc0c9 23:35:58 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r2, r1, 0x0, r1}, 0x10) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000080)=@multiplanar_overlay={0x26c5, 0x0, 0x4, 0x8, 0x0, {0x77359400}, {0x5, 0x2, 0x1f, 0x81, 0x20, 0x12, "9e268860"}, 0x3, 0x3, {&(0x7f0000000000)=[{0xf6dd5d2, 0xf5, {0x9}, 0x8}, {0x4, 0x10001, {0x9}, 0x4}]}, 0xff}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r2, r1, 0x0, r1}, 0x10) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000080)=@multiplanar_overlay={0x26c5, 0x0, 0x4, 0x8, 0x0, {0x77359400}, {0x5, 0x2, 0x1f, 0x81, 0x20, 0x12, "9e268860"}, 0x3, 0x3, {&(0x7f0000000000)=[{0xf6dd5d2, 0xf5, {0x9}, 0x8}, {0x4, 0x10001, {0x9}, 0x4}]}, 0xff}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:35:58 executing program 2: socketpair(0x23, 0x0, 0x7fffffff, 0x0) 23:35:58 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x4020940d, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:58 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @vbi={0xffffffff, 0x7, 0x20, 0x32315659, [0xb71a, 0x2], [0x200, 0x7], 0x2}}) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @vbi={0xffffffff, 0x7, 0x20, 0x32315659, [0xb71a, 0x2], [0x200, 0x7], 0x2}}) (async) 23:35:58 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc0189436, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:35:58 executing program 3: socketpair(0x23, 0x0, 0x7fffffff, &(0x7f0000000100)) (fail_nth: 5) [ 2311.893161] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2311.893168] RSP: 002b:00007fcd1036e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 2311.893180] RAX: ffffffffffffffda RBX: 00007fcd11f1bf80 RCX: 00007fcd11dfc0c9 [ 2311.893187] RDX: 000000007fffffff RSI: 0000000000000000 RDI: 0000000000000023 [ 2311.893195] RBP: 00007fcd1036e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2311.893203] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 2311.893211] R13: 00007ffda60a98df R14: 00007fcd1036e300 R15: 0000000000022000 [ 2312.363078] FAULT_INJECTION: forcing a failure. [ 2312.363078] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2312.382912] CPU: 1 PID: 4464 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 2312.390751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2312.400111] Call Trace: [ 2312.402719] dump_stack+0x1fc/0x2ef [ 2312.406364] should_fail.cold+0xa/0xf 23:35:58 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r2, r1, 0x0, r1}, 0x10) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000080)=@multiplanar_overlay={0x26c5, 0x0, 0x4, 0x8, 0x0, {0x77359400}, {0x5, 0x2, 0x1f, 0x81, 0x20, 0x12, "9e268860"}, 0x3, 0x3, {&(0x7f0000000000)=[{0xf6dd5d2, 0xf5, {0x9}, 0x8}, {0x4, 0x10001, {0x9}, 0x4}]}, 0xff}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r2, r1, 0x0, r1}, 0x10) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000080)=@multiplanar_overlay={0x26c5, 0x0, 0x4, 0x8, 0x0, {0x77359400}, {0x5, 0x2, 0x1f, 0x81, 0x20, 0x12, "9e268860"}, 0x3, 0x3, {&(0x7f0000000000)=[{0xf6dd5d2, 0xf5, {0x9}, 0x8}, {0x4, 0x10001, {0x9}, 0x4}]}, 0xff}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:35:58 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0045878, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:58 executing program 2: socketpair(0x23, 0x0, 0x7fffffff, 0x0) [ 2312.410178] ? setup_fault_attr+0x200/0x200 [ 2312.414518] __alloc_pages_nodemask+0x239/0x2890 [ 2312.419285] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2312.424658] ? mark_held_locks+0xf0/0xf0 [ 2312.428742] ? mark_held_locks+0xf0/0xf0 [ 2312.432822] ? __lock_acquire+0x6de/0x3ff0 [ 2312.437062] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2312.441922] ? __anon_vma_prepare+0x2a6/0x560 23:35:58 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc0205647, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:35:58 executing program 2: socketpair(0x23, 0x0, 0x7fffffff, 0x0) [ 2312.446443] ? lock_downgrade+0x720/0x720 23:35:58 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc0205649, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:35:58 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @vbi={0xffffffff, 0x7, 0x20, 0x32315659, [0xb71a, 0x2], [0x200, 0x7], 0x2}}) 23:35:58 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r2, r1, 0x0, r1}, 0x10) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000080)=@multiplanar_overlay={0x26c5, 0x0, 0x4, 0x8, 0x0, {0x77359400}, {0x5, 0x2, 0x1f, 0x81, 0x20, 0x12, "9e268860"}, 0x3, 0x3, {&(0x7f0000000000)=[{0xf6dd5d2, 0xf5, {0x9}, 0x8}, {0x4, 0x10001, {0x9}, 0x4}]}, 0xff}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) [ 2312.446457] ? lock_downgrade+0x720/0x720 23:35:58 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0045878, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) [ 2312.446472] ? __anon_vma_prepare+0xc2/0x560 23:35:58 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc020660b, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:35:59 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000280)={0x2, @vbi={0x8, 0x7, 0x7, 0x32315258, [0x10001, 0x1], [0x80000000, 0x6e], 0x108}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000140)={0x2, @win={{0x0, 0x3ff, 0x8, 0xffffff80}, 0x2, 0x7, &(0x7f0000000080)={{0x6, 0x275, 0x4, 0x4}, &(0x7f0000000040)={{0x8, 0x129, 0xaef, 0x3}, &(0x7f0000000000)={{0xfffffff8, 0x0, 0x5}}}}, 0x7, &(0x7f00000000c0)="e5f81cf155c1a31c3d8c83cd6e8d113dbd0f4ed44e9c1ea754ec4e5264", 0x8}}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) [ 2312.446493] alloc_pages_vma+0x461/0x780 [ 2312.446513] do_huge_pmd_anonymous_page+0x3b4/0x1e60 [ 2312.446548] ? lock_downgrade+0x720/0x720 [ 2312.446561] ? lock_acquire+0x170/0x3c0 [ 2312.446574] ? __pmd_alloc+0x147/0x440 [ 2312.446589] ? prep_transhuge_page+0xa0/0xa0 [ 2312.446602] ? do_raw_spin_unlock+0x171/0x230 [ 2312.446618] ? _raw_spin_unlock+0x29/0x40 [ 2312.446636] __handle_mm_fault+0x289c/0x41c0 23:35:59 executing program 3: socketpair(0x23, 0x0, 0x7fffffff, &(0x7f0000000100)) (fail_nth: 6) [ 2312.446655] ? vm_insert_page+0x9c0/0x9c0 [ 2312.446670] ? __lock_acquire+0x6de/0x3ff0 [ 2312.446697] ? check_preemption_disabled+0x41/0x280 [ 2312.446717] handle_mm_fault+0x436/0xb10 [ 2312.446737] __do_page_fault+0x68e/0xd60 [ 2312.446758] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2312.446773] ? spurious_fault+0x840/0x840 [ 2312.446787] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2312.446807] page_fault+0x1e/0x30 [ 2312.446820] RIP: 0010:__put_user_4+0x1c/0x30 [ 2312.446834] Code: 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 c0 df 01 00 48 8b 9b 98 14 00 00 48 83 eb 03 48 39 d9 73 3c 0f 01 cb <89> 01 31 c0 0f 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 65 48 [ 2312.446841] RSP: 0018:ffff8880a2107e28 EFLAGS: 00050297 [ 2312.446852] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020000100 [ 2312.446860] RDX: 0000000000000058 RSI: ffffffff866de86b RDI: 0000000000000286 [ 2312.446868] RBP: 0000000000000000 R08: ffffffff8cd41898 R09: 0000000000000000 [ 2312.446875] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000004 [ 2312.446883] R13: 0000000000000005 R14: 0000000000000000 R15: dffffc0000000000 [ 2312.446905] ? __sys_socketpair+0xfb/0x570 [ 2312.446923] __sys_socketpair+0x107/0x570 [ 2312.446938] ? __ia32_sys_socket+0xb0/0xb0 [ 2312.446952] ? ksys_write+0x1c8/0x2a0 [ 2312.446970] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2312.446987] __x64_sys_socketpair+0x93/0xf0 [ 2312.447002] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2312.447015] do_syscall_64+0xf9/0x620 [ 2312.447033] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2312.447042] RIP: 0033:0x7fcd11dfc0c9 [ 2312.447055] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2312.447062] RSP: 002b:00007fcd1036e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 2312.447074] RAX: ffffffffffffffda RBX: 00007fcd11f1bf80 RCX: 00007fcd11dfc0c9 [ 2312.447081] RDX: 000000007fffffff RSI: 0000000000000000 RDI: 0000000000000023 [ 2312.447088] RBP: 00007fcd1036e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2312.447095] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 2312.447103] R13: 00007ffda60a98df R14: 00007fcd1036e300 R15: 0000000000022000 [ 2312.709767] FAULT_INJECTION: forcing a failure. [ 2312.709767] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2312.709786] CPU: 1 PID: 4525 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 2312.709795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2312.709799] Call Trace: [ 2312.709819] dump_stack+0x1fc/0x2ef [ 2312.709839] should_fail.cold+0xa/0xf [ 2312.709855] ? lock_acquire+0x170/0x3c0 [ 2312.709873] ? setup_fault_attr+0x200/0x200 [ 2312.709899] __alloc_pages_nodemask+0x239/0x2890 [ 2312.709918] ? get_mem_cgroup_from_mm+0x135/0x440 [ 2312.709943] ? check_preemption_disabled+0x41/0x280 [ 2312.709958] ? mem_cgroup_oom_trylock+0x220/0x220 [ 2312.709975] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2312.709989] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2312.710006] ? mem_cgroup_from_task+0x120/0x120 [ 2312.710030] ? lock_downgrade+0x720/0x720 [ 2312.710045] ? check_preemption_disabled+0x41/0x280 [ 2312.710062] ? check_preemption_disabled+0x41/0x280 [ 2312.710086] alloc_pages_current+0x193/0x2a0 [ 2312.710113] pte_alloc_one+0x16/0x190 [ 2312.710129] do_huge_pmd_anonymous_page+0xb76/0x1e60 [ 2312.710147] ? lock_downgrade+0x720/0x720 [ 2312.710161] ? lock_acquire+0x170/0x3c0 [ 2312.710175] ? __pmd_alloc+0x147/0x440 [ 2312.710191] ? prep_transhuge_page+0xa0/0xa0 [ 2312.710204] ? do_raw_spin_unlock+0x171/0x230 [ 2312.710220] ? _raw_spin_unlock+0x29/0x40 [ 2312.710238] __handle_mm_fault+0x289c/0x41c0 [ 2312.710257] ? vm_insert_page+0x9c0/0x9c0 [ 2312.710270] ? __lock_acquire+0x6de/0x3ff0 [ 2312.710296] ? check_preemption_disabled+0x41/0x280 [ 2312.710316] handle_mm_fault+0x436/0xb10 [ 2312.710335] __do_page_fault+0x68e/0xd60 [ 2312.710358] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2312.710375] ? spurious_fault+0x840/0x840 [ 2312.710391] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2312.710412] page_fault+0x1e/0x30 [ 2312.710426] RIP: 0010:__put_user_4+0x1c/0x30 [ 2312.710439] Code: 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 c0 df 01 00 48 8b 9b 98 14 00 00 48 83 eb 03 48 39 d9 73 3c 0f 01 cb <89> 01 31 c0 0f 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 65 48 [ 2312.710446] RSP: 0018:ffff88807922fe28 EFLAGS: 00050297 [ 2312.710458] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020000100 [ 2312.710467] RDX: 0000000000000058 RSI: ffffffff866de86b RDI: 0000000000000286 [ 2312.710475] RBP: 0000000000000000 R08: ffffffff8cd41898 R09: 0000000000000000 [ 2312.710482] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000004 [ 2312.710490] R13: 0000000000000005 R14: 0000000000000000 R15: dffffc0000000000 [ 2312.710511] ? __sys_socketpair+0xfb/0x570 [ 2312.710528] __sys_socketpair+0x107/0x570 [ 2312.710542] ? __ia32_sys_socket+0xb0/0xb0 [ 2312.710557] ? ksys_write+0x1c8/0x2a0 [ 2312.710577] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2312.710595] __x64_sys_socketpair+0x93/0xf0 [ 2312.710610] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2312.710624] do_syscall_64+0xf9/0x620 [ 2312.710642] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2312.710653] RIP: 0033:0x7fcd11dfc0c9 [ 2312.710666] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 23:35:59 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x5, 0x1, 0x3, 0x0, 0xff}) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000003c0)={0x3, @win={{}, 0x0, 0x0, &(0x7f00000000c0)={{0x0, 0xde}}, 0x0, &(0x7f00000002c0)="9934e284df0e187efb6dc96b72dc9a82477b773e5fec2d915e5a8a1b99232cd40bd59dc7a2d6cf188f2b23b14765223c8bf215fbe8ffc80f8aa502a2180a6ce14d65057693272ec0b08420bea6126b80f0ba5d3acbb45abd6484bf62eed6ab8b48534e2afa7bc83c50d06a1c953330d9eacf670cd9e0c97349b6509e82ae70cca1a57a8a04024ccc2c5b91f398a3da5e42e1f3ed4a5dc41a26d716440a47b956d18056bbd893e5d117097ff46c259588dd707a582fa7d1c40fec21a4b3d4b5a01f8ac4b663b4ada5bb444ef1d3", 0x1}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x9098, 0x2, 0x2, "475d003fe11ed59bb805dfd0f1c62f7200000000220000200000000000001de0", 0x32344d59}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000004c0)=@multiplanar_userptr={0x1, 0x1, 0x4, 0x40, 0x5, {}, {0x2, 0x5, 0x80, 0x1b, 0x40, 0x1e, "0a1045e5"}, 0x20, 0x2, {&(0x7f0000000200)=[{0x1, 0xce4, {&(0x7f0000000140)}, 0x3f}, {0x63, 0x8, {&(0x7f00000001c0)}, 0x2}]}, 0x5}) 23:35:59 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0145608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:59 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc0285628, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:35:59 executing program 3: socketpair(0x23, 0x0, 0x7fffffff, &(0x7f0000000100)) (fail_nth: 7) 23:35:59 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:59 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000280)={0x2, @vbi={0x8, 0x7, 0x7, 0x32315258, [0x10001, 0x1], [0x80000000, 0x6e], 0x108}}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000140)={0x2, @win={{0x0, 0x3ff, 0x8, 0xffffff80}, 0x2, 0x7, &(0x7f0000000080)={{0x6, 0x275, 0x4, 0x4}, &(0x7f0000000040)={{0x8, 0x129, 0xaef, 0x3}, &(0x7f0000000000)={{0xfffffff8, 0x0, 0x5}}}}, 0x7, &(0x7f00000000c0)="e5f81cf155c1a31c3d8c83cd6e8d113dbd0f4ed44e9c1ea754ec4e5264", 0x8}}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) [ 2312.710674] RSP: 002b:00007fcd1036e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 2312.710686] RAX: ffffffffffffffda RBX: 00007fcd11f1bf80 RCX: 00007fcd11dfc0c9 [ 2312.710694] RDX: 000000007fffffff RSI: 0000000000000000 RDI: 0000000000000023 [ 2312.710702] RBP: 00007fcd1036e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2312.710710] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 2312.710719] R13: 00007ffda60a98df R14: 00007fcd1036e300 R15: 0000000000022000 23:35:59 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc0285629, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:35:59 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:59 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:35:59 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000280)={0x2, @vbi={0x8, 0x7, 0x7, 0x32315258, [0x10001, 0x1], [0x80000000, 0x6e], 0x108}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000140)={0x2, @win={{0x0, 0x3ff, 0x8, 0xffffff80}, 0x2, 0x7, &(0x7f0000000080)={{0x6, 0x275, 0x4, 0x4}, &(0x7f0000000040)={{0x8, 0x129, 0xaef, 0x3}, &(0x7f0000000000)={{0xfffffff8, 0x0, 0x5}}}}, 0x7, &(0x7f00000000c0)="e5f81cf155c1a31c3d8c83cd6e8d113dbd0f4ed44e9c1ea754ec4e5264", 0x8}}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000280)={0x2, @vbi={0x8, 0x7, 0x7, 0x32315258, [0x10001, 0x1], [0x80000000, 0x6e], 0x108}}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000140)={0x2, @win={{0x0, 0x3ff, 0x8, 0xffffff80}, 0x2, 0x7, &(0x7f0000000080)={{0x6, 0x275, 0x4, 0x4}, &(0x7f0000000040)={{0x8, 0x129, 0xaef, 0x3}, &(0x7f0000000000)={{0xfffffff8, 0x0, 0x5}}}}, 0x7, &(0x7f00000000c0)="e5f81cf155c1a31c3d8c83cd6e8d113dbd0f4ed44e9c1ea754ec4e5264", 0x8}}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) 23:35:59 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c5667, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) [ 2313.343469] FAULT_INJECTION: forcing a failure. [ 2313.343469] name failslab, interval 1, probability 0, space 0, times 0 23:35:59 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) [ 2313.424043] CPU: 0 PID: 4536 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 2313.431873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2313.441237] Call Trace: [ 2313.443840] dump_stack+0x1fc/0x2ef [ 2313.447487] should_fail.cold+0xa/0xf [ 2313.451300] ? setup_fault_attr+0x200/0x200 [ 2313.455638] ? lock_acquire+0x170/0x3c0 [ 2313.459627] __should_failslab+0x115/0x180 [ 2313.463878] should_failslab+0x5/0x10 [ 2313.467691] kmem_cache_alloc+0x277/0x370 [ 2313.471860] ptlock_alloc+0x1d/0x70 [ 2313.475502] pte_alloc_one+0x68/0x190 [ 2313.479323] do_huge_pmd_anonymous_page+0xb76/0x1e60 [ 2313.484440] ? lock_downgrade+0x720/0x720 [ 2313.488602] ? lock_acquire+0x170/0x3c0 [ 2313.492593] ? __pmd_alloc+0x147/0x440 [ 2313.496506] ? prep_transhuge_page+0xa0/0xa0 [ 2313.500932] ? do_raw_spin_unlock+0x171/0x230 [ 2313.505443] ? _raw_spin_unlock+0x29/0x40 [ 2313.509618] __handle_mm_fault+0x289c/0x41c0 [ 2313.514163] ? vm_insert_page+0x9c0/0x9c0 [ 2313.518333] ? __lock_acquire+0x6de/0x3ff0 23:35:59 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x5, 0x1, 0x3, 0x0, 0xff}) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000003c0)={0x3, @win={{}, 0x0, 0x0, &(0x7f00000000c0)={{0x0, 0xde}}, 0x0, &(0x7f00000002c0)="9934e284df0e187efb6dc96b72dc9a82477b773e5fec2d915e5a8a1b99232cd40bd59dc7a2d6cf188f2b23b14765223c8bf215fbe8ffc80f8aa502a2180a6ce14d65057693272ec0b08420bea6126b80f0ba5d3acbb45abd6484bf62eed6ab8b48534e2afa7bc83c50d06a1c953330d9eacf670cd9e0c97349b6509e82ae70cca1a57a8a04024ccc2c5b91f398a3da5e42e1f3ed4a5dc41a26d716440a47b956d18056bbd893e5d117097ff46c259588dd707a582fa7d1c40fec21a4b3d4b5a01f8ac4b663b4ada5bb444ef1d3", 0x1}}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x9098, 0x2, 0x2, "475d003fe11ed59bb805dfd0f1c62f7200000000220000200000000000001de0", 0x32344d59}) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000004c0)=@multiplanar_userptr={0x1, 0x1, 0x4, 0x40, 0x5, {}, {0x2, 0x5, 0x80, 0x1b, 0x40, 0x1e, "0a1045e5"}, 0x20, 0x2, {&(0x7f0000000200)=[{0x1, 0xce4, {&(0x7f0000000140)}, 0x3f}, {0x63, 0x8, {&(0x7f00000001c0)}, 0x2}]}, 0x5}) 23:35:59 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc0585609, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:35:59 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc058560f, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) [ 2313.522605] ? check_preemption_disabled+0x41/0x280 [ 2313.527651] handle_mm_fault+0x436/0xb10 [ 2313.531745] __do_page_fault+0x68e/0xd60 [ 2313.535827] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2313.540867] ? spurious_fault+0x840/0x840 [ 2313.545037] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2313.549906] page_fault+0x1e/0x30 [ 2313.553381] RIP: 0010:__put_user_4+0x1c/0x30 [ 2313.557805] Code: 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 c0 df 01 00 48 8b 9b 98 14 00 00 48 83 eb 03 48 39 d9 73 3c 0f 01 cb <89> 01 31 c0 0f 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 65 48 [ 2313.576714] RSP: 0018:ffff888098a57e28 EFLAGS: 00050297 [ 2313.582085] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020000100 [ 2313.589365] RDX: 0000000000000058 RSI: ffffffff866de86b RDI: 0000000000000286 [ 2313.596644] RBP: 0000000000000000 R08: ffffffff8cd41898 R09: 0000000000000000 [ 2313.603926] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000004 [ 2313.611203] R13: 0000000000000005 R14: 0000000000000000 R15: dffffc0000000000 [ 2313.618502] ? __sys_socketpair+0xfb/0x570 [ 2313.622752] __sys_socketpair+0x107/0x570 [ 2313.626930] ? __ia32_sys_socket+0xb0/0xb0 [ 2313.631192] ? ksys_write+0x1c8/0x2a0 [ 2313.631212] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2313.640363] __x64_sys_socketpair+0x93/0xf0 [ 2313.644699] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2313.649297] do_syscall_64+0xf9/0x620 [ 2313.653113] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2313.658309] RIP: 0033:0x7fcd11dfc0c9 23:36:00 executing program 3: socketpair(0x23, 0x0, 0x7fffffff, &(0x7f0000000100)) (fail_nth: 8) 23:36:00 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc0585611, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:36:00 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async, rerun: 32) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async, rerun: 32) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x5, 0x1, 0x3, 0x0, 0xff}) (async, rerun: 32) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000003c0)={0x3, @win={{}, 0x0, 0x0, &(0x7f00000000c0)={{0x0, 0xde}}, 0x0, &(0x7f00000002c0)="9934e284df0e187efb6dc96b72dc9a82477b773e5fec2d915e5a8a1b99232cd40bd59dc7a2d6cf188f2b23b14765223c8bf215fbe8ffc80f8aa502a2180a6ce14d65057693272ec0b08420bea6126b80f0ba5d3acbb45abd6484bf62eed6ab8b48534e2afa7bc83c50d06a1c953330d9eacf670cd9e0c97349b6509e82ae70cca1a57a8a04024ccc2c5b91f398a3da5e42e1f3ed4a5dc41a26d716440a47b956d18056bbd893e5d117097ff46c259588dd707a582fa7d1c40fec21a4b3d4b5a01f8ac4b663b4ada5bb444ef1d3", 0x1}}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x9098, 0x2, 0x2, "475d003fe11ed59bb805dfd0f1c62f7200000000220000200000000000001de0", 0x32344d59}) (async, rerun: 64) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000004c0)=@multiplanar_userptr={0x1, 0x1, 0x4, 0x40, 0x5, {}, {0x2, 0x5, 0x80, 0x1b, 0x40, 0x1e, "0a1045e5"}, 0x20, 0x2, {&(0x7f0000000200)=[{0x1, 0xce4, {&(0x7f0000000140)}, 0x3f}, {0x63, 0x8, {&(0x7f00000001c0)}, 0x2}]}, 0x5}) (rerun: 64) 23:36:00 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:00 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205649, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:00 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x541b, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) [ 2313.662030] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2313.680929] RSP: 002b:00007fcd1036e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 2313.688623] RAX: ffffffffffffffda RBX: 00007fcd11f1bf80 RCX: 00007fcd11dfc0c9 [ 2313.695877] RDX: 000000007fffffff RSI: 0000000000000000 RDI: 0000000000000023 [ 2313.703131] RBP: 00007fcd1036e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2313.710381] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 2313.717632] R13: 00007ffda60a98df R14: 00007fcd1036e300 R15: 0000000000022000 23:36:00 executing program 2: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:00 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc020660b, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:00 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000000)=@overlay={0x1000, 0x2, 0x4, 0xe000, 0x100, {0x0, 0xea60}, {0x5, 0xc, 0x80, 0x40, 0x7, 0x4, "75c925aa"}, 0x7fff, 0x3, {}, 0x5}) 23:36:00 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc058565d, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) [ 2313.837564] FAULT_INJECTION: forcing a failure. [ 2313.837564] name failslab, interval 1, probability 0, space 0, times 0 [ 2313.885392] CPU: 0 PID: 4599 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 2313.893220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2313.902583] Call Trace: [ 2313.905181] dump_stack+0x1fc/0x2ef [ 2313.908826] should_fail.cold+0xa/0xf [ 2313.912640] ? setup_fault_attr+0x200/0x200 [ 2313.916973] ? lock_acquire+0x170/0x3c0 [ 2313.920966] __should_failslab+0x115/0x180 [ 2313.925219] should_failslab+0x5/0x10 [ 2313.929027] kmem_cache_alloc+0x277/0x370 [ 2313.933187] ? sock_destroy_inode+0x60/0x60 [ 2313.937526] sock_alloc_inode+0x19/0x250 [ 2313.941602] ? sock_destroy_inode+0x60/0x60 [ 2313.945932] alloc_inode+0x5d/0x180 [ 2313.949568] new_inode_pseudo+0x14/0xe0 [ 2313.953558] sock_alloc+0x3c/0x260 [ 2313.957111] __sock_create+0xba/0x740 [ 2313.960926] __sys_socketpair+0x1be/0x570 [ 2313.965090] ? __ia32_sys_socket+0xb0/0xb0 [ 2313.969338] ? ksys_write+0x1c8/0x2a0 [ 2313.973154] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2313.978535] __x64_sys_socketpair+0x93/0xf0 23:36:00 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x20303159, 0x0, @stepwise}) [ 2313.982877] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2313.987471] do_syscall_64+0xf9/0x620 [ 2313.991282] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2313.996473] RIP: 0033:0x7fcd11dfc0c9 [ 2314.000204] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2314.019115] RSP: 002b:00007fcd1036e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 2314.026835] RAX: ffffffffffffffda RBX: 00007fcd11f1bf80 RCX: 00007fcd11dfc0c9 23:36:00 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000000)=@overlay={0x1000, 0x2, 0x4, 0xe000, 0x100, {0x0, 0xea60}, {0x5, 0xc, 0x80, 0x40, 0x7, 0x4, "75c925aa"}, 0x7fff, 0x3, {}, 0x5}) [ 2314.034117] RDX: 000000007fffffff RSI: 0000000000000000 RDI: 0000000000000023 [ 2314.041396] RBP: 00007fcd1036e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2314.048695] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 2314.055979] R13: 00007ffda60a98df R14: 00007fcd1036e300 R15: 0000000000022000 23:36:00 executing program 3: socketpair(0x23, 0x0, 0x7fffffff, &(0x7f0000000100)) (fail_nth: 9) 23:36:00 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x541b, 0x0) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:00 executing program 2: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:00 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0285628, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:00 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000000)=@overlay={0x1000, 0x2, 0x4, 0xe000, 0x100, {0x0, 0xea60}, {0x5, 0xc, 0x80, 0x40, 0x7, 0x4, "75c925aa"}, 0x7fff, 0x3, {}, 0x5}) 23:36:00 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x20323159, 0x0, @stepwise}) [ 2314.102934] socket: no more sockets 23:36:00 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) syz_open_dev$vim2m(&(0x7f0000000080), 0x80, 0x2) 23:36:00 executing program 2: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:00 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0285629, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:00 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x20363159, 0x0, @stepwise}) [ 2314.214056] FAULT_INJECTION: forcing a failure. [ 2314.214056] name failslab, interval 1, probability 0, space 0, times 0 [ 2314.252148] CPU: 0 PID: 4641 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 2314.259976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2314.269334] Call Trace: [ 2314.271943] dump_stack+0x1fc/0x2ef [ 2314.275594] should_fail.cold+0xa/0xf [ 2314.279415] ? setup_fault_attr+0x200/0x200 [ 2314.283750] ? lock_acquire+0x170/0x3c0 [ 2314.287741] __should_failslab+0x115/0x180 [ 2314.291994] should_failslab+0x5/0x10 [ 2314.295809] kmem_cache_alloc_trace+0x284/0x380 [ 2314.300494] ? kmem_cache_alloc+0x315/0x370 [ 2314.304835] sock_alloc_inode+0x5f/0x250 [ 2314.308909] ? sock_destroy_inode+0x60/0x60 [ 2314.313241] alloc_inode+0x5d/0x180 [ 2314.316891] new_inode_pseudo+0x14/0xe0 [ 2314.320881] sock_alloc+0x3c/0x260 [ 2314.324452] __sock_create+0xba/0x740 [ 2314.328274] __sys_socketpair+0x1be/0x570 [ 2314.332439] ? __ia32_sys_socket+0xb0/0xb0 [ 2314.336685] ? ksys_write+0x1c8/0x2a0 [ 2314.340505] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2314.345887] __x64_sys_socketpair+0x93/0xf0 [ 2314.350219] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2314.354811] do_syscall_64+0xf9/0x620 [ 2314.358628] entry_SYSCALL_64_after_hwframe+0x49/0xbe 23:36:00 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x30314142, 0x0, @stepwise}) 23:36:00 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) syz_open_dev$vim2m(&(0x7f0000000080), 0x80, 0x2) [ 2314.363824] RIP: 0033:0x7fcd11dfc0c9 [ 2314.367544] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2314.386453] RSP: 002b:00007fcd1036e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 2314.394171] RAX: ffffffffffffffda RBX: 00007fcd11f1bf80 RCX: 00007fcd11dfc0c9 [ 2314.401446] RDX: 000000007fffffff RSI: 0000000000000000 RDI: 0000000000000023 [ 2314.408721] RBP: 00007fcd1036e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2314.415997] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 2314.423272] R13: 00007ffda60a98df R14: 00007fcd1036e300 R15: 0000000000022000 23:36:00 executing program 3: socketpair(0x23, 0x0, 0x7fffffff, &(0x7f0000000100)) (fail_nth: 10) 23:36:00 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x541b, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) socket$inet_sctp(0x2, 0x1, 0x84) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x541b, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) 23:36:00 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:00 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405610, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:00 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) syz_open_dev$vim2m(&(0x7f0000000080), 0x80, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) (async) syz_open_dev$vim2m(&(0x7f0000000080), 0x80, 0x2) (async) 23:36:00 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x30314247, 0x0, @stepwise}) [ 2314.476269] socket: no more sockets 23:36:00 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405667, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:01 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="004080000000000300000f0047af001c006500087f2f907800000000ac1414aa0083066704807c00"]}) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:01 executing program 0: r0 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r0}, 0x8) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f00000001c0)) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) [ 2314.559586] FAULT_INJECTION: forcing a failure. [ 2314.559586] name failslab, interval 1, probability 0, space 0, times 0 23:36:01 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x30314742, 0x0, @stepwise}) [ 2314.618603] CPU: 0 PID: 4675 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 2314.626432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2314.635792] Call Trace: [ 2314.638453] dump_stack+0x1fc/0x2ef [ 2314.642104] should_fail.cold+0xa/0xf [ 2314.645920] ? setup_fault_attr+0x200/0x200 [ 2314.650251] ? lock_acquire+0x170/0x3c0 [ 2314.654237] __should_failslab+0x115/0x180 [ 2314.658516] should_failslab+0x5/0x10 [ 2314.662334] kmem_cache_alloc_trace+0x284/0x380 [ 2314.667023] __request_module+0x31e/0xb80 [ 2314.671183] ? pn_socket_create+0x47b/0x5a0 [ 2314.675508] ? free_modprobe_argv+0x90/0x90 [ 2314.679887] ? mark_held_locks+0xf0/0xf0 [ 2314.683957] ? should_fail+0x142/0x7b0 [ 2314.687854] ? fs_reclaim_release+0xd0/0x110 [ 2314.692272] ? setup_fault_attr+0x200/0x200 [ 2314.696612] ? calibrate_delay+0x6b4/0xc4a [ 2314.700861] ? cap_capable+0x1eb/0x250 [ 2314.704757] ? security_capable+0x8f/0xc0 [ 2314.708919] pn_socket_create+0x47b/0x5a0 [ 2314.713083] __sock_create+0x3d8/0x740 23:36:01 executing program 0: r0 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r0}, 0x8) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f00000001c0)) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r0}, 0x8) (async) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f00000001c0)) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:36:01 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x30314752, 0x0, @stepwise}) [ 2314.716985] __sys_socketpair+0x1be/0x570 [ 2314.721137] ? __ia32_sys_socket+0xb0/0xb0 [ 2314.725380] ? ksys_write+0x1c8/0x2a0 [ 2314.729202] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2314.734582] __x64_sys_socketpair+0x93/0xf0 [ 2314.738920] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2314.743520] do_syscall_64+0xf9/0x620 [ 2314.747341] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2314.752552] RIP: 0033:0x7fcd11dfc0c9 [ 2314.756271] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2314.775183] RSP: 002b:00007fcd1036e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 2314.782914] RAX: ffffffffffffffda RBX: 00007fcd11f1bf80 RCX: 00007fcd11dfc0c9 [ 2314.790195] RDX: 000000007fffffff RSI: 0000000000000000 RDI: 0000000000000023 [ 2314.797480] RBP: 00007fcd1036e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2314.804765] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000002 [ 2314.812045] R13: 00007ffda60a98df R14: 00007fcd1036e300 R15: 0000000000022000 23:36:01 executing program 3: socketpair(0x23, 0x0, 0x7fffffff, &(0x7f0000000100)) (fail_nth: 11) 23:36:01 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31324d4e, 0x0, @stepwise}) 23:36:01 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:01 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0585609, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:01 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="004080000000000300000f0047af001c006500087f2f907800000000ac1414aa0083066704807c00"]}) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:01 executing program 0: r0 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r0}, 0x8) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f00000001c0)) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:01 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31324d59, 0x0, @stepwise}) 23:36:01 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:01 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) [ 2314.934020] FAULT_INJECTION: forcing a failure. [ 2314.934020] name failslab, interval 1, probability 0, space 0, times 0 23:36:01 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x721181, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000040)=""/46) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:01 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) [ 2314.997272] CPU: 0 PID: 4712 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 2315.005105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2315.014471] Call Trace: [ 2315.017072] dump_stack+0x1fc/0x2ef [ 2315.020720] should_fail.cold+0xa/0xf [ 2315.024534] ? setup_fault_attr+0x200/0x200 [ 2315.028868] ? lock_acquire+0x170/0x3c0 [ 2315.032859] __should_failslab+0x115/0x180 [ 2315.037108] should_failslab+0x5/0x10 [ 2315.040918] __kmalloc_track_caller+0x2a6/0x3c0 23:36:01 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x721181, 0x0) (rerun: 64) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000040)=""/46) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) [ 2315.045593] ? __request_module+0x33c/0xb80 [ 2315.049925] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2315.054956] kstrdup+0x36/0x70 [ 2315.058156] __request_module+0x33c/0xb80 [ 2315.062311] ? pn_socket_create+0x47b/0x5a0 [ 2315.066642] ? free_modprobe_argv+0x90/0x90 [ 2315.070977] ? mark_held_locks+0xf0/0xf0 [ 2315.075042] ? should_fail+0x142/0x7b0 [ 2315.078931] ? fs_reclaim_release+0xd0/0x110 [ 2315.083348] ? setup_fault_attr+0x200/0x200 [ 2315.087677] ? calibrate_delay+0x6b4/0xc4a [ 2315.091925] ? cap_capable+0x1eb/0x250 [ 2315.095833] ? security_capable+0x8f/0xc0 [ 2315.100000] pn_socket_create+0x47b/0x5a0 [ 2315.104167] __sock_create+0x3d8/0x740 [ 2315.108070] __sys_socketpair+0x1be/0x570 [ 2315.112226] ? __ia32_sys_socket+0xb0/0xb0 [ 2315.116475] ? ksys_write+0x1c8/0x2a0 [ 2315.120284] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2315.125668] __x64_sys_socketpair+0x93/0xf0 [ 2315.129999] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2315.134587] do_syscall_64+0xf9/0x620 [ 2315.138399] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2315.143596] RIP: 0033:0x7fcd11dfc0c9 [ 2315.147313] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2315.166221] RSP: 002b:00007fcd1036e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 2315.173960] RAX: ffffffffffffffda RBX: 00007fcd11f1bf80 RCX: 00007fcd11dfc0c9 [ 2315.181239] RDX: 000000007fffffff RSI: 0000000000000000 RDI: 0000000000000023 [ 2315.188520] RBP: 00007fcd1036e1d0 R08: 0000000000000000 R09: 0000000000000000 23:36:01 executing program 3: socketpair(0x23, 0x0, 0x7fffffff, &(0x7f0000000100)) (fail_nth: 12) 23:36:01 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:01 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0585611, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:01 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x3132564e, 0x0, @stepwise}) 23:36:01 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="004080000000000300000f0047af001c006500087f2f907800000000ac1414aa0083066704807c00"]}) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="004080000000000300000f0047af001c006500087f2f907800000000ac1414aa0083066704807c00"]}) (async) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) 23:36:01 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x721181, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000040)=""/46) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) [ 2315.195799] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000002 [ 2315.203082] R13: 00007ffda60a98df R14: 00007fcd1036e300 R15: 0000000000022000 23:36:01 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:01 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) [ 2315.291175] FAULT_INJECTION: forcing a failure. [ 2315.291175] name failslab, interval 1, probability 0, space 0, times 0 [ 2315.322406] CPU: 0 PID: 4746 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 2315.330237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2315.339601] Call Trace: [ 2315.342212] dump_stack+0x1fc/0x2ef 23:36:01 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x408040, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f0000000040)={{0x7fff, 0x3}, {0x100000000, 0x9}, 0x7}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) [ 2315.345864] should_fail.cold+0xa/0xf [ 2315.349681] ? setup_fault_attr+0x200/0x200 [ 2315.354014] ? lock_acquire+0x170/0x3c0 [ 2315.358007] __should_failslab+0x115/0x180 [ 2315.362260] should_failslab+0x5/0x10 [ 2315.366072] kmem_cache_alloc_trace+0x284/0x380 [ 2315.370748] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2315.375780] ? dec_ucount+0x200/0x200 [ 2315.379595] call_usermodehelper_setup+0x84/0x300 [ 2315.384457] __request_module+0x42e/0xb80 [ 2315.388623] ? pn_socket_create+0x47b/0x5a0 [ 2315.392964] ? free_modprobe_argv+0x90/0x90 [ 2315.397306] ? mark_held_locks+0xf0/0xf0 [ 2315.401380] ? should_fail+0x142/0x7b0 [ 2315.405277] ? fs_reclaim_release+0xd0/0x110 [ 2315.409707] ? setup_fault_attr+0x200/0x200 [ 2315.414044] ? calibrate_delay+0x6b4/0xc4a [ 2315.418296] ? cap_capable+0x1eb/0x250 [ 2315.422199] ? security_capable+0x8f/0xc0 [ 2315.426364] pn_socket_create+0x47b/0x5a0 [ 2315.430526] __sock_create+0x3d8/0x740 [ 2315.434429] __sys_socketpair+0x1be/0x570 [ 2315.438584] ? __ia32_sys_socket+0xb0/0xb0 [ 2315.442829] ? ksys_write+0x1c8/0x2a0 23:36:01 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x408040, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f0000000040)={{0x7fff, 0x3}, {0x100000000, 0x9}, 0x7}) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:01 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31364d4e, 0x0, @stepwise}) [ 2315.446649] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2315.452026] __x64_sys_socketpair+0x93/0xf0 [ 2315.456365] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2315.460955] do_syscall_64+0xf9/0x620 [ 2315.464773] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2315.469967] RIP: 0033:0x7fcd11dfc0c9 [ 2315.473686] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 23:36:01 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xdc8, 0x47}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000140)={0x0, @raw_data="66b8aa2b12e82042194134fbbe79990d248360ab0f65c636349781f668a3642e5052cfb273848c14250b12fad916f6b2b4710844d543d54dabacc1163654d1335fc69ef0e8943fc62484a6a06d45814a70e9de781d26809cab9ccd2a7ee09ffaf29209fa0913bff45df5aba343d9e1d9471926ac7d5b64678602c5a790ab8020537627368f48c46096863f1a64dceb0f9af0f0e6a2f8d709be1f3fe43f8cee9c26aff951d82f4776fa02c8e5a0d494ba07b9da01ea08426232e65ed81175991e5f19f7820313b7a6"}) [ 2315.492685] RSP: 002b:00007fcd1036e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 2315.500410] RAX: ffffffffffffffda RBX: 00007fcd11f1bf80 RCX: 00007fcd11dfc0c9 [ 2315.507699] RDX: 000000007fffffff RSI: 0000000000000000 RDI: 0000000000000023 [ 2315.514971] RBP: 00007fcd1036e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2315.522247] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000002 [ 2315.529533] R13: 00007ffda60a98df R14: 00007fcd1036e300 R15: 0000000000022000 23:36:02 executing program 3: socketpair(0x23, 0x0, 0x7fffffff, &(0x7f0000000100)) (fail_nth: 13) 23:36:02 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:02 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x408040, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f0000000040)={{0x7fff, 0x3}, {0x100000000, 0x9}, 0x7}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:02 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31364d59, 0x0, @stepwise}) 23:36:02 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, 0x0) 23:36:02 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xdc8, 0x47}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000140)={0x0, @raw_data="66b8aa2b12e82042194134fbbe79990d248360ab0f65c636349781f668a3642e5052cfb273848c14250b12fad916f6b2b4710844d543d54dabacc1163654d1335fc69ef0e8943fc62484a6a06d45814a70e9de781d26809cab9ccd2a7ee09ffaf29209fa0913bff45df5aba343d9e1d9471926ac7d5b64678602c5a790ab8020537627368f48c46096863f1a64dceb0f9af0f0e6a2f8d709be1f3fe43f8cee9c26aff951d82f4776fa02c8e5a0d494ba07b9da01ea08426232e65ed81175991e5f19f7820313b7a6"}) 23:36:02 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xdc8, 0x47}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000140)={0x0, @raw_data="66b8aa2b12e82042194134fbbe79990d248360ab0f65c636349781f668a3642e5052cfb273848c14250b12fad916f6b2b4710844d543d54dabacc1163654d1335fc69ef0e8943fc62484a6a06d45814a70e9de781d26809cab9ccd2a7ee09ffaf29209fa0913bff45df5aba343d9e1d9471926ac7d5b64678602c5a790ab8020537627368f48c46096863f1a64dceb0f9af0f0e6a2f8d709be1f3fe43f8cee9c26aff951d82f4776fa02c8e5a0d494ba07b9da01ea08426232e65ed81175991e5f19f7820313b7a6"}) 23:36:02 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, 0x0) 23:36:02 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x90000000, 0x0, 0x4, {0x0, @sliced={0xff, [0x7, 0x8, 0x9, 0x4, 0x9, 0x0, 0x1, 0x6, 0x0, 0xfff9, 0x2, 0x1, 0x8, 0x4, 0x6, 0x5, 0x3, 0x7ff, 0x5, 0x1, 0x8, 0x9, 0x0, 0xff, 0x1765, 0x9, 0x5, 0xffff, 0xc9b8, 0x1, 0x0, 0x6, 0x200, 0x9, 0x7fff, 0x4, 0x9, 0x5b, 0x3304, 0xc4, 0xc000, 0x7ff, 0x5, 0xfffb, 0x7, 0x8, 0x7, 0x79], 0xfff}}, 0x9}) 23:36:02 executing program 3: socketpair(0x23, 0x0, 0x7fffffff, &(0x7f0000000100)) 23:36:02 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x290000, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@multiplanar_userptr={0x1, 0x1, 0x4, 0x70000, 0x1960, {0x77359400}, {0x2, 0xc, 0x9, 0x7f, 0x53, 0x7f, "ee84735a"}, 0x81, 0x2, {&(0x7f0000000080)=[{0x4, 0x80}, {0x2816, 0x1, {&(0x7f0000000040)}, 0xffff}]}, 0x2, 0x0, r2}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:02 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, 0x0) 23:36:02 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x90000000, 0x0, 0x4, {0x0, @sliced={0xff, [0x7, 0x8, 0x9, 0x4, 0x9, 0x0, 0x1, 0x6, 0x0, 0xfff9, 0x2, 0x1, 0x8, 0x4, 0x6, 0x5, 0x3, 0x7ff, 0x5, 0x1, 0x8, 0x9, 0x0, 0xff, 0x1765, 0x9, 0x5, 0xffff, 0xc9b8, 0x1, 0x0, 0x6, 0x200, 0x9, 0x7fff, 0x4, 0x9, 0x5b, 0x3304, 0xc4, 0xc000, 0x7ff, 0x5, 0xfffb, 0x7, 0x8, 0x7, 0x79], 0xfff}}, 0x9}) 23:36:02 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x3136564e, 0x0, @stepwise}) 23:36:02 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x589000, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000240)=@multiplanar_userptr={0x14, 0x1, 0x4, 0x10000, 0x3, {r2, r3/1000+60000}, {0x5, 0x2, 0x80, 0x9, 0x83, 0x8, "390cae24"}, 0xfe41, 0x2, {&(0x7f00000001c0)=[{0x2, 0x6, {&(0x7f00000000c0)}, 0x63d}, {0x7, 0x860, {&(0x7f0000000180)}}]}, 0x80000001, 0x0, r4}) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, &(0x7f0000000040)={{0x7, 0x1a6}, {0x7, 0x1}, 0x6, 0x1}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x9) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) getsockname$tipc(r5, &(0x7f00000002c0)=@name, &(0x7f0000000300)=0x10) 23:36:02 executing program 3: socketpair(0x2, 0x0, 0x7fffffff, &(0x7f0000000100)) 23:36:02 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x290000, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@multiplanar_userptr={0x1, 0x1, 0x4, 0x70000, 0x1960, {0x77359400}, {0x2, 0xc, 0x9, 0x7f, 0x53, 0x7f, "ee84735a"}, 0x81, 0x2, {&(0x7f0000000080)=[{0x4, 0x80}, {0x2816, 0x1, {&(0x7f0000000040)}, 0xffff}]}, 0x2, 0x0, r2}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:02 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:02 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x589000, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) (async) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) (async, rerun: 32) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000240)=@multiplanar_userptr={0x14, 0x1, 0x4, 0x10000, 0x3, {r2, r3/1000+60000}, {0x5, 0x2, 0x80, 0x9, 0x83, 0x8, "390cae24"}, 0xfe41, 0x2, {&(0x7f00000001c0)=[{0x2, 0x6, {&(0x7f00000000c0)}, 0x63d}, {0x7, 0x860, {&(0x7f0000000180)}}]}, 0x80000001, 0x0, r4}) (async, rerun: 32) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, &(0x7f0000000040)={{0x7, 0x1a6}, {0x7, 0x1}, 0x6, 0x1}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x9) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) (async, rerun: 32) getsockname$tipc(r5, &(0x7f00000002c0)=@name, &(0x7f0000000300)=0x10) (rerun: 32) 23:36:02 executing program 3: socketpair(0x9, 0x0, 0x7fffffff, &(0x7f0000000100)) 23:36:02 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x90000000, 0x0, 0x4, {0x0, @sliced={0xff, [0x7, 0x8, 0x9, 0x4, 0x9, 0x0, 0x1, 0x6, 0x0, 0xfff9, 0x2, 0x1, 0x8, 0x4, 0x6, 0x5, 0x3, 0x7ff, 0x5, 0x1, 0x8, 0x9, 0x0, 0xff, 0x1765, 0x9, 0x5, 0xffff, 0xc9b8, 0x1, 0x0, 0x6, 0x200, 0x9, 0x7fff, 0x4, 0x9, 0x5b, 0x3304, 0xc4, 0xc000, 0x7ff, 0x5, 0xfffb, 0x7, 0x8, 0x7, 0x79], 0xfff}}, 0x9}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x90000000, 0x0, 0x4, {0x0, @sliced={0xff, [0x7, 0x8, 0x9, 0x4, 0x9, 0x0, 0x1, 0x6, 0x0, 0xfff9, 0x2, 0x1, 0x8, 0x4, 0x6, 0x5, 0x3, 0x7ff, 0x5, 0x1, 0x8, 0x9, 0x0, 0xff, 0x1765, 0x9, 0x5, 0xffff, 0xc9b8, 0x1, 0x0, 0x6, 0x200, 0x9, 0x7fff, 0x4, 0x9, 0x5b, 0x3304, 0xc4, 0xc000, 0x7ff, 0x5, 0xfffb, 0x7, 0x8, 0x7, 0x79], 0xfff}}, 0x9}) (async) 23:36:02 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31384142, 0x0, @stepwise}) 23:36:02 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:02 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x290000, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@multiplanar_userptr={0x1, 0x1, 0x4, 0x70000, 0x1960, {0x77359400}, {0x2, 0xc, 0x9, 0x7f, 0x53, 0x7f, "ee84735a"}, 0x81, 0x2, {&(0x7f0000000080)=[{0x4, 0x80}, {0x2816, 0x1, {&(0x7f0000000040)}, 0xffff}]}, 0x2, 0x0, r2}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x290000, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@multiplanar_userptr={0x1, 0x1, 0x4, 0x70000, 0x1960, {0x77359400}, {0x2, 0xc, 0x9, 0x7f, 0x53, 0x7f, "ee84735a"}, 0x81, 0x2, {&(0x7f0000000080)=[{0x4, 0x80}, {0x2816, 0x1, {&(0x7f0000000040)}, 0xffff}]}, 0x2, 0x0, r2}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) 23:36:02 executing program 3: socketpair(0xa, 0x0, 0x7fffffff, &(0x7f0000000100)) 23:36:02 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x589000, 0x0) (async) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) (async) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000240)=@multiplanar_userptr={0x14, 0x1, 0x4, 0x10000, 0x3, {r2, r3/1000+60000}, {0x5, 0x2, 0x80, 0x9, 0x83, 0x8, "390cae24"}, 0xfe41, 0x2, {&(0x7f00000001c0)=[{0x2, 0x6, {&(0x7f00000000c0)}, 0x63d}, {0x7, 0x860, {&(0x7f0000000180)}}]}, 0x80000001, 0x0, r4}) (async) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, &(0x7f0000000040)={{0x7, 0x1a6}, {0x7, 0x1}, 0x6, 0x1}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) (async) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x9) (async) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) (async) getsockname$tipc(r5, &(0x7f00000002c0)=@name, &(0x7f0000000300)=0x10) 23:36:02 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31424752, 0x0, @stepwise}) 23:36:02 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:02 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:02 executing program 3: socketpair(0x2c, 0x0, 0x7fffffff, &(0x7f0000000100)) 23:36:02 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711}, 0x10) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x8000, 0x3831354f, 0x8, 0x3, [{}, {0x0, 0x6}, {}, {0x5}, {0xd26}], 0x0, 0x1, 0x0, 0x0, 0x5}}) 23:36:02 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x32314142, 0x0, @stepwise}) 23:36:02 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000180)={0x1, 0x0, 0x0, "41159e9a65e49e5e4978a575410b832821891ed656c02426b4b5f31ca091e590", 0x38414262}) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x75, 0x3, 0x0, "dc65a814a019248eab8edcc4e1abf314d65488f0fed98ce75482839f9e3162e4", 0x41414770}) 23:36:02 executing program 3: socketpair(0x63, 0x0, 0x7fffffff, &(0x7f0000000100)) 23:36:02 executing program 2: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:02 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:36:02 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711}, 0x10) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x8000, 0x3831354f, 0x8, 0x3, [{}, {0x0, 0x6}, {}, {0x5}, {0xd26}], 0x0, 0x1, 0x0, 0x0, 0x5}}) 23:36:02 executing program 3: socketpair(0x5f5e0ff, 0x0, 0x7fffffff, &(0x7f0000000100)) 23:36:02 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x32314247, 0x0, @stepwise}) 23:36:02 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:02 executing program 2: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:02 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000180)={0x1, 0x0, 0x0, "41159e9a65e49e5e4978a575410b832821891ed656c02426b4b5f31ca091e590", 0x38414262}) (async, rerun: 32) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080)) (async, rerun: 32) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x75, 0x3, 0x0, "dc65a814a019248eab8edcc4e1abf314d65488f0fed98ce75482839f9e3162e4", 0x41414770}) 23:36:02 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x32314742, 0x0, @stepwise}) 23:36:02 executing program 3: socketpair(0x23, 0x2, 0x7fffffff, &(0x7f0000000100)) 23:36:02 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711}, 0x10) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x8000, 0x3831354f, 0x8, 0x3, [{}, {0x0, 0x6}, {}, {0x5}, {0xd26}], 0x0, 0x1, 0x0, 0x0, 0x5}}) syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) (async) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711}, 0x10) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x8000, 0x3831354f, 0x8, 0x3, [{}, {0x0, 0x6}, {}, {0x5}, {0xd26}], 0x0, 0x1, 0x0, 0x0, 0x5}}) (async) 23:36:02 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r2) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x51, 0x200800) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x60000, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f00000001c0)={0x1, @raw_data="dd745bf504da2869fc48d12acf8dcc3cf3b4ed0179e0e35f6759a562f8fdcd945962d621a28f0633d3bded86364022814437fa6f2c789049e45522f9aac093609f3f56da7de2a4227401586c0cd2f4e087a5779bc1d2db06e8e98b27085287de97578df49b6ba90ff0b67860d5382b124f58efc0eef4704c4bd04e67d5610a73643904616f0fdc5f6b8e2b084a5e76eca42aff3ce3b845c1adc25d3e3661048efc6a0d2e21b781fb81069fb42734a1191430e321ceba71fc0c13a1da82db11ef0f1dc4d69c2e22e7"}) openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) 23:36:02 executing program 2: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:02 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000180)={0x1, 0x0, 0x0, "41159e9a65e49e5e4978a575410b832821891ed656c02426b4b5f31ca091e590", 0x38414262}) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x75, 0x3, 0x0, "dc65a814a019248eab8edcc4e1abf314d65488f0fed98ce75482839f9e3162e4", 0x41414770}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000180)={0x1, 0x0, 0x0, "41159e9a65e49e5e4978a575410b832821891ed656c02426b4b5f31ca091e590", 0x38414262}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080)) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x75, 0x3, 0x0, "dc65a814a019248eab8edcc4e1abf314d65488f0fed98ce75482839f9e3162e4", 0x41414770}) (async) 23:36:02 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x32314752, 0x0, @stepwise}) 23:36:02 executing program 3: socketpair(0x23, 0x3, 0x7fffffff, &(0x7f0000000100)) 23:36:02 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x32314d4e, 0x0, @stepwise}) 23:36:02 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:02 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) sendmsg$tipc(r1, &(0x7f0000000140)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x3}}, 0x10, &(0x7f0000000040), 0x0, &(0x7f0000000080)="60f7e790741233af0766df40a4a20071aa97b6d6a9e692f9cf9d188e14fb220f66979c46a4f4aaa36f3746fcceb73fdab962912fa5bf1ca55305ffbb8b70d4aacc4fccc41748103045a4ba5dc3691f4f11d3cb0a459c4448680290d4eef3225ac919261f8e4d25f049143c727c06867d81137b6002b14b8556e98ade5d", 0x7d, 0x1}, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:02 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async, rerun: 64) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r2) (async) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x51, 0x200800) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) (async) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x60000, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f00000001c0)={0x1, @raw_data="dd745bf504da2869fc48d12acf8dcc3cf3b4ed0179e0e35f6759a562f8fdcd945962d621a28f0633d3bded86364022814437fa6f2c789049e45522f9aac093609f3f56da7de2a4227401586c0cd2f4e087a5779bc1d2db06e8e98b27085287de97578df49b6ba90ff0b67860d5382b124f58efc0eef4704c4bd04e67d5610a73643904616f0fdc5f6b8e2b084a5e76eca42aff3ce3b845c1adc25d3e3661048efc6a0d2e21b781fb81069fb42734a1191430e321ceba71fc0c13a1da82db11ef0f1dc4d69c2e22e7"}) (async) openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) 23:36:02 executing program 3: socketpair(0x23, 0x4, 0x7fffffff, &(0x7f0000000100)) 23:36:03 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:03 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xea) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xffff, 0xfe1}) accept4$tipc(r0, &(0x7f0000000080)=@id, &(0x7f00000000c0)=0x10, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:03 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r2) (async) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x51, 0x200800) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) (async) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x60000, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f00000001c0)={0x1, @raw_data="dd745bf504da2869fc48d12acf8dcc3cf3b4ed0179e0e35f6759a562f8fdcd945962d621a28f0633d3bded86364022814437fa6f2c789049e45522f9aac093609f3f56da7de2a4227401586c0cd2f4e087a5779bc1d2db06e8e98b27085287de97578df49b6ba90ff0b67860d5382b124f58efc0eef4704c4bd04e67d5610a73643904616f0fdc5f6b8e2b084a5e76eca42aff3ce3b845c1adc25d3e3661048efc6a0d2e21b781fb81069fb42734a1191430e321ceba71fc0c13a1da82db11ef0f1dc4d69c2e22e7"}) (async) openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) 23:36:03 executing program 3: socketpair(0x23, 0x5, 0x7fffffff, &(0x7f0000000100)) 23:36:03 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x32314d59, 0x0, @stepwise}) 23:36:03 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:03 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) sendmsg$tipc(r1, &(0x7f0000000140)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x3}}, 0x10, &(0x7f0000000040), 0x0, &(0x7f0000000080)="60f7e790741233af0766df40a4a20071aa97b6d6a9e692f9cf9d188e14fb220f66979c46a4f4aaa36f3746fcceb73fdab962912fa5bf1ca55305ffbb8b70d4aacc4fccc41748103045a4ba5dc3691f4f11d3cb0a459c4448680290d4eef3225ac919261f8e4d25f049143c727c06867d81137b6002b14b8556e98ade5d", 0x7d, 0x1}, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:03 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xea) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xffff, 0xfe1}) (async) accept4$tipc(r0, &(0x7f0000000080)=@id, &(0x7f00000000c0)=0x10, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:03 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:03 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000040)=@fd={0x7, 0x2, 0x4, 0x161120, 0xffffff98, {r1, r2/1000+10000}, {0x5, 0xc, 0x0, 0x2, 0xed, 0xff, "25e61880"}, 0xff, 0x4, {}, 0x0, 0x0, r3}) 23:36:03 executing program 3: socketpair(0x23, 0x6, 0x7fffffff, &(0x7f0000000100)) 23:36:03 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x32315241, 0x0, @stepwise}) 23:36:03 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xea) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xffff, 0xfe1}) accept4$tipc(r0, &(0x7f0000000080)=@id, &(0x7f00000000c0)=0x10, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xea) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xffff, 0xfe1}) (async) accept4$tipc(r0, &(0x7f0000000080)=@id, &(0x7f00000000c0)=0x10, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:36:03 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:03 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) sendmsg$tipc(r1, &(0x7f0000000140)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x3}}, 0x10, &(0x7f0000000040), 0x0, &(0x7f0000000080)="60f7e790741233af0766df40a4a20071aa97b6d6a9e692f9cf9d188e14fb220f66979c46a4f4aaa36f3746fcceb73fdab962912fa5bf1ca55305ffbb8b70d4aacc4fccc41748103045a4ba5dc3691f4f11d3cb0a459c4448680290d4eef3225ac919261f8e4d25f049143c727c06867d81137b6002b14b8556e98ade5d", 0x7d, 0x1}, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) sendmsg$tipc(r1, &(0x7f0000000140)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x3}}, 0x10, &(0x7f0000000040), 0x0, &(0x7f0000000080)="60f7e790741233af0766df40a4a20071aa97b6d6a9e692f9cf9d188e14fb220f66979c46a4f4aaa36f3746fcceb73fdab962912fa5bf1ca55305ffbb8b70d4aacc4fccc41748103045a4ba5dc3691f4f11d3cb0a459c4448680290d4eef3225ac919261f8e4d25f049143c727c06867d81137b6002b14b8556e98ade5d", 0x7d, 0x1}, 0x0) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) 23:36:03 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000040)=@fd={0x7, 0x2, 0x4, 0x161120, 0xffffff98, {r1, r2/1000+10000}, {0x5, 0xc, 0x0, 0x2, 0xed, 0xff, "25e61880"}, 0xff, 0x4, {}, 0x0, 0x0, r3}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) clock_gettime(0x0, &(0x7f0000000000)) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000040)=@fd={0x7, 0x2, 0x4, 0x161120, 0xffffff98, {r1, r2/1000+10000}, {0x5, 0xc, 0x0, 0x2, 0xed, 0xff, "25e61880"}, 0xff, 0x4, {}, 0x0, 0x0, r3}) (async) 23:36:03 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x32315258, 0x0, @stepwise}) 23:36:03 executing program 3: socketpair(0x23, 0x7, 0x7fffffff, &(0x7f0000000100)) 23:36:03 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x32315559, 0x0, @stepwise}) 23:36:03 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:03 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000040)=@fd={0x7, 0x2, 0x4, 0x161120, 0xffffff98, {r1, r2/1000+10000}, {0x5, 0xc, 0x0, 0x2, 0xed, 0xff, "25e61880"}, 0xff, 0x4, {}, 0x0, 0x0, r3}) 23:36:03 executing program 3: socketpair(0x23, 0x8, 0x7fffffff, &(0x7f0000000100)) 23:36:03 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x3231564e, 0x0, @stepwise}) 23:36:03 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8000000000000000, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5}, 0x48) r7 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x401, 0x8, 0x800, 0x0, r6, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0xe}, 0x48) r10 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGETNODEID(r10, 0x89e1, &(0x7f0000000480)={0x4}) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)={0x20c, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4008000) 23:36:03 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, 0x0) 23:36:03 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x32315659, 0x0, @stepwise}) 23:36:03 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x9, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) clock_gettime(0x0, &(0x7f0000000000)) bind$pptp(r1, &(0x7f0000000200)={0x18, 0x2, {0x0, @rand_addr=0x64010100}}, 0x1e) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x4, 0x0}, 0x8) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_tracing={0x1a, 0x7, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x10001}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0xf}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu={0x7, 0x1, 0x7, 0x3, 0x2, 0xfffffffffffffffe, 0x4}]}, &(0x7f00000006c0)='syzkaller\x00', 0xbb8, 0x4a, &(0x7f0000000700)=""/74, 0x41100, 0x18, '\x00', 0x0, 0x18, r3, 0x8, &(0x7f0000000780)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xa, 0x6, 0x9}, 0x10, 0x1206e, r3, 0x0, &(0x7f0000000800)=[r1, r3, 0x1, r2, r2]}, 0x80) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000000980)=0x200) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x5, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x0, 0x40, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r4}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @ldst={0x3, 0x3, 0x3, 0x6, 0x1, 0x100, 0xfffffffffffffff0}]}, &(0x7f00000003c0)='syzkaller\x00', 0xc0, 0x88, &(0x7f0000000400)=""/136, 0x40f00, 0x3, '\x00', r6, 0x22, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0xf, 0x3f, 0xffffff01}, 0x10, r7, r8, 0x0, &(0x7f00000008c0)=[r9]}, 0x80) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r2}, 0x8) r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r11, 0xae03, 0x0) ioctl$SYNC_IOC_MERGE(r10, 0xc0303e03, &(0x7f0000000280)={"891d834fbdde98a023eb401673a9835ad4adaab9322ed0af5ce5f4a193627f31", r11}) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f0000000240)={0x6, 0x9, 0x1}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000140)=@multiplanar_mmap={0x9272, 0x0, 0x4, 0x10000, 0x200, {0x0, 0x2710}, {0x5, 0x1, 0x3f, 0x3f, 0x9, 0x9, "d0e7c035"}, 0x10000, 0x1, {&(0x7f0000000340)=[{0x1ff, 0x1800, {0x7f}, 0xe7c4}, {0xffff, 0x2, {0x3f87}, 0x9}]}, 0x7, 0x0, r2}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) r12 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r12, 0xae03, 0x0) openat$cgroup_procs(r12, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) 23:36:03 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x3, "475d003f9bb805dfd0f1c62f7200ecff00220000000000000000001de000", 0x31435641}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000180)=""/4096) 23:36:03 executing program 3: socketpair(0x23, 0x9, 0x7fffffff, &(0x7f0000000100)) 23:36:03 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8000000000000000, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) (async) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5}, 0x48) r7 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x401, 0x8, 0x800, 0x0, r6, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0xe}, 0x48) (async) r10 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGETNODEID(r10, 0x89e1, &(0x7f0000000480)={0x4}) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)={0x20c, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4008000) 23:36:03 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x9, 0x2) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) clock_gettime(0x0, &(0x7f0000000000)) (async) bind$pptp(r1, &(0x7f0000000200)={0x18, 0x2, {0x0, @rand_addr=0x64010100}}, 0x1e) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) (async) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x4, 0x0}, 0x8) (async) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_tracing={0x1a, 0x7, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x10001}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0xf}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu={0x7, 0x1, 0x7, 0x3, 0x2, 0xfffffffffffffffe, 0x4}]}, &(0x7f00000006c0)='syzkaller\x00', 0xbb8, 0x4a, &(0x7f0000000700)=""/74, 0x41100, 0x18, '\x00', 0x0, 0x18, r3, 0x8, &(0x7f0000000780)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xa, 0x6, 0x9}, 0x10, 0x1206e, r3, 0x0, &(0x7f0000000800)=[r1, r3, 0x1, r2, r2]}, 0x80) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000000980)=0x200) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x5, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x0, 0x40, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r4}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @ldst={0x3, 0x3, 0x3, 0x6, 0x1, 0x100, 0xfffffffffffffff0}]}, &(0x7f00000003c0)='syzkaller\x00', 0xc0, 0x88, &(0x7f0000000400)=""/136, 0x40f00, 0x3, '\x00', r6, 0x22, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0xf, 0x3f, 0xffffff01}, 0x10, r7, r8, 0x0, &(0x7f00000008c0)=[r9]}, 0x80) (async) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r2}, 0x8) (async) r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r11, 0xae03, 0x0) (async) ioctl$SYNC_IOC_MERGE(r10, 0xc0303e03, &(0x7f0000000280)={"891d834fbdde98a023eb401673a9835ad4adaab9322ed0af5ce5f4a193627f31", r11}) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f0000000240)={0x6, 0x9, 0x1}) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000140)=@multiplanar_mmap={0x9272, 0x0, 0x4, 0x10000, 0x200, {0x0, 0x2710}, {0x5, 0x1, 0x3f, 0x3f, 0x9, 0x9, "d0e7c035"}, 0x10000, 0x1, {&(0x7f0000000340)=[{0x1ff, 0x1800, {0x7f}, 0xe7c4}, {0xffff, 0x2, {0x3f87}, 0x9}]}, 0x7, 0x0, r2}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) r12 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r12, 0xae03, 0x0) openat$cgroup_procs(r12, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) 23:36:03 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x32344d59, 0x0, @stepwise}) 23:36:03 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8000000000000000, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) (async) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5}, 0x48) (async) r7 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x401, 0x8, 0x800, 0x0, r6, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0xe}, 0x48) r10 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGETNODEID(r10, 0x89e1, &(0x7f0000000480)={0x4}) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)={0x20c, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4008000) 23:36:03 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, 0x0) 23:36:03 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x3, "475d003f9bb805dfd0f1c62f7200ecff00220000000000000000001de000", 0x31435641}) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000180)=""/4096) 23:36:03 executing program 3: socketpair(0x23, 0xa, 0x7fffffff, &(0x7f0000000100)) 23:36:03 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x3234564e, 0x0, @stepwise}) 23:36:03 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:03 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, 0x0) 23:36:03 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x3, "475d003f9bb805dfd0f1c62f7200ecff00220000000000000000001de000", 0x31435641}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000180)=""/4096) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x3, "475d003f9bb805dfd0f1c62f7200ecff00220000000000000000001de000", 0x31435641}) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000180)=""/4096) (async) 23:36:03 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x9, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) clock_gettime(0x0, &(0x7f0000000000)) (async) bind$pptp(r1, &(0x7f0000000200)={0x18, 0x2, {0x0, @rand_addr=0x64010100}}, 0x1e) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) (async) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x4, 0x0}, 0x8) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_tracing={0x1a, 0x7, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x10001}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0xf}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu={0x7, 0x1, 0x7, 0x3, 0x2, 0xfffffffffffffffe, 0x4}]}, &(0x7f00000006c0)='syzkaller\x00', 0xbb8, 0x4a, &(0x7f0000000700)=""/74, 0x41100, 0x18, '\x00', 0x0, 0x18, r3, 0x8, &(0x7f0000000780)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xa, 0x6, 0x9}, 0x10, 0x1206e, r3, 0x0, &(0x7f0000000800)=[r1, r3, 0x1, r2, r2]}, 0x80) (async) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000000980)=0x200) (async) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x5, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x0, 0x40, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r4}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @ldst={0x3, 0x3, 0x3, 0x6, 0x1, 0x100, 0xfffffffffffffff0}]}, &(0x7f00000003c0)='syzkaller\x00', 0xc0, 0x88, &(0x7f0000000400)=""/136, 0x40f00, 0x3, '\x00', r6, 0x22, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0xf, 0x3f, 0xffffff01}, 0x10, r7, r8, 0x0, &(0x7f00000008c0)=[r9]}, 0x80) (async) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r2}, 0x8) (async) r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r11, 0xae03, 0x0) (async) ioctl$SYNC_IOC_MERGE(r10, 0xc0303e03, &(0x7f0000000280)={"891d834fbdde98a023eb401673a9835ad4adaab9322ed0af5ce5f4a193627f31", r11}) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) (async) ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f0000000240)={0x6, 0x9, 0x1}) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000140)=@multiplanar_mmap={0x9272, 0x0, 0x4, 0x10000, 0x200, {0x0, 0x2710}, {0x5, 0x1, 0x3f, 0x3f, 0x9, 0x9, "d0e7c035"}, 0x10000, 0x1, {&(0x7f0000000340)=[{0x1ff, 0x1800, {0x7f}, 0xe7c4}, {0xffff, 0x2, {0x3f87}, 0x9}]}, 0x7, 0x0, r2}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) r12 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r12, 0xae03, 0x0) (async) openat$cgroup_procs(r12, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) 23:36:03 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r2) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x51, 0x200800) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x60000, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f00000001c0)={0x1, @raw_data="dd745bf504da2869fc48d12acf8dcc3cf3b4ed0179e0e35f6759a562f8fdcd945962d621a28f0633d3bded86364022814437fa6f2c789049e45522f9aac093609f3f56da7de2a4227401586c0cd2f4e087a5779bc1d2db06e8e98b27085287de97578df49b6ba90ff0b67860d5382b124f58efc0eef4704c4bd04e67d5610a73643904616f0fdc5f6b8e2b084a5e76eca42aff3ce3b845c1adc25d3e3661048efc6a0d2e21b781fb81069fb42734a1191430e321ceba71fc0c13a1da82db11ef0f1dc4d69c2e22e7"}) openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) 23:36:03 executing program 3: socketpair(0x23, 0xb, 0x7fffffff, &(0x7f0000000100)) 23:36:03 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000000)=@overlay={0x8, 0x0, 0x4, 0x800, 0x8, {0x0, 0xea60}, {0x3, 0xc, 0x49, 0x1, 0xfb, 0x3, "654682a4"}, 0x9}) 23:36:03 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc0585611, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:36:03 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x33424752, 0x0, @stepwise}) 23:36:03 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:03 executing program 3: socketpair(0x23, 0xc, 0x7fffffff, &(0x7f0000000100)) 23:36:03 executing program 5: read$ptp(0xffffffffffffffff, &(0x7f0000000000)=""/165, 0xa5) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x80180, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000140)) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:03 executing program 2: socketpair(0x23, 0x0, 0x7fffffff, &(0x7f0000000100)) 23:36:04 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x33524742, 0x0, @stepwise}) 23:36:04 executing program 3: socketpair(0x23, 0xd, 0x7fffffff, &(0x7f0000000100)) 23:36:04 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:04 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000000)=@overlay={0x8, 0x0, 0x4, 0x800, 0x8, {0x0, 0xea60}, {0x3, 0xc, 0x49, 0x1, 0xfb, 0x3, "654682a4"}, 0x9}) 23:36:04 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (fail_nth: 1) 23:36:04 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x3, 0x0, "475d003fe11ed59bb804dfd0f1c62f7200180000220000000000002200001de0"}) 23:36:04 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000000)=@overlay={0x8, 0x0, 0x4, 0x800, 0x8, {0x0, 0xea60}, {0x3, 0xc, 0x49, 0x1, 0xfb, 0x3, "654682a4"}, 0x9}) 23:36:04 executing program 5: read$ptp(0xffffffffffffffff, &(0x7f0000000000)=""/165, 0xa5) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x80180, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000140)) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:04 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x33565348, 0x0, @stepwise}) 23:36:04 executing program 3: socketpair(0x23, 0xe, 0x7fffffff, &(0x7f0000000100)) 23:36:04 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x3, 0x0, "475d003fe11ed59bb804dfd0f1c62f7200180000220000000000002200001de0"}) [ 2317.729791] FAULT_INJECTION: forcing a failure. [ 2317.729791] name failslab, interval 1, probability 0, space 0, times 0 [ 2317.777803] CPU: 1 PID: 5122 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0 [ 2317.785644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2317.795007] Call Trace: [ 2317.797623] dump_stack+0x1fc/0x2ef [ 2317.801397] should_fail.cold+0xa/0xf [ 2317.805217] ? setup_fault_attr+0x200/0x200 [ 2317.809568] ? lock_acquire+0x170/0x3c0 [ 2317.813564] __should_failslab+0x115/0x180 [ 2317.817816] should_failslab+0x5/0x10 [ 2317.821639] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 2317.826758] __kmalloc_node+0x38/0x70 [ 2317.830584] kvmalloc_node+0x61/0xf0 [ 2317.834311] ? v4l_querycap+0x340/0x340 [ 2317.838297] video_usercopy+0x3c7/0xfa0 [ 2317.842295] ? v4l_enumstd+0x60/0x60 [ 2317.846034] ? get_pid_task+0xf4/0x190 [ 2317.849933] ? mark_held_locks+0xf0/0xf0 [ 2317.854018] ? proc_fail_nth_write+0x95/0x1d0 [ 2317.858531] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 2317.863475] ? __fdget_pos+0x26f/0x310 [ 2317.867389] ? video_usercopy+0xfa0/0xfa0 [ 2317.871550] v4l2_ioctl+0x147/0x1a0 [ 2317.875192] ? video_devdata+0xa0/0xa0 [ 2317.879096] do_vfs_ioctl+0xcdb/0x12e0 [ 2317.883003] ? lock_downgrade+0x720/0x720 [ 2317.887167] ? check_preemption_disabled+0x41/0x280 [ 2317.892205] ? ioctl_preallocate+0x200/0x200 [ 2317.896643] ? __fget+0x356/0x510 [ 2317.900116] ? do_dup2+0x450/0x450 [ 2317.903666] ? vfs_write+0x393/0x540 [ 2317.907398] ? fput+0x2b/0x190 [ 2317.910613] ksys_ioctl+0x9b/0xc0 [ 2317.914082] __x64_sys_ioctl+0x6f/0xb0 [ 2317.917989] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2317.922587] do_syscall_64+0xf9/0x620 [ 2317.926407] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2317.931609] RIP: 0033:0x7f4de33560c9 [ 2317.935328] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2317.954235] RSP: 002b:00007f4de18c8168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2317.961953] RAX: ffffffffffffffda RBX: 00007f4de3475f80 RCX: 00007f4de33560c9 [ 2317.969239] RDX: 0000000020000140 RSI: 00000000c100565c RDI: 0000000000000003 23:36:04 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x34324142, 0x0, @stepwise}) 23:36:04 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x34324d59, 0x0, @stepwise}) 23:36:04 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x34325241, 0x0, @stepwise}) 23:36:04 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x34325258, 0x0, @stepwise}) 23:36:04 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x3, 0x0, "475d003fe11ed59bb804dfd0f1c62f7200180000220000000000002200001de0"}) [ 2317.976519] RBP: 00007f4de18c81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2317.983797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2317.991094] R13: 00007ffea4b1808f R14: 00007f4de18c8300 R15: 0000000000022000 23:36:04 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (fail_nth: 2) 23:36:04 executing program 3: socketpair(0x23, 0xf, 0x7fffffff, &(0x7f0000000100)) 23:36:04 executing program 5: read$ptp(0xffffffffffffffff, &(0x7f0000000000)=""/165, 0xa5) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x80180, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000140)) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:04 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x41414270}) 23:36:04 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:04 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x3432564e, 0x0, @stepwise}) 23:36:04 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x41414270}) 23:36:04 executing program 3: socketpair(0x23, 0x10, 0x7fffffff, &(0x7f0000000100)) 23:36:04 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:04 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x3, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0, 0x0, 0x1}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 23:36:04 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:04 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x34325842, 0x0, @stepwise}) 23:36:04 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x41414270}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x41414270}) (async) 23:36:04 executing program 3: socketpair(0x23, 0x11, 0x7fffffff, &(0x7f0000000100)) 23:36:04 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x2, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:04 executing program 3: socketpair(0x23, 0x12, 0x7fffffff, &(0x7f0000000100)) 23:36:04 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:36:04 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x34343452, 0x0, @stepwise}) 23:36:04 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 23:36:04 executing program 3: socketpair(0x23, 0x13, 0x7fffffff, &(0x7f0000000100)) 23:36:04 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x3, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0, 0x0, 0x1}}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 23:36:04 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5421, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:04 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x34343459, 0x0, @stepwise}) 23:36:04 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 23:36:04 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x3, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0, 0x0, 0x1}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x3, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0, 0x0, 0x1}}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) 23:36:04 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0xffffffff}, 0x10) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) 23:36:04 executing program 3: socketpair(0x23, 0x14, 0x7fffffff, &(0x7f0000000100)) 23:36:04 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 23:36:04 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0xffffffff}, 0x10) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0xffffffff}, 0x10) (async) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) (async) 23:36:04 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x34424752, 0x0, @stepwise}) 23:36:04 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5450, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:04 executing program 3: socketpair(0x23, 0x15, 0x7fffffff, &(0x7f0000000100)) 23:36:04 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x200, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x31424752}) socket$tipc(0x1e, 0x5, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x2, @pix_mp={0x8, 0xfffffbff, 0x59323259, 0x9, 0x3, [{0x2, 0x9bd}, {0xe6, 0x3}, {0x10001, 0x8}, {0x9, 0x4}, {0x0, 0x2}, {0x0, 0x1000}, {0x1, 0x3}, {0x4, 0x1}], 0x80, 0x2, 0x7, 0x1, 0x4}}) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000200)=0x8, 0x4) r3 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040)=r3, 0x12) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x200, 0x8}, 0xc) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x6, 0x800, 0xffffffff, 0x8, r4, 0x19, '\x00', 0x0, r5, 0x5, 0x1, 0x4, 0x6}, 0x48) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r6, 0xc0405610, &(0x7f0000000340)={0x2, 0x6, 0x4, 0x4800}) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x0) ioctl$UI_SET_PROPBIT(r6, 0x4004556e, 0xf) 23:36:04 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:05 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async, rerun: 32) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async, rerun: 32) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0xffffffff}, 0x10) (async, rerun: 64) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) (rerun: 64) 23:36:05 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x200, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x31424752}) socket$tipc(0x1e, 0x5, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x2, @pix_mp={0x8, 0xfffffbff, 0x59323259, 0x9, 0x3, [{0x2, 0x9bd}, {0xe6, 0x3}, {0x10001, 0x8}, {0x9, 0x4}, {0x0, 0x2}, {0x0, 0x1000}, {0x1, 0x3}, {0x4, 0x1}], 0x80, 0x2, 0x7, 0x1, 0x4}}) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000200)=0x8, 0x4) r3 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040)=r3, 0x12) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x200, 0x8}, 0xc) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x6, 0x800, 0xffffffff, 0x8, r4, 0x19, '\x00', 0x0, r5, 0x5, 0x1, 0x4, 0x6}, 0x48) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r6, 0xc0405610, &(0x7f0000000340)={0x2, 0x6, 0x4, 0x4800}) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x0) ioctl$UI_SET_PROPBIT(r6, 0x4004556e, 0xf) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0xb, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x200, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x31424752}) (async) socket$tipc(0x1e, 0x5, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x2, @pix_mp={0x8, 0xfffffbff, 0x59323259, 0x9, 0x3, [{0x2, 0x9bd}, {0xe6, 0x3}, {0x10001, 0x8}, {0x9, 0x4}, {0x0, 0x2}, {0x0, 0x1000}, {0x1, 0x3}, {0x4, 0x1}], 0x80, 0x2, 0x7, 0x1, 0x4}}) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000200)=0x8, 0x4) (async) gettid() (async) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040)=r3, 0x12) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x200, 0x8}, 0xc) (async) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x6, 0x800, 0xffffffff, 0x8, r4, 0x19, '\x00', 0x0, r5, 0x5, 0x1, 0x4, 0x6}, 0x48) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(r6, 0xc0405610, &(0x7f0000000340)={0x2, 0x6, 0x4, 0x4800}) (async) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x0) (async) ioctl$UI_SET_PROPBIT(r6, 0x4004556e, 0xf) (async) 23:36:05 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x34524742, 0x0, @stepwise}) 23:36:05 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5451, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:05 executing program 3: socketpair(0x23, 0x16, 0x7fffffff, &(0x7f0000000100)) 23:36:05 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x210a00, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000040)=@fd={0x5, 0x1, 0x4, 0x20, 0x1, {0x77359400}, {0x5, 0x8, 0xda, 0xff, 0x0, 0xff, "517eff3c"}, 0xf517, 0x4, {}, 0x1, 0x0, r2}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:05 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x34565348, 0x0, @stepwise}) 23:36:05 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:05 executing program 3: socketpair(0x23, 0x17, 0x7fffffff, &(0x7f0000000100)) 23:36:05 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5452, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:05 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x200, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x31424752}) (async) socket$tipc(0x1e, 0x5, 0x0) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x2, @pix_mp={0x8, 0xfffffbff, 0x59323259, 0x9, 0x3, [{0x2, 0x9bd}, {0xe6, 0x3}, {0x10001, 0x8}, {0x9, 0x4}, {0x0, 0x2}, {0x0, 0x1000}, {0x1, 0x3}, {0x4, 0x1}], 0x80, 0x2, 0x7, 0x1, 0x4}}) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000200)=0x8, 0x4) (async) r3 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040)=r3, 0x12) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x200, 0x8}, 0xc) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x6, 0x800, 0xffffffff, 0x8, r4, 0x19, '\x00', 0x0, r5, 0x5, 0x1, 0x4, 0x6}, 0x48) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r6, 0xc0405610, &(0x7f0000000340)={0x2, 0x6, 0x4, 0x4800}) (async) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x0) ioctl$UI_SET_PROPBIT(r6, 0x4004556e, 0xf) 23:36:05 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x210a00, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000040)=@fd={0x5, 0x1, 0x4, 0x20, 0x1, {0x77359400}, {0x5, 0x8, 0xda, 0xff, 0x0, 0xff, "517eff3c"}, 0xf517, 0x4, {}, 0x1, 0x0, r2}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x210a00, 0x0) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000040)=@fd={0x5, 0x1, 0x4, 0x20, 0x1, {0x77359400}, {0x5, 0x8, 0xda, 0xff, 0x0, 0xff, "517eff3c"}, 0xf517, 0x4, {}, 0x1, 0x0, r2}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:36:05 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) 23:36:05 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x34565559, 0x0, @stepwise}) 23:36:05 executing program 3: socketpair(0x23, 0x18, 0x7fffffff, &(0x7f0000000100)) 23:36:05 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5460, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:05 executing program 1: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)) 23:36:05 executing program 3: socketpair(0x23, 0x19, 0x7fffffff, &(0x7f0000000100)) 23:36:05 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x210a00, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000040)=@fd={0x5, 0x1, 0x4, 0x20, 0x1, {0x77359400}, {0x5, 0x8, 0xda, 0xff, 0x0, 0xff, "517eff3c"}, 0xf517, 0x4, {}, 0x1, 0x0, r2}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x210a00, 0x0) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000040)=@fd={0x5, 0x1, 0x4, 0x20, 0x1, {0x77359400}, {0x5, 0x8, 0xda, 0xff, 0x0, 0xff, "517eff3c"}, 0xf517, 0x4, {}, 0x1, 0x0, r2}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:36:05 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x35315241, 0x0, @stepwise}) 23:36:05 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) bpf$BPF_TASK_FD_QUERY(0x4, 0x0, 0x10) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280), 0x90002, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f0000000180)=0x403, 0x8) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000380)=@multiplanar_mmap={0x2, 0x2, 0x4, 0x1000, 0x6, {0x77359400}, {0x1, 0x1, 0x1, 0x42, 0x3, 0xf9, "2a071bb9"}, 0x6, 0x1, {&(0x7f0000000300)=[{0x9, 0xd82, {0x7fffffffffffffff}, 0xfff}, {0x1f, 0x1, {0x3}, 0x61}]}, 0x833}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast1, @dev}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x8) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) 23:36:05 executing program 1: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)) 23:36:05 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045612, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:05 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x5, 0x1, 0x0, "475d003fe11ed500000022000000000000000500", 0x3231564e}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x8001, 0x3, 0x3, {0x0, @sdr={0x3247504d, 0x3}}, 0xf8}) 23:36:05 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) bpf$BPF_TASK_FD_QUERY(0x4, 0x0, 0x10) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280), 0x90002, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f0000000180)=0x403, 0x8) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000380)=@multiplanar_mmap={0x2, 0x2, 0x4, 0x1000, 0x6, {0x77359400}, {0x1, 0x1, 0x1, 0x42, 0x3, 0xf9, "2a071bb9"}, 0x6, 0x1, {&(0x7f0000000300)=[{0x9, 0xd82, {0x7fffffffffffffff}, 0xfff}, {0x1f, 0x1, {0x3}, 0x61}]}, 0x833}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast1, @dev}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x8) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) (async) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) bpf$BPF_TASK_FD_QUERY(0x4, 0x0, 0x10) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280), 0x90002, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) (async) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f0000000180)=0x403, 0x8) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000380)=@multiplanar_mmap={0x2, 0x2, 0x4, 0x1000, 0x6, {0x77359400}, {0x1, 0x1, 0x1, 0x42, 0x3, 0xf9, "2a071bb9"}, 0x6, 0x1, {&(0x7f0000000300)=[{0x9, 0xd82, {0x7fffffffffffffff}, 0xfff}, {0x1f, 0x1, {0x3}, 0x61}]}, 0x833}) (async) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast1, @dev}, &(0x7f0000000140)=0xc) (async) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x8) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) (async) 23:36:05 executing program 3: socketpair(0x23, 0x1a, 0x7fffffff, &(0x7f0000000100)) 23:36:05 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x35315258, 0x0, @stepwise}) 23:36:05 executing program 1: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) recvmsg$can_bcm(r0, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)) (async) 23:36:05 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:05 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x5, 0x1, 0x0, "475d003fe11ed500000022000000000000000500", 0x3231564e}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x8001, 0x3, 0x3, {0x0, @sdr={0x3247504d, 0x3}}, 0xf8}) 23:36:05 executing program 3: socketpair(0x23, 0x1b, 0x7fffffff, &(0x7f0000000100)) 23:36:05 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40049409, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:05 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) bpf$BPF_TASK_FD_QUERY(0x4, 0x0, 0x10) (async, rerun: 64) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280), 0x90002, 0x0) (async, rerun: 64) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f0000000180)=0x403, 0x8) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000380)=@multiplanar_mmap={0x2, 0x2, 0x4, 0x1000, 0x6, {0x77359400}, {0x1, 0x1, 0x1, 0x42, 0x3, 0xf9, "2a071bb9"}, 0x6, 0x1, {&(0x7f0000000300)=[{0x9, 0xd82, {0x7fffffffffffffff}, 0xfff}, {0x1f, 0x1, {0x3}, 0x61}]}, 0x833}) (async, rerun: 64) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast1, @dev}, &(0x7f0000000140)=0xc) (async, rerun: 64) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x8) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) 23:36:05 executing program 3: socketpair(0x23, 0x1c, 0x7fffffff, &(0x7f0000000100)) 23:36:05 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x5, 0x1, 0x0, "475d003fe11ed500000022000000000000000500", 0x3231564e}) (async, rerun: 32) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x8001, 0x3, 0x3, {0x0, @sdr={0x3247504d, 0x3}}, 0xf8}) (rerun: 32) 23:36:05 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d4e, 0x0, @stepwise}) 23:36:05 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200633000220000000000000000001de0"}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000540)={0x0, @pix={0xb5, 0xfff, 0x52424752, 0x3, 0x1f, 0x7, 0xa, 0x1, 0x0, 0x0, 0x2, 0x1}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000640)={0x41, 0x1, 0x3}, 0x10) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f0000000200)={0xe}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST(r2, 0x40103d02, &(0x7f0000000080)={0x80000000}) 23:36:05 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x4020940d, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:05 executing program 3: socketpair(0x23, 0x1d, 0x7fffffff, &(0x7f0000000100)) 23:36:05 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0045878, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:05 executing program 3: socketpair(0x23, 0x1e, 0x7fffffff, &(0x7f0000000100)) 23:36:05 executing program 5: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x4a140, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000080)={'\x00', 0x8, 0x3, 0xfffffff7}) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000140)={0x3, @vbi={0x28920d31, 0xfffffff8, 0x3c, 0x20385655, [0x6a, 0x3ff], [0xe1c2, 0x1000], 0x1}}) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:05 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (fail_nth: 1) 23:36:05 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x3631564e, 0x0, @stepwise}) 23:36:05 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0045878, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:05 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200633000220000000000000000001de0"}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async, rerun: 64) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000540)={0x0, @pix={0xb5, 0xfff, 0x52424752, 0x3, 0x1f, 0x7, 0xa, 0x1, 0x0, 0x0, 0x2, 0x1}}) (async, rerun: 64) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000640)={0x41, 0x1, 0x3}, 0x10) (async) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x8) (async) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f0000000200)={0xe}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST(r2, 0x40103d02, &(0x7f0000000080)={0x80000000}) 23:36:05 executing program 3: socketpair(0x23, 0x21, 0x7fffffff, &(0x7f0000000100)) 23:36:05 executing program 5: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x4a140, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000080)={'\x00', 0x8, 0x3, 0xfffffff7}) (async, rerun: 64) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async, rerun: 64) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000140)={0x3, @vbi={0x28920d31, 0xfffffff8, 0x3c, 0x20385655, [0x6a, 0x3ff], [0xe1c2, 0x1000], 0x1}}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:05 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:05 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x42474752, 0x0, @stepwise}) 23:36:05 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0145608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:05 executing program 3: socketpair(0x23, 0x22, 0x7fffffff, &(0x7f0000000100)) 23:36:05 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200633000220000000000000000001de0"}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000540)={0x0, @pix={0xb5, 0xfff, 0x52424752, 0x3, 0x1f, 0x7, 0xa, 0x1, 0x0, 0x0, 0x2, 0x1}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000640)={0x41, 0x1, 0x3}, 0x10) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f0000000200)={0xe}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST(r2, 0x40103d02, &(0x7f0000000080)={0x80000000}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200633000220000000000000000001de0"}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) (async) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000540)={0x0, @pix={0xb5, 0xfff, 0x52424752, 0x3, 0x1f, 0x7, 0xa, 0x1, 0x0, 0x0, 0x2, 0x1}}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000640)={0x41, 0x1, 0x3}, 0x10) (async) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x8) (async) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f0000000200)={0xe}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$PTP_EXTTS_REQUEST(r2, 0x40103d02, &(0x7f0000000080)={0x80000000}) (async) 23:36:05 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x2, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:05 executing program 5: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x4a140, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000080)={'\x00', 0x8, 0x3, 0xfffffff7}) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000140)={0x3, @vbi={0x28920d31, 0xfffffff8, 0x3c, 0x20385655, [0x6a, 0x3ff], [0xe1c2, 0x1000], 0x1}}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:05 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:06 executing program 3: socketpair(0x23, 0x23, 0x7fffffff, &(0x7f0000000100)) 23:36:06 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x47425247, 0x0, @stepwise}) 23:36:06 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:06 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x34324d59}) 23:36:06 executing program 3: socketpair(0x23, 0x24, 0x7fffffff, &(0x7f0000000100)) 23:36:06 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:06 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5421, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:06 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:06 executing program 3: socketpair(0x23, 0x25, 0x7fffffff, &(0x7f0000000100)) 23:36:06 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x47524247, 0x0, @stepwise}) 23:36:06 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x34324d59}) 23:36:06 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) 23:36:06 executing program 3: socketpair(0x23, 0x26, 0x7fffffff, &(0x7f0000000100)) 23:36:06 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205649, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:06 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5450, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:06 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x34324d59}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x34324d59}) (async) 23:36:06 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x48524742, 0x0, @stepwise}) 23:36:06 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc020660b, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:06 executing program 3: socketpair(0x23, 0x27, 0x7fffffff, &(0x7f0000000100)) 23:36:06 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x3, @pix_mp={0x80, 0x0, 0x31303553}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x1, @pix_mp={0x0, 0x9, 0x3136564e, 0x1, 0x4, [{0x80000001, 0x8}, {0x8000, 0x4}, {0x4, 0x9}, {0x1118, 0xfffffff9}, {0x7, 0x3}, {0x9c0, 0x5680cdc5}, {0x2, 0x8}, {0x8a5, 0x7}], 0x8, 0x8, 0x4, 0x2, 0x6}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000240)={0x1, @raw_data="ec6f3ca1229396276fffa58906253963bfebf05d96a123a4bf74b822eced332f6f25d43405f87fa4852b7e65e5fcedfb2c14083d8ee896fcd4308d5a8bb01f9c0aada6c397178a8935d58d47620a0bd0d46618ab41c8d086bd519fef8a787a3f7accbba0d8ab575e48123d46c4521548a44604af2429b2bdec2fc854552f2b4eb196a261c3f4e3e78e703d2386773ad7c7e8a17a06cf59b74abddce84f57df191bc3be15d48c842b0841091f0a18b307346c34878622f37a79c6c3928710bb4b4b556bd5699d4fce"}) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x2, @raw_data="a6d63a85d33279cc15bd9b4d887c78e80d9340d47fb4b2caca41288e179f6b9e16fc3dc7141ad0f0c5b78bf3412281a18f4bd4614572043837235b62d07a503a1382cc4549036604a175cff97e6ff5849cc7b16803c10bcb9f8ed2be74b0ad3a2a938d136ce91651b3164020df6cd73309dc1048723c38d71bcebaedd3ffd53a0934956e89d16ed8b5792d7c2490fb1ee0ba7dc20471272f76f996cc92f432edcdfb0b57cbd334b351a7ae066dd5539c7afdd5f22d1f7a2997fd864f5434b8fa704f083e0f41871b"}) 23:36:06 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x2, @pix_mp={0x7, 0x80000001, 0x38414761, 0x5, 0xc, [{0x9}, {0x6, 0x6}, {0x9, 0x5}, {0xc444, 0x9}, {0x2, 0xfffffff7}, {0x8, 0x6}, {0x8001}, {0x32, 0x6}], 0x6, 0x0, 0x6, 0x2, 0x5}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x1, "475d003fffffffffb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:06 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x4f424752, 0x0, @stepwise}) 23:36:06 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5451, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:06 executing program 3: socketpair(0x23, 0x28, 0x7fffffff, &(0x7f0000000100)) 23:36:06 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x3, @pix_mp={0x80, 0x0, 0x31303553}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x1, @pix_mp={0x0, 0x9, 0x3136564e, 0x1, 0x4, [{0x80000001, 0x8}, {0x8000, 0x4}, {0x4, 0x9}, {0x1118, 0xfffffff9}, {0x7, 0x3}, {0x9c0, 0x5680cdc5}, {0x2, 0x8}, {0x8a5, 0x7}], 0x8, 0x8, 0x4, 0x2, 0x6}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000240)={0x1, @raw_data="ec6f3ca1229396276fffa58906253963bfebf05d96a123a4bf74b822eced332f6f25d43405f87fa4852b7e65e5fcedfb2c14083d8ee896fcd4308d5a8bb01f9c0aada6c397178a8935d58d47620a0bd0d46618ab41c8d086bd519fef8a787a3f7accbba0d8ab575e48123d46c4521548a44604af2429b2bdec2fc854552f2b4eb196a261c3f4e3e78e703d2386773ad7c7e8a17a06cf59b74abddce84f57df191bc3be15d48c842b0841091f0a18b307346c34878622f37a79c6c3928710bb4b4b556bd5699d4fce"}) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x2, @raw_data="a6d63a85d33279cc15bd9b4d887c78e80d9340d47fb4b2caca41288e179f6b9e16fc3dc7141ad0f0c5b78bf3412281a18f4bd4614572043837235b62d07a503a1382cc4549036604a175cff97e6ff5849cc7b16803c10bcb9f8ed2be74b0ad3a2a938d136ce91651b3164020df6cd73309dc1048723c38d71bcebaedd3ffd53a0934956e89d16ed8b5792d7c2490fb1ee0ba7dc20471272f76f996cc92f432edcdfb0b57cbd334b351a7ae066dd5539c7afdd5f22d1f7a2997fd864f5434b8fa704f083e0f41871b"}) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x3, @pix_mp={0x80, 0x0, 0x31303553}}) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x1, @pix_mp={0x0, 0x9, 0x3136564e, 0x1, 0x4, [{0x80000001, 0x8}, {0x8000, 0x4}, {0x4, 0x9}, {0x1118, 0xfffffff9}, {0x7, 0x3}, {0x9c0, 0x5680cdc5}, {0x2, 0x8}, {0x8a5, 0x7}], 0x8, 0x8, 0x4, 0x2, 0x6}}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000240)={0x1, @raw_data="ec6f3ca1229396276fffa58906253963bfebf05d96a123a4bf74b822eced332f6f25d43405f87fa4852b7e65e5fcedfb2c14083d8ee896fcd4308d5a8bb01f9c0aada6c397178a8935d58d47620a0bd0d46618ab41c8d086bd519fef8a787a3f7accbba0d8ab575e48123d46c4521548a44604af2429b2bdec2fc854552f2b4eb196a261c3f4e3e78e703d2386773ad7c7e8a17a06cf59b74abddce84f57df191bc3be15d48c842b0841091f0a18b307346c34878622f37a79c6c3928710bb4b4b556bd5699d4fce"}) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x2, @raw_data="a6d63a85d33279cc15bd9b4d887c78e80d9340d47fb4b2caca41288e179f6b9e16fc3dc7141ad0f0c5b78bf3412281a18f4bd4614572043837235b62d07a503a1382cc4549036604a175cff97e6ff5849cc7b16803c10bcb9f8ed2be74b0ad3a2a938d136ce91651b3164020df6cd73309dc1048723c38d71bcebaedd3ffd53a0934956e89d16ed8b5792d7c2490fb1ee0ba7dc20471272f76f996cc92f432edcdfb0b57cbd334b351a7ae066dd5539c7afdd5f22d1f7a2997fd864f5434b8fa704f083e0f41871b"}) (async) 23:36:06 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0285628, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:06 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x2, @pix_mp={0x7, 0x80000001, 0x38414761, 0x5, 0xc, [{0x9}, {0x6, 0x6}, {0x9, 0x5}, {0xc444, 0x9}, {0x2, 0xfffffff7}, {0x8, 0x6}, {0x8001}, {0x32, 0x6}], 0x6, 0x0, 0x6, 0x2, 0x5}}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x1, "475d003fffffffffb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:06 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5452, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:06 executing program 3: socketpair(0x23, 0x29, 0x7fffffff, &(0x7f0000000100)) 23:36:06 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x4f565559, 0x0, @stepwise}) 23:36:06 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x3, @pix_mp={0x80, 0x0, 0x31303553}}) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x1, @pix_mp={0x0, 0x9, 0x3136564e, 0x1, 0x4, [{0x80000001, 0x8}, {0x8000, 0x4}, {0x4, 0x9}, {0x1118, 0xfffffff9}, {0x7, 0x3}, {0x9c0, 0x5680cdc5}, {0x2, 0x8}, {0x8a5, 0x7}], 0x8, 0x8, 0x4, 0x2, 0x6}}) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000240)={0x1, @raw_data="ec6f3ca1229396276fffa58906253963bfebf05d96a123a4bf74b822eced332f6f25d43405f87fa4852b7e65e5fcedfb2c14083d8ee896fcd4308d5a8bb01f9c0aada6c397178a8935d58d47620a0bd0d46618ab41c8d086bd519fef8a787a3f7accbba0d8ab575e48123d46c4521548a44604af2429b2bdec2fc854552f2b4eb196a261c3f4e3e78e703d2386773ad7c7e8a17a06cf59b74abddce84f57df191bc3be15d48c842b0841091f0a18b307346c34878622f37a79c6c3928710bb4b4b556bd5699d4fce"}) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async, rerun: 32) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x2, @raw_data="a6d63a85d33279cc15bd9b4d887c78e80d9340d47fb4b2caca41288e179f6b9e16fc3dc7141ad0f0c5b78bf3412281a18f4bd4614572043837235b62d07a503a1382cc4549036604a175cff97e6ff5849cc7b16803c10bcb9f8ed2be74b0ad3a2a938d136ce91651b3164020df6cd73309dc1048723c38d71bcebaedd3ffd53a0934956e89d16ed8b5792d7c2490fb1ee0ba7dc20471272f76f996cc92f432edcdfb0b57cbd334b351a7ae066dd5539c7afdd5f22d1f7a2997fd864f5434b8fa704f083e0f41871b"}) (rerun: 32) 23:36:06 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0285629, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:06 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x2, @pix_mp={0x7, 0x80000001, 0x38414761, 0x5, 0xc, [{0x9}, {0x6, 0x6}, {0x9, 0x5}, {0xc444, 0x9}, {0x2, 0xfffffff7}, {0x8, 0x6}, {0x8001}, {0x32, 0x6}], 0x6, 0x0, 0x6, 0x2, 0x5}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x1, "475d003fffffffffb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:06 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5460, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:06 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x50323234, 0x0, @stepwise}) 23:36:06 executing program 3: socketpair(0x23, 0x2a, 0x7fffffff, &(0x7f0000000100)) 23:36:06 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x161041, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x0, 0x1001}) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) 23:36:06 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405610, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:06 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x50424752, 0x0, @stepwise}) 23:36:06 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x7ffff}}) 23:36:06 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045612, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:06 executing program 3: socketpair(0x23, 0x2b, 0x7fffffff, &(0x7f0000000100)) 23:36:06 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x7ffff}}) 23:36:06 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x50565559, 0x0, @stepwise}) 23:36:06 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045667, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:06 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0585609, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:06 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x161041, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x0, 0x1001}) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x161041, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000080)) (async) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x0, 0x1001}) (async) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) (async) 23:36:06 executing program 3: socketpair(0x23, 0x2c, 0x7fffffff, &(0x7f0000000100)) 23:36:06 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x51424752, 0x0, @stepwise}) 23:36:06 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x7ffff}}) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x7ffff}}) (async) 23:36:06 executing program 3: socketpair(0x23, 0x2d, 0x7fffffff, &(0x7f0000000100)) 23:36:07 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40049409, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:07 executing program 3: socketpair(0x23, 0x2e, 0x7fffffff, &(0x7f0000000100)) 23:36:07 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:07 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x52424752, 0x0, @stepwise}) 23:36:07 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x161041, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x0, 0x1001}) (async) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) 23:36:07 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x4020940d, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:07 executing program 3: socketpair(0x23, 0x2f, 0x7fffffff, &(0x7f0000000100)) 23:36:07 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0585611, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:07 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x81, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000140)={0x1, @pix={0x7, 0x6, 0x3831354f, 0x9, 0x0, 0x7, 0x2, 0x200, 0x1, 0x6, 0x0, 0x4}}) syz_open_dev$vim2m(&(0x7f0000000080), 0x800, 0x2) syz_open_dev$vim2m(&(0x7f0000000040), 0x49d, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:07 executing program 3: socketpair(0x23, 0x30, 0x7fffffff, &(0x7f0000000100)) 23:36:07 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x55595659, 0x0, @stepwise}) 23:36:07 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x0, @sliced={0x7f, [0x4, 0x4, 0x1, 0x5, 0xbe, 0x18, 0x0, 0x5, 0x1, 0x9, 0x8, 0x8, 0x4400, 0x4, 0xffff, 0x5, 0x64e0, 0xfff7, 0xd0, 0x1, 0x9, 0x0, 0x9, 0x3, 0x8811, 0x101, 0x1, 0x3, 0x40, 0xe7ad, 0xffff, 0x1, 0x0, 0x6, 0x8000, 0x1c, 0x40, 0x6, 0xfffe, 0x0, 0xb213, 0x3, 0x5, 0x8001, 0x365, 0x3, 0x7ff, 0x1ff], 0x40}}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)=@multiplanar_overlay={0x7, 0x2, 0x4, 0x0, 0x7, {0x77359400}, {0x3, 0x2, 0x8, 0x0, 0x1, 0x0, "95ab9508"}, 0x0, 0x3, {&(0x7f0000000000)=[{0x8, 0x1ff80000, {0x5}, 0xb3fc}, {0x2, 0x7, {0x200}, 0x7fffffff}]}, 0x80}) 23:36:07 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0045878, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:07 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:07 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x81, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000140)={0x1, @pix={0x7, 0x6, 0x3831354f, 0x9, 0x0, 0x7, 0x2, 0x200, 0x1, 0x6, 0x0, 0x4}}) (async, rerun: 32) syz_open_dev$vim2m(&(0x7f0000000080), 0x800, 0x2) (rerun: 32) syz_open_dev$vim2m(&(0x7f0000000040), 0x49d, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:07 executing program 3: socketpair(0x23, 0x31, 0x7fffffff, &(0x7f0000000100)) 23:36:07 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0045878, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:07 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x56595559, 0x0, @stepwise}) 23:36:07 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x0, @sliced={0x7f, [0x4, 0x4, 0x1, 0x5, 0xbe, 0x18, 0x0, 0x5, 0x1, 0x9, 0x8, 0x8, 0x4400, 0x4, 0xffff, 0x5, 0x64e0, 0xfff7, 0xd0, 0x1, 0x9, 0x0, 0x9, 0x3, 0x8811, 0x101, 0x1, 0x3, 0x40, 0xe7ad, 0xffff, 0x1, 0x0, 0x6, 0x8000, 0x1c, 0x40, 0x6, 0xfffe, 0x0, 0xb213, 0x3, 0x5, 0x8001, 0x365, 0x3, 0x7ff, 0x1ff], 0x40}}) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)=@multiplanar_overlay={0x7, 0x2, 0x4, 0x0, 0x7, {0x77359400}, {0x3, 0x2, 0x8, 0x0, 0x1, 0x0, "95ab9508"}, 0x0, 0x3, {&(0x7f0000000000)=[{0x8, 0x1ff80000, {0x5}, 0xb3fc}, {0x2, 0x7, {0x200}, 0x7fffffff}]}, 0x80}) 23:36:07 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc1005667, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:07 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x59455247, 0x0, @stepwise}) 23:36:07 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x81, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000140)={0x1, @pix={0x7, 0x6, 0x3831354f, 0x9, 0x0, 0x7, 0x2, 0x200, 0x1, 0x6, 0x0, 0x4}}) syz_open_dev$vim2m(&(0x7f0000000080), 0x800, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000040), 0x49d, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:07 executing program 3: socketpair(0x23, 0x32, 0x7fffffff, &(0x7f0000000100)) 23:36:07 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0145608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:07 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:07 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x0, @sliced={0x7f, [0x4, 0x4, 0x1, 0x5, 0xbe, 0x18, 0x0, 0x5, 0x1, 0x9, 0x8, 0x8, 0x4400, 0x4, 0xffff, 0x5, 0x64e0, 0xfff7, 0xd0, 0x1, 0x9, 0x0, 0x9, 0x3, 0x8811, 0x101, 0x1, 0x3, 0x40, 0xe7ad, 0xffff, 0x1, 0x0, 0x6, 0x8000, 0x1c, 0x40, 0x6, 0xfffe, 0x0, 0xb213, 0x3, 0x5, 0x8001, 0x365, 0x3, 0x7ff, 0x1ff], 0x40}}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)=@multiplanar_overlay={0x7, 0x2, 0x4, 0x0, 0x7, {0x77359400}, {0x3, 0x2, 0x8, 0x0, 0x1, 0x0, "95ab9508"}, 0x0, 0x3, {&(0x7f0000000000)=[{0x8, 0x1ff80000, {0x5}, 0xb3fc}, {0x2, 0x7, {0x200}, 0x7fffffff}]}, 0x80}) 23:36:07 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:07 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x59555956, 0x0, @stepwise}) 23:36:07 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x2, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:07 executing program 3: socketpair(0x23, 0x33, 0x7fffffff, &(0x7f0000000100)) 23:36:07 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x59565955, 0x0, @stepwise}) 23:36:07 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:07 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3982ca12, 0x2) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x100000000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f00000000c0)={0x2, 0x3, 0x0, "d40a83d8ee3a5055318f0d623296cc79cf5aa1485e7cf4abb0c966c08c92b67a", 0x34325842}) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405608, &(0x7f0000000140)={0xfffffffc, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:07 executing program 3: socketpair(0x23, 0x34, 0x7fffffff, &(0x7f0000000100)) 23:36:07 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x1000000, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:07 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0xa0363159, 0x0, @stepwise}) 23:36:07 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205649, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:07 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3982ca12, 0x2) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x100000000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f00000000c0)={0x2, 0x3, 0x0, "d40a83d8ee3a5055318f0d623296cc79cf5aa1485e7cf4abb0c966c08c92b67a", 0x34325842}) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405608, &(0x7f0000000140)={0xfffffffc, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)) (async) syz_open_dev$vim2m(&(0x7f0000000040), 0x3982ca12, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000080), 0x100000000, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f00000000c0)={0x2, 0x3, 0x0, "d40a83d8ee3a5055318f0d623296cc79cf5aa1485e7cf4abb0c966c08c92b67a", 0x34325842}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405608, &(0x7f0000000140)={0xfffffffc, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:36:07 executing program 3: socketpair(0x23, 0x35, 0x7fffffff, &(0x7f0000000100)) 23:36:07 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x2000000, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:07 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc020660b, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:07 executing program 5: r0 = socket(0x9, 0x2, 0x800) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @broadcast, @private}, &(0x7f00000000c0)=0xc) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) r7 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8}, 0x48) r9 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r10}, 0x48) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x1, 0x20, 0x3, 0x800, {{0xe, 0x4, 0x3, 0x2a, 0x38, 0x64, 0x0, 0x1e, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@ra={0x94, 0x4}, @ssrr={0x89, 0xf, 0x39, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast1]}, @ssrr={0x89, 0xf, 0x87, [@remote, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end]}}}}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @remote, @broadcast}, &(0x7f0000000240)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @initdev}, &(0x7f00000002c0)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)={0x5cc, r1, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3f}}}]}}, {{0x8, 0x1, r4}, {0x17c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r8}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x81, 0x8, 0x2, 0xbff7}, {0x7ff, 0x8, 0x4, 0x7}, {0x0, 0x1, 0x1, 0x8}, {0x5, 0xfe, 0x7, 0x80000000}, {0x0, 0x4, 0x0, 0x401}, {0x989f, 0xec, 0x3f, 0x4}, {0xc046, 0x9, 0xff}, {0x5, 0x9, 0x4, 0x7fff}, {0x1, 0x4, 0xff, 0x7f}, {0xcd6b, 0x43, 0x5, 0xa8d2}]}}}]}}, {{0x8, 0x1, r10}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xbe4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffbff}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x26c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3e19}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xf}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x5cc}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) r14 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r14, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:07 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0xb5315241, 0x0, @stepwise}) 23:36:07 executing program 3: socketpair(0x23, 0x36, 0x7fffffff, &(0x7f0000000100)) 23:36:07 executing program 5: r0 = socket(0x9, 0x2, 0x800) (async) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48) (async, rerun: 64) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @broadcast, @private}, &(0x7f00000000c0)=0xc) (async, rerun: 64) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) r7 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8}, 0x48) r9 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r10}, 0x48) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x1, 0x20, 0x3, 0x800, {{0xe, 0x4, 0x3, 0x2a, 0x38, 0x64, 0x0, 0x1e, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@ra={0x94, 0x4}, @ssrr={0x89, 0xf, 0x39, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast1]}, @ssrr={0x89, 0xf, 0x87, [@remote, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end]}}}}}) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @remote, @broadcast}, &(0x7f0000000240)=0xc) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @initdev}, &(0x7f00000002c0)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)={0x5cc, r1, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3f}}}]}}, {{0x8, 0x1, r4}, {0x17c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r8}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x81, 0x8, 0x2, 0xbff7}, {0x7ff, 0x8, 0x4, 0x7}, {0x0, 0x1, 0x1, 0x8}, {0x5, 0xfe, 0x7, 0x80000000}, {0x0, 0x4, 0x0, 0x401}, {0x989f, 0xec, 0x3f, 0x4}, {0xc046, 0x9, 0xff}, {0x5, 0x9, 0x4, 0x7fff}, {0x1, 0x4, 0xff, 0x7f}, {0xcd6b, 0x43, 0x5, 0xa8d2}]}}}]}}, {{0x8, 0x1, r10}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xbe4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffbff}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x26c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3e19}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xf}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x5cc}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) (async) r14 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r14, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:07 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0xb5315258, 0x0, @stepwise}) 23:36:07 executing program 3: socketpair(0x23, 0x37, 0x7fffffff, &(0x7f0000000100)) 23:36:07 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0285628, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:07 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:07 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3982ca12, 0x2) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x100000000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f00000000c0)={0x2, 0x3, 0x0, "d40a83d8ee3a5055318f0d623296cc79cf5aa1485e7cf4abb0c966c08c92b67a", 0x34325842}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405608, &(0x7f0000000140)={0xfffffffc, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:07 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x0, @pix={0xac, 0x4, 0x41414770, 0x6, 0x3ff, 0x72, 0x0, 0x9, 0x0, 0x4, 0x2, 0x6}}) 23:36:07 executing program 3: socketpair(0x23, 0x38, 0x7fffffff, &(0x7f0000000100)) 23:36:07 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:07 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x1, 0x1, "47380300001de00000a4ac7eff11055f1d00"}) 23:36:07 executing program 5: r0 = socket(0x9, 0x2, 0x800) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @broadcast, @private}, &(0x7f00000000c0)=0xc) (async) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) r7 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8}, 0x48) (async, rerun: 64) r9 = socket$l2tp(0x2, 0x2, 0x73) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r10}, 0x48) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x1, 0x20, 0x3, 0x800, {{0xe, 0x4, 0x3, 0x2a, 0x38, 0x64, 0x0, 0x1e, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@ra={0x94, 0x4}, @ssrr={0x89, 0xf, 0x39, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast1]}, @ssrr={0x89, 0xf, 0x87, [@remote, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end]}}}}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @remote, @broadcast}, &(0x7f0000000240)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @initdev}, &(0x7f00000002c0)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)={0x5cc, r1, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3f}}}]}}, {{0x8, 0x1, r4}, {0x17c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r8}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x81, 0x8, 0x2, 0xbff7}, {0x7ff, 0x8, 0x4, 0x7}, {0x0, 0x1, 0x1, 0x8}, {0x5, 0xfe, 0x7, 0x80000000}, {0x0, 0x4, 0x0, 0x401}, {0x989f, 0xec, 0x3f, 0x4}, {0xc046, 0x9, 0xff}, {0x5, 0x9, 0x4, 0x7fff}, {0x1, 0x4, 0xff, 0x7f}, {0xcd6b, 0x43, 0x5, 0xa8d2}]}}}]}}, {{0x8, 0x1, r10}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xbe4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffbff}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x26c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3e19}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xf}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x5cc}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) (async, rerun: 32) r14 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (rerun: 32) ioctl$vim2m_VIDIOC_TRY_FMT(r14, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:07 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0285629, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:07 executing program 3: socketpair(0x23, 0x39, 0x7fffffff, &(0x7f0000000100)) 23:36:07 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x0, @pix={0xac, 0x4, 0x41414770, 0x6, 0x3ff, 0x72, 0x0, 0x9, 0x0, 0x4, 0x2, 0x6}}) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x0, @pix={0xac, 0x4, 0x41414770, 0x6, 0x3ff, 0x72, 0x0, 0x9, 0x0, 0x4, 0x2, 0x6}}) (async) 23:36:07 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x1000000, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:07 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x1, 0x1, "47380300001de00000a4ac7eff11055f1d00"}) 23:36:07 executing program 3: socketpair(0x23, 0x3a, 0x7fffffff, &(0x7f0000000100)) 23:36:07 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405610, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:07 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x1, 0x1, "47380300001de00000a4ac7eff11055f1d00"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x1, 0x1, "47380300001de00000a4ac7eff11055f1d00"}) (async) 23:36:07 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x0, @pix={0xac, 0x4, 0x41414770, 0x6, 0x3ff, 0x72, 0x0, 0x9, 0x0, 0x4, 0x2, 0x6}}) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x0, @pix={0xac, 0x4, 0x41414770, 0x6, 0x3ff, 0x72, 0x0, 0x9, 0x0, 0x4, 0x2, 0x6}}) (async) 23:36:07 executing program 5: ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000040)=0x3) socket(0x1d, 0x4, 0x4) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0x40345622, &(0x7f0000000000)={0xe0, "c1708b7c43e396fa8da6406a4086088666f1c0683ee29bf7aa0c43c415f5f4ef", 0x2, 0x1}) 23:36:07 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x2000000, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:07 executing program 3: socketpair(0x23, 0x3b, 0x7fffffff, &(0x7f0000000100)) 23:36:07 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0585609, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:07 executing program 1: ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, &(0x7f0000000000)={0x81, "b42274a68be5afd742f9975519b2ea64aa3c9a8ca681e65956bbe495396cef3a", 0x2, 0x3, 0x3, 0x100000, 0x2}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000080)={0x9, "6e150513187b0bdb4a0fe6e751c5bb6422ee85828b467f31c033aba31bd28b18", 0x3, 0xfffffffe, 0x3, 0x1000, 0x4000000, 0x2}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:07 executing program 3: socketpair(0x23, 0x3c, 0x7fffffff, &(0x7f0000000100)) 23:36:07 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:07 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x7fff, 0xb40d}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x6e063b24, 0x0, @stepwise}) 23:36:08 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:08 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x7fff, 0xb40d}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x6e063b24, 0x0, @stepwise}) [ 2321.599552] can: request_module (can-proto-4) failed. 23:36:08 executing program 1: ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, &(0x7f0000000000)={0x81, "b42274a68be5afd742f9975519b2ea64aa3c9a8ca681e65956bbe495396cef3a", 0x2, 0x3, 0x3, 0x100000, 0x2}) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000080)={0x9, "6e150513187b0bdb4a0fe6e751c5bb6422ee85828b467f31c033aba31bd28b18", 0x3, 0xfffffffe, 0x3, 0x1000, 0x4000000, 0x2}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:08 executing program 5: ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000040)=0x3) socket(0x1d, 0x4, 0x4) (async, rerun: 64) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (rerun: 64) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0x40345622, &(0x7f0000000000)={0xe0, "c1708b7c43e396fa8da6406a4086088666f1c0683ee29bf7aa0c43c415f5f4ef", 0x2, 0x1}) 23:36:08 executing program 3: socketpair(0x23, 0x3d, 0x7fffffff, &(0x7f0000000100)) 23:36:08 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x2, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:08 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0585611, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:08 executing program 3: socketpair(0x23, 0x3e, 0x7fffffff, &(0x7f0000000100)) 23:36:08 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x7fff, 0xb40d}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x6e063b24, 0x0, @stepwise}) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x7fff, 0xb40d}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x6e063b24, 0x0, @stepwise}) (async) 23:36:08 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x1000000, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:08 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:08 executing program 1: ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, &(0x7f0000000000)={0x81, "b42274a68be5afd742f9975519b2ea64aa3c9a8ca681e65956bbe495396cef3a", 0x2, 0x3, 0x3, 0x100000, 0x2}) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000080)={0x9, "6e150513187b0bdb4a0fe6e751c5bb6422ee85828b467f31c033aba31bd28b18", 0x3, 0xfffffffe, 0x3, 0x1000, 0x4000000, 0x2}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) [ 2321.736696] can: request_module (can-proto-4) failed. 23:36:08 executing program 3: socketpair(0x23, 0x41, 0x7fffffff, &(0x7f0000000100)) 23:36:08 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x2000000, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) [ 2321.781359] can: request_module (can-proto-4) failed. 23:36:08 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000100)={0x1, 0x200}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0x5, 0xdcda}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) [ 2321.839882] can: request_module (can-proto-4) failed. [ 2321.887817] can: request_module (can-proto-4) failed. [ 2321.900461] can: request_module (can-proto-4) failed. [ 2321.916400] can: request_module (can-proto-4) failed. [ 2321.926940] can: request_module (can-proto-4) failed. [ 2321.937529] can: request_module (can-proto-4) failed. [ 2321.948629] can: request_module (can-proto-4) failed. 23:36:08 executing program 3: socketpair(0x23, 0x42, 0x7fffffff, &(0x7f0000000100)) 23:36:08 executing program 5: ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000040)=0x3) socket(0x1d, 0x4, 0x4) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0x40345622, &(0x7f0000000000)={0xe0, "c1708b7c43e396fa8da6406a4086088666f1c0683ee29bf7aa0c43c415f5f4ef", 0x2, 0x1}) 23:36:08 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:08 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0xffffffee, 0x17e9, 0x3, {0x3, @win={{0xfda, 0xfffffff7, 0x8, 0x8}, 0x0, 0xec, &(0x7f0000000080)={{0x99d9b59, 0x25e5, 0x4, 0x2}, &(0x7f0000000040)={{0x0, 0x705, 0x80, 0x8}, &(0x7f0000000000)={{0x7, 0x1, 0x6, 0x80000001}}}}, 0x8000, &(0x7f0000000180)="27d2a5672160d6eb6ca66c1bee03fe11663bec3eb398086fe002e3f9f97764e92987bd3eecee5a7d0b968bf000e06241b8035488ce8e3f8119667febcd6b15a6a97def06f20f695f44020234f864c3cec8dcb60f4595519681a38edbc081e5802f320d76adb02372c7adf94655f57fbf98f82dadea10da8dd4170018a57313c4ac02bdd52b8884", 0xfb}}, 0xffff3443}) 23:36:08 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000100)={0x1, 0x200}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0x5, 0xdcda}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) (async) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000100)={0x1, 0x200}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0x5, 0xdcda}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) 23:36:08 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d023fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:08 executing program 3: socketpair(0x23, 0x43, 0x7fffffff, &(0x7f0000000100)) 23:36:08 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:08 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000100)={0x1, 0x200}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0x5, 0xdcda}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) (async) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000100)={0x1, 0x200}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0x5, 0xdcda}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) 23:36:08 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003f02000000b805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:08 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0xffffffee, 0x17e9, 0x3, {0x3, @win={{0xfda, 0xfffffff7, 0x8, 0x8}, 0x0, 0xec, &(0x7f0000000080)={{0x99d9b59, 0x25e5, 0x4, 0x2}, &(0x7f0000000040)={{0x0, 0x705, 0x80, 0x8}, &(0x7f0000000000)={{0x7, 0x1, 0x6, 0x80000001}}}}, 0x8000, &(0x7f0000000180)="27d2a5672160d6eb6ca66c1bee03fe11663bec3eb398086fe002e3f9f97764e92987bd3eecee5a7d0b968bf000e06241b8035488ce8e3f8119667febcd6b15a6a97def06f20f695f44020234f864c3cec8dcb60f4595519681a38edbc081e5802f320d76adb02372c7adf94655f57fbf98f82dadea10da8dd4170018a57313c4ac02bdd52b8884", 0xfb}}, 0xffff3443}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0xffffffee, 0x17e9, 0x3, {0x3, @win={{0xfda, 0xfffffff7, 0x8, 0x8}, 0x0, 0xec, &(0x7f0000000080)={{0x99d9b59, 0x25e5, 0x4, 0x2}, &(0x7f0000000040)={{0x0, 0x705, 0x80, 0x8}, &(0x7f0000000000)={{0x7, 0x1, 0x6, 0x80000001}}}}, 0x8000, &(0x7f0000000180)="27d2a5672160d6eb6ca66c1bee03fe11663bec3eb398086fe002e3f9f97764e92987bd3eecee5a7d0b968bf000e06241b8035488ce8e3f8119667febcd6b15a6a97def06f20f695f44020234f864c3cec8dcb60f4595519681a38edbc081e5802f320d76adb02372c7adf94655f57fbf98f82dadea10da8dd4170018a57313c4ac02bdd52b8884", 0xfb}}, 0xffff3443}) (async) 23:36:08 executing program 3: socketpair(0x23, 0x44, 0x7fffffff, &(0x7f0000000100)) 23:36:08 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0xc, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:08 executing program 5: ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x5, 0x0, 0x9, 0x4000}) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000140)={0x0, @vbi={0x81, 0x7fffffff, 0x3, 0x59555956, [0x3, 0x7], [0x9, 0x1], 0x108}}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:08 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003f03000000b805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:08 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0xffffffee, 0x17e9, 0x3, {0x3, @win={{0xfda, 0xfffffff7, 0x8, 0x8}, 0x0, 0xec, &(0x7f0000000080)={{0x99d9b59, 0x25e5, 0x4, 0x2}, &(0x7f0000000040)={{0x0, 0x705, 0x80, 0x8}, &(0x7f0000000000)={{0x7, 0x1, 0x6, 0x80000001}}}}, 0x8000, &(0x7f0000000180)="27d2a5672160d6eb6ca66c1bee03fe11663bec3eb398086fe002e3f9f97764e92987bd3eecee5a7d0b968bf000e06241b8035488ce8e3f8119667febcd6b15a6a97def06f20f695f44020234f864c3cec8dcb60f4595519681a38edbc081e5802f320d76adb02372c7adf94655f57fbf98f82dadea10da8dd4170018a57313c4ac02bdd52b8884", 0xfb}}, 0xffff3443}) 23:36:08 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x101, 0x2c, 0x1, {0x2, @pix={0xbc3, 0x3, 0x34433350, 0x1, 0x8000, 0x5c6, 0x0, 0x44be, 0x1, 0x6, 0x0, 0x5}}, 0x70}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, r1, 0x0, 0xc, &(0x7f00000001c0)='/dev/video#\x00'}, 0x30) 23:36:08 executing program 3: socketpair(0x23, 0x45, 0x7fffffff, &(0x7f0000000100)) 23:36:08 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003f04000000b805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:08 executing program 5: ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x5, 0x0, 0x9, 0x4000}) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000140)={0x0, @vbi={0x81, 0x7fffffff, 0x3, 0x59555956, [0x3, 0x7], [0x9, 0x1], 0x108}}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x5, 0x0, 0x9, 0x4000}) (async) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) (async) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000140)={0x0, @vbi={0x81, 0x7fffffff, 0x3, 0x59555956, [0x3, 0x7], [0x9, 0x1], 0x108}}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) 23:36:08 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0xc00, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:08 executing program 3: socketpair(0x23, 0x46, 0x7fffffff, &(0x7f0000000100)) 23:36:08 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "525d003fe11ed5bbb80546d0f1c62f7219000000228000000000000000001de0", 0x30313953}) 23:36:08 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003f05000000b805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:08 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x1000000, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:08 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x101, 0x2c, 0x1, {0x2, @pix={0xbc3, 0x3, 0x34433350, 0x1, 0x8000, 0x5c6, 0x0, 0x44be, 0x1, 0x6, 0x0, 0x5}}, 0x70}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, r1, 0x0, 0xc, &(0x7f00000001c0)='/dev/video#\x00'}, 0x30) 23:36:08 executing program 3: socketpair(0x23, 0x47, 0x7fffffff, &(0x7f0000000100)) 23:36:08 executing program 5: ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x5, 0x0, 0x9, 0x4000}) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000140)={0x0, @vbi={0x81, 0x7fffffff, 0x3, 0x59555956, [0x3, 0x7], [0x9, 0x1], 0x108}}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x5, 0x0, 0x9, 0x4000}) (async) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) (async) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000140)={0x0, @vbi={0x81, 0x7fffffff, 0x3, 0x59555956, [0x3, 0x7], [0x9, 0x1], 0x108}}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) 23:36:08 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003f06000000b805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:08 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "525d003fe11ed5bbb80546d0f1c62f7219000000228000000000000000001de0", 0x30313953}) 23:36:08 executing program 3: socketpair(0x23, 0x48, 0x7fffffff, &(0x7f0000000100)) 23:36:09 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "525d003fe11ed5bbb80546d0f1c62f7219000000228000000000000000001de0", 0x30313953}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "525d003fe11ed5bbb80546d0f1c62f7219000000228000000000000000001de0", 0x30313953}) (async) 23:36:09 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x101, 0x2c, 0x1, {0x2, @pix={0xbc3, 0x3, 0x34433350, 0x1, 0x8000, 0x5c6, 0x0, 0x44be, 0x1, 0x6, 0x0, 0x5}}, 0x70}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, r1, 0x0, 0xc, &(0x7f00000001c0)='/dev/video#\x00'}, 0x30) 23:36:09 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0xe9) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:09 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0xc000000, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:09 executing program 3: socketpair(0x23, 0x49, 0x7fffffff, &(0x7f0000000100)) 23:36:09 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003f07000000b805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:09 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000180)) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x1800, 0x20303159, 0x1, @discrete={0x7fd9, 0x8}}) 23:36:09 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0xe9) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:09 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:09 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) socket(0x15, 0x2, 0x200) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000040)=@mmap={0xcc, 0x1, 0x4, 0x1000, 0x14000000, {0x0, 0xea60}, {0x3, 0x1, 0x8, 0x0, 0x8, 0x0, "76aadd02"}, 0xdf800000, 0x1, {}, 0x1, 0x0, r1}) 23:36:09 executing program 3: socketpair(0x23, 0x4a, 0x7fffffff, &(0x7f0000000100)) 23:36:09 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0xe9) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0xe9) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) 23:36:09 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000180)) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x1800, 0x20303159, 0x1, @discrete={0x7fd9, 0x8}}) 23:36:09 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) socket(0x15, 0x2, 0x200) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000040)=@mmap={0xcc, 0x1, 0x4, 0x1000, 0x14000000, {0x0, 0xea60}, {0x3, 0x1, 0x8, 0x0, 0x8, 0x0, "76aadd02"}, 0xdf800000, 0x1, {}, 0x1, 0x0, r1}) 23:36:09 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003f08000000b805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:09 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0xc, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:09 executing program 3: socketpair(0x23, 0x4b, 0x7fffffff, &(0x7f0000000100)) 23:36:09 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003f09000000b805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:09 executing program 3: socketpair(0x23, 0x4c, 0x7fffffff, &(0x7f0000000100)) 23:36:09 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) socket(0x15, 0x2, 0x200) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000040)=@mmap={0xcc, 0x1, 0x4, 0x1000, 0x14000000, {0x0, 0xea60}, {0x3, 0x1, 0x8, 0x0, 0x8, 0x0, "76aadd02"}, 0xdf800000, 0x1, {}, 0x1, 0x0, r1}) 23:36:09 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0xc00, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:09 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x8, 0x1, 0x1, "ad7cd4b85cf1a11573a36be7caf7d7cf37fbab5d0d286c609c7caa902dfb4e86", 0x39565559}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:09 executing program 3: socketpair(0x23, 0x4d, 0x7fffffff, &(0x7f0000000100)) 23:36:09 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000180)) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x1800, 0x20303159, 0x1, @discrete={0x7fd9, 0x8}}) 23:36:09 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003f0a000000b805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:09 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x8, 0x1, 0x1, "ad7cd4b85cf1a11573a36be7caf7d7cf37fbab5d0d286c609c7caa902dfb4e86", 0x39565559}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) getsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:09 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x1) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x80, 0x36314d59, 0x0, @discrete={0x3ff, 0x101}}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x6) 23:36:09 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x1000000, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:09 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x5, 0x2, 0x0, "0600000000000000b805dfd0f1c62f00000000090000000000000000001de000", 0x7912746b}) 23:36:09 executing program 3: socketpair(0x23, 0x4e, 0x7fffffff, &(0x7f0000000100)) 23:36:09 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003f0b000000b805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:09 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0xc000000, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:09 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async, rerun: 64) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x8, 0x1, 0x1, "ad7cd4b85cf1a11573a36be7caf7d7cf37fbab5d0d286c609c7caa902dfb4e86", 0x39565559}) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) getsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:09 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x1) (async) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10) (async) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x80, 0x36314d59, 0x0, @discrete={0x3ff, 0x101}}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x6) 23:36:09 executing program 3: socketpair(0x23, 0x4f, 0x7fffffff, &(0x7f0000000100)) 23:36:09 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x5, 0x2, 0x0, "0600000000000000b805dfd0f1c62f00000000090000000000000000001de000", 0x7912746b}) 23:36:09 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:09 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003f0c000000b805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:09 executing program 3: socketpair(0x23, 0x50, 0x7fffffff, &(0x7f0000000100)) 23:36:09 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x1) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x80, 0x36314d59, 0x0, @discrete={0x3ff, 0x101}}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x6) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x1) (async) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10) (async) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x80, 0x36314d59, 0x0, @discrete={0x3ff, 0x101}}) (async) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x6) (async) 23:36:09 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) read$ptp(r1, &(0x7f0000000000)=""/91, 0x5b) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x4, 0x0, [{}, {}, {0xfffffffe}]}}) 23:36:09 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0xc, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:09 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003f0d000000b805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:09 executing program 3: socketpair(0x23, 0x51, 0x7fffffff, &(0x7f0000000100)) 23:36:09 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x5, 0x2, 0x0, "0600000000000000b805dfd0f1c62f00000000090000000000000000001de000", 0x7912746b}) 23:36:09 executing program 4: syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) 23:36:09 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) read$ptp(r1, &(0x7f0000000000)=""/91, 0x5b) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x4, 0x0, [{}, {}, {0xfffffffe}]}}) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) read$ptp(r1, &(0x7f0000000000)=""/91, 0x5b) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x4, 0x0, [{}, {}, {0xfffffffe}]}}) (async) 23:36:09 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0xc00, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:09 executing program 3: socketpair(0x23, 0x52, 0x7fffffff, &(0x7f0000000100)) 23:36:09 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7202000000220000000000000000001de0"}) 23:36:09 executing program 4: syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) 23:36:09 executing program 3: socketpair(0x23, 0x53, 0x7fffffff, &(0x7f0000000100)) 23:36:09 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x1000000, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:09 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x5, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:09 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) read$ptp(r1, &(0x7f0000000000)=""/91, 0x5b) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x4, 0x0, [{}, {}, {0xfffffffe}]}}) 23:36:09 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000001220000000000000000001de0"}) 23:36:09 executing program 3: socketpair(0x23, 0x54, 0x7fffffff, &(0x7f0000000100)) 23:36:09 executing program 4: syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) 23:36:09 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0xc000000, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:09 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x5, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:09 executing program 5: ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x5) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x28000) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x1ff}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x24fc}], 0x0, 0x0, 0x6}}) 23:36:09 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000002220000000000000000001de0"}) 23:36:09 executing program 3: socketpair(0x23, 0x55, 0x7fffffff, &(0x7f0000000100)) 23:36:09 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d0c3fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:09 executing program 4: syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31324d4e, 0x0, @stepwise={0x0, 0x0, 0x1}}) clock_gettime(0x0, &(0x7f0000000040)) r1 = syz_open_dev$vim2m(&(0x7f0000000200), 0x4, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000100)=@multiplanar_mmap={0x9, 0x1, 0x4, 0x10, 0x6, {0x0, 0xea60}, {0x6, 0x1, 0x9, 0x63, 0xd2, 0x7, "2f930fcd"}, 0xf76, 0x1, {&(0x7f0000000080)=[{0x4, 0x7fff, {0x8000}, 0x8}, {0x2, 0x1, {0x802}, 0x1000}]}}) 23:36:09 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x5, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:09 executing program 5: ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x5) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x28000) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x1ff}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x24fc}], 0x0, 0x0, 0x6}}) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x5) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x28000) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) (async) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x1ff}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x24fc}], 0x0, 0x0, 0x6}}) (async) 23:36:09 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200020000220000000000000000001de0"}) 23:36:09 executing program 3: socketpair(0x23, 0x56, 0x7fffffff, &(0x7f0000000100)) 23:36:10 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f0000000140)={0x1ff, "604c5c72d9ba8685cfc8455835fece861ec7b01f9584af566f0fd0fd1813f62b", 0x2, 0x40, 0x4, 0x7, 0x4, 0x2, 0xfffffffe, 0x6}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000000)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x3132564e}) 23:36:10 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f720c000000220000000000000000001de0"}) 23:36:10 executing program 4: syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31324d4e, 0x0, @stepwise={0x0, 0x0, 0x1}}) clock_gettime(0x0, &(0x7f0000000040)) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000200), 0x4, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000100)=@multiplanar_mmap={0x9, 0x1, 0x4, 0x10, 0x6, {0x0, 0xea60}, {0x6, 0x1, 0x9, 0x63, 0xd2, 0x7, "2f930fcd"}, 0xf76, 0x1, {&(0x7f0000000080)=[{0x4, 0x7fff, {0x8000}, 0x8}, {0x2, 0x1, {0x802}, 0x1000}]}}) 23:36:10 executing program 5: ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x5) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x28000) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x1ff}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x24fc}], 0x0, 0x0, 0x6}}) 23:36:10 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000200220000000000000000001de0"}) 23:36:10 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f72000c0000220000000000000000001de0"}) 23:36:10 executing program 4: syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31324d4e, 0x0, @stepwise={0x0, 0x0, 0x1}}) (async) clock_gettime(0x0, &(0x7f0000000040)) r1 = syz_open_dev$vim2m(&(0x7f0000000200), 0x4, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000100)=@multiplanar_mmap={0x9, 0x1, 0x4, 0x10, 0x6, {0x0, 0xea60}, {0x6, 0x1, 0x9, 0x63, 0xd2, 0x7, "2f930fcd"}, 0xf76, 0x1, {&(0x7f0000000080)=[{0x4, 0x7fff, {0x8000}, 0x8}, {0x2, 0x1, {0x802}, 0x1000}]}}) 23:36:10 executing program 3: socketpair(0x23, 0x57, 0x7fffffff, &(0x7f0000000100)) 23:36:10 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f0000000140)={0x1ff, "604c5c72d9ba8685cfc8455835fece861ec7b01f9584af566f0fd0fd1813f62b", 0x2, 0x40, 0x4, 0x7, 0x4, 0x2, 0xfffffffe, 0x6}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000000)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x3132564e}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f0000000140)={0x1ff, "604c5c72d9ba8685cfc8455835fece861ec7b01f9584af566f0fd0fd1813f62b", 0x2, 0x40, 0x4, 0x7, 0x4, 0x2, 0xfffffffe, 0x6}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000000)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x3132564e}) (async) 23:36:10 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000080)) 23:36:10 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f0000000140)={0x1ff, "604c5c72d9ba8685cfc8455835fece861ec7b01f9584af566f0fd0fd1813f62b", 0x2, 0x40, 0x4, 0x7, 0x4, 0x2, 0xfffffffe, 0x6}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000000)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x3132564e}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f0000000140)={0x1ff, "604c5c72d9ba8685cfc8455835fece861ec7b01f9584af566f0fd0fd1813f62b", 0x2, 0x40, 0x4, 0x7, 0x4, 0x2, 0xfffffffe, 0x6}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000000)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x3132564e}) (async) 23:36:10 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000002220000000000000000001de0"}) 23:36:10 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0xa0803, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f00000000c0)={{0x0, 0x7}, {0x9, 0x2}, 0x983, 0x1}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000040)='syz1\x00') ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x40000000) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000580)={0x2, @pix_mp={0xfffffffe, 0xfffffff6, 0x0, 0x0, 0x2, [{}, {0x800, 0x4}, {0x1}, {}, {0x0, 0xfffffffc}, {0x6, 0x1}, {}, {0x20000000, 0xfffffffe}], 0x0, 0x0, 0x1, 0x1}}) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000140)={0x20, "ba4acbd1b2f4c70282214c507f1a8871905c413c3a1085f4d7ba4858b5240999", 0x1}) 23:36:10 executing program 3: socketpair(0x23, 0x58, 0x7fffffff, &(0x7f0000000100)) 23:36:10 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000080)) 23:36:10 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000001220000000000000000001de0"}) 23:36:10 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x2, 0x4, 0x1, {0x6ebde9de0ea97f6f, @pix={0xe7e2, 0x200, 0x61170e38, 0x2, 0x7, 0xb4, 0x7, 0x3, 0x0, 0x4, 0x0, 0x4}}, 0x86d5}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x5, @pix={0x0, 0x10001, 0x20343059, 0x2, 0x5, 0x0, 0x8, 0x0, 0x1, 0x2, 0x0, 0x1}}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r2, 0x8010500c, &(0x7f00000001c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 23:36:10 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220200000000000000001de0"}) 23:36:10 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f720000000c220000000000000000001de0"}) 23:36:10 executing program 3: socketpair(0x23, 0x59, 0x7fffffff, &(0x7f0000000100)) 23:36:10 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000080)) 23:36:10 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x2, 0x4, 0x1, {0x6ebde9de0ea97f6f, @pix={0xe7e2, 0x200, 0x61170e38, 0x2, 0x7, 0xb4, 0x7, 0x3, 0x0, 0x4, 0x0, 0x4}}, 0x86d5}) (async) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x5, @pix={0x0, 0x10001, 0x20343059, 0x2, 0x5, 0x0, 0x8, 0x0, 0x1, 0x2, 0x0, 0x1}}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r2, 0x8010500c, &(0x7f00000001c0)) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 23:36:10 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f72000c0000220000000000000000001de0"}) 23:36:10 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0xa0803, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f00000000c0)={{0x0, 0x7}, {0x9, 0x2}, 0x983, 0x1}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000040)='syz1\x00') ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x40000000) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000580)={0x2, @pix_mp={0xfffffffe, 0xfffffff6, 0x0, 0x0, 0x2, [{}, {0x800, 0x4}, {0x1}, {}, {0x0, 0xfffffffc}, {0x6, 0x1}, {}, {0x20000000, 0xfffffffe}], 0x0, 0x0, 0x1, 0x1}}) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000140)={0x20, "ba4acbd1b2f4c70282214c507f1a8871905c413c3a1085f4d7ba4858b5240999", 0x1}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0xa0803, 0x0) (async) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f00000000c0)={{0x0, 0x7}, {0x9, 0x2}, 0x983, 0x1}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000040)='syz1\x00') (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x40000000) (async) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000580)={0x2, @pix_mp={0xfffffffe, 0xfffffff6, 0x0, 0x0, 0x2, [{}, {0x800, 0x4}, {0x1}, {}, {0x0, 0xfffffffc}, {0x6, 0x1}, {}, {0x20000000, 0xfffffffe}], 0x0, 0x0, 0x1, 0x1}}) (async) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000140)={0x20, "ba4acbd1b2f4c70282214c507f1a8871905c413c3a1085f4d7ba4858b5240999", 0x1}) (async) 23:36:10 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000100000000001de0"}) 23:36:10 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000c00220000000000000000001de0"}) 23:36:10 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0xa0803, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f00000000c0)={{0x0, 0x7}, {0x9, 0x2}, 0x983, 0x1}) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000040)='syz1\x00') (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x40000000) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000580)={0x2, @pix_mp={0xfffffffe, 0xfffffff6, 0x0, 0x0, 0x2, [{}, {0x800, 0x4}, {0x1}, {}, {0x0, 0xfffffffc}, {0x6, 0x1}, {}, {0x20000000, 0xfffffffe}], 0x0, 0x0, 0x1, 0x1}}) (async) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000140)={0x20, "ba4acbd1b2f4c70282214c507f1a8871905c413c3a1085f4d7ba4858b5240999", 0x1}) 23:36:10 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000200000000001de0"}) 23:36:10 executing program 3: socketpair(0x23, 0x5a, 0x7fffffff, &(0x7f0000000100)) 23:36:10 executing program 4: syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) syz_open_dev$vim2m(&(0x7f0000000140), 0x401, 0x2) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000001c0)=@multiplanar_mmap={0x7, 0x4, 0x4, 0x70000, 0x1, {0x77359400}, {0x2, 0x0, 0x5, 0x9, 0x2, 0x1f, "ae20c3da"}, 0x6, 0x1, {&(0x7f0000000080)=[{0x7f, 0x6, {0x4c0}, 0x2462}, {0x8000, 0x3, {0x5a}, 0xd9}]}, 0x1f, 0x0, r1}) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x800, 0x36314d59, 0x0, @discrete={0x2, 0x4}}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000040), 0x10) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x0) 23:36:10 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x2, 0x4, 0x1, {0x6ebde9de0ea97f6f, @pix={0xe7e2, 0x200, 0x61170e38, 0x2, 0x7, 0xb4, 0x7, 0x3, 0x0, 0x4, 0x0, 0x4}}, 0x86d5}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x5, @pix={0x0, 0x10001, 0x20343059, 0x2, 0x5, 0x0, 0x8, 0x0, 0x1, 0x2, 0x0, 0x1}}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r2, 0x8010500c, &(0x7f00000001c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x2, 0x4, 0x1, {0x6ebde9de0ea97f6f, @pix={0xe7e2, 0x200, 0x61170e38, 0x2, 0x7, 0xb4, 0x7, 0x3, 0x0, 0x4, 0x0, 0x4}}, 0x86d5}) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x5, @pix={0x0, 0x10001, 0x20343059, 0x2, 0x5, 0x0, 0x8, 0x0, 0x1, 0x2, 0x0, 0x1}}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$SNDCTL_DSP_GETOSPACE(r2, 0x8010500c, &(0x7f00000001c0)) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) 23:36:10 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000c00220000000000000000001de0"}) 23:36:10 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'dvmrp1\x00'}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8009855}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x8000) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x4) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:10 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000001001de0"}) 23:36:10 executing program 4: syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) syz_open_dev$vim2m(&(0x7f0000000140), 0x401, 0x2) (async) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 32) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000001c0)=@multiplanar_mmap={0x7, 0x4, 0x4, 0x70000, 0x1, {0x77359400}, {0x2, 0x0, 0x5, 0x9, 0x2, 0x1f, "ae20c3da"}, 0x6, 0x1, {&(0x7f0000000080)=[{0x7f, 0x6, {0x4c0}, 0x2462}, {0x8000, 0x3, {0x5a}, 0xd9}]}, 0x1f, 0x0, r1}) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async, rerun: 64) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x800, 0x36314d59, 0x0, @discrete={0x2, 0x4}}) (async, rerun: 64) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000040), 0x10) (async) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x0) 23:36:10 executing program 3: socketpair(0x23, 0x5b, 0x7fffffff, &(0x7f0000000100)) 23:36:10 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f720000000c220000000000000000001de0"}) 23:36:10 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'dvmrp1\x00'}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8009855}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x8000) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x4) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:10 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000002001de0"}) 23:36:10 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000000)={0x4, 0x0, 0x1, "475d033fe11ed59bb80500000000000000001de000000400", 0x30364d54}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x3, 0x101, 0x4, {0x1, @raw_data="a7cea467797a221d8edd5dc9a929f720fe4b7e1e682232dff8699b214f360ab539f36f6d9c89221c4cc9b9a02b4f7471ad854294b87e759ef42d77dd004cc4573aa9a2a379180fb52b93411780d26a1de1446b0602f46c9c842f8525087654baace0b04a12b03daca38708e642ec52f7af2aaa18a0e882d4a3895bbb3f47a7057fbdfbff40e61d3d932bd341de43f00de82f1f7d8f28c320b3f32245348f93436392ee0a3eedfaa91ddf2f6981dbd04eeff4164b54e8a6b4978af51f918ef6cfc4c9ab5033f524d8"}, 0x7ffd}) 23:36:10 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f720000000c220000000000000000001de0"}) 23:36:10 executing program 4: syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) syz_open_dev$vim2m(&(0x7f0000000140), 0x401, 0x2) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000001c0)=@multiplanar_mmap={0x7, 0x4, 0x4, 0x70000, 0x1, {0x77359400}, {0x2, 0x0, 0x5, 0x9, 0x2, 0x1f, "ae20c3da"}, 0x6, 0x1, {&(0x7f0000000080)=[{0x7f, 0x6, {0x4c0}, 0x2462}, {0x8000, 0x3, {0x5a}, 0xd9}]}, 0x1f, 0x0, r1}) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x800, 0x36314d59, 0x0, @discrete={0x2, 0x4}}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000040), 0x10) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x0) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000140), 0x401, 0x2) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000001c0)=@multiplanar_mmap={0x7, 0x4, 0x4, 0x70000, 0x1, {0x77359400}, {0x2, 0x0, 0x5, 0x9, 0x2, 0x1f, "ae20c3da"}, 0x6, 0x1, {&(0x7f0000000080)=[{0x7f, 0x6, {0x4c0}, 0x2462}, {0x8000, 0x3, {0x5a}, 0xd9}]}, 0x1f, 0x0, r1}) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x800, 0x36314d59, 0x0, @discrete={0x2, 0x4}}) (async) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000040), 0x10) (async) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x0) (async) 23:36:10 executing program 3: socketpair(0x23, 0x5c, 0x7fffffff, &(0x7f0000000100)) 23:36:10 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220002000000000000001de0"}) 23:36:10 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000000)={0x4, 0x0, 0x1, "475d033fe11ed59bb80500000000000000001de000000400", 0x30364d54}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x3, 0x101, 0x4, {0x1, @raw_data="a7cea467797a221d8edd5dc9a929f720fe4b7e1e682232dff8699b214f360ab539f36f6d9c89221c4cc9b9a02b4f7471ad854294b87e759ef42d77dd004cc4573aa9a2a379180fb52b93411780d26a1de1446b0602f46c9c842f8525087654baace0b04a12b03daca38708e642ec52f7af2aaa18a0e882d4a3895bbb3f47a7057fbdfbff40e61d3d932bd341de43f00de82f1f7d8f28c320b3f32245348f93436392ee0a3eedfaa91ddf2f6981dbd04eeff4164b54e8a6b4978af51f918ef6cfc4c9ab5033f524d8"}, 0x7ffd}) 23:36:10 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'dvmrp1\x00'}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8009855}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x8000) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x4) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:10 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220c00000000000000001de0"}) 23:36:10 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000000)={0x4, 0x0, 0x1, "475d033fe11ed59bb80500000000000000001de000000400", 0x30364d54}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x3, 0x101, 0x4, {0x1, @raw_data="a7cea467797a221d8edd5dc9a929f720fe4b7e1e682232dff8699b214f360ab539f36f6d9c89221c4cc9b9a02b4f7471ad854294b87e759ef42d77dd004cc4573aa9a2a379180fb52b93411780d26a1de1446b0602f46c9c842f8525087654baace0b04a12b03daca38708e642ec52f7af2aaa18a0e882d4a3895bbb3f47a7057fbdfbff40e61d3d932bd341de43f00de82f1f7d8f28c320b3f32245348f93436392ee0a3eedfaa91ddf2f6981dbd04eeff4164b54e8a6b4978af51f918ef6cfc4c9ab5033f524d8"}, 0x7ffd}) 23:36:10 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80000000007, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:36:10 executing program 3: socketpair(0x23, 0x5d, 0x7fffffff, &(0x7f0000000100)) 23:36:10 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f720000000022000c000000000000001de0"}) 23:36:10 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000001000000001de0"}) 23:36:11 executing program 3: socketpair(0x23, 0x5e, 0x7fffffff, &(0x7f0000000100)) 23:36:11 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80000000007, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:36:11 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @raw_data="2c57f50cfa9128d1a0fb6f4c5750151a396d2e65a84c22caa339bc508d41b0a2cba6e88b7740265cefd7a835fb68d0bf9997ce183fb3e906341bc017cef135faa169a306fcb4ec8055a32e2c66bff82f203b3d507caf304ff9ff6f71b94edb9ffdb4110415888c3ce9e472cfc5a99364e19df22d6048777bcb7b2cb176ee1394dc87816c545ff62a31628801e6f110bdd75e277834b68a9df4965fbc716dd20e5f96d5017d0a75c24aa3752535ee231c78c1b22e7fb88b537eff995946912fc6ec6955859cca1c47"}) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:11 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000002000000001de0"}) 23:36:11 executing program 3: socketpair(0x23, 0x5f, 0x7fffffff, &(0x7f0000000100)) 23:36:11 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000100000000001de0"}) 23:36:11 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80000000007, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:36:11 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:11 executing program 3: socketpair(0x23, 0x60, 0x7fffffff, &(0x7f0000000100)) 23:36:11 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @raw_data="2c57f50cfa9128d1a0fb6f4c5750151a396d2e65a84c22caa339bc508d41b0a2cba6e88b7740265cefd7a835fb68d0bf9997ce183fb3e906341bc017cef135faa169a306fcb4ec8055a32e2c66bff82f203b3d507caf304ff9ff6f71b94edb9ffdb4110415888c3ce9e472cfc5a99364e19df22d6048777bcb7b2cb176ee1394dc87816c545ff62a31628801e6f110bdd75e277834b68a9df4965fbc716dd20e5f96d5017d0a75c24aa3752535ee231c78c1b22e7fb88b537eff995946912fc6ec6955859cca1c47"}) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @raw_data="2c57f50cfa9128d1a0fb6f4c5750151a396d2e65a84c22caa339bc508d41b0a2cba6e88b7740265cefd7a835fb68d0bf9997ce183fb3e906341bc017cef135faa169a306fcb4ec8055a32e2c66bff82f203b3d507caf304ff9ff6f71b94edb9ffdb4110415888c3ce9e472cfc5a99364e19df22d6048777bcb7b2cb176ee1394dc87816c545ff62a31628801e6f110bdd75e277834b68a9df4965fbc716dd20e5f96d5017d0a75c24aa3752535ee231c78c1b22e7fb88b537eff995946912fc6ec6955859cca1c47"}) (async) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) 23:36:11 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000011de0"}) 23:36:11 executing program 4: ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x2f) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x280400, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f00000000c0)=0xfffffff8) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x6, 0x3, 0x7, 0x0, 0x9}) 23:36:11 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000c00000000001de0"}) 23:36:11 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x2) (async, rerun: 32) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (rerun: 32) 23:36:11 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000021de0"}) 23:36:11 executing program 3: socketpair(0x23, 0x61, 0x7fffffff, &(0x7f0000000100)) 23:36:11 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000001001de0"}) 23:36:11 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @raw_data="2c57f50cfa9128d1a0fb6f4c5750151a396d2e65a84c22caa339bc508d41b0a2cba6e88b7740265cefd7a835fb68d0bf9997ce183fb3e906341bc017cef135faa169a306fcb4ec8055a32e2c66bff82f203b3d507caf304ff9ff6f71b94edb9ffdb4110415888c3ce9e472cfc5a99364e19df22d6048777bcb7b2cb176ee1394dc87816c545ff62a31628801e6f110bdd75e277834b68a9df4965fbc716dd20e5f96d5017d0a75c24aa3752535ee231c78c1b22e7fb88b537eff995946912fc6ec6955859cca1c47"}) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @raw_data="2c57f50cfa9128d1a0fb6f4c5750151a396d2e65a84c22caa339bc508d41b0a2cba6e88b7740265cefd7a835fb68d0bf9997ce183fb3e906341bc017cef135faa169a306fcb4ec8055a32e2c66bff82f203b3d507caf304ff9ff6f71b94edb9ffdb4110415888c3ce9e472cfc5a99364e19df22d6048777bcb7b2cb176ee1394dc87816c545ff62a31628801e6f110bdd75e277834b68a9df4965fbc716dd20e5f96d5017d0a75c24aa3752535ee231c78c1b22e7fb88b537eff995946912fc6ec6955859cca1c47"}) (async) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) 23:36:11 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000020000000000001de0"}) 23:36:11 executing program 3: socketpair(0x23, 0x62, 0x7fffffff, &(0x7f0000000100)) 23:36:11 executing program 4: ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x2f) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x280400, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f00000000c0)=0xfffffff8) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async, rerun: 32) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) (rerun: 32) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x6, 0x3, 0x7, 0x0, 0x9}) 23:36:11 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f720000000022000000000000000c001de0"}) 23:36:11 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:36:11 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000010000001de0"}) 23:36:11 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) 23:36:11 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f720000000022000c000000000000001de0"}) 23:36:11 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000020000001de0"}) 23:36:11 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:11 executing program 3: socketpair(0x23, 0x63, 0x7fffffff, &(0x7f0000000100)) 23:36:11 executing program 4: ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x2f) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x280400, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f00000000c0)=0xfffffff8) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x6, 0x3, 0x7, 0x0, 0x9}) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x2f) (async) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x280400, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f00000000c0)=0xfffffff8) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x6, 0x3, 0x7, 0x0, 0x9}) (async) 23:36:11 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) 23:36:11 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f72000000002200000c0000000000001de0"}) 23:36:11 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000200000000001de0"}) 23:36:11 executing program 3: socketpair(0x23, 0x64, 0x7fffffff, &(0x7f0000000100)) 23:36:11 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:36:11 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) (async) 23:36:11 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000001000000001de0"}) 23:36:11 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:36:11 executing program 3: socketpair(0x23, 0x65, 0x7fffffff, &(0x7f0000000100)) 23:36:11 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000100001de0"}) 23:36:11 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:36:11 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000001c0)=@mmap={0x0, 0x0, 0x4, 0x0, 0x78, {0x77359400}, {0x3, 0x1, 0x5, 0x1, 0x61, 0x0, "ba31a608"}, 0x7, 0x1, {}, 0x6, 0x0, r2}) ioctl$PTP_PIN_SETFUNC(r2, 0x40603d07, &(0x7f0000000240)={'\x00', 0x9, 0x0, 0xf3d}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x20000000, 0x0, 0x0, 0x0, [{0x0, 0x3}, {}, {0x3}, {0x0, 0x1}]}}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0x0, @raw_data="5e0a8291fed910d4135c8e7ff73602a83ab28274990a37346f88f0a209f271a75f728496fd768747adbe16990711f248553697e5f63550d90ff064033e1edb32a55286805e310d1252cc584d65a1fc0d1e314c97b162daa06d7fcd09ba527d4af2019b8549495d4edf2ab8fb141c409606835939953faaf90099bfcba87bdd9a9852800212bedd186efb465104267c054e83f465dd36f1e30d5e7fa49281897a65513f23981eca13f70869205c6a0d35cdbaa46b519981a2b2577892755aad65583b40ff24adaf9f"}) 23:36:11 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f720000000022000000000c000000001de0"}) 23:36:11 executing program 3: socketpair(0x23, 0x66, 0x7fffffff, &(0x7f0000000100)) 23:36:11 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:36:11 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000200001de0"}) 23:36:11 executing program 3: socketpair(0x23, 0x67, 0x7fffffff, &(0x7f0000000100)) 23:36:11 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000011de0"}) 23:36:11 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000040)) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) 23:36:11 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) socket$inet_dccp(0x2, 0x6, 0x0) 23:36:11 executing program 3: socketpair(0x23, 0x68, 0x7fffffff, &(0x7f0000000100)) 23:36:11 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000001c0)=@mmap={0x0, 0x0, 0x4, 0x0, 0x78, {0x77359400}, {0x3, 0x1, 0x5, 0x1, 0x61, 0x0, "ba31a608"}, 0x7, 0x1, {}, 0x6, 0x0, r2}) ioctl$PTP_PIN_SETFUNC(r2, 0x40603d07, &(0x7f0000000240)={'\x00', 0x9, 0x0, 0xf3d}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x20000000, 0x0, 0x0, 0x0, [{0x0, 0x3}, {}, {0x3}, {0x0, 0x1}]}}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0x0, @raw_data="5e0a8291fed910d4135c8e7ff73602a83ab28274990a37346f88f0a209f271a75f728496fd768747adbe16990711f248553697e5f63550d90ff064033e1edb32a55286805e310d1252cc584d65a1fc0d1e314c97b162daa06d7fcd09ba527d4af2019b8549495d4edf2ab8fb141c409606835939953faaf90099bfcba87bdd9a9852800212bedd186efb465104267c054e83f465dd36f1e30d5e7fa49281897a65513f23981eca13f70869205c6a0d35cdbaa46b519981a2b2577892755aad65583b40ff24adaf9f"}) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000001c0)=@mmap={0x0, 0x0, 0x4, 0x0, 0x78, {0x77359400}, {0x3, 0x1, 0x5, 0x1, 0x61, 0x0, "ba31a608"}, 0x7, 0x1, {}, 0x6, 0x0, r2}) (async) ioctl$PTP_PIN_SETFUNC(r2, 0x40603d07, &(0x7f0000000240)={'\x00', 0x9, 0x0, 0xf3d}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x20000000, 0x0, 0x0, 0x0, [{0x0, 0x3}, {}, {0x3}, {0x0, 0x1}]}}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0x0, @raw_data="5e0a8291fed910d4135c8e7ff73602a83ab28274990a37346f88f0a209f271a75f728496fd768747adbe16990711f248553697e5f63550d90ff064033e1edb32a55286805e310d1252cc584d65a1fc0d1e314c97b162daa06d7fcd09ba527d4af2019b8549495d4edf2ab8fb141c409606835939953faaf90099bfcba87bdd9a9852800212bedd186efb465104267c054e83f465dd36f1e30d5e7fa49281897a65513f23981eca13f70869205c6a0d35cdbaa46b519981a2b2577892755aad65583b40ff24adaf9f"}) (async) 23:36:11 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f72000000002200000000000000000c1de0"}) 23:36:11 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) socket$inet_dccp(0x2, 0x6, 0x0) 23:36:11 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000002000000001de0"}) 23:36:11 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000040)={0x9, 0xc}) 23:36:11 executing program 3: socketpair(0x23, 0x69, 0x7fffffff, &(0x7f0000000100)) 23:36:11 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f72000000002200000c0000000000001de0"}) 23:36:11 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) socket$inet_dccp(0x2, 0x6, 0x0) 23:36:11 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000001001de0"}) 23:36:11 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000040)={0x9, 0xc}) 23:36:11 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000001c0)=@mmap={0x0, 0x0, 0x4, 0x0, 0x78, {0x77359400}, {0x3, 0x1, 0x5, 0x1, 0x61, 0x0, "ba31a608"}, 0x7, 0x1, {}, 0x6, 0x0, r2}) ioctl$PTP_PIN_SETFUNC(r2, 0x40603d07, &(0x7f0000000240)={'\x00', 0x9, 0x0, 0xf3d}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x20000000, 0x0, 0x0, 0x0, [{0x0, 0x3}, {}, {0x3}, {0x0, 0x1}]}}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0x0, @raw_data="5e0a8291fed910d4135c8e7ff73602a83ab28274990a37346f88f0a209f271a75f728496fd768747adbe16990711f248553697e5f63550d90ff064033e1edb32a55286805e310d1252cc584d65a1fc0d1e314c97b162daa06d7fcd09ba527d4af2019b8549495d4edf2ab8fb141c409606835939953faaf90099bfcba87bdd9a9852800212bedd186efb465104267c054e83f465dd36f1e30d5e7fa49281897a65513f23981eca13f70869205c6a0d35cdbaa46b519981a2b2577892755aad65583b40ff24adaf9f"}) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000001c0)=@mmap={0x0, 0x0, 0x4, 0x0, 0x78, {0x77359400}, {0x3, 0x1, 0x5, 0x1, 0x61, 0x0, "ba31a608"}, 0x7, 0x1, {}, 0x6, 0x0, r2}) (async) ioctl$PTP_PIN_SETFUNC(r2, 0x40603d07, &(0x7f0000000240)={'\x00', 0x9, 0x0, 0xf3d}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x20000000, 0x0, 0x0, 0x0, [{0x0, 0x3}, {}, {0x3}, {0x0, 0x1}]}}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0x0, @raw_data="5e0a8291fed910d4135c8e7ff73602a83ab28274990a37346f88f0a209f271a75f728496fd768747adbe16990711f248553697e5f63550d90ff064033e1edb32a55286805e310d1252cc584d65a1fc0d1e314c97b162daa06d7fcd09ba527d4af2019b8549495d4edf2ab8fb141c409606835939953faaf90099bfcba87bdd9a9852800212bedd186efb465104267c054e83f465dd36f1e30d5e7fa49281897a65513f23981eca13f70869205c6a0d35cdbaa46b519981a2b2577892755aad65583b40ff24adaf9f"}) (async) 23:36:11 executing program 3: socketpair(0x23, 0x6a, 0x7fffffff, &(0x7f0000000100)) 23:36:11 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000002001de0"}) 23:36:11 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000040)={0x9, 0xc}) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000040)={0x9, 0xc}) (async) 23:36:11 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x1, 0x3, 0x0, "475d003ffe1ed59bb805dfd0f1ccd21de000", 0x32315258}) 23:36:11 executing program 3: socketpair(0x23, 0x6b, 0x7fffffff, &(0x7f0000000100)) 23:36:11 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000020000001de0"}) 23:36:11 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000c00000000001de0"}) 23:36:11 executing program 5: ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={0x3, 0x3}) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000140)=""/140, 0x8c}, {&(0x7f0000000200)=""/150, 0x96}, {&(0x7f00000000c0)}, {&(0x7f00000002c0)=""/16, 0x10}], 0x5, &(0x7f0000000380)=""/172, 0xac}, 0x103) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:11 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000010000001de0"}) 23:36:11 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x1, 0x3, 0x0, "475d003ffe1ed59bb805dfd0f1ccd21de000", 0x32315258}) 23:36:11 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0x8c3, 0x5}) 23:36:11 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000011de0"}) 23:36:11 executing program 3: socketpair(0x23, 0x6c, 0x7fffffff, &(0x7f0000000100)) 23:36:11 executing program 5: ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={0x3, 0x3}) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000140)=""/140, 0x8c}, {&(0x7f0000000200)=""/150, 0x96}, {&(0x7f00000000c0)}, {&(0x7f00000002c0)=""/16, 0x10}], 0x5, &(0x7f0000000380)=""/172, 0xac}, 0x103) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={0x3, 0x3}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) recvmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000140)=""/140, 0x8c}, {&(0x7f0000000200)=""/150, 0x96}, {&(0x7f00000000c0)}, {&(0x7f00000002c0)=""/16, 0x10}], 0x5, &(0x7f0000000380)=""/172, 0xac}, 0x103) (async) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) 23:36:11 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0x8c3, 0x5}) 23:36:11 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f72000000002200000000000c0000001de0"}) 23:36:11 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x1, 0x3, 0x0, "475d003ffe1ed59bb805dfd0f1ccd21de000", 0x32315258}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x1, 0x3, 0x0, "475d003ffe1ed59bb805dfd0f1ccd21de000", 0x32315258}) (async) 23:36:11 executing program 3: socketpair(0x23, 0x6d, 0x7fffffff, &(0x7f0000000100)) 23:36:11 executing program 5: ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={0x3, 0x3}) (async) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) recvmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000140)=""/140, 0x8c}, {&(0x7f0000000200)=""/150, 0x96}, {&(0x7f00000000c0)}, {&(0x7f00000002c0)=""/16, 0x10}], 0x5, &(0x7f0000000380)=""/172, 0xac}, 0x103) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:12 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000c00000000001de0"}) 23:36:12 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async, rerun: 64) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 64) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0x8c3, 0x5}) 23:36:12 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x4, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x2}]}}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e24, @local}}, 0x66, 0x4f6}, 0x90) 23:36:12 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000021de0"}) 23:36:12 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f720000000022000000000c000000001de0"}) 23:36:12 executing program 3: socketpair(0x23, 0x6e, 0x7fffffff, &(0x7f0000000100)) 23:36:12 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000002c0)=@multiplanar_userptr={0x1, 0x2, 0x4, 0x1000, 0x9e, {r3, r4/1000+60000}, {0x2, 0xc, 0x4c, 0xff, 0x1, 0x40, "06ac2397"}, 0xfffffffc, 0x2, {&(0x7f0000000240)=[{0x4, 0x2, {&(0x7f00000001c0)}, 0x1f}, {0x9, 0x4, {&(0x7f0000000200)}, 0x7}]}, 0x2, 0x0, r5}) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080)) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x0) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x0) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={0xffffffffffffffff, 0xff, 0x10}, 0xc) r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r11, 0xae03, 0x0) r12 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r12, 0xae03, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_tracing={0x1a, 0x7, &(0x7f0000000340)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_val={0x18, 0x8, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0xa3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x6}], &(0x7f0000000380)='GPL\x00', 0x0, 0xfc, &(0x7f00000003c0)=""/252, 0x40f00, 0x7, '\x00', r7, 0x18, r2, 0x8, &(0x7f00000007c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x5, 0x5, 0x0, 0x7}, 0x10, 0x82e2, r1, 0x0, &(0x7f0000000880)=[r8, r9, r10, r1, r11, r12, r1, r5]}, 0x80) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x0) ioctl$PTP_EXTTS_REQUEST(r6, 0x40103d02, &(0x7f0000000040)={0x0, 0xc0724637840e163c}) 23:36:12 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000200001de0"}) 23:36:12 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000100001de0"}) 23:36:12 executing program 3: socketpair(0x23, 0x6f, 0x7fffffff, &(0x7f0000000100)) 23:36:12 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x4, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x2}]}}) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e24, @local}}, 0x66, 0x4f6}, 0x90) 23:36:12 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000100)={0x1, 0x9e, 0x80, 0x80}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x3, 0x3, 0x3}) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0xd3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x3, 0x3, 0x1, "b79f8e69bf7dc783dfe834fe6dd8559ac118eaa0160a7eca38430cb64523f746", 0x43564548}) 23:36:12 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) (async) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) (async, rerun: 32) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000002c0)=@multiplanar_userptr={0x1, 0x2, 0x4, 0x1000, 0x9e, {r3, r4/1000+60000}, {0x2, 0xc, 0x4c, 0xff, 0x1, 0x40, "06ac2397"}, 0xfffffffc, 0x2, {&(0x7f0000000240)=[{0x4, 0x2, {&(0x7f00000001c0)}, 0x1f}, {0x9, 0x4, {&(0x7f0000000200)}, 0x7}]}, 0x2, 0x0, r5}) (async, rerun: 32) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080)) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x0) (async) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x0) (async) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={0xffffffffffffffff, 0xff, 0x10}, 0xc) (async) r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r11, 0xae03, 0x0) r12 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r12, 0xae03, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_tracing={0x1a, 0x7, &(0x7f0000000340)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_val={0x18, 0x8, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0xa3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x6}], &(0x7f0000000380)='GPL\x00', 0x0, 0xfc, &(0x7f00000003c0)=""/252, 0x40f00, 0x7, '\x00', r7, 0x18, r2, 0x8, &(0x7f00000007c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x5, 0x5, 0x0, 0x7}, 0x10, 0x82e2, r1, 0x0, &(0x7f0000000880)=[r8, r9, r10, r1, r11, r12, r1, r5]}, 0x80) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x0) ioctl$PTP_EXTTS_REQUEST(r6, 0x40103d02, &(0x7f0000000040)={0x0, 0xc0724637840e163c}) 23:36:12 executing program 3: socketpair(0x23, 0x70, 0x7fffffff, &(0x7f0000000100)) 23:36:12 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000c00001de0"}) 23:36:12 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000002001de0"}) 23:36:12 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x4, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x2}]}}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e24, @local}}, 0x66, 0x4f6}, 0x90) 23:36:12 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000100)={0x1, 0x9e, 0x80, 0x80}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x3, 0x3, 0x3}) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0xd3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x3, 0x3, 0x1, "b79f8e69bf7dc783dfe834fe6dd8559ac118eaa0160a7eca38430cb64523f746", 0x43564548}) 23:36:12 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000021de0"}) 23:36:12 executing program 3: socketpair(0x23, 0x71, 0x7fffffff, &(0x7f0000000100)) 23:36:12 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000002c0)=@multiplanar_userptr={0x1, 0x2, 0x4, 0x1000, 0x9e, {r3, r4/1000+60000}, {0x2, 0xc, 0x4c, 0xff, 0x1, 0x40, "06ac2397"}, 0xfffffffc, 0x2, {&(0x7f0000000240)=[{0x4, 0x2, {&(0x7f00000001c0)}, 0x1f}, {0x9, 0x4, {&(0x7f0000000200)}, 0x7}]}, 0x2, 0x0, r5}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080)) (async) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) (async) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x0) (async) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x0) (async) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={0xffffffffffffffff, 0xff, 0x10}, 0xc) r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r11, 0xae03, 0x0) r12 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r12, 0xae03, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_tracing={0x1a, 0x7, &(0x7f0000000340)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_val={0x18, 0x8, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0xa3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x6}], &(0x7f0000000380)='GPL\x00', 0x0, 0xfc, &(0x7f00000003c0)=""/252, 0x40f00, 0x7, '\x00', r7, 0x18, r2, 0x8, &(0x7f00000007c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x5, 0x5, 0x0, 0x7}, 0x10, 0x82e2, r1, 0x0, &(0x7f0000000880)=[r8, r9, r10, r1, r11, r12, r1, r5]}, 0x80) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x0) (async) ioctl$PTP_EXTTS_REQUEST(r6, 0x40103d02, &(0x7f0000000040)={0x0, 0xc0724637840e163c}) 23:36:12 executing program 5: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffff}, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0xc0, 0x1, 0x3, 0x425, 0x1, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x5}, 0x48) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000400)={0x0, @multicast2, @private}, &(0x7f0000000440)=0xc) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_ext={0x1c, 0xf, &(0x7f0000000140)=@raw=[@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc3e}, @map_val={0x18, 0x7, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x6}, @alu={0x4, 0x1, 0x1, 0x8, 0x8, 0xffffffffffffffff, 0xffffffffffffffff}, @ldst={0x3, 0x3, 0x6, 0x0, 0xa, 0x50, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x6}, @map_idx={0x18, 0x1}, @map_val={0x18, 0x5, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xfff}, @generic={0xf1, 0x7, 0x6, 0x8001, 0x5}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}], &(0x7f00000000c0)='GPL\x00', 0x10001, 0xea, &(0x7f00000001c0)=""/234, 0xe46be304c81b240b, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x4, 0x70}, 0x10, 0x1a4cd, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=[r2, 0xffffffffffffffff]}, 0x80) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:12 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f720000000022000000000c000000001de0"}) 23:36:12 executing program 3: socketpair(0x23, 0x72, 0x7fffffff, &(0x7f0000000100)) 23:36:12 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000100)={0x1, 0x9e, 0x80, 0x80}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x3, 0x3, 0x3}) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0xd3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x3, 0x3, 0x1, "b79f8e69bf7dc783dfe834fe6dd8559ac118eaa0160a7eca38430cb64523f746", 0x43564548}) 23:36:12 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:12 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f72000000002200000000000c0000001de0"}) 23:36:12 executing program 3: socketpair(0x23, 0x73, 0x7fffffff, &(0x7f0000000100)) 23:36:12 executing program 5: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffff}, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0xc0, 0x1, 0x3, 0x425, 0x1, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x5}, 0x48) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000400)={0x0, @multicast2, @private}, &(0x7f0000000440)=0xc) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_ext={0x1c, 0xf, &(0x7f0000000140)=@raw=[@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc3e}, @map_val={0x18, 0x7, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x6}, @alu={0x4, 0x1, 0x1, 0x8, 0x8, 0xffffffffffffffff, 0xffffffffffffffff}, @ldst={0x3, 0x3, 0x6, 0x0, 0xa, 0x50, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x6}, @map_idx={0x18, 0x1}, @map_val={0x18, 0x5, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xfff}, @generic={0xf1, 0x7, 0x6, 0x8001, 0x5}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}], &(0x7f00000000c0)='GPL\x00', 0x10001, 0xea, &(0x7f00000001c0)=""/234, 0xe46be304c81b240b, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x4, 0x70}, 0x10, 0x1a4cd, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=[r2, 0xffffffffffffffff]}, 0x80) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffff}, 0xc) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0xc0, 0x1, 0x3, 0x425, 0x1, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x5}, 0x48) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000400)={0x0, @multicast2, @private}, &(0x7f0000000440)=0xc) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_ext={0x1c, 0xf, &(0x7f0000000140)=@raw=[@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc3e}, @map_val={0x18, 0x7, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x6}, @alu={0x4, 0x1, 0x1, 0x8, 0x8, 0xffffffffffffffff, 0xffffffffffffffff}, @ldst={0x3, 0x3, 0x6, 0x0, 0xa, 0x50, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x6}, @map_idx={0x18, 0x1}, @map_val={0x18, 0x5, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xfff}, @generic={0xf1, 0x7, 0x6, 0x8001, 0x5}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}], &(0x7f00000000c0)='GPL\x00', 0x10001, 0xea, &(0x7f00000001c0)=""/234, 0xe46be304c81b240b, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x4, 0x70}, 0x10, 0x1a4cd, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=[r2, 0xffffffffffffffff]}, 0x80) (async) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) 23:36:12 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) ioctl$PTP_PIN_GETFUNC(r1, 0xc0603d06, &(0x7f0000000040)={'\x00', 0x200, 0x1, 0x3}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) socket$inet(0x2, 0x5, 0x6) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, &(0x7f0000000180)={0x2, 0xe67a0c0c61fcc0ca, @stop_pts=0x2}) 23:36:12 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0xffff, 0x2) bpf$BPF_TASK_FD_QUERY(0x13, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000002c0)={0x9, 0x3, 0x4, 0x0, 0xf2}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffff8}, [@map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8000}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x81}]}, &(0x7f0000000480)='syzkaller\x00', 0x7, 0x89, &(0x7f00000004c0)=""/137, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0xd, 0x401, 0x714}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[r1, 0xffffffffffffffff, 0x1, r2, 0xffffffffffffffff, r3]}, 0x80) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000700)={0x63, 0x8000, "3e6214bf4304da888989b5bc68b11fdf0d50291fee94dfdb", {0x2f0, 0x400}, 0x40}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000300)={0x1, @vbi={0x6195, 0x1, 0x12, 0x3831354f, [0x7ff, 0x9], [0x7], 0x32}}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000140)) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x35303553, 0x0, @stepwise}) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f00000001c0)={0x1, @raw_data="9b37c77d3e39c2d145a5cb8938a1d936dfc2e4399b01515285000d649016961408d871bf6ca3f395f9ef0249b0d5e0c155292cfcdb5d9f3d5de7071e11726ff49507554d827db8c374cb5900413828aa95b4a9d54dcb9045e70048cc7216c4e75106db8ebd78301467f53684eefac4fea5542465c471beeaad536f5240c6249a11724d07ab680454d6b38a33926780d6aa30ec9331f6d51c0f7265fbd445c1e9bd6f2e71bab8af60ed52d348a342c0d9ffdb5c43f3197dc3d8a21864cdb87f7148ae723b5badd7ef"}) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000040)={0x81e7, 0xffff8247, 0x4, {0x2, @pix_mp={0xccd4, 0xff, 0x42303159, 0x7, 0x6, [{0x800, 0x1}, {0x7, 0x2}, {0x1000, 0x1}, {0x1f, 0x6}, {0x40001000, 0x1}, {0x80000000, 0xa6}, {0x3f, 0x3}, {0x7fff, 0x80}], 0x5, 0x4, 0x8}}, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000780)={0x1, 0x100, 0x2}) 23:36:12 executing program 3: socketpair(0x23, 0x74, 0x7fffffff, &(0x7f0000000100)) 23:36:12 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x2}) 23:36:12 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000001001de0"}) 23:36:12 executing program 5: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffff}, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0xc0, 0x1, 0x3, 0x425, 0x1, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x5}, 0x48) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000400)={0x0, @multicast2, @private}, &(0x7f0000000440)=0xc) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_ext={0x1c, 0xf, &(0x7f0000000140)=@raw=[@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc3e}, @map_val={0x18, 0x7, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x6}, @alu={0x4, 0x1, 0x1, 0x8, 0x8, 0xffffffffffffffff, 0xffffffffffffffff}, @ldst={0x3, 0x3, 0x6, 0x0, 0xa, 0x50, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x6}, @map_idx={0x18, 0x1}, @map_val={0x18, 0x5, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xfff}, @generic={0xf1, 0x7, 0x6, 0x8001, 0x5}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}], &(0x7f00000000c0)='GPL\x00', 0x10001, 0xea, &(0x7f00000001c0)=""/234, 0xe46be304c81b240b, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x4, 0x70}, 0x10, 0x1a4cd, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=[r2, 0xffffffffffffffff]}, 0x80) (async) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:12 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0xffff, 0x2) bpf$BPF_TASK_FD_QUERY(0x13, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000002c0)={0x9, 0x3, 0x4, 0x0, 0xf2}) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffff8}, [@map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8000}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x81}]}, &(0x7f0000000480)='syzkaller\x00', 0x7, 0x89, &(0x7f00000004c0)=""/137, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0xd, 0x401, 0x714}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[r1, 0xffffffffffffffff, 0x1, r2, 0xffffffffffffffff, r3]}, 0x80) (rerun: 64) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000700)={0x63, 0x8000, "3e6214bf4304da888989b5bc68b11fdf0d50291fee94dfdb", {0x2f0, 0x400}, 0x40}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000300)={0x1, @vbi={0x6195, 0x1, 0x12, 0x3831354f, [0x7ff, 0x9], [0x7], 0x32}}) (async) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000140)) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x35303553, 0x0, @stepwise}) (async) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f00000001c0)={0x1, @raw_data="9b37c77d3e39c2d145a5cb8938a1d936dfc2e4399b01515285000d649016961408d871bf6ca3f395f9ef0249b0d5e0c155292cfcdb5d9f3d5de7071e11726ff49507554d827db8c374cb5900413828aa95b4a9d54dcb9045e70048cc7216c4e75106db8ebd78301467f53684eefac4fea5542465c471beeaad536f5240c6249a11724d07ab680454d6b38a33926780d6aa30ec9331f6d51c0f7265fbd445c1e9bd6f2e71bab8af60ed52d348a342c0d9ffdb5c43f3197dc3d8a21864cdb87f7148ae723b5badd7ef"}) (async, rerun: 64) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) (async, rerun: 64) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000040)={0x81e7, 0xffff8247, 0x4, {0x2, @pix_mp={0xccd4, 0xff, 0x42303159, 0x7, 0x6, [{0x800, 0x1}, {0x7, 0x2}, {0x1000, 0x1}, {0x1f, 0x6}, {0x40001000, 0x1}, {0x80000000, 0xa6}, {0x3f, 0x3}, {0x7fff, 0x80}], 0x5, 0x4, 0x8}}, 0x4}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000780)={0x1, 0x100, 0x2}) 23:36:12 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) ioctl$PTP_PIN_GETFUNC(r1, 0xc0603d06, &(0x7f0000000040)={'\x00', 0x200, 0x1, 0x3}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) socket$inet(0x2, 0x5, 0x6) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, &(0x7f0000000180)={0x2, 0xe67a0c0c61fcc0ca, @stop_pts=0x2}) 23:36:12 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f720000000022000000000000000c001de0"}) 23:36:12 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0x3, @vbi={0x1000, 0x400, 0x2, 0x38303553, [0x7, 0x4], [0x3, 0x885], 0x108}}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000140)={0x2, @sdr={0x563e507c, 0x9}}) 23:36:12 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x1000000}) 23:36:12 executing program 3: socketpair(0x23, 0x75, 0x7fffffff, &(0x7f0000000100)) 23:36:12 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f72000000002200000000000c0000001de0"}) 23:36:12 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) ioctl$PTP_PIN_GETFUNC(r1, 0xc0603d06, &(0x7f0000000040)={'\x00', 0x200, 0x1, 0x3}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) socket$inet(0x2, 0x5, 0x6) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, &(0x7f0000000180)={0x2, 0xe67a0c0c61fcc0ca, @stop_pts=0x2}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) (async) ioctl$PTP_PIN_GETFUNC(r1, 0xc0603d06, &(0x7f0000000040)={'\x00', 0x200, 0x1, 0x3}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) socket$inet(0x2, 0x5, 0x6) (async) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, &(0x7f0000000180)={0x2, 0xe67a0c0c61fcc0ca, @stop_pts=0x2}) (async) 23:36:12 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0x3, @vbi={0x1000, 0x400, 0x2, 0x38303553, [0x7, 0x4], [0x3, 0x885], 0x108}}) (async, rerun: 32) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000140)={0x2, @sdr={0x563e507c, 0x9}}) (rerun: 32) 23:36:12 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0xffff, 0x2) bpf$BPF_TASK_FD_QUERY(0x13, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000002c0)={0x9, 0x3, 0x4, 0x0, 0xf2}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffff8}, [@map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8000}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x81}]}, &(0x7f0000000480)='syzkaller\x00', 0x7, 0x89, &(0x7f00000004c0)=""/137, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0xd, 0x401, 0x714}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[r1, 0xffffffffffffffff, 0x1, r2, 0xffffffffffffffff, r3]}, 0x80) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000700)={0x63, 0x8000, "3e6214bf4304da888989b5bc68b11fdf0d50291fee94dfdb", {0x2f0, 0x400}, 0x40}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000300)={0x1, @vbi={0x6195, 0x1, 0x12, 0x3831354f, [0x7ff, 0x9], [0x7], 0x32}}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000140)) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x35303553, 0x0, @stepwise}) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f00000001c0)={0x1, @raw_data="9b37c77d3e39c2d145a5cb8938a1d936dfc2e4399b01515285000d649016961408d871bf6ca3f395f9ef0249b0d5e0c155292cfcdb5d9f3d5de7071e11726ff49507554d827db8c374cb5900413828aa95b4a9d54dcb9045e70048cc7216c4e75106db8ebd78301467f53684eefac4fea5542465c471beeaad536f5240c6249a11724d07ab680454d6b38a33926780d6aa30ec9331f6d51c0f7265fbd445c1e9bd6f2e71bab8af60ed52d348a342c0d9ffdb5c43f3197dc3d8a21864cdb87f7148ae723b5badd7ef"}) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000040)={0x81e7, 0xffff8247, 0x4, {0x2, @pix_mp={0xccd4, 0xff, 0x42303159, 0x7, 0x6, [{0x800, 0x1}, {0x7, 0x2}, {0x1000, 0x1}, {0x1f, 0x6}, {0x40001000, 0x1}, {0x80000000, 0xa6}, {0x3f, 0x3}, {0x7fff, 0x80}], 0x5, 0x4, 0x8}}, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000780)={0x1, 0x100, 0x2}) syz_open_dev$vim2m(&(0x7f0000000180), 0xffff, 0x2) (async) bpf$BPF_TASK_FD_QUERY(0x13, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000002c0)={0x9, 0x3, 0x4, 0x0, 0xf2}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffff8}, [@map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8000}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x81}]}, &(0x7f0000000480)='syzkaller\x00', 0x7, 0x89, &(0x7f00000004c0)=""/137, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0xd, 0x401, 0x714}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[r1, 0xffffffffffffffff, 0x1, r2, 0xffffffffffffffff, r3]}, 0x80) (async) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000700)={0x63, 0x8000, "3e6214bf4304da888989b5bc68b11fdf0d50291fee94dfdb", {0x2f0, 0x400}, 0x40}) (async) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000300)={0x1, @vbi={0x6195, 0x1, 0x12, 0x3831354f, [0x7ff, 0x9], [0x7], 0x32}}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000140)) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x35303553, 0x0, @stepwise}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f00000001c0)={0x1, @raw_data="9b37c77d3e39c2d145a5cb8938a1d936dfc2e4399b01515285000d649016961408d871bf6ca3f395f9ef0249b0d5e0c155292cfcdb5d9f3d5de7071e11726ff49507554d827db8c374cb5900413828aa95b4a9d54dcb9045e70048cc7216c4e75106db8ebd78301467f53684eefac4fea5542465c471beeaad536f5240c6249a11724d07ab680454d6b38a33926780d6aa30ec9331f6d51c0f7265fbd445c1e9bd6f2e71bab8af60ed52d348a342c0d9ffdb5c43f3197dc3d8a21864cdb87f7148ae723b5badd7ef"}) (async) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000040)={0x81e7, 0xffff8247, 0x4, {0x2, @pix_mp={0xccd4, 0xff, 0x42303159, 0x7, 0x6, [{0x800, 0x1}, {0x7, 0x2}, {0x1000, 0x1}, {0x1f, 0x6}, {0x40001000, 0x1}, {0x80000000, 0xa6}, {0x3f, 0x3}, {0x7fff, 0x80}], 0x5, 0x4, 0x8}}, 0x4}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000780)={0x1, 0x100, 0x2}) (async) 23:36:12 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x2000000}) 23:36:12 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000c00001de0"}) 23:36:12 executing program 3: socketpair(0x23, 0x76, 0x7fffffff, &(0x7f0000000100)) 23:36:12 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x5, @pix_mp={0xea, 0x10000, 0x59455247, 0x7, 0x0, [{0x1, 0x10000}, {0xfffffffa, 0x1}, {0x5, 0x9f85}, {0xffff7a18, 0x6}, {0x8000, 0x6}, {0x66f4, 0xe63b}, {0x2a8, 0x100}, {0x8001, 0x6}], 0x40, 0x53, 0x6, 0x2, 0x7}}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0xfffffffc, 0x36314d59, 0x0, @stepwise}) 23:36:12 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000000)={0x0, 0xff, 0x4}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0xf) 23:36:12 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0x3, @vbi={0x1000, 0x400, 0x2, 0x38303553, [0x7, 0x4], [0x3, 0x885], 0x108}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000140)={0x2, @sdr={0x563e507c, 0x9}}) 23:36:12 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000011de0"}) 23:36:12 executing program 3: socketpair(0x23, 0x77, 0x7fffffff, &(0x7f0000000100)) 23:36:12 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000000)={0x0, 0xff, 0x4}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0xf) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000000)={0x0, 0xff, 0x4}) (async) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0xf) (async) 23:36:12 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) clock_gettime(0x0, &(0x7f0000000000)) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f00000000c0)={0xfff, 0x20385655, 0x1, @stepwise={0x0, 0x2, 0x7fff, 0x4, 0x8, 0x6}}) 23:36:12 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x5, @pix_mp={0xea, 0x10000, 0x59455247, 0x7, 0x0, [{0x1, 0x10000}, {0xfffffffa, 0x1}, {0x5, 0x9f85}, {0xffff7a18, 0x6}, {0x8000, 0x6}, {0x66f4, 0xe63b}, {0x2a8, 0x100}, {0x8001, 0x6}], 0x40, 0x53, 0x6, 0x2, 0x7}}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0xfffffffc, 0x36314d59, 0x0, @stepwise}) 23:36:12 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x7ff, 0x0, 0x0, 0x0, [{0x40000000}, {}, {}, {0x0, 0x4}, {0x4000000, 0x8}], 0x0, 0x0, 0x0, 0x2}}) 23:36:12 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f72000000002200000000000000000c1de0"}) 23:36:12 executing program 3: socketpair(0x23, 0x78, 0x7fffffff, &(0x7f0000000100)) 23:36:12 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000000)={0x0, 0xff, 0x4}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0xf) 23:36:12 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async, rerun: 32) clock_gettime(0x0, &(0x7f0000000000)) (async, rerun: 32) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f00000000c0)={0xfff, 0x20385655, 0x1, @stepwise={0x0, 0x2, 0x7fff, 0x4, 0x8, 0x6}}) 23:36:12 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x5, @pix_mp={0xea, 0x10000, 0x59455247, 0x7, 0x0, [{0x1, 0x10000}, {0xfffffffa, 0x1}, {0x5, 0x9f85}, {0xffff7a18, 0x6}, {0x8000, 0x6}, {0x66f4, 0xe63b}, {0x2a8, 0x100}, {0x8001, 0x6}], 0x40, 0x53, 0x6, 0x2, 0x7}}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0xfffffffc, 0x36314d59, 0x0, @stepwise}) syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x5, @pix_mp={0xea, 0x10000, 0x59455247, 0x7, 0x0, [{0x1, 0x10000}, {0xfffffffa, 0x1}, {0x5, 0x9f85}, {0xffff7a18, 0x6}, {0x8000, 0x6}, {0x66f4, 0xe63b}, {0x2a8, 0x100}, {0x8001, 0x6}], 0x40, 0x53, 0x6, 0x2, 0x7}}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0xfffffffc, 0x36314d59, 0x0, @stepwise}) (async) 23:36:12 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x7ff, 0x0, 0x0, 0x0, [{0x40000000}, {}, {}, {0x0, 0x4}, {0x4000000, 0x8}], 0x0, 0x0, 0x0, 0x2}}) 23:36:12 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc100565c, &(0x7f0000000100)={0x400, 0x2, 0x3, "475d003ee11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x30314442}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x3) 23:36:12 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000c00001de0"}) 23:36:12 executing program 3: socketpair(0x23, 0x79, 0x7fffffff, &(0x7f0000000100)) 23:36:12 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) clock_gettime(0x0, &(0x7f0000000000)) (async, rerun: 32) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (rerun: 32) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f00000000c0)={0xfff, 0x20385655, 0x1, @stepwise={0x0, 0x2, 0x7fff, 0x4, 0x8, 0x6}}) 23:36:12 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x8, 0x3147504d, 0x2, @stepwise={0x7, 0x80, 0x1, 0x9, 0x8, 0x200}}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) connect$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1e) 23:36:12 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc100565c, &(0x7f0000000100)={0x400, 0x2, 0x3, "475d003ee11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x30314442}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x3) 23:36:12 executing program 3: socketpair(0x23, 0x7a, 0x7fffffff, &(0x7f0000000100)) 23:36:12 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f720000000022000000000000000c001de0"}) 23:36:12 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x7ff, 0x0, 0x0, 0x0, [{0x40000000}, {}, {}, {0x0, 0x4}, {0x4000000, 0x8}], 0x0, 0x0, 0x0, 0x2}}) 23:36:12 executing program 1: ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000000)) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x4, 0x2, 0x2, 0x0, 0x8}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000080)={0xfffffff8, 0x8}) 23:36:12 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x8, 0x3147504d, 0x2, @stepwise={0x7, 0x80, 0x1, 0x9, 0x8, 0x200}}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) connect$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1e) 23:36:12 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc100565c, &(0x7f0000000100)={0x400, 0x2, 0x3, "475d003ee11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x30314442}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x3) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc100565c, &(0x7f0000000100)={0x400, 0x2, 0x3, "475d003ee11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x30314442}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x3) (async) 23:36:12 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f720000000022000000000000000c001de0"}) 23:36:12 executing program 3: socketpair(0x23, 0x7b, 0x7fffffff, &(0x7f0000000100)) 23:36:13 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x2, 0x2, 0x2, "9d40d50e252095a4a6ed677795eabd82953c5fd0e4f50cad9f8bfb3937e2ae79", 0x33424752}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000040)=@fd={0x2, 0x1, 0x4, 0x0, 0x58, {0x0, 0xea60}, {0x5, 0x8, 0x63, 0x0, 0x3, 0xa4, "bc585312"}, 0x8, 0x4, {}, 0x8}) 23:36:13 executing program 1: ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000000)) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x4, 0x2, 0x2, 0x0, 0x8}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000080)={0xfffffff8, 0x8}) 23:36:13 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x8, 0x3147504d, 0x2, @stepwise={0x7, 0x80, 0x1, 0x9, 0x8, 0x200}}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) connect$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1e) 23:36:13 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f72000000002200000000000000000c1de0"}) 23:36:13 executing program 3: socketpair(0x23, 0x7c, 0x7fffffff, &(0x7f0000000100)) 23:36:13 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x2, 0x2, 0x2, "9d40d50e252095a4a6ed677795eabd82953c5fd0e4f50cad9f8bfb3937e2ae79", 0x33424752}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000040)=@fd={0x2, 0x1, 0x4, 0x0, 0x58, {0x0, 0xea60}, {0x5, 0x8, 0x63, 0x0, 0x3, 0xa4, "bc585312"}, 0x8, 0x4, {}, 0x8}) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x2, 0x2, 0x2, "9d40d50e252095a4a6ed677795eabd82953c5fd0e4f50cad9f8bfb3937e2ae79", 0x33424752}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000040)=@fd={0x2, 0x1, 0x4, 0x0, 0x58, {0x0, 0xea60}, {0x5, 0x8, 0x63, 0x0, 0x3, 0xa4, "bc585312"}, 0x8, 0x4, {}, 0x8}) (async) 23:36:13 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x27}, 0x1000}}, 0x1ff}, 0x90) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0xffff, 0x0, 0x3, {0x1, @raw_data="637e5efb39b64a901466875cdb799d6570b8eaff49ec6401727dd5f9c2c9e586cfb8af7b21a01d9dca92d198f8588456835a476f388d95cec18e2a5ff07d3e90c3a91f04600f5175b398a330d32195b25cbf7109131243f7bf938b6f09ef7ac2205566ce60fedbff9afbb03bc7cf3667f567246f40ec8aa952c4e97358ef5debd388e16bee41cabcb6f6647e589dc5ca8fe5990e0b31a067f6191582aaf4699e4e793bf8b67b651f73d85d7ca66d5b03f0b6142f0eb299c08853d7eb2bc8b52c0165eb1600669726"}}) 23:36:13 executing program 1: ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000000)) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x4, 0x2, 0x2, 0x0, 0x8}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000080)={0xfffffff8, 0x8}) 23:36:13 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000280)) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000080)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x9}, &(0x7f0000000140)=0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={r4, @in={{0x2, 0x4e21, @multicast1}}, 0xfffc}, 0x90) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x20, 0x1, 0x2, {0x2, @sliced={0x2, [0x3ff, 0x9, 0x3ff, 0xfffc, 0x2, 0x9, 0x6, 0x101, 0x3, 0xff73, 0x1, 0xfa65, 0x4, 0x5, 0x2, 0x40, 0x3, 0xc000, 0x6, 0x6, 0x200, 0x81, 0x7f, 0x1, 0x7, 0x1, 0xfffc, 0x1, 0x1000, 0x2, 0xfffa, 0x6, 0x4, 0x3b90, 0x2, 0xb9, 0x100, 0x92, 0xa0, 0x800, 0x8, 0x100, 0x1f, 0x88, 0x81, 0x5, 0x5, 0x3], 0x32a}}, 0x3f}) 23:36:13 executing program 3: socketpair(0x23, 0x7d, 0x7fffffff, &(0x7f0000000100)) 23:36:13 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f72000000002200000000000000000c1de0"}) 23:36:13 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x302081, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:13 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x27}, 0x1000}}, 0x1ff}, 0x90) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0xffff, 0x0, 0x3, {0x1, @raw_data="637e5efb39b64a901466875cdb799d6570b8eaff49ec6401727dd5f9c2c9e586cfb8af7b21a01d9dca92d198f8588456835a476f388d95cec18e2a5ff07d3e90c3a91f04600f5175b398a330d32195b25cbf7109131243f7bf938b6f09ef7ac2205566ce60fedbff9afbb03bc7cf3667f567246f40ec8aa952c4e97358ef5debd388e16bee41cabcb6f6647e589dc5ca8fe5990e0b31a067f6191582aaf4699e4e793bf8b67b651f73d85d7ca66d5b03f0b6142f0eb299c08853d7eb2bc8b52c0165eb1600669726"}}) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x27}, 0x1000}}, 0x1ff}, 0x90) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0xffff, 0x0, 0x3, {0x1, @raw_data="637e5efb39b64a901466875cdb799d6570b8eaff49ec6401727dd5f9c2c9e586cfb8af7b21a01d9dca92d198f8588456835a476f388d95cec18e2a5ff07d3e90c3a91f04600f5175b398a330d32195b25cbf7109131243f7bf938b6f09ef7ac2205566ce60fedbff9afbb03bc7cf3667f567246f40ec8aa952c4e97358ef5debd388e16bee41cabcb6f6647e589dc5ca8fe5990e0b31a067f6191582aaf4699e4e793bf8b67b651f73d85d7ca66d5b03f0b6142f0eb299c08853d7eb2bc8b52c0165eb1600669726"}}) (async) 23:36:13 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000280)) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000080)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x9}, &(0x7f0000000140)=0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={r4, @in={{0x2, 0x4e21, @multicast1}}, 0xfffc}, 0x90) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x20, 0x1, 0x2, {0x2, @sliced={0x2, [0x3ff, 0x9, 0x3ff, 0xfffc, 0x2, 0x9, 0x6, 0x101, 0x3, 0xff73, 0x1, 0xfa65, 0x4, 0x5, 0x2, 0x40, 0x3, 0xc000, 0x6, 0x6, 0x200, 0x81, 0x7f, 0x1, 0x7, 0x1, 0xfffc, 0x1, 0x1000, 0x2, 0xfffa, 0x6, 0x4, 0x3b90, 0x2, 0xb9, 0x100, 0x92, 0xa0, 0x800, 0x8, 0x100, 0x1f, 0x88, 0x81, 0x5, 0x5, 0x3], 0x32a}}, 0x3f}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000280)) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000080)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x9}, &(0x7f0000000140)=0x9c) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={r4, @in={{0x2, 0x4e21, @multicast1}}, 0xfffc}, 0x90) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x20, 0x1, 0x2, {0x2, @sliced={0x2, [0x3ff, 0x9, 0x3ff, 0xfffc, 0x2, 0x9, 0x6, 0x101, 0x3, 0xff73, 0x1, 0xfa65, 0x4, 0x5, 0x2, 0x40, 0x3, 0xc000, 0x6, 0x6, 0x200, 0x81, 0x7f, 0x1, 0x7, 0x1, 0xfffc, 0x1, 0x1000, 0x2, 0xfffa, 0x6, 0x4, 0x3b90, 0x2, 0xb9, 0x100, 0x92, 0xa0, 0x800, 0x8, 0x100, 0x1f, 0x88, 0x81, 0x5, 0x5, 0x3], 0x32a}}, 0x3f}) (async) 23:36:13 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x2, 0x2, 0x2, "9d40d50e252095a4a6ed677795eabd82953c5fd0e4f50cad9f8bfb3937e2ae79", 0x33424752}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000040)=@fd={0x2, 0x1, 0x4, 0x0, 0x58, {0x0, 0xea60}, {0x5, 0x8, 0x63, 0x0, 0x3, 0xa4, "bc585312"}, 0x8, 0x4, {}, 0x8}) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x2, 0x2, 0x2, "9d40d50e252095a4a6ed677795eabd82953c5fd0e4f50cad9f8bfb3937e2ae79", 0x33424752}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000040)=@fd={0x2, 0x1, 0x4, 0x0, 0x58, {0x0, 0xea60}, {0x5, 0x8, 0x63, 0x0, 0x3, 0xa4, "bc585312"}, 0x8, 0x4, {}, 0x8}) (async) 23:36:13 executing program 3: socketpair(0x23, 0x7e, 0x7fffffff, &(0x7f0000000100)) 23:36:13 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x302081, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async, rerun: 64) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (rerun: 64) 23:36:13 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x27}, 0x1000}}, 0x1ff}, 0x90) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0xffff, 0x0, 0x3, {0x1, @raw_data="637e5efb39b64a901466875cdb799d6570b8eaff49ec6401727dd5f9c2c9e586cfb8af7b21a01d9dca92d198f8588456835a476f388d95cec18e2a5ff07d3e90c3a91f04600f5175b398a330d32195b25cbf7109131243f7bf938b6f09ef7ac2205566ce60fedbff9afbb03bc7cf3667f567246f40ec8aa952c4e97358ef5debd388e16bee41cabcb6f6647e589dc5ca8fe5990e0b31a067f6191582aaf4699e4e793bf8b67b651f73d85d7ca66d5b03f0b6142f0eb299c08853d7eb2bc8b52c0165eb1600669726"}}) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x27}, 0x1000}}, 0x1ff}, 0x90) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0xffff, 0x0, 0x3, {0x1, @raw_data="637e5efb39b64a901466875cdb799d6570b8eaff49ec6401727dd5f9c2c9e586cfb8af7b21a01d9dca92d198f8588456835a476f388d95cec18e2a5ff07d3e90c3a91f04600f5175b398a330d32195b25cbf7109131243f7bf938b6f09ef7ac2205566ce60fedbff9afbb03bc7cf3667f567246f40ec8aa952c4e97358ef5debd388e16bee41cabcb6f6647e589dc5ca8fe5990e0b31a067f6191582aaf4699e4e793bf8b67b651f73d85d7ca66d5b03f0b6142f0eb299c08853d7eb2bc8b52c0165eb1600669726"}}) (async) 23:36:13 executing program 3: socketpair(0x23, 0x82, 0x7fffffff, &(0x7f0000000100)) 23:36:13 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:13 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x4fd, 0x1, 0x2}) 23:36:13 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000280)) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000080)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x9}, &(0x7f0000000140)=0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={r4, @in={{0x2, 0x4e21, @multicast1}}, 0xfffc}, 0x90) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x20, 0x1, 0x2, {0x2, @sliced={0x2, [0x3ff, 0x9, 0x3ff, 0xfffc, 0x2, 0x9, 0x6, 0x101, 0x3, 0xff73, 0x1, 0xfa65, 0x4, 0x5, 0x2, 0x40, 0x3, 0xc000, 0x6, 0x6, 0x200, 0x81, 0x7f, 0x1, 0x7, 0x1, 0xfffc, 0x1, 0x1000, 0x2, 0xfffa, 0x6, 0x4, 0x3b90, 0x2, 0xb9, 0x100, 0x92, 0xa0, 0x800, 0x8, 0x100, 0x1f, 0x88, 0x81, 0x5, 0x5, 0x3], 0x32a}}, 0x3f}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000280)) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000080)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x9}, &(0x7f0000000140)=0x9c) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={r4, @in={{0x2, 0x4e21, @multicast1}}, 0xfffc}, 0x90) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x20, 0x1, 0x2, {0x2, @sliced={0x2, [0x3ff, 0x9, 0x3ff, 0xfffc, 0x2, 0x9, 0x6, 0x101, 0x3, 0xff73, 0x1, 0xfa65, 0x4, 0x5, 0x2, 0x40, 0x3, 0xc000, 0x6, 0x6, 0x200, 0x81, 0x7f, 0x1, 0x7, 0x1, 0xfffc, 0x1, 0x1000, 0x2, 0xfffa, 0x6, 0x4, 0x3b90, 0x2, 0xb9, 0x100, 0x92, 0xa0, 0x800, 0x8, 0x100, 0x1f, 0x88, 0x81, 0x5, 0x5, 0x3], 0x32a}}, 0x3f}) (async) 23:36:13 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x302081, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x302081, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:36:13 executing program 3: socketpair(0x23, 0x83, 0x7fffffff, &(0x7f0000000100)) 23:36:13 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x1, @pix={0x7ff, 0x600, 0x584e4f53, 0x9, 0x4, 0xcb30, 0xc, 0x1, 0x0, 0x3, 0x1, 0x2}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000001c0)=@overlay={0x3, 0x1, 0x4, 0x0, 0xffffffff, {0x77359400}, {0x4, 0x0, 0x0, 0x81, 0x6, 0x3, "6972badf"}, 0x8001, 0x3, {}, 0xfffffffd, 0x0, r2}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000140)={0x7, 0x0, 0x2, "95c2ed7bd3be2ad1915fd06707f7be6db76389118d6f5fd257a2f32a2687b22d", 0x34424752}) 23:36:13 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0xc}) 23:36:13 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x4fd, 0x1, 0x2}) 23:36:13 executing program 3: socketpair(0x23, 0x84, 0x7fffffff, &(0x7f0000000100)) 23:36:13 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000000)=0x1, 0x4) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000040)=0x3, 0x4) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:13 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x1, @pix={0x7ff, 0x600, 0x584e4f53, 0x9, 0x4, 0xcb30, 0xc, 0x1, 0x0, 0x3, 0x1, 0x2}}) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000001c0)=@overlay={0x3, 0x1, 0x4, 0x0, 0xffffffff, {0x77359400}, {0x4, 0x0, 0x0, 0x81, 0x6, 0x3, "6972badf"}, 0x8001, 0x3, {}, 0xfffffffd, 0x0, r2}) (async) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) (async, rerun: 32) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000140)={0x7, 0x0, 0x2, "95c2ed7bd3be2ad1915fd06707f7be6db76389118d6f5fd257a2f32a2687b22d", 0x34424752}) (rerun: 32) 23:36:13 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2402, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000080)={0x10001, 0x48524742, 0x0, @discrete={0x6, 0x27b1}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:13 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0xc00}) 23:36:13 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x4fd, 0x1, 0x2}) 23:36:13 executing program 3: socketpair(0x23, 0x85, 0x7fffffff, &(0x7f0000000100)) 23:36:13 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000000)=0x1, 0x4) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000040)=0x3, 0x4) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000040)=0x3, 0x4) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:36:13 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2402, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000080)={0x10001, 0x48524742, 0x0, @discrete={0x6, 0x27b1}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2402, 0x0) (async) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000080)={0x10001, 0x48524742, 0x0, @discrete={0x6, 0x27b1}}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:36:13 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x1000000}) 23:36:13 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x1, @pix={0x7ff, 0x600, 0x584e4f53, 0x9, 0x4, 0xcb30, 0xc, 0x1, 0x0, 0x3, 0x1, 0x2}}) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000001c0)=@overlay={0x3, 0x1, 0x4, 0x0, 0xffffffff, {0x77359400}, {0x4, 0x0, 0x0, 0x81, 0x6, 0x3, "6972badf"}, 0x8001, 0x3, {}, 0xfffffffd, 0x0, r2}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) (async, rerun: 64) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000140)={0x7, 0x0, 0x2, "95c2ed7bd3be2ad1915fd06707f7be6db76389118d6f5fd257a2f32a2687b22d", 0x34424752}) (rerun: 64) 23:36:13 executing program 3: socketpair(0x23, 0x86, 0x7fffffff, &(0x7f0000000100)) 23:36:13 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x100000000004) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f00000000c0)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0x5, 0xfff, 0x2012, 0x5, 0xb, 0x6, 0x2, 0x4}}) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 23:36:13 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000000)=0x1, 0x4) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000040)=0x3, 0x4) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000040)=0x3, 0x4) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:36:13 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2402, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000080)={0x10001, 0x48524742, 0x0, @discrete={0x6, 0x27b1}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:13 executing program 3: socketpair(0x23, 0x87, 0x7fffffff, &(0x7f0000000100)) 23:36:13 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0xc000000}) 23:36:13 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000080)={r3, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000040)={r3, @in6={{0xa, 0x4e20, 0x6, @loopback, 0x3}}, 0x5, 0x100}, 0x90) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:36:13 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "477f003fd7a751220000000800000000001dc0000000000000000100", 0x30314247}) 23:36:13 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000280)={0x1, @vbi={0x8, 0x6, 0xf088, 0x3436324d, [0x8, 0x9], [0x3ff, 0xffe], 0x2}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f00000000c0)) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000080)=0x100) 23:36:13 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x100000000004) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f00000000c0)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0x5, 0xfff, 0x2012, 0x5, 0xb, 0x6, 0x2, 0x4}}) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x100000000004) (async) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f00000000c0)) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0x5, 0xfff, 0x2012, 0x5, 0xb, 0x6, 0x2, 0x4}}) (async) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) 23:36:13 executing program 3: socketpair(0x23, 0x88, 0x7fffffff, &(0x7f0000000100)) 23:36:13 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000080)={r3, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000040)={r3, @in6={{0xa, 0x4e20, 0x6, @loopback, 0x3}}, 0x5, 0x100}, 0x90) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000080)={r3, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x9c) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000040)={r3, @in6={{0xa, 0x4e20, 0x6, @loopback, 0x3}}, 0x5, 0x100}, 0x90) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) 23:36:13 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "477f003fd7a751220000000800000000001dc0000000000000000100", 0x30314247}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "477f003fd7a751220000000800000000001dc0000000000000000100", 0x30314247}) (async) 23:36:13 executing program 0: syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x800, 0x385300) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:13 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000280)={0x1, @vbi={0x8, 0x6, 0xf088, 0x3436324d, [0x8, 0x9], [0x3ff, 0xffe], 0x2}}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f00000000c0)) (async) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000080)=0x100) 23:36:13 executing program 3: socketpair(0x23, 0x89, 0x7fffffff, &(0x7f0000000100)) 23:36:13 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x100000000004) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f00000000c0)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0x5, 0xfff, 0x2012, 0x5, 0xb, 0x6, 0x2, 0x4}}) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x100000000004) (async) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f00000000c0)) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0x5, 0xfff, 0x2012, 0x5, 0xb, 0x6, 0x2, 0x4}}) (async) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) 23:36:13 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "477f003fd7a751220000000800000000001dc0000000000000000100", 0x30314247}) 23:36:13 executing program 0: syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) (async, rerun: 64) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async, rerun: 64) syz_open_dev$dri(&(0x7f0000000000), 0x800, 0x385300) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:13 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000080)={r3, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x9c) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000040)={r3, @in6={{0xa, 0x4e20, 0x6, @loopback, 0x3}}, 0x5, 0x100}, 0x90) (async, rerun: 64) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (rerun: 64) 23:36:13 executing program 3: socketpair(0x23, 0x8a, 0x7fffffff, &(0x7f0000000100)) 23:36:13 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000280)={0x1, @vbi={0x8, 0x6, 0xf088, 0x3436324d, [0x8, 0x9], [0x3ff, 0xffe], 0x2}}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f00000000c0)) (async) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000080)=0x100) 23:36:13 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x4a0040, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x2, 0x1, 0x3, 0x0, 0x3}) 23:36:13 executing program 5: bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x2, @rand_addr=0x64010101}}, 0x1e) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:13 executing program 3: socketpair(0x23, 0x8b, 0x7fffffff, &(0x7f0000000100)) 23:36:13 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0xab0, 0x18}, 0xc) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000080)={0x0, 0x47425247, 0x0, @stepwise}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x2) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0x10000, 0x14}, 0xc) 23:36:13 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x4a0040, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000080)) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x2, 0x1, 0x3, 0x0, 0x3}) 23:36:13 executing program 3: socketpair(0x23, 0x8c, 0x7fffffff, &(0x7f0000000100)) 23:36:13 executing program 5: bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x2, @rand_addr=0x64010101}}, 0x1e) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:13 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x1, 0x1, 0x2, "2aa5c3b68ceb241ab5d78026d7493c82020bb532ae5b0384ec8bf9b3887d8635", 0x30314247}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:14 executing program 0: syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x800, 0x385300) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:14 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0xab0, 0x18}, 0xc) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000080)={0x0, 0x47425247, 0x0, @stepwise}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x2) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0x10000, 0x14}, 0xc) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0xab0, 0x18}, 0xc) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000080)={0x0, 0x47425247, 0x0, @stepwise}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x2) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0x10000, 0x14}, 0xc) (async) 23:36:14 executing program 3: socketpair(0x23, 0x8d, 0x7fffffff, &(0x7f0000000100)) 23:36:14 executing program 5: bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x2, @rand_addr=0x64010101}}, 0x1e) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) 23:36:14 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x1, 0x1, 0x2, "2aa5c3b68ceb241ab5d78026d7493c82020bb532ae5b0384ec8bf9b3887d8635", 0x30314247}) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:14 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x4a0040, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000080)) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x2, 0x1, 0x3, 0x0, 0x3}) 23:36:14 executing program 3: socketpair(0x23, 0x8e, 0x7fffffff, &(0x7f0000000100)) 23:36:14 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0xab0, 0x18}, 0xc) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000080)={0x0, 0x47425247, 0x0, @stepwise}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x2) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0x10000, 0x14}, 0xc) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0xab0, 0x18}, 0xc) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000080)={0x0, 0x47425247, 0x0, @stepwise}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x2) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0x10000, 0x14}, 0xc) (async) 23:36:14 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000080)=@mmap={0x4, 0x2, 0x4, 0x0, 0xcc19, {r2, r3/1000+60000}, {0x4, 0x2, 0x6, 0x48, 0x1f, 0x20, "19f39d7b"}, 0xffff, 0x1, {}, 0x0, 0x0, r4}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:14 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @pix_mp={0x401, 0x8, 0x0, 0x6, 0xa, [{0x8, 0x4}, {0x7c8, 0x2}, {0xfffffeff, 0x8d}, {0x101, 0x8000}, {0x6, 0xff}, {0x3, 0x9}, {0xfffffc01, 0xfba8}, {0x3f, 0xfffff17f}], 0x7, 0xfc, 0x7, 0x1, 0x5}}) 23:36:14 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x1, 0x1, 0x2, "2aa5c3b68ceb241ab5d78026d7493c82020bb532ae5b0384ec8bf9b3887d8635", 0x30314247}) (async, rerun: 32) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (rerun: 32) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:14 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000000)={0x2, @pix={0x3, 0x4, 0x4c47504a, 0x3, 0x101, 0x0, 0x8, 0xffffffe0, 0x1, 0x7, 0x0, 0x7}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:14 executing program 3: socketpair(0x23, 0x8f, 0x7fffffff, &(0x7f0000000100)) 23:36:14 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000000)={0x2, @pix={0x3, 0x4, 0x4c47504a, 0x3, 0x101, 0x0, 0x8, 0xffffffe0, 0x1, 0x7, 0x0, 0x7}}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:14 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0x7, 0x7fff}) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x898c, 0x20343059, 0x2, @stepwise={0x7, 0xc64, 0x0, 0x800, 0x1, 0xc75}}) 23:36:14 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @pix_mp={0x401, 0x8, 0x0, 0x6, 0xa, [{0x8, 0x4}, {0x7c8, 0x2}, {0xfffffeff, 0x8d}, {0x101, 0x8000}, {0x6, 0xff}, {0x3, 0x9}, {0xfffffc01, 0xfba8}, {0x3f, 0xfffff17f}], 0x7, 0xfc, 0x7, 0x1, 0x5}}) 23:36:14 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async, rerun: 64) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async, rerun: 64) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) (async) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000080)=@mmap={0x4, 0x2, 0x4, 0x0, 0xcc19, {r2, r3/1000+60000}, {0x4, 0x2, 0x6, 0x48, 0x1f, 0x20, "19f39d7b"}, 0xffff, 0x1, {}, 0x0, 0x0, r4}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:14 executing program 3: socketpair(0x23, 0x90, 0x7fffffff, &(0x7f0000000100)) 23:36:14 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0x7, 0x7fff}) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xffffffffffffffff) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x898c, 0x20343059, 0x2, @stepwise={0x7, 0xc64, 0x0, 0x800, 0x1, 0xc75}}) 23:36:14 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000000)={0x2, @pix={0x3, 0x4, 0x4c47504a, 0x3, 0x101, 0x0, 0x8, 0xffffffe0, 0x1, 0x7, 0x0, 0x7}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:14 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000000)={0x0, 0x1, 0x0, "475d003f7b4867ac98439118f1c62f7a00000000220000000000000000001de0", 0x32314d48}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)=@multiplanar_fd={0x6d44b08, 0xfd826d058cf96663, 0x4, 0x100, 0x101, {}, {0x4, 0x8, 0x7, 0xfb, 0x0, 0x5, "bcb30d44"}, 0x8001, 0x4, {&(0x7f0000000140)=[{0x4, 0x0, {r2}, 0x6e4a068a}, {0x9, 0x6f89a20c, {}, 0x7}]}, 0x7, 0x0, r3}) 23:36:14 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp}) (async, rerun: 64) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @pix_mp={0x401, 0x8, 0x0, 0x6, 0xa, [{0x8, 0x4}, {0x7c8, 0x2}, {0xfffffeff, 0x8d}, {0x101, 0x8000}, {0x6, 0xff}, {0x3, 0x9}, {0xfffffc01, 0xfba8}, {0x3f, 0xfffff17f}], 0x7, 0xfc, 0x7, 0x1, 0x5}}) (rerun: 64) 23:36:14 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0x7, 0x7fff}) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x898c, 0x20343059, 0x2, @stepwise={0x7, 0xc64, 0x0, 0x800, 0x1, 0xc75}}) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0x7, 0x7fff}) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) add_key$fscrypt_provisioning(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xffffffffffffffff) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x898c, 0x20343059, 0x2, @stepwise={0x7, 0xc64, 0x0, 0x800, 0x1, 0xc75}}) (async) 23:36:14 executing program 3: socketpair(0x23, 0x91, 0x7fffffff, &(0x7f0000000100)) 23:36:14 executing program 0: socket$l2tp(0x2, 0x2, 0x73) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:14 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x800000}]}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x1, @sliced={0x7, [0xffff, 0x9, 0x4, 0x400, 0x3, 0x20, 0xff9b, 0x8, 0x9, 0x86, 0x400, 0x0, 0x1ff, 0x200, 0xab40, 0xd9c, 0x7fff, 0x139, 0x1ff8, 0xb6e, 0xf001, 0x5, 0x2, 0x2, 0xe18, 0x8a, 0x7ff, 0x3, 0x1, 0xff, 0x3, 0x0, 0x80, 0x1, 0x5, 0x9, 0x3, 0xfff, 0x9, 0x8001, 0xffff, 0x4a09, 0x5fb, 0x6, 0x6, 0x95cc, 0x42c, 0x9], 0x3ff}}) 23:36:14 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000000)={0x0, 0x1, 0x0, "475d003f7b4867ac98439118f1c62f7a00000000220000000000000000001de0", 0x32314d48}) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) (async) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) (async, rerun: 64) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)=@multiplanar_fd={0x6d44b08, 0xfd826d058cf96663, 0x4, 0x100, 0x101, {}, {0x4, 0x8, 0x7, 0xfb, 0x0, 0x5, "bcb30d44"}, 0x8001, 0x4, {&(0x7f0000000140)=[{0x4, 0x0, {r2}, 0x6e4a068a}, {0x9, 0x6f89a20c, {}, 0x7}]}, 0x7, 0x0, r3}) (rerun: 64) 23:36:14 executing program 3: socketpair(0x23, 0x92, 0x7fffffff, &(0x7f0000000100)) 23:36:14 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async, rerun: 32) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (rerun: 32) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) (async, rerun: 32) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000080)=@mmap={0x4, 0x2, 0x4, 0x0, 0xcc19, {r2, r3/1000+60000}, {0x4, 0x2, 0x6, 0x48, 0x1f, 0x20, "19f39d7b"}, 0xffff, 0x1, {}, 0x0, 0x0, r4}) (async, rerun: 64) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (rerun: 64) 23:36:14 executing program 0: socket$l2tp(0x2, 0x2, 0x73) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) socket$l2tp(0x2, 0x2, 0x73) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:36:14 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x800000}]}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x1, @sliced={0x7, [0xffff, 0x9, 0x4, 0x400, 0x3, 0x20, 0xff9b, 0x8, 0x9, 0x86, 0x400, 0x0, 0x1ff, 0x200, 0xab40, 0xd9c, 0x7fff, 0x139, 0x1ff8, 0xb6e, 0xf001, 0x5, 0x2, 0x2, 0xe18, 0x8a, 0x7ff, 0x3, 0x1, 0xff, 0x3, 0x0, 0x80, 0x1, 0x5, 0x9, 0x3, 0xfff, 0x9, 0x8001, 0xffff, 0x4a09, 0x5fb, 0x6, 0x6, 0x95cc, 0x42c, 0x9], 0x3ff}}) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x800000}]}}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x1, @sliced={0x7, [0xffff, 0x9, 0x4, 0x400, 0x3, 0x20, 0xff9b, 0x8, 0x9, 0x86, 0x400, 0x0, 0x1ff, 0x200, 0xab40, 0xd9c, 0x7fff, 0x139, 0x1ff8, 0xb6e, 0xf001, 0x5, 0x2, 0x2, 0xe18, 0x8a, 0x7ff, 0x3, 0x1, 0xff, 0x3, 0x0, 0x80, 0x1, 0x5, 0x9, 0x3, 0xfff, 0x9, 0x8001, 0xffff, 0x4a09, 0x5fb, 0x6, 0x6, 0x95cc, 0x42c, 0x9], 0x3ff}}) (async) 23:36:14 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x101, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000080)={r3, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x9c) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000080)={r3, 0x6}, &(0x7f00000000c0)=0x8) 23:36:14 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000000)={0x0, 0x1, 0x0, "475d003f7b4867ac98439118f1c62f7a00000000220000000000000000001de0", 0x32314d48}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) (async, rerun: 32) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 32) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)=@multiplanar_fd={0x6d44b08, 0xfd826d058cf96663, 0x4, 0x100, 0x101, {}, {0x4, 0x8, 0x7, 0xfb, 0x0, 0x5, "bcb30d44"}, 0x8001, 0x4, {&(0x7f0000000140)=[{0x4, 0x0, {r2}, 0x6e4a068a}, {0x9, 0x6f89a20c, {}, 0x7}]}, 0x7, 0x0, r3}) 23:36:14 executing program 3: socketpair(0x23, 0x93, 0x7fffffff, &(0x7f0000000100)) 23:36:14 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x101, 0x0) (async, rerun: 64) r2 = socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 64) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000080)={r3, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x9c) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000080)={r3, 0x6}, &(0x7f00000000c0)=0x8) 23:36:14 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x800000}]}}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x1, @sliced={0x7, [0xffff, 0x9, 0x4, 0x400, 0x3, 0x20, 0xff9b, 0x8, 0x9, 0x86, 0x400, 0x0, 0x1ff, 0x200, 0xab40, 0xd9c, 0x7fff, 0x139, 0x1ff8, 0xb6e, 0xf001, 0x5, 0x2, 0x2, 0xe18, 0x8a, 0x7ff, 0x3, 0x1, 0xff, 0x3, 0x0, 0x80, 0x1, 0x5, 0x9, 0x3, 0xfff, 0x9, 0x8001, 0xffff, 0x4a09, 0x5fb, 0x6, 0x6, 0x95cc, 0x42c, 0x9], 0x3ff}}) 23:36:14 executing program 0: socket$l2tp(0x2, 0x2, 0x73) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:14 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300), 0x101001, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000340)=0x2, 0x4) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$VIDIOC_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000000000)={0x0, @reserved}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000280)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x1, 0x8, {r2, r3/1000+60000}, {0x2, 0x0, 0x9, 0x7f, 0x53, 0x7f, "f3718852"}, 0x47, 0x2, {&(0x7f0000000200)=[{0x5, 0xffff0001, {&(0x7f0000000180)}, 0x5}, {0x6, 0x80000001, {&(0x7f00000001c0)}, 0x9}]}, 0x400}) 23:36:14 executing program 3: socketpair(0x23, 0x94, 0x7fffffff, &(0x7f0000000100)) 23:36:14 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x6, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x31363553}) 23:36:14 executing program 0: setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) connect$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x1, 0x3}}, 0x10) socketpair(0x29, 0xa, 0x27ff, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r1, 0x28, 0x6, &(0x7f0000000140)={0x0, 0x2710}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000040)={0x8000, 0x1, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:14 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x2, 0x2, 0x0, "b7f9e891c952e76977e92add5e98cc00135207a1b74958eeca42efa4c5cbabfe", 0x56544943}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x6}}) 23:36:14 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300), 0x101001, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000340)=0x2, 0x4) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$VIDIOC_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000000000)={0x0, @reserved}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000280)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x1, 0x8, {r2, r3/1000+60000}, {0x2, 0x0, 0x9, 0x7f, 0x53, 0x7f, "f3718852"}, 0x47, 0x2, {&(0x7f0000000200)=[{0x5, 0xffff0001, {&(0x7f0000000180)}, 0x5}, {0x6, 0x80000001, {&(0x7f00000001c0)}, 0x9}]}, 0x400}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300), 0x101001, 0x0) (async) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000340)=0x2, 0x4) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) ioctl$VIDIOC_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000000000)={0x0, @reserved}) (async) clock_gettime(0x0, &(0x7f00000000c0)) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000280)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x1, 0x8, {r2, r3/1000+60000}, {0x2, 0x0, 0x9, 0x7f, 0x53, 0x7f, "f3718852"}, 0x47, 0x2, {&(0x7f0000000200)=[{0x5, 0xffff0001, {&(0x7f0000000180)}, 0x5}, {0x6, 0x80000001, {&(0x7f00000001c0)}, 0x9}]}, 0x400}) (async) 23:36:14 executing program 3: socketpair(0x23, 0x95, 0x7fffffff, &(0x7f0000000100)) 23:36:14 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x101, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000080)={r3, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x9c) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000080)={r3, 0x6}, &(0x7f00000000c0)=0x8) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x101, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000080)={r3, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x9c) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000080)={r3, 0x6}, &(0x7f00000000c0)=0x8) (async) 23:36:14 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x6, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x31363553}) 23:36:14 executing program 0: setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) connect$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x1, 0x3}}, 0x10) socketpair(0x29, 0xa, 0x27ff, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r1, 0x28, 0x6, &(0x7f0000000140)={0x0, 0x2710}, 0x10) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000040)={0x8000, 0x1, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:14 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x8001, 0x36314d4e, 0x2, @discrete={0x8, 0x4}}) ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, &(0x7f0000000040)={0x800, "91fc43d78f3088036b4ad86379d39b0ddaaacff15bf45d7f91182420746d06a2", 0x2, 0x6, 0x40, 0x1000, 0x2}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000140)={0x10001, 0x3, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000001c0)={0x2, @sdr={0x38415262, 0x30}}) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f0000000000)={0x400, "4847785ae6faede38eee294f2d40d9d48237b0de4d73a0044d1e6b09330b1111", 0x3, 0x1}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000100)=0x24f8, 0x4) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r1}, 0x8) ioctl$PTP_SYS_OFFSET_EXTENDED(r2, 0xc4c03d09, &(0x7f0000000300)={0x5}) 23:36:14 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x6, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x31363553}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x6, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x31363553}) (async) 23:36:14 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x2, 0x2, 0x0, "b7f9e891c952e76977e92add5e98cc00135207a1b74958eeca42efa4c5cbabfe", 0x56544943}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x6}}) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x2, 0x2, 0x0, "b7f9e891c952e76977e92add5e98cc00135207a1b74958eeca42efa4c5cbabfe", 0x56544943}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x6}}) (async) 23:36:14 executing program 3: socketpair(0x23, 0x96, 0x7fffffff, &(0x7f0000000100)) 23:36:14 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300), 0x101001, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000340)=0x2, 0x4) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$VIDIOC_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000000000)={0x0, @reserved}) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000280)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x1, 0x8, {r2, r3/1000+60000}, {0x2, 0x0, 0x9, 0x7f, 0x53, 0x7f, "f3718852"}, 0x47, 0x2, {&(0x7f0000000200)=[{0x5, 0xffff0001, {&(0x7f0000000180)}, 0x5}, {0x6, 0x80000001, {&(0x7f00000001c0)}, 0x9}]}, 0x400}) 23:36:14 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x8001, 0x36314d4e, 0x2, @discrete={0x8, 0x4}}) ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, &(0x7f0000000040)={0x800, "91fc43d78f3088036b4ad86379d39b0ddaaacff15bf45d7f91182420746d06a2", 0x2, 0x6, 0x40, 0x1000, 0x2}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000140)={0x10001, 0x3, 0x4, 0x0, 0x7}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000001c0)={0x2, @sdr={0x38415262, 0x30}}) (async, rerun: 32) socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 32) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f0000000000)={0x400, "4847785ae6faede38eee294f2d40d9d48237b0de4d73a0044d1e6b09330b1111", 0x3, 0x1}) (async) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000100)=0x24f8, 0x4) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r1}, 0x8) ioctl$PTP_SYS_OFFSET_EXTENDED(r2, 0xc4c03d09, &(0x7f0000000300)={0x5}) 23:36:14 executing program 0: setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) connect$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x1, 0x3}}, 0x10) socketpair(0x29, 0xa, 0x27ff, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r1, 0x28, 0x6, &(0x7f0000000140)={0x0, 0x2710}, 0x10) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000040)={0x8000, 0x1, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:14 executing program 3: socketpair(0x23, 0x97, 0x7fffffff, &(0x7f0000000100)) 23:36:14 executing program 1: syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x400002) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f0000000140)={'\x00', 0x7734, 0x0, 0x2}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000080)={0x1, 0x2, 0x0, "475d00ad201ed59bb805000000220000fdfffffffdffffffe000", 0x30314742}) 23:36:14 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x3}, 0x10) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000380)={0x0, 0x0, {0x0, 0x9, 0x3001, 0x4, 0x1, 0x8, 0x0, 0x4}}) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000010400000000000009000000186300000800000000000000a9000000184200000700000000000000000000003d160001f7ffffff18290000", @ANYRES32=0x1, @ANYBLOB='\x00\t\x00\x00\x00\x00\x00\x00\x00+\x00\x00', @ANYRES32=0x1, @ANYBLOB="000000000500000085100000fdffffff85100000fbffffff9500007ffffffffffffff90000000000"], &(0x7f0000000480)='GPL\x00', 0x400, 0x3e, &(0x7f00000004c0)=""/62, 0x41100, 0x4, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0xa, 0x3ff, 0x4}, 0x10, 0x23925, r1, 0x0, &(0x7f0000000580)=[0x1, 0x1, r1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1]}, 0x80) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r4, 0xc4c03d09, &(0x7f00000006c0)={0x2}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000680)={r2, r3, 0x7}, 0x10) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xc, &(0x7f0000000040)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4}, @ldst={0x1, 0x0, 0x1, 0x9, 0x9, 0xffffffffffffffe0, 0x8}, @map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x1}, @generic={0x7a, 0x4, 0x8, 0x2, 0xfffffff8}, @map_fd={0x18, 0x8, 0x1, 0x0, 0x1}, @map_fd={0x18, 0x7, 0x1, 0x0, 0x1}], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0xac, &(0x7f0000000180)=""/172, 0x40f00, 0x1, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x10, 0x1f, 0x1}, 0x10, 0xffffffffffffffff}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000340)={r1, r5, 0x0, r6}, 0x10) 23:36:14 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x2, 0x2, 0x0, "b7f9e891c952e76977e92add5e98cc00135207a1b74958eeca42efa4c5cbabfe", 0x56544943}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @pix_mp={0x6}}) 23:36:14 executing program 3: socketpair(0x23, 0x98, 0x7fffffff, &(0x7f0000000100)) 23:36:14 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x9, "605616ea8ea0a25b54324affe04b47e9c2c3cc3ed03c84354c851532c7dcb00c"}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x3, 0x1, 0x0, "474d043f2b1ed59bb805dfd0f0c62f720008f9fb404c8e00000000000de40600", 0x32315659}) 23:36:14 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x8001, 0x36314d4e, 0x2, @discrete={0x8, 0x4}}) ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, &(0x7f0000000040)={0x800, "91fc43d78f3088036b4ad86379d39b0ddaaacff15bf45d7f91182420746d06a2", 0x2, 0x6, 0x40, 0x1000, 0x2}) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000140)={0x10001, 0x3, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000001c0)={0x2, @sdr={0x38415262, 0x30}}) socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f0000000000)={0x400, "4847785ae6faede38eee294f2d40d9d48237b0de4d73a0044d1e6b09330b1111", 0x3, 0x1}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000100)=0x24f8, 0x4) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r1}, 0x8) ioctl$PTP_SYS_OFFSET_EXTENDED(r2, 0xc4c03d09, &(0x7f0000000300)={0x5}) 23:36:14 executing program 1: syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x400002) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f0000000140)={'\x00', 0x7734, 0x0, 0x2}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000080)={0x1, 0x2, 0x0, "475d00ad201ed59bb805000000220000fdfffffffdffffffe000", 0x30314742}) syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x400002) (async) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f0000000140)={'\x00', 0x7734, 0x0, 0x2}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000080)={0x1, 0x2, 0x0, "475d00ad201ed59bb805000000220000fdfffffffdffffffe000", 0x30314742}) (async) 23:36:14 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @vbi={0x1, 0x4, 0x9964, 0x30323953, [0xcd, 0x5], [0x80000000, 0x7ff], 0x1}}) 23:36:15 executing program 3: socketpair(0x23, 0x99, 0x7fffffff, &(0x7f0000000100)) 23:36:15 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async, rerun: 32) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x3}, 0x10) (rerun: 32) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000380)={0x0, 0x0, {0x0, 0x9, 0x3001, 0x4, 0x1, 0x8, 0x0, 0x4}}) (async) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000010400000000000009000000186300000800000000000000a9000000184200000700000000000000000000003d160001f7ffffff18290000", @ANYRES32=0x1, @ANYBLOB='\x00\t\x00\x00\x00\x00\x00\x00\x00+\x00\x00', @ANYRES32=0x1, @ANYBLOB="000000000500000085100000fdffffff85100000fbffffff9500007ffffffffffffff90000000000"], &(0x7f0000000480)='GPL\x00', 0x400, 0x3e, &(0x7f00000004c0)=""/62, 0x41100, 0x4, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0xa, 0x3ff, 0x4}, 0x10, 0x23925, r1, 0x0, &(0x7f0000000580)=[0x1, 0x1, r1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1]}, 0x80) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup/syz0\x00', 0x200002, 0x0) (async) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r4, 0xc4c03d09, &(0x7f00000006c0)={0x2}) (async, rerun: 64) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000680)={r2, r3, 0x7}, 0x10) (async, rerun: 64) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xc, &(0x7f0000000040)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4}, @ldst={0x1, 0x0, 0x1, 0x9, 0x9, 0xffffffffffffffe0, 0x8}, @map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x1}, @generic={0x7a, 0x4, 0x8, 0x2, 0xfffffff8}, @map_fd={0x18, 0x8, 0x1, 0x0, 0x1}, @map_fd={0x18, 0x7, 0x1, 0x0, 0x1}], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0xac, &(0x7f0000000180)=""/172, 0x40f00, 0x1, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x10, 0x1f, 0x1}, 0x10, 0xffffffffffffffff}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000340)={r1, r5, 0x0, r6}, 0x10) 23:36:15 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x9, "605616ea8ea0a25b54324affe04b47e9c2c3cc3ed03c84354c851532c7dcb00c"}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x3, 0x1, 0x0, "474d043f2b1ed59bb805dfd0f0c62f720008f9fb404c8e00000000000de40600", 0x32315659}) 23:36:15 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @vbi={0x1, 0x4, 0x9964, 0x30323953, [0xcd, 0x5], [0x80000000, 0x7ff], 0x1}}) 23:36:15 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000040)={0x506, 0x3247504d, 0x3, @discrete={0x19f, 0x101}}) 23:36:15 executing program 1: syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x400002) (rerun: 64) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f0000000140)={'\x00', 0x7734, 0x0, 0x2}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000080)={0x1, 0x2, 0x0, "475d00ad201ed59bb805000000220000fdfffffffdffffffe000", 0x30314742}) 23:36:15 executing program 3: socketpair(0x23, 0x9a, 0x7fffffff, &(0x7f0000000100)) 23:36:15 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async, rerun: 32) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x9, "605616ea8ea0a25b54324affe04b47e9c2c3cc3ed03c84354c851532c7dcb00c"}) (rerun: 32) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x3, 0x1, 0x0, "474d043f2b1ed59bb805dfd0f0c62f720008f9fb404c8e00000000000de40600", 0x32315659}) 23:36:15 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x3}, 0x10) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000380)={0x0, 0x0, {0x0, 0x9, 0x3001, 0x4, 0x1, 0x8, 0x0, 0x4}}) (async) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000010400000000000009000000186300000800000000000000a9000000184200000700000000000000000000003d160001f7ffffff18290000", @ANYRES32=0x1, @ANYBLOB='\x00\t\x00\x00\x00\x00\x00\x00\x00+\x00\x00', @ANYRES32=0x1, @ANYBLOB="000000000500000085100000fdffffff85100000fbffffff9500007ffffffffffffff90000000000"], &(0x7f0000000480)='GPL\x00', 0x400, 0x3e, &(0x7f00000004c0)=""/62, 0x41100, 0x4, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0xa, 0x3ff, 0x4}, 0x10, 0x23925, r1, 0x0, &(0x7f0000000580)=[0x1, 0x1, r1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1]}, 0x80) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) (async) ioctl$PTP_SYS_OFFSET_EXTENDED(r4, 0xc4c03d09, &(0x7f00000006c0)={0x2}) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000680)={r2, r3, 0x7}, 0x10) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xc, &(0x7f0000000040)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4}, @ldst={0x1, 0x0, 0x1, 0x9, 0x9, 0xffffffffffffffe0, 0x8}, @map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x1}, @generic={0x7a, 0x4, 0x8, 0x2, 0xfffffff8}, @map_fd={0x18, 0x8, 0x1, 0x0, 0x1}, @map_fd={0x18, 0x7, 0x1, 0x0, 0x1}], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0xac, &(0x7f0000000180)=""/172, 0x40f00, 0x1, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x10, 0x1f, 0x1}, 0x10, 0xffffffffffffffff}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000340)={r1, r5, 0x0, r6}, 0x10) 23:36:15 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x1, @vbi={0x1, 0x4, 0x9964, 0x30323953, [0xcd, 0x5], [0x80000000, 0x7ff], 0x1}}) 23:36:15 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000040)={0x506, 0x3247504d, 0x3, @discrete={0x19f, 0x101}}) 23:36:15 executing program 3: socketpair(0x23, 0x9b, 0x7fffffff, &(0x7f0000000100)) 23:36:15 executing program 1: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x2, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:15 executing program 3: socketpair(0x23, 0x9c, 0x7fffffff, &(0x7f0000000100)) 23:36:15 executing program 0: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x1, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r0, 0x6, 0x10}, 0xc) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x796c48351bb1d3, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:15 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000280)) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000080)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x9}, &(0x7f0000000140)=0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={r4, @in={{0x2, 0x4e21, @multicast1}}, 0xfffc}, 0x90) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x20, 0x1, 0x2, {0x2, @sliced={0x2, [0x3ff, 0x9, 0x3ff, 0xfffc, 0x2, 0x9, 0x6, 0x101, 0x3, 0xff73, 0x1, 0xfa65, 0x4, 0x5, 0x2, 0x40, 0x3, 0xc000, 0x6, 0x6, 0x200, 0x81, 0x7f, 0x1, 0x7, 0x1, 0xfffc, 0x1, 0x1000, 0x2, 0xfffa, 0x6, 0x4, 0x3b90, 0x2, 0xb9, 0x100, 0x92, 0xa0, 0x800, 0x8, 0x100, 0x1f, 0x88, 0x81, 0x5, 0x5, 0x3], 0x32a}}, 0x3f}) 23:36:15 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x1, 0x2, 0x5, 0x0, 0x58}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:15 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000040)={0x506, 0x3247504d, 0x3, @discrete={0x19f, 0x101}}) 23:36:15 executing program 1: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x2, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:15 executing program 3: socketpair(0x23, 0x9d, 0x7fffffff, &(0x7f0000000100)) 23:36:15 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) ioctl$PTP_PIN_GETFUNC(r1, 0xc0603d06, &(0x7f0000000040)={'\x00', 0x200, 0x1, 0x3}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) socket$inet(0x2, 0x5, 0x6) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, &(0x7f0000000180)={0x2, 0xe67a0c0c61fcc0ca, @stop_pts=0x2}) 23:36:15 executing program 0: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x1, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r0, 0x6, 0x10}, 0xc) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x796c48351bb1d3, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:15 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x1, 0x2, 0x5, 0x0, 0x58}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x1, 0x2, 0x5, 0x0, 0x58}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:36:15 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x48) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, r2, 0x25, 0xe}, 0x10) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000080)=@mmap={0x6, 0x1, 0x4, 0x10, 0x1ff, {0x77359400}, {0x5, 0xc, 0x20, 0x0, 0x79, 0xfa, "d3301c7e"}, 0x6, 0x1, {}, 0x1ed6}) syz_open_dev$vim2m(&(0x7f0000000180), 0x5, 0x2) 23:36:15 executing program 3: socketpair(0x23, 0x9e, 0x7fffffff, &(0x7f0000000100)) 23:36:15 executing program 1: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x2, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:15 executing program 0: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x1, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r0, 0x6, 0x10}, 0xc) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x796c48351bb1d3, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:15 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x1, 0x2, 0x5, 0x0, 0x58}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:15 executing program 3: socketpair(0x23, 0x9f, 0x7fffffff, &(0x7f0000000100)) 23:36:15 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x48) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, r2, 0x25, 0xe}, 0x10) (async) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000080)=@mmap={0x6, 0x1, 0x4, 0x10, 0x1ff, {0x77359400}, {0x5, 0xc, 0x20, 0x0, 0x79, 0xfa, "d3301c7e"}, 0x6, 0x1, {}, 0x1ed6}) (async) syz_open_dev$vim2m(&(0x7f0000000180), 0x5, 0x2) 23:36:15 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x200, 0x0, 0x2, 0x0, 0x1}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:15 executing program 3: socketpair(0x23, 0xa0, 0x7fffffff, &(0x7f0000000100)) 23:36:15 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0xffff, 0x2) bpf$BPF_TASK_FD_QUERY(0x13, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000002c0)={0x9, 0x3, 0x4, 0x0, 0xf2}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffff8}, [@map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8000}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x81}]}, &(0x7f0000000480)='syzkaller\x00', 0x7, 0x89, &(0x7f00000004c0)=""/137, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0xd, 0x401, 0x714}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[r1, 0xffffffffffffffff, 0x1, r2, 0xffffffffffffffff, r3]}, 0x80) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000700)={0x63, 0x8000, "3e6214bf4304da888989b5bc68b11fdf0d50291fee94dfdb", {0x2f0, 0x400}, 0x40}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000300)={0x1, @vbi={0x6195, 0x1, 0x12, 0x3831354f, [0x7ff, 0x9], [0x7], 0x32}}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000140)) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x35303553, 0x0, @stepwise}) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f00000001c0)={0x1, @raw_data="9b37c77d3e39c2d145a5cb8938a1d936dfc2e4399b01515285000d649016961408d871bf6ca3f395f9ef0249b0d5e0c155292cfcdb5d9f3d5de7071e11726ff49507554d827db8c374cb5900413828aa95b4a9d54dcb9045e70048cc7216c4e75106db8ebd78301467f53684eefac4fea5542465c471beeaad536f5240c6249a11724d07ab680454d6b38a33926780d6aa30ec9331f6d51c0f7265fbd445c1e9bd6f2e71bab8af60ed52d348a342c0d9ffdb5c43f3197dc3d8a21864cdb87f7148ae723b5badd7ef"}) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000040)={0x81e7, 0xffff8247, 0x4, {0x2, @pix_mp={0xccd4, 0xff, 0x42303159, 0x7, 0x6, [{0x800, 0x1}, {0x7, 0x2}, {0x1000, 0x1}, {0x1f, 0x6}, {0x40001000, 0x1}, {0x80000000, 0xa6}, {0x3f, 0x3}, {0x7fff, 0x80}], 0x5, 0x4, 0x8}}, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000780)={0x1, 0x100, 0x2}) 23:36:15 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x3, @pix_mp={0x9, 0x3, 0x31303553, 0x4, 0xa, [{0x8, 0x4}, {0x3fb, 0x5}, {0x5, 0x1}, {0x953}, {0x101, 0x7f}, {0x1, 0x3f}, {0x1, 0x7fff}, {0x10001, 0x6}], 0x54, 0x0, 0x6, 0x1, 0x1}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000040)=@fd={0x4, 0x1, 0x4, 0x100, 0x40, {0x77359400}, {0x1, 0x2, 0x3, 0xc6, 0xb9, 0x1f, "977ed253"}, 0x5, 0x4, {}, 0x7}) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000280)={0x1, @pix_mp={0x1ff, 0x9, 0x35315258, 0x1, 0x5, [{0x0, 0x3}, {0x8001}, {0x7, 0x9bda}, {0x3, 0x1}, {0x100, 0x4c}, {0x3ff, 0x8000}, {0xa42, 0x7fffffff}, {0xffffff81, 0x8001}], 0xee, 0x0, 0x3, 0x1, 0x2}}) 23:36:15 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000001c0)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) connect$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0x2, @multicast1}}, 0x1e) accept4$tipc(r1, &(0x7f0000000180)=@id, &(0x7f00000000c0)=0x10, 0x80000) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc100565c, &(0x7f0000000040)={0x1, 0x0, 0x0, "475d00512bd00600c53e83bc4ee5592a1000000022000000000000e000"}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 23:36:15 executing program 3: socketpair(0x23, 0xa1, 0x7fffffff, &(0x7f0000000100)) 23:36:15 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x48) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, r2, 0x25, 0xe}, 0x10) (async) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000080)=@mmap={0x6, 0x1, 0x4, 0x10, 0x1ff, {0x77359400}, {0x5, 0xc, 0x20, 0x0, 0x79, 0xfa, "d3301c7e"}, 0x6, 0x1, {}, 0x1ed6}) (async) syz_open_dev$vim2m(&(0x7f0000000180), 0x5, 0x2) 23:36:15 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x200, 0x0, 0x2, 0x0, 0x1}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:15 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x3, @pix_mp={0x9, 0x3, 0x31303553, 0x4, 0xa, [{0x8, 0x4}, {0x3fb, 0x5}, {0x5, 0x1}, {0x953}, {0x101, 0x7f}, {0x1, 0x3f}, {0x1, 0x7fff}, {0x10001, 0x6}], 0x54, 0x0, 0x6, 0x1, 0x1}}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000040)=@fd={0x4, 0x1, 0x4, 0x100, 0x40, {0x77359400}, {0x1, 0x2, 0x3, 0xc6, 0xb9, 0x1f, "977ed253"}, 0x5, 0x4, {}, 0x7}) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000280)={0x1, @pix_mp={0x1ff, 0x9, 0x35315258, 0x1, 0x5, [{0x0, 0x3}, {0x8001}, {0x7, 0x9bda}, {0x3, 0x1}, {0x100, 0x4c}, {0x3ff, 0x8000}, {0xa42, 0x7fffffff}, {0xffffff81, 0x8001}], 0xee, 0x0, 0x3, 0x1, 0x2}}) 23:36:15 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000001c0)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) connect$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0x2, @multicast1}}, 0x1e) accept4$tipc(r1, &(0x7f0000000180)=@id, &(0x7f00000000c0)=0x10, 0x80000) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc100565c, &(0x7f0000000040)={0x1, 0x0, 0x0, "475d00512bd00600c53e83bc4ee5592a1000000022000000000000e000"}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000001c0)) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) connect$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0x2, @multicast1}}, 0x1e) (async) accept4$tipc(r1, &(0x7f0000000180)=@id, &(0x7f00000000c0)=0x10, 0x80000) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc100565c, &(0x7f0000000040)={0x1, 0x0, 0x0, "475d00512bd00600c53e83bc4ee5592a1000000022000000000000e000"}) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) 23:36:15 executing program 3: socketpair(0x23, 0xa2, 0x7fffffff, &(0x7f0000000100)) 23:36:15 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000020000001de0"}) 23:36:15 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x200, 0x0, 0x2, 0x0, 0x1}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:15 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x3, @pix_mp={0x9, 0x3, 0x31303553, 0x4, 0xa, [{0x8, 0x4}, {0x3fb, 0x5}, {0x5, 0x1}, {0x953}, {0x101, 0x7f}, {0x1, 0x3f}, {0x1, 0x7fff}, {0x10001, 0x6}], 0x54, 0x0, 0x6, 0x1, 0x1}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000040)=@fd={0x4, 0x1, 0x4, 0x100, 0x40, {0x77359400}, {0x1, 0x2, 0x3, 0xc6, 0xb9, 0x1f, "977ed253"}, 0x5, 0x4, {}, 0x7}) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000280)={0x1, @pix_mp={0x1ff, 0x9, 0x35315258, 0x1, 0x5, [{0x0, 0x3}, {0x8001}, {0x7, 0x9bda}, {0x3, 0x1}, {0x100, 0x4c}, {0x3ff, 0x8000}, {0xa42, 0x7fffffff}, {0xffffff81, 0x8001}], 0xee, 0x0, 0x3, 0x1, 0x2}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x3, @pix_mp={0x9, 0x3, 0x31303553, 0x4, 0xa, [{0x8, 0x4}, {0x3fb, 0x5}, {0x5, 0x1}, {0x953}, {0x101, 0x7f}, {0x1, 0x3f}, {0x1, 0x7fff}, {0x10001, 0x6}], 0x54, 0x0, 0x6, 0x1, 0x1}}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x4, 0x2) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000040)=@fd={0x4, 0x1, 0x4, 0x100, 0x40, {0x77359400}, {0x1, 0x2, 0x3, 0xc6, 0xb9, 0x1f, "977ed253"}, 0x5, 0x4, {}, 0x7}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000280)={0x1, @pix_mp={0x1ff, 0x9, 0x35315258, 0x1, 0x5, [{0x0, 0x3}, {0x8001}, {0x7, 0x9bda}, {0x3, 0x1}, {0x100, 0x4c}, {0x3ff, 0x8000}, {0xa42, 0x7fffffff}, {0xffffff81, 0x8001}], 0xee, 0x0, 0x3, 0x1, 0x2}}) (async) 23:36:15 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)=@fd={0xffffffff, 0x2, 0x4, 0x10000, 0x8, {r1, r2/1000+10000}, {0x1, 0x0, 0x5, 0x9, 0x5, 0xe3, "6f0f60d3"}, 0xffff, 0x4, {}, 0x8, 0x0, r3}) 23:36:15 executing program 3: socketpair(0x23, 0xa3, 0x7fffffff, &(0x7f0000000100)) 23:36:15 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000001c0)) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async, rerun: 64) connect$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0x2, @multicast1}}, 0x1e) (rerun: 64) accept4$tipc(r1, &(0x7f0000000180)=@id, &(0x7f00000000c0)=0x10, 0x80000) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc100565c, &(0x7f0000000040)={0x1, 0x0, 0x0, "475d00512bd00600c53e83bc4ee5592a1000000022000000000000e000"}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 23:36:15 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220200000000000000001de0"}) 23:36:15 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) (async) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)=@fd={0xffffffff, 0x2, 0x4, 0x10000, 0x8, {r1, r2/1000+10000}, {0x1, 0x0, 0x5, 0x9, 0x5, 0xe3, "6f0f60d3"}, 0xffff, 0x4, {}, 0x8, 0x0, r3}) 23:36:15 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000180)={0x60b5, 0x30314247, 0x1, @stepwise={0x8, 0x2, 0x4, 0x53, 0xffff, 0xffffff49}}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x715242, 0x0) ioctl$PTP_EXTTS_REQUEST(r1, 0x40103d02, &(0x7f00000000c0)={0x7fffffff, 0x9}) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) 23:36:15 executing program 3: socketpair(0x23, 0xa4, 0x7fffffff, &(0x7f0000000100)) 23:36:15 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000040)=""/184) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000180)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000000)={0xfeff8001, "322fcd5397c5be1b40709be4ea067038ca89be26b9df103a1b1aebd6fadd9a43", 0x2, 0x1}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d3fe11ed59bb805dfd0f1c62f7200c50000220000000000000000001de000"}) 23:36:15 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) (async) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) (async, rerun: 32) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)=@fd={0xffffffff, 0x2, 0x4, 0x10000, 0x8, {r1, r2/1000+10000}, {0x1, 0x0, 0x5, 0x9, 0x5, 0xe3, "6f0f60d3"}, 0xffff, 0x4, {}, 0x8, 0x0, r3}) (rerun: 32) 23:36:15 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000180)={0x60b5, 0x30314247, 0x1, @stepwise={0x8, 0x2, 0x4, 0x53, 0xffff, 0xffffff49}}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x715242, 0x0) ioctl$PTP_EXTTS_REQUEST(r1, 0x40103d02, &(0x7f00000000c0)={0x7fffffff, 0x9}) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) 23:36:15 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)=@multiplanar_mmap={0xda8, 0x0, 0x4, 0x0, 0x10001, {r3, r4/1000+10000}, {0x5, 0x1, 0x3, 0x40, 0x0, 0x20, "31981d5c"}, 0x0, 0x1, {&(0x7f00000000c0)=[{0x898a, 0xf5da, {}, 0x401}, {0x2, 0x7, {0xc0}, 0x401}]}, 0xfffffff8}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0x5, 0x1, 0x1, {0x2, @vbi={0xde6, 0x9, 0x6, 0x33524742, [0xffff, 0x3], [0x81, 0x7fffffff], 0x2}}, 0x6}) 23:36:15 executing program 3: socketpair(0x23, 0xa5, 0x7fffffff, &(0x7f0000000100)) 23:36:15 executing program 5: syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31324d4e, 0x0, @stepwise={0x0, 0x0, 0x1}}) clock_gettime(0x0, &(0x7f0000000040)) r1 = syz_open_dev$vim2m(&(0x7f0000000200), 0x4, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000100)=@multiplanar_mmap={0x9, 0x1, 0x4, 0x10, 0x6, {0x0, 0xea60}, {0x6, 0x1, 0x9, 0x63, 0xd2, 0x7, "2f930fcd"}, 0xf76, 0x1, {&(0x7f0000000080)=[{0x4, 0x7fff, {0x8000}, 0x8}, {0x2, 0x1, {0x802}, 0x1000}]}}) 23:36:15 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000040)=""/184) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000180)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000000)={0xfeff8001, "322fcd5397c5be1b40709be4ea067038ca89be26b9df103a1b1aebd6fadd9a43", 0x2, 0x1}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d3fe11ed59bb805dfd0f1c62f7200c50000220000000000000000001de000"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000040)=""/184) (async) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000180)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000000)={0xfeff8001, "322fcd5397c5be1b40709be4ea067038ca89be26b9df103a1b1aebd6fadd9a43", 0x2, 0x1}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d3fe11ed59bb805dfd0f1c62f7200c50000220000000000000000001de000"}) (async) 23:36:15 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)=@multiplanar_mmap={0xda8, 0x0, 0x4, 0x0, 0x10001, {r3, r4/1000+10000}, {0x5, 0x1, 0x3, 0x40, 0x0, 0x20, "31981d5c"}, 0x0, 0x1, {&(0x7f00000000c0)=[{0x898a, 0xf5da, {}, 0x401}, {0x2, 0x7, {0xc0}, 0x401}]}, 0xfffffff8}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0x5, 0x1, 0x1, {0x2, @vbi={0xde6, 0x9, 0x6, 0x33524742, [0xffff, 0x3], [0x81, 0x7fffffff], 0x2}}, 0x6}) 23:36:15 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000180)={0x60b5, 0x30314247, 0x1, @stepwise={0x8, 0x2, 0x4, 0x53, 0xffff, 0xffffff49}}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x715242, 0x0) ioctl$PTP_EXTTS_REQUEST(r1, 0x40103d02, &(0x7f00000000c0)={0x7fffffff, 0x9}) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000180)={0x60b5, 0x30314247, 0x1, @stepwise={0x8, 0x2, 0x4, 0x53, 0xffff, 0xffffff49}}) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x715242, 0x0) (async) ioctl$PTP_EXTTS_REQUEST(r1, 0x40103d02, &(0x7f00000000c0)={0x7fffffff, 0x9}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) (async) 23:36:15 executing program 3: socketpair(0x23, 0xa6, 0x7fffffff, &(0x7f0000000100)) 23:36:15 executing program 5: syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31324d4e, 0x0, @stepwise={0x0, 0x0, 0x1}}) clock_gettime(0x0, &(0x7f0000000040)) r1 = syz_open_dev$vim2m(&(0x7f0000000200), 0x4, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000100)=@multiplanar_mmap={0x9, 0x1, 0x4, 0x10, 0x6, {0x0, 0xea60}, {0x6, 0x1, 0x9, 0x63, 0xd2, 0x7, "2f930fcd"}, 0xf76, 0x1, {&(0x7f0000000080)=[{0x4, 0x7fff, {0x8000}, 0x8}, {0x2, 0x1, {0x802}, 0x1000}]}}) 23:36:15 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x40) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB='Y\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0xc) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000001c0)={r3, @in6={{0xa, 0x4e22, 0x1, @loopback, 0x2}}, 0xfff, 0x80}, 0x90) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r2}, 0x8) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0xc) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x19e, 0x7}) 23:36:15 executing program 3: socketpair(0x23, 0xa7, 0x7fffffff, &(0x7f0000000100)) 23:36:15 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000040)=""/184) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000180)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000000)={0xfeff8001, "322fcd5397c5be1b40709be4ea067038ca89be26b9df103a1b1aebd6fadd9a43", 0x2, 0x1}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d3fe11ed59bb805dfd0f1c62f7200c50000220000000000000000001de000"}) 23:36:15 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)=@multiplanar_mmap={0xda8, 0x0, 0x4, 0x0, 0x10001, {r3, r4/1000+10000}, {0x5, 0x1, 0x3, 0x40, 0x0, 0x20, "31981d5c"}, 0x0, 0x1, {&(0x7f00000000c0)=[{0x898a, 0xf5da, {}, 0x401}, {0x2, 0x7, {0xc0}, 0x401}]}, 0xfffffff8}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0x5, 0x1, 0x1, {0x2, @vbi={0xde6, 0x9, 0x6, 0x33524742, [0xffff, 0x3], [0x81, 0x7fffffff], 0x2}}, 0x6}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) clock_gettime(0x0, &(0x7f0000000080)) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)=@multiplanar_mmap={0xda8, 0x0, 0x4, 0x0, 0x10001, {r3, r4/1000+10000}, {0x5, 0x1, 0x3, 0x40, 0x0, 0x20, "31981d5c"}, 0x0, 0x1, {&(0x7f00000000c0)=[{0x898a, 0xf5da, {}, 0x401}, {0x2, 0x7, {0xc0}, 0x401}]}, 0xfffffff8}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0x5, 0x1, 0x1, {0x2, @vbi={0xde6, 0x9, 0x6, 0x33524742, [0xffff, 0x3], [0x81, 0x7fffffff], 0x2}}, 0x6}) (async) 23:36:16 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x40) (async, rerun: 32) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB='Y\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0xc) (async, rerun: 32) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000001c0)={r3, @in6={{0xa, 0x4e22, 0x1, @loopback, 0x2}}, 0xfff, 0x80}, 0x90) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r2}, 0x8) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0xc) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x19e, 0x7}) 23:36:16 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000000)=@mmap={0x7, 0x2, 0x4, 0x4000, 0x2ce, {0x77359400}, {0x1, 0x2, 0x40, 0x7f, 0x4, 0xff, "e78ab98c"}, 0x7fff, 0x1, {}, 0x9}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:16 executing program 5: syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31324d4e, 0x0, @stepwise={0x0, 0x0, 0x1}}) clock_gettime(0x0, &(0x7f0000000040)) r1 = syz_open_dev$vim2m(&(0x7f0000000200), 0x4, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000100)=@multiplanar_mmap={0x9, 0x1, 0x4, 0x10, 0x6, {0x0, 0xea60}, {0x6, 0x1, 0x9, 0x63, 0xd2, 0x7, "2f930fcd"}, 0xf76, 0x1, {&(0x7f0000000080)=[{0x4, 0x7fff, {0x8000}, 0x8}, {0x2, 0x1, {0x802}, 0x1000}]}}) 23:36:16 executing program 3: socketpair(0x23, 0xa8, 0x7fffffff, &(0x7f0000000100)) 23:36:16 executing program 5: syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31324d4e, 0x0, @stepwise={0x0, 0x0, 0x1}}) clock_gettime(0x0, &(0x7f0000000040)) syz_open_dev$vim2m(&(0x7f0000000200), 0x4, 0x2) 23:36:16 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:16 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x44080, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) bind$tipc(r0, 0x0, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc100565c, &(0x7f0000000140)={0x4, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x38415262}) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080)) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000180)=0x20) 23:36:16 executing program 3: socketpair(0x23, 0xa9, 0x7fffffff, &(0x7f0000000100)) 23:36:16 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000000)=@mmap={0x7, 0x2, 0x4, 0x4000, 0x2ce, {0x77359400}, {0x1, 0x2, 0x40, 0x7f, 0x4, 0xff, "e78ab98c"}, 0x7fff, 0x1, {}, 0x9}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000000)=@mmap={0x7, 0x2, 0x4, 0x4000, 0x2ce, {0x77359400}, {0x1, 0x2, 0x40, 0x7f, 0x4, 0xff, "e78ab98c"}, 0x7fff, 0x1, {}, 0x9}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:36:16 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:36:16 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async, rerun: 64) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x40) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB='Y\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0xc) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000001c0)={r3, @in6={{0xa, 0x4e22, 0x1, @loopback, 0x2}}, 0xfff, 0x80}, 0x90) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r2}, 0x8) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0xc) (async, rerun: 32) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x19e, 0x7}) (rerun: 32) 23:36:16 executing program 5: syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31324d4e, 0x0, @stepwise={0x0, 0x0, 0x1}}) clock_gettime(0x0, &(0x7f0000000040)) 23:36:16 executing program 3: socketpair(0x23, 0xaa, 0x7fffffff, &(0x7f0000000100)) 23:36:16 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x44080, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) bind$tipc(r0, 0x0, 0x0) (async, rerun: 64) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (rerun: 64) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc100565c, &(0x7f0000000140)={0x4, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x38415262}) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) (async, rerun: 32) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080)) (async, rerun: 32) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000180)=0x20) 23:36:16 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async, rerun: 64) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async, rerun: 64) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000000)=@mmap={0x7, 0x2, 0x4, 0x4000, 0x2ce, {0x77359400}, {0x1, 0x2, 0x40, 0x7f, 0x4, 0xff, "e78ab98c"}, 0x7fff, 0x1, {}, 0x9}) (async, rerun: 64) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:16 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:36:16 executing program 3: socketpair(0x23, 0xab, 0x7fffffff, &(0x7f0000000100)) 23:36:16 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:36:16 executing program 5: syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31324d4e, 0x0, @stepwise={0x0, 0x0, 0x1}}) 23:36:16 executing program 3: socketpair(0x23, 0xac, 0x7fffffff, &(0x7f0000000100)) 23:36:16 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @sliced={0x30, [0x401, 0xffff, 0x7ff, 0x0, 0x200, 0x2953, 0x3bb6, 0x3f, 0x101, 0x0, 0xfffb, 0x6, 0x6, 0x81, 0x5db1, 0x3, 0x7, 0x2f6, 0xfffe, 0x7, 0x0, 0x1, 0xffff, 0x7fff, 0x8df, 0xa26, 0x5, 0x0, 0x5, 0x1, 0x6, 0x4, 0x1, 0x39, 0xfffd, 0x9, 0x6, 0x0, 0x3, 0x7, 0x401, 0xac2, 0x0, 0x3, 0x9dc, 0x8, 0x8000, 0x80], 0x6}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:16 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) 23:36:16 executing program 5: syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31324d4e, 0x0, @stepwise={0x0, 0x0, 0x1}}) 23:36:16 executing program 3: socketpair(0x23, 0xad, 0x7fffffff, &(0x7f0000000100)) 23:36:16 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x44080, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) bind$tipc(r0, 0x0, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc100565c, &(0x7f0000000140)={0x4, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x38415262}) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080)) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000180)=0x20) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x44080, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) bind$tipc(r0, 0x0, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc100565c, &(0x7f0000000140)={0x4, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x38415262}) (async) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080)) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000180)=0x20) (async) 23:36:16 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @sliced={0x30, [0x401, 0xffff, 0x7ff, 0x0, 0x200, 0x2953, 0x3bb6, 0x3f, 0x101, 0x0, 0xfffb, 0x6, 0x6, 0x81, 0x5db1, 0x3, 0x7, 0x2f6, 0xfffe, 0x7, 0x0, 0x1, 0xffff, 0x7fff, 0x8df, 0xa26, 0x5, 0x0, 0x5, 0x1, 0x6, 0x4, 0x1, 0x39, 0xfffd, 0x9, 0x6, 0x0, 0x3, 0x7, 0x401, 0xac2, 0x0, 0x3, 0x9dc, 0x8, 0x8000, 0x80], 0x6}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:16 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x0, 0x8}) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0xfb2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x5, 0x3, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:16 executing program 5: syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31324d4e, 0x0, @stepwise={0x0, 0x0, 0x1}}) 23:36:16 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) 23:36:16 executing program 3: socketpair(0x23, 0xae, 0x7fffffff, &(0x7f0000000100)) 23:36:16 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @sliced={0x30, [0x401, 0xffff, 0x7ff, 0x0, 0x200, 0x2953, 0x3bb6, 0x3f, 0x101, 0x0, 0xfffb, 0x6, 0x6, 0x81, 0x5db1, 0x3, 0x7, 0x2f6, 0xfffe, 0x7, 0x0, 0x1, 0xffff, 0x7fff, 0x8df, 0xa26, 0x5, 0x0, 0x5, 0x1, 0x6, 0x4, 0x1, 0x39, 0xfffd, 0x9, 0x6, 0x0, 0x3, 0x7, 0x401, 0xac2, 0x0, 0x3, 0x9dc, 0x8, 0x8000, 0x80], 0x6}}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:16 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0x2, 0x3, 0x1, {0x2, @pix={0xc0e, 0x100, 0x2036315a, 0x8, 0x401, 0x8001, 0x6, 0x6f, 0x1, 0x1, 0x2, 0x7}}, 0x7}) 23:36:16 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) syz_open_dev$vim2m(&(0x7f0000000040), 0x3ff, 0x2) 23:36:16 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x0, 0x8}) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0xfb2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x5, 0x3, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x0, 0x8}) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0xfb2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x5, 0x3, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:36:16 executing program 5: syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31324d4e, 0x0, @stepwise={0x0, 0x0, 0x1}}) 23:36:16 executing program 0: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f72000000002200000000ffff0000001de0"}) 23:36:16 executing program 3: socketpair(0x23, 0xaf, 0x7fffffff, &(0x7f0000000100)) 23:36:16 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) syz_open_dev$vim2m(&(0x7f0000000040), 0x3ff, 0x2) 23:36:16 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0x2, 0x3, 0x1, {0x2, @pix={0xc0e, 0x100, 0x2036315a, 0x8, 0x401, 0x8001, 0x6, 0x6f, 0x1, 0x1, 0x2, 0x7}}, 0x7}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0x2, 0x3, 0x1, {0x2, @pix={0xc0e, 0x100, 0x2036315a, 0x8, 0x401, 0x8001, 0x6, 0x6f, 0x1, 0x1, 0x2, 0x7}}, 0x7}) (async) 23:36:16 executing program 0: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f72000000002200000000ffff0000001de0"}) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f72000000002200000000ffff0000001de0"}) (async) 23:36:16 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31324d4e, 0x0, @stepwise={0x0, 0x0, 0x1}}) 23:36:16 executing program 3: socketpair(0x23, 0xb0, 0x7fffffff, &(0x7f0000000100)) 23:36:16 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) syz_open_dev$vim2m(&(0x7f0000000040), 0x3ff, 0x2) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) syz_open_dev$vim2m(&(0x7f0000000040), 0x3ff, 0x2) (async) 23:36:16 executing program 5: r0 = syz_open_dev$vim2m(0x0, 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31324d4e, 0x0, @stepwise={0x0, 0x0, 0x1}}) 23:36:16 executing program 0: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f72000000002200000000ffff0000001de0"}) 23:36:16 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x0, 0x8}) (async, rerun: 64) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0xfb2) (rerun: 64) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x5, 0x3, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:16 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0x2, 0x3, 0x1, {0x2, @pix={0xc0e, 0x100, 0x2036315a, 0x8, 0x401, 0x8001, 0x6, 0x6f, 0x1, 0x1, 0x2, 0x7}}, 0x7}) 23:36:16 executing program 4: syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x3231564e, 0x0, @stepwise={0xffffffff}}) 23:36:16 executing program 5: r0 = syz_open_dev$vim2m(0x0, 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31324d4e, 0x0, @stepwise={0x0, 0x0, 0x1}}) 23:36:16 executing program 3: socketpair(0x23, 0xb1, 0x7fffffff, &(0x7f0000000100)) 23:36:16 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x1, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x32344d59}) 23:36:16 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x35a, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000180)={0x2, @sdr={0x31364d59, 0x1}}) 23:36:16 executing program 4: syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x3231564e, 0x0, @stepwise={0xffffffff}}) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x3231564e, 0x0, @stepwise={0xffffffff}}) (async) 23:36:16 executing program 3: socketpair(0x23, 0xb2, 0x7fffffff, &(0x7f0000000100)) 23:36:16 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d0037e11ed59bb805dfd0f1c62f72000000102200f6ffffffffffffff1de0"}) 23:36:16 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x1, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x32344d59}) 23:36:16 executing program 5: r0 = syz_open_dev$vim2m(0x0, 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31324d4e, 0x0, @stepwise={0x0, 0x0, 0x1}}) 23:36:16 executing program 4: syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x3231564e, 0x0, @stepwise={0xffffffff}}) 23:36:16 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x35a, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000180)={0x2, @sdr={0x31364d59, 0x1}}) 23:36:16 executing program 3: socketpair(0x23, 0xb3, 0x7fffffff, &(0x7f0000000100)) 23:36:16 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d0037e11ed59bb805dfd0f1c62f72000000102200f6ffffffffffffff1de0"}) 23:36:16 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31324d4e, 0x0, @stepwise={0x0, 0x0, 0x1}}) 23:36:16 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x35a, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000180)={0x2, @sdr={0x31364d59, 0x1}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x35a, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000180)={0x2, @sdr={0x31364d59, 0x1}}) (async) 23:36:16 executing program 3: socketpair(0x23, 0xb4, 0x7fffffff, &(0x7f0000000100)) 23:36:17 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x1, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x32344d59}) 23:36:17 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x80, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x0, 0x3fe}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000000)={0x0, 0x34325241, 0x0, @discrete={0x9, 0x4}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000100)={0x9, 0x8, 0x2, {0x2, @sliced={0x100, [0x9, 0x2, 0x8, 0x1, 0x7f, 0x2, 0x1f, 0x34, 0x2, 0x0, 0x8, 0x20, 0x100, 0x6aa, 0x7ae5, 0x2, 0x9, 0x1f, 0x1, 0x8, 0x1, 0x9, 0x1fd, 0x3f, 0x56, 0x6, 0x50, 0x8, 0x7, 0x400, 0x548e, 0x1, 0x4b8, 0x40, 0x200, 0x2, 0x56, 0xecba, 0x6, 0xff, 0x3, 0xffff, 0xf000, 0xf000, 0x8, 0x6, 0x10b, 0x3f], 0x9b27}}, 0x7}) 23:36:17 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d0037e11ed59bb805dfd0f1c62f72000000102200f6ffffffffffffff1de0"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d0037e11ed59bb805dfd0f1c62f72000000102200f6ffffffffffffff1de0"}) (async) 23:36:17 executing program 3: socketpair(0x23, 0xb5, 0x7fffffff, &(0x7f0000000100)) 23:36:17 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31324d4e, 0x0, @stepwise={0x0, 0x0, 0x1}}) 23:36:17 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x80, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x0, 0x3fe}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000000)={0x0, 0x34325241, 0x0, @discrete={0x9, 0x4}}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000100)={0x9, 0x8, 0x2, {0x2, @sliced={0x100, [0x9, 0x2, 0x8, 0x1, 0x7f, 0x2, 0x1f, 0x34, 0x2, 0x0, 0x8, 0x20, 0x100, 0x6aa, 0x7ae5, 0x2, 0x9, 0x1f, 0x1, 0x8, 0x1, 0x9, 0x1fd, 0x3f, 0x56, 0x6, 0x50, 0x8, 0x7, 0x400, 0x548e, 0x1, 0x4b8, 0x40, 0x200, 0x2, 0x56, 0xecba, 0x6, 0xff, 0x3, 0xffff, 0xf000, 0xf000, 0x8, 0x6, 0x10b, 0x3f], 0x9b27}}, 0x7}) 23:36:17 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f0000000000)={0x7, "11c3569e6a248f8f60540b1a21b09f29ac80f1468b89cc37bcc1eb3b10278e5f", 0x1}) 23:36:17 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@mmap={0x44b, 0x2, 0x4, 0x0, 0xfffffffc, {r1, r2/1000+10000}, {0x1, 0xc, 0x40, 0x5, 0x80, 0x80}, 0x3, 0x1, {}, 0x2, 0x0, r3}) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000180)={0x9, 0x5, 0x3, {0x1, @win={{0x1, 0x8001, 0x6, 0x8001}, 0x8, 0x768, &(0x7f0000000000)={{0x0, 0x81, 0x0, 0xfffffff9}}, 0x20, &(0x7f0000000040)="0558", 0x2}}, 0xffffff80}) 23:36:17 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000040)=@userptr={0x40, 0x3, 0x4, 0x10000, 0x2, {0x77359400}, {0x2, 0x2, 0x9, 0x9, 0x0, 0xfb, "43c2d224"}, 0x6, 0x2, {}, 0xffffff80}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:17 executing program 3: socketpair(0x23, 0xb6, 0x7fffffff, &(0x7f0000000100)) 23:36:17 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31324d4e, 0x0, @stepwise={0x0, 0x0, 0x1}}) 23:36:17 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x80, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x0, 0x3fe}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000000)={0x0, 0x34325241, 0x0, @discrete={0x9, 0x4}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000100)={0x9, 0x8, 0x2, {0x2, @sliced={0x100, [0x9, 0x2, 0x8, 0x1, 0x7f, 0x2, 0x1f, 0x34, 0x2, 0x0, 0x8, 0x20, 0x100, 0x6aa, 0x7ae5, 0x2, 0x9, 0x1f, 0x1, 0x8, 0x1, 0x9, 0x1fd, 0x3f, 0x56, 0x6, 0x50, 0x8, 0x7, 0x400, 0x548e, 0x1, 0x4b8, 0x40, 0x200, 0x2, 0x56, 0xecba, 0x6, 0xff, 0x3, 0xffff, 0xf000, 0xf000, 0x8, 0x6, 0x10b, 0x3f], 0x9b27}}, 0x7}) syz_open_dev$vim2m(&(0x7f0000000080), 0x80, 0x2) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x0, 0x3fe}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000000)={0x0, 0x34325241, 0x0, @discrete={0x9, 0x4}}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000100)={0x9, 0x8, 0x2, {0x2, @sliced={0x100, [0x9, 0x2, 0x8, 0x1, 0x7f, 0x2, 0x1f, 0x34, 0x2, 0x0, 0x8, 0x20, 0x100, 0x6aa, 0x7ae5, 0x2, 0x9, 0x1f, 0x1, 0x8, 0x1, 0x9, 0x1fd, 0x3f, 0x56, 0x6, 0x50, 0x8, 0x7, 0x400, 0x548e, 0x1, 0x4b8, 0x40, 0x200, 0x2, 0x56, 0xecba, 0x6, 0xff, 0x3, 0xffff, 0xf000, 0xf000, 0x8, 0x6, 0x10b, 0x3f], 0x9b27}}, 0x7}) (async) 23:36:17 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000040)=@userptr={0x40, 0x3, 0x4, 0x10000, 0x2, {0x77359400}, {0x2, 0x2, 0x9, 0x9, 0x0, 0xfb, "43c2d224"}, 0x6, 0x2, {}, 0xffffff80}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:17 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f0000000000)={0x7, "11c3569e6a248f8f60540b1a21b09f29ac80f1468b89cc37bcc1eb3b10278e5f", 0x1}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f0000000000)={0x7, "11c3569e6a248f8f60540b1a21b09f29ac80f1468b89cc37bcc1eb3b10278e5f", 0x1}) (async) 23:36:17 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) (async) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@mmap={0x44b, 0x2, 0x4, 0x0, 0xfffffffc, {r1, r2/1000+10000}, {0x1, 0xc, 0x40, 0x5, 0x80, 0x80}, 0x3, 0x1, {}, 0x2, 0x0, r3}) (async) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000180)={0x9, 0x5, 0x3, {0x1, @win={{0x1, 0x8001, 0x6, 0x8001}, 0x8, 0x768, &(0x7f0000000000)={{0x0, 0x81, 0x0, 0xfffffff9}}, 0x20, &(0x7f0000000040)="0558", 0x2}}, 0xffffff80}) 23:36:17 executing program 3: socketpair(0x23, 0xb7, 0x7fffffff, &(0x7f0000000100)) 23:36:17 executing program 5: syz_open_dev$vim2m(&(0x7f00000001c0), 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31324d4e, 0x0, @stepwise={0x0, 0x0, 0x1}}) 23:36:17 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f0000000000)={0x7, "11c3569e6a248f8f60540b1a21b09f29ac80f1468b89cc37bcc1eb3b10278e5f", 0x1}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f0000000000)={0x7, "11c3569e6a248f8f60540b1a21b09f29ac80f1468b89cc37bcc1eb3b10278e5f", 0x1}) (async) 23:36:17 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x0, @sliced={0x1, [0xff, 0x9, 0x0, 0x8, 0xffee, 0x1, 0x8, 0x2, 0x80, 0x7ff, 0x4, 0x0, 0x6, 0xfff, 0x9, 0x5, 0x3, 0x5, 0x4, 0x9, 0x100, 0x80, 0x5, 0x1ff, 0x5, 0x0, 0x5, 0x4, 0x400, 0x2, 0x4, 0xa6a, 0x1f, 0x3, 0x4, 0x3, 0x1, 0xc35, 0x200, 0x580a, 0x0, 0x45e, 0x1, 0x7, 0x0, 0x5e3, 0x6, 0x5], 0x8}}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:36:17 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@mmap={0x44b, 0x2, 0x4, 0x0, 0xfffffffc, {r1, r2/1000+10000}, {0x1, 0xc, 0x40, 0x5, 0x80, 0x80}, 0x3, 0x1, {}, 0x2, 0x0, r3}) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000180)={0x9, 0x5, 0x3, {0x1, @win={{0x1, 0x8001, 0x6, 0x8001}, 0x8, 0x768, &(0x7f0000000000)={{0x0, 0x81, 0x0, 0xfffffff9}}, 0x20, &(0x7f0000000040)="0558", 0x2}}, 0xffffff80}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) clock_gettime(0x0, &(0x7f0000000080)) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@mmap={0x44b, 0x2, 0x4, 0x0, 0xfffffffc, {r1, r2/1000+10000}, {0x1, 0xc, 0x40, 0x5, 0x80, 0x80}, 0x3, 0x1, {}, 0x2, 0x0, r3}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000180)={0x9, 0x5, 0x3, {0x1, @win={{0x1, 0x8001, 0x6, 0x8001}, 0x8, 0x768, &(0x7f0000000000)={{0x0, 0x81, 0x0, 0xfffffff9}}, 0x20, &(0x7f0000000040)="0558", 0x2}}, 0xffffff80}) (async) 23:36:17 executing program 3: socketpair(0x23, 0xb8, 0x7fffffff, &(0x7f0000000100)) 23:36:17 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async, rerun: 64) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000040)=@userptr={0x40, 0x3, 0x4, 0x10000, 0x2, {0x77359400}, {0x2, 0x2, 0x9, 0x9, 0x0, 0xfb, "43c2d224"}, 0x6, 0x2, {}, 0xffffff80}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:17 executing program 5: syz_open_dev$vim2m(&(0x7f00000001c0), 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31324d4e, 0x0, @stepwise={0x0, 0x0, 0x1}}) 23:36:17 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_S_TUNER(r1, 0x4054561e, &(0x7f0000000040)={0x458, "952887423776ba4dbd3c3a15139878a1125094c5b2955f89488f5750322884f6", 0x46083be1e2722c4, 0x1000, 0x3ff, 0xd1, 0x4, 0x1, 0x4, 0x1}) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x3, @pix_mp={0x0, 0xfffffffe, 0x32315559, 0x6, 0x3, [{0x8, 0x9}, {0x401, 0x20}, {0x401, 0x5e8b}, {0x537, 0x2}, {0x5, 0x55fa15b3}, {0x2}, {0x6, 0x5}, {0x80000001, 0x8000}], 0x0, 0x3, 0x3, 0x0, 0x1}}) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:17 executing program 3: socketpair(0x23, 0xb9, 0x7fffffff, &(0x7f0000000100)) 23:36:17 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x0, @sliced={0x1, [0xff, 0x9, 0x0, 0x8, 0xffee, 0x1, 0x8, 0x2, 0x80, 0x7ff, 0x4, 0x0, 0x6, 0xfff, 0x9, 0x5, 0x3, 0x5, 0x4, 0x9, 0x100, 0x80, 0x5, 0x1ff, 0x5, 0x0, 0x5, 0x4, 0x400, 0x2, 0x4, 0xa6a, 0x1f, 0x3, 0x4, 0x3, 0x1, 0xc35, 0x200, 0x580a, 0x0, 0x45e, 0x1, 0x7, 0x0, 0x5e3, 0x6, 0x5], 0x8}}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:36:17 executing program 5: syz_open_dev$vim2m(&(0x7f00000001c0), 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31324d4e, 0x0, @stepwise={0x0, 0x0, 0x1}}) 23:36:17 executing program 3: socketpair(0x23, 0xba, 0x7fffffff, &(0x7f0000000100)) 23:36:17 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x0, @sliced={0x1, [0xff, 0x9, 0x0, 0x8, 0xffee, 0x1, 0x8, 0x2, 0x80, 0x7ff, 0x4, 0x0, 0x6, 0xfff, 0x9, 0x5, 0x3, 0x5, 0x4, 0x9, 0x100, 0x80, 0x5, 0x1ff, 0x5, 0x0, 0x5, 0x4, 0x400, 0x2, 0x4, 0xa6a, 0x1f, 0x3, 0x4, 0x3, 0x1, 0xc35, 0x200, 0x580a, 0x0, 0x45e, 0x1, 0x7, 0x0, 0x5e3, 0x6, 0x5], 0x8}}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:36:17 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb815dfd0f1c22f7200000000410000005925001de000", 0x32314d4e}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r1, 0xc4c03d09, &(0x7f0000000180)={0x5}) 23:36:17 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0) 23:36:17 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_S_TUNER(r1, 0x4054561e, &(0x7f0000000040)={0x458, "952887423776ba4dbd3c3a15139878a1125094c5b2955f89488f5750322884f6", 0x46083be1e2722c4, 0x1000, 0x3ff, 0xd1, 0x4, 0x1, 0x4, 0x1}) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x3, @pix_mp={0x0, 0xfffffffe, 0x32315559, 0x6, 0x3, [{0x8, 0x9}, {0x401, 0x20}, {0x401, 0x5e8b}, {0x537, 0x2}, {0x5, 0x55fa15b3}, {0x2}, {0x6, 0x5}, {0x80000001, 0x8000}], 0x0, 0x3, 0x3, 0x0, 0x1}}) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$VIDIOC_S_TUNER(r1, 0x4054561e, &(0x7f0000000040)={0x458, "952887423776ba4dbd3c3a15139878a1125094c5b2955f89488f5750322884f6", 0x46083be1e2722c4, 0x1000, 0x3ff, 0xd1, 0x4, 0x1, 0x4, 0x1}) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x3, @pix_mp={0x0, 0xfffffffe, 0x32315559, 0x6, 0x3, [{0x8, 0x9}, {0x401, 0x20}, {0x401, 0x5e8b}, {0x537, 0x2}, {0x5, 0x55fa15b3}, {0x2}, {0x6, 0x5}, {0x80000001, 0x8000}], 0x0, 0x3, 0x3, 0x0, 0x1}}) (async) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:36:17 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, &(0x7f0000000000)={0x1ff, "f7ba5ea3a47ddc62b8b2a8e643853864bb5e85f487aee050f49cbdafd8d316df", 0x3, 0xe6, 0x9, 0x0, 0x8}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f00000000c0)={0xffff, 0x41416770, 0x3, @stepwise={0x20, 0x6, 0x5, 0x2, 0x5, 0x1}}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)=@overlay={0x62d7, 0x1, 0x4, 0x40, 0x292, {0x77359400}, {0x3, 0x0, 0x8, 0x20, 0x3, 0x8, "aa939c07"}, 0x9, 0x3, {}, 0x1, 0x0, r1}) 23:36:17 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:36:17 executing program 3: socketpair(0x23, 0xbb, 0x7fffffff, &(0x7f0000000100)) 23:36:17 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb815dfd0f1c22f7200000000410000005925001de000", 0x32314d4e}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r1, 0xc4c03d09, &(0x7f0000000180)={0x5}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb815dfd0f1c22f7200000000410000005925001de000", 0x32314d4e}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$PTP_SYS_OFFSET_EXTENDED(r1, 0xc4c03d09, &(0x7f0000000180)={0x5}) (async) 23:36:17 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0) 23:36:17 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, &(0x7f0000000000)={0x1ff, "f7ba5ea3a47ddc62b8b2a8e643853864bb5e85f487aee050f49cbdafd8d316df", 0x3, 0xe6, 0x9, 0x0, 0x8}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f00000000c0)={0xffff, 0x41416770, 0x3, @stepwise={0x20, 0x6, 0x5, 0x2, 0x5, 0x1}}) (async, rerun: 64) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)=@overlay={0x62d7, 0x1, 0x4, 0x40, 0x292, {0x77359400}, {0x3, 0x0, 0x8, 0x20, 0x3, 0x8, "aa939c07"}, 0x9, 0x3, {}, 0x1, 0x0, r1}) 23:36:17 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_S_TUNER(r1, 0x4054561e, &(0x7f0000000040)={0x458, "952887423776ba4dbd3c3a15139878a1125094c5b2955f89488f5750322884f6", 0x46083be1e2722c4, 0x1000, 0x3ff, 0xd1, 0x4, 0x1, 0x4, 0x1}) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x3, @pix_mp={0x0, 0xfffffffe, 0x32315559, 0x6, 0x3, [{0x8, 0x9}, {0x401, 0x20}, {0x401, 0x5e8b}, {0x537, 0x2}, {0x5, 0x55fa15b3}, {0x2}, {0x6, 0x5}, {0x80000001, 0x8000}], 0x0, 0x3, 0x3, 0x0, 0x1}}) (async) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:17 executing program 3: socketpair(0x23, 0xbc, 0x7fffffff, &(0x7f0000000100)) 23:36:17 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0) 23:36:17 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:36:17 executing program 3: socketpair(0x23, 0xbd, 0x7fffffff, &(0x7f0000000100)) 23:36:17 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb815dfd0f1c22f7200000000410000005925001de000", 0x32314d4e}) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async, rerun: 64) ioctl$PTP_SYS_OFFSET_EXTENDED(r1, 0xc4c03d09, &(0x7f0000000180)={0x5}) (rerun: 64) 23:36:17 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x9, 0x7}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x500780, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)=@overlay={0x7ff, 0xc, 0x4, 0x70028, 0x8, {0x0, 0xea60}, {0x5, 0xc, 0x7, 0x9, 0x83, 0xff, "d98824cf"}, 0xfc5, 0x3, {}, 0x3b, 0x0, r1}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000280)=@fd={0xf, 0x3, 0x4, 0x4, 0x6, {0x77359400}, {0x4, 0x1, 0x9, 0x9, 0x1, 0x0, "3fc0378e"}, 0x1, 0x4, {}, 0xbf, 0x0, r3}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2c6004, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r5, 0xc008ae05, &(0x7f0000000300)=""/218) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000200)=@fd={0x9, 0x2, 0x4, 0x100, 0x81, {0x0, 0xea60}, {0x4, 0x0, 0x57, 0x7, 0x0, 0x81, "b645a759"}, 0x7f, 0x4, {}, 0x7, 0x0, r4}) 23:36:17 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, &(0x7f0000000000)={0x1ff, "f7ba5ea3a47ddc62b8b2a8e643853864bb5e85f487aee050f49cbdafd8d316df", 0x3, 0xe6, 0x9, 0x0, 0x8}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f00000000c0)={0xffff, 0x41416770, 0x3, @stepwise={0x20, 0x6, 0x5, 0x2, 0x5, 0x1}}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)=@overlay={0x62d7, 0x1, 0x4, 0x40, 0x292, {0x77359400}, {0x3, 0x0, 0x8, 0x20, 0x3, 0x8, "aa939c07"}, 0x9, 0x3, {}, 0x1, 0x0, r1}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, &(0x7f0000000000)={0x1ff, "f7ba5ea3a47ddc62b8b2a8e643853864bb5e85f487aee050f49cbdafd8d316df", 0x3, 0xe6, 0x9, 0x0, 0x8}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f00000000c0)={0xffff, 0x41416770, 0x3, @stepwise={0x20, 0x6, 0x5, 0x2, 0x5, 0x1}}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)=@overlay={0x62d7, 0x1, 0x4, 0x40, 0x292, {0x77359400}, {0x3, 0x0, 0x8, 0x20, 0x3, 0x8, "aa939c07"}, 0x9, 0x3, {}, 0x1, 0x0, r1}) (async) 23:36:17 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:36:17 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x0, 0x0, @stepwise={0x0, 0x0, 0x1}}) 23:36:17 executing program 3: socketpair(0x23, 0xbe, 0x7fffffff, &(0x7f0000000100)) 23:36:17 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f0000000080)=0x4) 23:36:17 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x9, 0x7}) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x500780, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)=@overlay={0x7ff, 0xc, 0x4, 0x70028, 0x8, {0x0, 0xea60}, {0x5, 0xc, 0x7, 0x9, 0x83, 0xff, "d98824cf"}, 0xfc5, 0x3, {}, 0x3b, 0x0, r1}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000280)=@fd={0xf, 0x3, 0x4, 0x4, 0x6, {0x77359400}, {0x4, 0x1, 0x9, 0x9, 0x1, 0x0, "3fc0378e"}, 0x1, 0x4, {}, 0xbf, 0x0, r3}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2c6004, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r5, 0xc008ae05, &(0x7f0000000300)=""/218) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000200)=@fd={0x9, 0x2, 0x4, 0x100, 0x81, {0x0, 0xea60}, {0x4, 0x0, 0x57, 0x7, 0x0, 0x81, "b645a759"}, 0x7f, 0x4, {}, 0x7, 0x0, r4}) 23:36:17 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x6) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0xe) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000000)={0xfc, 0x50}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0xfffffffe, 0x3, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x34363248}) 23:36:17 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x0, 0x0, @stepwise={0x0, 0x0, 0x1}}) 23:36:17 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000080)=0x9) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x2, @vbi={0x20, 0x1, 0x5, 0x30314247, [0x40, 0x20000], [0x1, 0x1000], 0x108}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:17 executing program 3: socketpair(0x23, 0xbf, 0x7fffffff, &(0x7f0000000100)) 23:36:17 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f0000000080)=0x4) 23:36:17 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x0, 0x0, @stepwise={0x0, 0x0, 0x1}}) 23:36:17 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x9, 0x7}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x500780, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)=@overlay={0x7ff, 0xc, 0x4, 0x70028, 0x8, {0x0, 0xea60}, {0x5, 0xc, 0x7, 0x9, 0x83, 0xff, "d98824cf"}, 0xfc5, 0x3, {}, 0x3b, 0x0, r1}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000280)=@fd={0xf, 0x3, 0x4, 0x4, 0x6, {0x77359400}, {0x4, 0x1, 0x9, 0x9, 0x1, 0x0, "3fc0378e"}, 0x1, 0x4, {}, 0xbf, 0x0, r3}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2c6004, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r5, 0xc008ae05, &(0x7f0000000300)=""/218) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000200)=@fd={0x9, 0x2, 0x4, 0x100, 0x81, {0x0, 0xea60}, {0x4, 0x0, 0x57, 0x7, 0x0, 0x81, "b645a759"}, 0x7f, 0x4, {}, 0x7, 0x0, r4}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x9, 0x7}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x500780, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)=@overlay={0x7ff, 0xc, 0x4, 0x70028, 0x8, {0x0, 0xea60}, {0x5, 0xc, 0x7, 0x9, 0x83, 0xff, "d98824cf"}, 0xfc5, 0x3, {}, 0x3b, 0x0, r1}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000280)=@fd={0xf, 0x3, 0x4, 0x4, 0x6, {0x77359400}, {0x4, 0x1, 0x9, 0x9, 0x1, 0x0, "3fc0378e"}, 0x1, 0x4, {}, 0xbf, 0x0, r3}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2c6004, 0x0) (async) ioctl$KVM_GET_SUPPORTED_CPUID(r5, 0xc008ae05, &(0x7f0000000300)=""/218) (async) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000200)=@fd={0x9, 0x2, 0x4, 0x100, 0x81, {0x0, 0xea60}, {0x4, 0x0, 0x57, 0x7, 0x0, 0x81, "b645a759"}, 0x7f, 0x4, {}, 0x7, 0x0, r4}) (async) 23:36:17 executing program 3: socketpair(0x23, 0xc0, 0x7fffffff, &(0x7f0000000100)) 23:36:17 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000080)=0x9) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x2, @vbi={0x20, 0x1, 0x5, 0x30314247, [0x40, 0x20000], [0x1, 0x1000], 0x108}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000080)=0x9) (async) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x2, @vbi={0x20, 0x1, 0x5, 0x30314247, [0x40, 0x20000], [0x1, 0x1000], 0x108}}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:36:17 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x6) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0xe) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000000)={0xfc, 0x50}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0xfffffffe, 0x3, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x34363248}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x6) (async) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0xe) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000000)={0xfc, 0x50}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0xfffffffe, 0x3, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x34363248}) (async) 23:36:18 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f0000000080)=0x4) 23:36:18 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31324d4e, 0x0, @stepwise}) 23:36:18 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000080)=0x9) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x2, @vbi={0x20, 0x1, 0x5, 0x30314247, [0x40, 0x20000], [0x1, 0x1000], 0x108}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000080)=0x9) (async) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x2, @vbi={0x20, 0x1, 0x5, 0x30314247, [0x40, 0x20000], [0x1, 0x1000], 0x108}}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:36:18 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405608, &(0x7f0000000140)={0x800001, 0x2, 0x0, "3f5d003fe10200050005dfd0f1e22f72fd4c2179060000000000000000001de0", 0x34325258}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x3ff, 0x2, 0x4, 0x0, 0x81}) openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 23:36:18 executing program 4: syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000140)={0x2, 0x494e4f4b, 0x1, @discrete={0x1d0c, 0x2003f}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280), 0x220002, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0), 0x248100, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000380), 0x125100, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000003c0)=@multiplanar_fd={0xc58, 0x1, 0x4, 0x4, 0x5, {}, {0x2, 0x1, 0x1, 0x8, 0x7f, 0x2, "26de9698"}, 0x7, 0x4, {&(0x7f0000000300)=[{0x5, 0xcbb, {r3}}, {0x45, 0xffffff80, {r1}, 0x7205a400}]}, 0x80, 0x0, r4}) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x0) getsockname$tipc(r6, &(0x7f0000000040), &(0x7f00000004c0)=0x10) r7 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000100)={0x1b, 0x41b}) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x0) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x0) ioctl$vim2m_VIDIOC_QBUF(r8, 0xc058560f, &(0x7f0000000440)=@overlay={0x3, 0x1, 0x4, 0x2, 0x2, {0x77359400}, {0x4, 0xc, 0x7f, 0x4, 0x20, 0x2, "f14dca07"}, 0x3, 0x3, {}, 0x3, 0x0, r9}) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000200), &(0x7f0000000240)=0x4) r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r10, 0xae03, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000500)=@raw=[@jmp={0x5, 0x1, 0x8, 0xa, 0x9, 0x80, 0x10}, @ldst={0x1, 0x0, 0x1, 0x6, 0x3, 0x6, 0xffffffffffffffe4}, @generic={0x7, 0x9, 0x0, 0x0, 0x3}, @jmp={0x5, 0x1, 0xa, 0x8, 0x6, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x4, 0x4, 0x1, 0x18, 0x1}], &(0x7f0000000540)='syzkaller\x00', 0x1f, 0x1b, &(0x7f0000000580)=""/27, 0xc2d00, 0xc, '\x00', 0x0, 0x1b, r1, 0x8, &(0x7f00000005c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000600)={0x0, 0x3, 0x3, 0x9}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)=[r10]}, 0x80) 23:36:18 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x35a, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000180)={0x2, @sdr={0x31364d59, 0x1}}) 23:36:18 executing program 3: socketpair(0x23, 0xc1, 0x7fffffff, &(0x7f0000000100)) 23:36:18 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x6) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0xe) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000000)={0xfc, 0x50}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0xfffffffe, 0x3, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x34363248}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x6) (async) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0xe) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000000)={0xfc, 0x50}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0xfffffffe, 0x3, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x34363248}) (async) 23:36:18 executing program 4: syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000140)={0x2, 0x494e4f4b, 0x1, @discrete={0x1d0c, 0x2003f}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280), 0x220002, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0), 0x248100, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000380), 0x125100, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000003c0)=@multiplanar_fd={0xc58, 0x1, 0x4, 0x4, 0x5, {}, {0x2, 0x1, 0x1, 0x8, 0x7f, 0x2, "26de9698"}, 0x7, 0x4, {&(0x7f0000000300)=[{0x5, 0xcbb, {r3}}, {0x45, 0xffffff80, {r1}, 0x7205a400}]}, 0x80, 0x0, r4}) (async) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) (async) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x0) getsockname$tipc(r6, &(0x7f0000000040), &(0x7f00000004c0)=0x10) r7 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000100)={0x1b, 0x41b}) (async) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x0) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r8, 0xc058560f, &(0x7f0000000440)=@overlay={0x3, 0x1, 0x4, 0x2, 0x2, {0x77359400}, {0x4, 0xc, 0x7f, 0x4, 0x20, 0x2, "f14dca07"}, 0x3, 0x3, {}, 0x3, 0x0, r9}) (async) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000200), &(0x7f0000000240)=0x4) (async) r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r10, 0xae03, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000500)=@raw=[@jmp={0x5, 0x1, 0x8, 0xa, 0x9, 0x80, 0x10}, @ldst={0x1, 0x0, 0x1, 0x6, 0x3, 0x6, 0xffffffffffffffe4}, @generic={0x7, 0x9, 0x0, 0x0, 0x3}, @jmp={0x5, 0x1, 0xa, 0x8, 0x6, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x4, 0x4, 0x1, 0x18, 0x1}], &(0x7f0000000540)='syzkaller\x00', 0x1f, 0x1b, &(0x7f0000000580)=""/27, 0xc2d00, 0xc, '\x00', 0x0, 0x1b, r1, 0x8, &(0x7f00000005c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000600)={0x0, 0x3, 0x3, 0x9}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)=[r10]}, 0x80) 23:36:18 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x2) 23:36:18 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405608, &(0x7f0000000140)={0x800001, 0x2, 0x0, "3f5d003fe10200050005dfd0f1e22f72fd4c2179060000000000000000001de0", 0x34325258}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x3ff, 0x2, 0x4, 0x0, 0x81}) (async, rerun: 64) openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 23:36:18 executing program 3: socketpair(0x23, 0xc2, 0x7fffffff, &(0x7f0000000100)) 23:36:18 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x35a, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000180)={0x2, @sdr={0x31364d59, 0x1}}) 23:36:18 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x10000}, &(0x7f0000000040)=0x8) 23:36:18 executing program 4: syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000140)={0x2, 0x494e4f4b, 0x1, @discrete={0x1d0c, 0x2003f}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async, rerun: 32) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280), 0x220002, 0x0) (async, rerun: 32) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0), 0x248100, 0x0) (async) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000380), 0x125100, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000003c0)=@multiplanar_fd={0xc58, 0x1, 0x4, 0x4, 0x5, {}, {0x2, 0x1, 0x1, 0x8, 0x7f, 0x2, "26de9698"}, 0x7, 0x4, {&(0x7f0000000300)=[{0x5, 0xcbb, {r3}}, {0x45, 0xffffff80, {r1}, 0x7205a400}]}, 0x80, 0x0, r4}) (async) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) (async, rerun: 64) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x0) (async) getsockname$tipc(r6, &(0x7f0000000040), &(0x7f00000004c0)=0x10) (async, rerun: 64) r7 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x3, 0x2) (rerun: 64) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000100)={0x1b, 0x41b}) (async) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x0) (async, rerun: 32) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x0) ioctl$vim2m_VIDIOC_QBUF(r8, 0xc058560f, &(0x7f0000000440)=@overlay={0x3, 0x1, 0x4, 0x2, 0x2, {0x77359400}, {0x4, 0xc, 0x7f, 0x4, 0x20, 0x2, "f14dca07"}, 0x3, 0x3, {}, 0x3, 0x0, r9}) (async, rerun: 32) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000200), &(0x7f0000000240)=0x4) (async, rerun: 32) r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r10, 0xae03, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000500)=@raw=[@jmp={0x5, 0x1, 0x8, 0xa, 0x9, 0x80, 0x10}, @ldst={0x1, 0x0, 0x1, 0x6, 0x3, 0x6, 0xffffffffffffffe4}, @generic={0x7, 0x9, 0x0, 0x0, 0x3}, @jmp={0x5, 0x1, 0xa, 0x8, 0x6, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x4, 0x4, 0x1, 0x18, 0x1}], &(0x7f0000000540)='syzkaller\x00', 0x1f, 0x1b, &(0x7f0000000580)=""/27, 0xc2d00, 0xc, '\x00', 0x0, 0x1b, r1, 0x8, &(0x7f00000005c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000600)={0x0, 0x3, 0x3, 0x9}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)=[r10]}, 0x80) 23:36:18 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x2) (async) 23:36:18 executing program 3: socketpair(0x23, 0xc3, 0x7fffffff, &(0x7f0000000100)) 23:36:18 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x35a, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000180)={0x2, @sdr={0x31364d59, 0x1}}) 23:36:18 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x10000}, &(0x7f0000000040)=0x8) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x10000}, &(0x7f0000000040)=0x8) (async) 23:36:18 executing program 3: socketpair(0x23, 0xc4, 0x7fffffff, &(0x7f0000000100)) 23:36:18 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0xffffffff, 0x2, 0x2, 0x0, 0x3}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x9, 0x36314d59, 0x0, @stepwise}) 23:36:18 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x2) 23:36:18 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405608, &(0x7f0000000140)={0x800001, 0x2, 0x0, "3f5d003fe10200050005dfd0f1e22f72fd4c2179060000000000000000001de0", 0x34325258}) (async, rerun: 32) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 32) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x3ff, 0x2, 0x4, 0x0, 0x81}) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 23:36:18 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x10000}, &(0x7f0000000040)=0x8) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x10000}, &(0x7f0000000040)=0x8) (async) 23:36:18 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000180)={0x2, @sdr={0x31364d59, 0x1}}) 23:36:18 executing program 3: socketpair(0x23, 0xc5, 0x7fffffff, &(0x7f0000000100)) 23:36:18 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0xffffffff, 0x2, 0x2, 0x0, 0x3}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x9, 0x36314d59, 0x0, @stepwise}) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0xffffffff, 0x2, 0x2, 0x0, 0x3}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x9, 0x36314d59, 0x0, @stepwise}) (async) 23:36:18 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x55491ec9, 0x31324d59, 0x2, @stepwise={0xa1aa, 0x1, 0x6000, 0x7, 0x9, 0x7}}) 23:36:18 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000180)={0x2, @sdr={0x31364d59, 0x1}}) 23:36:18 executing program 3: socketpair(0x23, 0xc6, 0x7fffffff, &(0x7f0000000100)) 23:36:18 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x55491ec9, 0x31324d59, 0x2, @stepwise={0xa1aa, 0x1, 0x6000, 0x7, 0x9, 0x7}}) 23:36:18 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0xffffffff, 0x2, 0x2, 0x0, 0x3}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x9, 0x36314d59, 0x0, @stepwise}) 23:36:18 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x0, 0x6, 0x3, 0x4000}) 23:36:18 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000180)={0x2, @sdr={0x31364d59, 0x1}}) 23:36:18 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000180)={0x0, @sdr={0x3631564e, 0xff}}) 23:36:18 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x55491ec9, 0x31324d59, 0x2, @stepwise={0xa1aa, 0x1, 0x6000, 0x7, 0x9, 0x7}}) 23:36:18 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x0, 0x6, 0x3, 0x4000}) 23:36:18 executing program 3: socketpair(0x23, 0xc7, 0x7fffffff, &(0x7f0000000100)) 23:36:18 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000180)={0x0, @sdr={0x3631564e, 0xff}}) 23:36:18 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x40000, 0x36314d59, 0x0, @discrete={0x1ff, 0x4}}) 23:36:18 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x35a, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x2, @sdr={0x31364d59, 0x1}}) 23:36:18 executing program 3: socketpair(0x23, 0xc8, 0x7fffffff, &(0x7f0000000100)) 23:36:18 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x0, 0x6, 0x3, 0x4000}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x0, 0x6, 0x3, 0x4000}) (async) 23:36:18 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000180)={0x0, @sdr={0x3631564e, 0xff}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)) (async) syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000180)={0x0, @sdr={0x3631564e, 0xff}}) (async) 23:36:18 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x40000, 0x36314d59, 0x0, @discrete={0x1ff, 0x4}}) 23:36:18 executing program 3: socketpair(0x23, 0xc9, 0x7fffffff, &(0x7f0000000100)) 23:36:18 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x35a, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x2, @sdr={0x31364d59, 0x1}}) 23:36:18 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000180)=@multiplanar_overlay={0xffff, 0x2, 0x4, 0x2000, 0x4, {0x77359400}, {0x5, 0x8, 0x3, 0x5, 0x5, 0x9b, "ff4ff510"}, 0x4, 0x3, {&(0x7f0000000040)=[{0x4ca, 0x3, {0x3f}, 0x8}, {0x9, 0x10001, {0x9}}]}, 0x10001}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x8, 0x7800, 0x3, 0x400, {{0x1c, 0x4, 0x1, 0xb, 0x70, 0x64, 0x0, 0x8, 0x2f, 0x0, @broadcast, @multicast2, {[@end, @ssrr={0x89, 0x27, 0x8, [@local, @loopback, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr=0x64010102, @local, @dev={0xac, 0x14, 0x14, 0x1a}, @broadcast]}, @generic={0x44, 0x8, "d6254c8a10d8"}, @end, @generic={0x7, 0x5, "6dd8a2"}, @generic={0x9a, 0x5, "032427"}, @end, @generic={0x88, 0x6, "f7d0fdc8"}, @lsrr={0x83, 0x17, 0xd1, [@remote, @multicast1, @empty, @empty, @rand_addr=0x64010100]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) r6 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7}, 0x48) r8 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r9}, 0x48) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000bc0)={'team0\x00', 0x0}) r13 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r14}, 0x48) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000280), 0xc, &(0x7f0000000b40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="88050000", @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="7400028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000600000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000180000008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="ec0002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004004a0000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="8000028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="7002028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500036ea78b47000800047b4deba6003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r15, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400070000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r16, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0x588}, 0x1, 0x0, 0x0, 0x4810}, 0x800) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) r17 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r17, 0xae03, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000200)=@overlay={0x6, 0x1, 0x4, 0x800, 0x0, {0x0, 0xea60}, {0x4, 0x0, 0x3, 0x3, 0x9, 0x4, "420fc74c"}, 0x7, 0x3, {}, 0x4, 0x0, r17}) r18 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r18, 0x8933, &(0x7f00000000c0)) 23:36:18 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x40000, 0x36314d59, 0x0, @discrete={0x1ff, 0x4}}) 23:36:18 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000000)={0x4, 0x7d730a04, 0x3, @discrete={0x9, 0x4}}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x3, 0x1}, 0x10) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:18 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:18 executing program 5: r0 = syz_open_dev$vim2m(0x0, 0x35a, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x2, @sdr={0x31364d59, 0x1}}) 23:36:18 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000180)=@multiplanar_overlay={0xffff, 0x2, 0x4, 0x2000, 0x4, {0x77359400}, {0x5, 0x8, 0x3, 0x5, 0x5, 0x9b, "ff4ff510"}, 0x4, 0x3, {&(0x7f0000000040)=[{0x4ca, 0x3, {0x3f}, 0x8}, {0x9, 0x10001, {0x9}}]}, 0x10001}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x8, 0x7800, 0x3, 0x400, {{0x1c, 0x4, 0x1, 0xb, 0x70, 0x64, 0x0, 0x8, 0x2f, 0x0, @broadcast, @multicast2, {[@end, @ssrr={0x89, 0x27, 0x8, [@local, @loopback, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr=0x64010102, @local, @dev={0xac, 0x14, 0x14, 0x1a}, @broadcast]}, @generic={0x44, 0x8, "d6254c8a10d8"}, @end, @generic={0x7, 0x5, "6dd8a2"}, @generic={0x9a, 0x5, "032427"}, @end, @generic={0x88, 0x6, "f7d0fdc8"}, @lsrr={0x83, 0x17, 0xd1, [@remote, @multicast1, @empty, @empty, @rand_addr=0x64010100]}, @noop]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) (async) r6 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7}, 0x48) (async) r8 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r9}, 0x48) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000bc0)={'team0\x00', 0x0}) r13 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r14}, 0x48) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000280), 0xc, &(0x7f0000000b40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="88050000", @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="7400028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000600000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000180000008000100", @ANYRES32=0x0, @ANYBLOB="fc0002804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000100000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400010000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600355ed4e6cf5a88396449a2155eac2a9e5e300c2b56ccbe1b17b42535564931df3a3aaf80a3f250d747c7aa281fc81de0671d16eba52de45c93aa5b95c7f0e588207cb1b2dbc33e199e2f92a4da01868175", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="ec0002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004004a0000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="8000028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="7002028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500036ea78b47000800047b4deba6003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r15, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400070000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r16, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0x588}, 0x1, 0x0, 0x0, 0x4810}, 0x800) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) r17 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r17, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000200)=@overlay={0x6, 0x1, 0x4, 0x800, 0x0, {0x0, 0xea60}, {0x4, 0x0, 0x3, 0x3, 0x9, 0x4, "420fc74c"}, 0x7, 0x3, {}, 0x4, 0x0, r17}) (async) r18 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r18, 0x8933, &(0x7f00000000c0)) 23:36:19 executing program 3: socketpair(0x23, 0xca, 0x7fffffff, &(0x7f0000000100)) 23:36:19 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) syz_open_dev$vim2m(&(0x7f0000000040), 0x1000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:36:19 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000000)={0x4, 0x7d730a04, 0x3, @discrete={0x9, 0x4}}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x3, 0x1}, 0x10) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:19 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (rerun: 64) 23:36:19 executing program 3: socketpair(0x23, 0xcb, 0x7fffffff, &(0x7f0000000100)) 23:36:19 executing program 5: r0 = syz_open_dev$vim2m(0x0, 0x35a, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x2, @sdr={0x31364d59, 0x1}}) 23:36:19 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000180)=@multiplanar_overlay={0xffff, 0x2, 0x4, 0x2000, 0x4, {0x77359400}, {0x5, 0x8, 0x3, 0x5, 0x5, 0x9b, "ff4ff510"}, 0x4, 0x3, {&(0x7f0000000040)=[{0x4ca, 0x3, {0x3f}, 0x8}, {0x9, 0x10001, {0x9}}]}, 0x10001}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async, rerun: 32) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x8, 0x7800, 0x3, 0x400, {{0x1c, 0x4, 0x1, 0xb, 0x70, 0x64, 0x0, 0x8, 0x2f, 0x0, @broadcast, @multicast2, {[@end, @ssrr={0x89, 0x27, 0x8, [@local, @loopback, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr=0x64010102, @local, @dev={0xac, 0x14, 0x14, 0x1a}, @broadcast]}, @generic={0x44, 0x8, "d6254c8a10d8"}, @end, @generic={0x7, 0x5, "6dd8a2"}, @generic={0x9a, 0x5, "032427"}, @end, @generic={0x88, 0x6, "f7d0fdc8"}, @lsrr={0x83, 0x17, 0xd1, [@remote, @multicast1, @empty, @empty, @rand_addr=0x64010100]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) (async) r6 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7}, 0x48) (async) r8 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r9}, 0x48) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000bc0)={'team0\x00', 0x0}) r13 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r14}, 0x48) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000280), 0xc, &(0x7f0000000b40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="88050000", @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="7400028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000600000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000180000008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="ec0002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004004a0000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="8000028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="7002028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500036ea78b47000800047b4deba6003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r15, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400070000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r16, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0x588}, 0x1, 0x0, 0x0, 0x4810}, 0x800) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) r17 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r17, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000200)=@overlay={0x6, 0x1, 0x4, 0x800, 0x0, {0x0, 0xea60}, {0x4, 0x0, 0x3, 0x3, 0x9, 0x4, "420fc74c"}, 0x7, 0x3, {}, 0x4, 0x0, r17}) (async) r18 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r18, 0x8933, &(0x7f00000000c0)) 23:36:19 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000000)={0x4, 0x7d730a04, 0x3, @discrete={0x9, 0x4}}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x3, 0x1}, 0x10) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000000)={0x4, 0x7d730a04, 0x3, @discrete={0x9, 0x4}}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x3, 0x1}, 0x10) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:36:19 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) syz_open_dev$vim2m(&(0x7f0000000040), 0x1000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000040), 0x1000, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) 23:36:19 executing program 3: socketpair(0x23, 0xcc, 0x7fffffff, &(0x7f0000000100)) 23:36:19 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000040), 0x1000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:36:19 executing program 5: r0 = syz_open_dev$vim2m(0x0, 0x35a, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x2, @sdr={0x31364d59, 0x1}}) 23:36:19 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x1, "854800ff3e00009bb80500001de000", 0x8ae9f58f}) 23:36:19 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:19 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x8002, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000280)) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x40, 0x1, 0x3}) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000200)=@multiplanar_fd={0x7, 0x3, 0x4, 0x800, 0x1d4, {r4, r5/1000+10000}, {0x4, 0xe, 0x6, 0x3, 0x80, 0x1, "ebe558d1"}, 0x2, 0x4, {&(0x7f0000000180)=[{0x9, 0x1e, {r1}, 0x9eb}, {0x6, 0x0, {r1}, 0x1}]}, 0x200000, 0x0, r1}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x10005, 0x0, 0x0, "475d003fe11e6152b1a22a00000000000000000000ff00", 0x32314d59}) 23:36:19 executing program 3: socketpair(0x23, 0xcd, 0x7fffffff, &(0x7f0000000100)) 23:36:19 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x8, 0x200, 0x1, {0x0, @pix_mp={0x2, 0x9, 0x38414761, 0x5, 0x5, [{0x9, 0x7}, {0x4, 0x80000001}, {0x3, 0xfff}, {0xd2, 0x2}, {0x7, 0x3}, {0x4861, 0x9}, {0x1, 0x8}, {0x5, 0x2}], 0x9, 0x1, 0x0, 0x0, 0x1}}}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:36:19 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x1, "854800ff3e00009bb80500001de000", 0x8ae9f58f}) 23:36:19 executing program 3: socketpair(0x23, 0xce, 0x7fffffff, &(0x7f0000000100)) 23:36:19 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x2, @sdr={0x31364d59, 0x1}}) 23:36:19 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x8, 0x200, 0x1, {0x0, @pix_mp={0x2, 0x9, 0x38414761, 0x5, 0x5, [{0x9, 0x7}, {0x4, 0x80000001}, {0x3, 0xfff}, {0xd2, 0x2}, {0x7, 0x3}, {0x4861, 0x9}, {0x1, 0x8}, {0x5, 0x2}], 0x9, 0x1, 0x0, 0x0, 0x1}}}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:36:19 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x1, "854800ff3e00009bb80500001de000", 0x8ae9f58f}) 23:36:19 executing program 3: socketpair(0x23, 0xcf, 0x7fffffff, &(0x7f0000000100)) 23:36:19 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x8002, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000280)) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x40, 0x1, 0x3}) (async) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) (async, rerun: 32) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) (rerun: 32) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000200)=@multiplanar_fd={0x7, 0x3, 0x4, 0x800, 0x1d4, {r4, r5/1000+10000}, {0x4, 0xe, 0x6, 0x3, 0x80, 0x1, "ebe558d1"}, 0x2, 0x4, {&(0x7f0000000180)=[{0x9, 0x1e, {r1}, 0x9eb}, {0x6, 0x0, {r1}, 0x1}]}, 0x200000, 0x0, r1}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x10005, 0x0, 0x0, "475d003fe11e6152b1a22a00000000000000000000ff00", 0x32314d59}) 23:36:19 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x3, @raw_data="5a7dfbb7b6694e452d1ee71f17573eb8ba7c6b9ac2aa950c57be602c091f398115493e2965a1f5c86cd23fa1c6735a6987952e8d72fd26c179bcf95bb1cedbf4c40c62a0b0c9f252e4b486dc5dd1c3f349f6f1d7c9daa53b333a5c41eca5f2cc7039a6bf73a6a636eb633f953f4a2c29b4274c9a8e0c2120c9138b3c5bd0530cd80b6aa3e491c0be2ae18ea0a87c2e1eb0978338af5e32d1be4b1c9d5fefbcb8495aba652a3cf93f5ffb10bedab3f57a26b377c3da75698394e4cdaa5e069edc2dcc53ad7a61978c"}) r2 = socket(0x3, 0x5, 0x2b17) ioctl$SIOCGETLINKNAME(r2, 0x89e0, &(0x7f0000000040)={0x2, 0x1}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000340)=@multiplanar_userptr={0xed6, 0x1, 0x4, 0x400, 0xffffffff, {0x77359400}, {0x3, 0x0, 0x8d, 0x81, 0x7f, 0x8, "8272b3ff"}, 0x2158e365, 0x2, {&(0x7f00000002c0)=[{0x7, 0x0, {&(0x7f00000000c0)}, 0x8001}, {0xf7, 0x7f, {&(0x7f0000000280)}, 0x6}]}, 0x101}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:19 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x8, 0x200, 0x1, {0x0, @pix_mp={0x2, 0x9, 0x38414761, 0x5, 0x5, [{0x9, 0x7}, {0x4, 0x80000001}, {0x3, 0xfff}, {0xd2, 0x2}, {0x7, 0x3}, {0x4861, 0x9}, {0x1, 0x8}, {0x5, 0x2}], 0x9, 0x1, 0x0, 0x0, 0x1}}}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:36:19 executing program 3: socketpair(0x23, 0xd0, 0x7fffffff, &(0x7f0000000100)) 23:36:19 executing program 0: connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x42, 0x1}, 0x3}}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x13, 0x1, &(0x7f0000000040)=@raw=[@jmp={0x5, 0x0, 0xc, 0x2, 0x7, 0x6, 0xfffffffffffffff0}], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x20, &(0x7f00000000c0)=""/32, 0x41100, 0xe, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x8, 0xf741}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0x4, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000002c0)={0xffffffffffffffff, r0, 0x4}, 0x10) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:19 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x2, @sdr={0x31364d59, 0x1}}) 23:36:19 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async, rerun: 64) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) (async, rerun: 64) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x3, @raw_data="5a7dfbb7b6694e452d1ee71f17573eb8ba7c6b9ac2aa950c57be602c091f398115493e2965a1f5c86cd23fa1c6735a6987952e8d72fd26c179bcf95bb1cedbf4c40c62a0b0c9f252e4b486dc5dd1c3f349f6f1d7c9daa53b333a5c41eca5f2cc7039a6bf73a6a636eb633f953f4a2c29b4274c9a8e0c2120c9138b3c5bd0530cd80b6aa3e491c0be2ae18ea0a87c2e1eb0978338af5e32d1be4b1c9d5fefbcb8495aba652a3cf93f5ffb10bedab3f57a26b377c3da75698394e4cdaa5e069edc2dcc53ad7a61978c"}) r2 = socket(0x3, 0x5, 0x2b17) ioctl$SIOCGETLINKNAME(r2, 0x89e0, &(0x7f0000000040)={0x2, 0x1}) (async, rerun: 32) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000340)=@multiplanar_userptr={0xed6, 0x1, 0x4, 0x400, 0xffffffff, {0x77359400}, {0x3, 0x0, 0x8d, 0x81, 0x7f, 0x8, "8272b3ff"}, 0x2158e365, 0x2, {&(0x7f00000002c0)=[{0x7, 0x0, {&(0x7f00000000c0)}, 0x8001}, {0xf7, 0x7f, {&(0x7f0000000280)}, 0x6}]}, 0x101}) (async, rerun: 32) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:19 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x8002, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000280)) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x40, 0x1, 0x3}) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000200)=@multiplanar_fd={0x7, 0x3, 0x4, 0x800, 0x1d4, {r4, r5/1000+10000}, {0x4, 0xe, 0x6, 0x3, 0x80, 0x1, "ebe558d1"}, 0x2, 0x4, {&(0x7f0000000180)=[{0x9, 0x1e, {r1}, 0x9eb}, {0x6, 0x0, {r1}, 0x1}]}, 0x200000, 0x0, r1}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x10005, 0x0, 0x0, "475d003fe11e6152b1a22a00000000000000000000ff00", 0x32314d59}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x8002, 0x0) (async) ioctl$VIDIOC_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000280)) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x40, 0x1, 0x3}) (async) syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) (async) clock_gettime(0x0, &(0x7f0000000080)) (async) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000200)=@multiplanar_fd={0x7, 0x3, 0x4, 0x800, 0x1d4, {r4, r5/1000+10000}, {0x4, 0xe, 0x6, 0x3, 0x80, 0x1, "ebe558d1"}, 0x2, 0x4, {&(0x7f0000000180)=[{0x9, 0x1e, {r1}, 0x9eb}, {0x6, 0x0, {r1}, 0x1}]}, 0x200000, 0x0, r1}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x10005, 0x0, 0x0, "475d003fe11e6152b1a22a00000000000000000000ff00", 0x32314d59}) (async) 23:36:19 executing program 0: connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x42, 0x1}, 0x3}}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x13, 0x1, &(0x7f0000000040)=@raw=[@jmp={0x5, 0x0, 0xc, 0x2, 0x7, 0x6, 0xfffffffffffffff0}], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x20, &(0x7f00000000c0)=""/32, 0x41100, 0xe, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x8, 0xf741}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0x4, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000002c0)={0xffffffffffffffff, r0, 0x4}, 0x10) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x42, 0x1}, 0x3}}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x13, 0x1, &(0x7f0000000040)=@raw=[@jmp={0x5, 0x0, 0xc, 0x2, 0x7, 0x6, 0xfffffffffffffff0}], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x20, &(0x7f00000000c0)=""/32, 0x41100, 0xe, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x8, 0xf741}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0x4, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000002c0)={0xffffffffffffffff, r0, 0x4}, 0x10) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:36:19 executing program 3: socketpair(0x23, 0xd1, 0x7fffffff, &(0x7f0000000100)) 23:36:19 executing program 4: setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000040)=0x77, 0x8) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x1, @pix_mp={0x3, 0x4, 0x584e4f53, 0x7, 0x4, [{0x7fffffff, 0x8}, {0x8, 0x2}, {0x3, 0xfffffff7}, {0x4899d68d, 0xfffffff9}, {0xd38, 0x8001}, {0xfd6b}, {0x4, 0x8001}, {0xfdb2, 0xea9}], 0x3f, 0x58, 0x6, 0x2, 0x5}}) 23:36:19 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x2, @sdr={0x31364d59, 0x1}}) 23:36:19 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x0, 0x0, "475d003fe11ed500b805dfd0f1c62f7200000000220000000000000000001de0"}) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10, 0x0) 23:36:19 executing program 3: socketpair(0x23, 0xd2, 0x7fffffff, &(0x7f0000000100)) 23:36:19 executing program 4: setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000040)=0x77, 0x8) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x1, @pix_mp={0x3, 0x4, 0x584e4f53, 0x7, 0x4, [{0x7fffffff, 0x8}, {0x8, 0x2}, {0x3, 0xfffffff7}, {0x4899d68d, 0xfffffff9}, {0xd38, 0x8001}, {0xfd6b}, {0x4, 0x8001}, {0xfdb2, 0xea9}], 0x3f, 0x58, 0x6, 0x2, 0x5}}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000040)=0x77, 0x8) (async) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x1, @pix_mp={0x3, 0x4, 0x584e4f53, 0x7, 0x4, [{0x7fffffff, 0x8}, {0x8, 0x2}, {0x3, 0xfffffff7}, {0x4899d68d, 0xfffffff9}, {0xd38, 0x8001}, {0xfd6b}, {0x4, 0x8001}, {0xfdb2, 0xea9}], 0x3f, 0x58, 0x6, 0x2, 0x5}}) (async) 23:36:19 executing program 5: syz_open_dev$vim2m(&(0x7f0000000000), 0x35a, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000180)={0x2, @sdr={0x31364d59, 0x1}}) 23:36:19 executing program 0: connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x42, 0x1}, 0x3}}, 0x10) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x13, 0x1, &(0x7f0000000040)=@raw=[@jmp={0x5, 0x0, 0xc, 0x2, 0x7, 0x6, 0xfffffffffffffff0}], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x20, &(0x7f00000000c0)=""/32, 0x41100, 0xe, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x8, 0xf741}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0x4, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000002c0)={0xffffffffffffffff, r0, 0x4}, 0x10) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:19 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x3, @raw_data="5a7dfbb7b6694e452d1ee71f17573eb8ba7c6b9ac2aa950c57be602c091f398115493e2965a1f5c86cd23fa1c6735a6987952e8d72fd26c179bcf95bb1cedbf4c40c62a0b0c9f252e4b486dc5dd1c3f349f6f1d7c9daa53b333a5c41eca5f2cc7039a6bf73a6a636eb633f953f4a2c29b4274c9a8e0c2120c9138b3c5bd0530cd80b6aa3e491c0be2ae18ea0a87c2e1eb0978338af5e32d1be4b1c9d5fefbcb8495aba652a3cf93f5ffb10bedab3f57a26b377c3da75698394e4cdaa5e069edc2dcc53ad7a61978c"}) (async) r2 = socket(0x3, 0x5, 0x2b17) ioctl$SIOCGETLINKNAME(r2, 0x89e0, &(0x7f0000000040)={0x2, 0x1}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000340)=@multiplanar_userptr={0xed6, 0x1, 0x4, 0x400, 0xffffffff, {0x77359400}, {0x3, 0x0, 0x8d, 0x81, 0x7f, 0x8, "8272b3ff"}, 0x2158e365, 0x2, {&(0x7f00000002c0)=[{0x7, 0x0, {&(0x7f00000000c0)}, 0x8001}, {0xf7, 0x7f, {&(0x7f0000000280)}, 0x6}]}, 0x101}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:19 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x0, 0x0, "475d003fe11ed500b805dfd0f1c62f7200000000220000000000000000001de0"}) (async) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10, 0x0) 23:36:19 executing program 3: socketpair(0x23, 0xd3, 0x7fffffff, &(0x7f0000000100)) 23:36:19 executing program 4: setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000040)=0x77, 0x8) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x1, @pix_mp={0x3, 0x4, 0x584e4f53, 0x7, 0x4, [{0x7fffffff, 0x8}, {0x8, 0x2}, {0x3, 0xfffffff7}, {0x4899d68d, 0xfffffff9}, {0xd38, 0x8001}, {0xfd6b}, {0x4, 0x8001}, {0xfdb2, 0xea9}], 0x3f, 0x58, 0x6, 0x2, 0x5}}) 23:36:19 executing program 5: syz_open_dev$vim2m(&(0x7f0000000000), 0x35a, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000180)={0x2, @sdr={0x31364d59, 0x1}}) 23:36:19 executing program 0: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) sendmsg$tipc(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000040)="52596066eedfbc6e884e7dd39f4d8e12af8d27b4e95a340508af267c1f18c7f01acd551644e0ccca2f8102296b783ce507e075d2e4fcc3374e29f1153f39d8036c40ccdfee0d0335b9415b6c9248b3debe3c58e53bb4a4018b0abb1ccaca53feaebbc24446c1ce36580d18509e068acb2250ca6510c6058e7f64f638f78ec237eb8e65728710332babf2c25d831a61f2", 0x90}, {&(0x7f0000000180)="2ab75c7b2f822fe85ffaf9babc1021b6869c32448225a5b2f60b38fb564fc42275379bf74b845873b19ce430f1f17f0ac03aa43152094731cbbcf82ec76c6acc9283bbdfaf867dcc8916d74e507e192a783b387498d99feddbb4111e1206f39321f355cee30af4af388e412bf41ea313e6cc05b56be01eb3cfc4e8ef13a454158d1a3868b06d19ca7dd7b9faccee0147788fa8b9f06a37c4e6ac4a1f20c03e93ada919229e85a51f102f4c952e60e254", 0xb0}, {&(0x7f0000000240)="58fb9e5015ec2b7f81b390e63ac7b883e4ff0ef3f35a4be8a20231c248f69d9dbfac203eef4139b40c1408adaf8da460894c3c2e9362d580499d5ddb08baec", 0x3f}, {&(0x7f0000000280)="6887ee7b8258c497fe2223f28d32333d50170387625c0e785f389b746d4e47dff322521190f27d2dda5cbc4df28456f3c58e745df89df6037e9f753c5027bc2b3491f936b5b9b809312eb0d2c28615e965e62759dcd7fc09cd6e0260f0d1d5f181fad2985f7754c4aa6fee6cd7353d9d991dd06299f1c2b2a2d7512d92bd64bbbac35cff582d9cfa40343f05b87b2f5d8c01a7213f13c8a8cd5650f3044aae8049e4c5205e30154114d9fd75277e0884a41169c473d1", 0xb6}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="d45085ea3fb9ce427062e1b921e324032258b7386a5e6af0f34ed401dcc56fb82ba1bc869146979dba5f6b365e5c9dfd06c2ef170c60ebf4e927cf55918ce56661a073ac2ed0e70ef387a0abf34c24713f8dcc4ef652767810e934a575c5cc2fd5d85b1f510924b9b3a319be3ef03e46a6caed9b293d3df4fb3944f42a514f109bd806fce85843d98a1afba42fc9b1b9c8b3064d1dba947a0364effe7ae2476c42587413d306419e", 0xa8}], 0x6, &(0x7f0000001480)="2d50e4440abbee30bf8224e029413be51bd228bdad74229d587b4d41c63f6c4aa21a362724badf8544623c9ff22bc63f4f1d00dd12e7e8a945645f54e6328f484d62fe6bcf95802430e04aa911104fa39d8c8dfd2568bb94a28b42c3031787d6ae803d229324c27146ff9810baa71bcac7bc676fbe2cabe5a1e08941d38bd5e4cf9c7975f73cc64dddfdc87635f4caf04705e9e42cdd5e280667e64c525c3fcf07c63178391bbe7d793082e1e2c38ab61f395356434a3bfceed0219fcd691275c6fb41b6d396517a40f97c027126e85f1939837d5e351c602f3821125e7d812ee8bffaa5355745c6d4d91f7320cfcbbe8792188bea305b", 0xf7, 0x8811}, 0x20000002) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:19 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x1, @sdr={0x32314d4e, 0x54}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405608, &(0x7f0000000040)={0x4b45, 0x2, 0x0, "475d003fe11ee00000938200", 0x43564548}) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) socket$inet6_udplite(0xa, 0x2, 0x88) 23:36:19 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x6599, 0xaab7}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:36:19 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x0, 0x0, "475d003fe11ed500b805dfd0f1c62f7200000000220000000000000000001de0"}) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x0, 0x0, "475d003fe11ed500b805dfd0f1c62f7200000000220000000000000000001de0"}) (async) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10, 0x0) (async) 23:36:19 executing program 5: syz_open_dev$vim2m(&(0x7f0000000000), 0x35a, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000180)={0x2, @sdr={0x31364d59, 0x1}}) 23:36:19 executing program 3: socketpair(0x23, 0xd4, 0x7fffffff, &(0x7f0000000100)) 23:36:19 executing program 0: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) sendmsg$tipc(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000040)="52596066eedfbc6e884e7dd39f4d8e12af8d27b4e95a340508af267c1f18c7f01acd551644e0ccca2f8102296b783ce507e075d2e4fcc3374e29f1153f39d8036c40ccdfee0d0335b9415b6c9248b3debe3c58e53bb4a4018b0abb1ccaca53feaebbc24446c1ce36580d18509e068acb2250ca6510c6058e7f64f638f78ec237eb8e65728710332babf2c25d831a61f2", 0x90}, {&(0x7f0000000180)="2ab75c7b2f822fe85ffaf9babc1021b6869c32448225a5b2f60b38fb564fc42275379bf74b845873b19ce430f1f17f0ac03aa43152094731cbbcf82ec76c6acc9283bbdfaf867dcc8916d74e507e192a783b387498d99feddbb4111e1206f39321f355cee30af4af388e412bf41ea313e6cc05b56be01eb3cfc4e8ef13a454158d1a3868b06d19ca7dd7b9faccee0147788fa8b9f06a37c4e6ac4a1f20c03e93ada919229e85a51f102f4c952e60e254", 0xb0}, {&(0x7f0000000240)="58fb9e5015ec2b7f81b390e63ac7b883e4ff0ef3f35a4be8a20231c248f69d9dbfac203eef4139b40c1408adaf8da460894c3c2e9362d580499d5ddb08baec", 0x3f}, {&(0x7f0000000280)="6887ee7b8258c497fe2223f28d32333d50170387625c0e785f389b746d4e47dff322521190f27d2dda5cbc4df28456f3c58e745df89df6037e9f753c5027bc2b3491f936b5b9b809312eb0d2c28615e965e62759dcd7fc09cd6e0260f0d1d5f181fad2985f7754c4aa6fee6cd7353d9d991dd06299f1c2b2a2d7512d92bd64bbbac35cff582d9cfa40343f05b87b2f5d8c01a7213f13c8a8cd5650f3044aae8049e4c5205e30154114d9fd75277e0884a41169c473d1", 0xb6}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="d45085ea3fb9ce427062e1b921e324032258b7386a5e6af0f34ed401dcc56fb82ba1bc869146979dba5f6b365e5c9dfd06c2ef170c60ebf4e927cf55918ce56661a073ac2ed0e70ef387a0abf34c24713f8dcc4ef652767810e934a575c5cc2fd5d85b1f510924b9b3a319be3ef03e46a6caed9b293d3df4fb3944f42a514f109bd806fce85843d98a1afba42fc9b1b9c8b3064d1dba947a0364effe7ae2476c42587413d306419e", 0xa8}], 0x6, &(0x7f0000001480)="2d50e4440abbee30bf8224e029413be51bd228bdad74229d587b4d41c63f6c4aa21a362724badf8544623c9ff22bc63f4f1d00dd12e7e8a945645f54e6328f484d62fe6bcf95802430e04aa911104fa39d8c8dfd2568bb94a28b42c3031787d6ae803d229324c27146ff9810baa71bcac7bc676fbe2cabe5a1e08941d38bd5e4cf9c7975f73cc64dddfdc87635f4caf04705e9e42cdd5e280667e64c525c3fcf07c63178391bbe7d793082e1e2c38ab61f395356434a3bfceed0219fcd691275c6fb41b6d396517a40f97c027126e85f1939837d5e351c602f3821125e7d812ee8bffaa5355745c6d4d91f7320cfcbbe8792188bea305b", 0xf7, 0x8811}, 0x20000002) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:19 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x1, @sdr={0x32314d4e, 0x54}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405608, &(0x7f0000000040)={0x4b45, 0x2, 0x0, "475d003fe11ee00000938200", 0x43564548}) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) socket$inet6_udplite(0xa, 0x2, 0x88) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x1, @sdr={0x32314d4e, 0x54}}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405608, &(0x7f0000000040)={0x4b45, 0x2, 0x0, "475d003fe11ee00000938200", 0x43564548}) (async) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) 23:36:19 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x6599, 0xaab7}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:36:19 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x35a, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) 23:36:20 executing program 0: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) sendmsg$tipc(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000040)="52596066eedfbc6e884e7dd39f4d8e12af8d27b4e95a340508af267c1f18c7f01acd551644e0ccca2f8102296b783ce507e075d2e4fcc3374e29f1153f39d8036c40ccdfee0d0335b9415b6c9248b3debe3c58e53bb4a4018b0abb1ccaca53feaebbc24446c1ce36580d18509e068acb2250ca6510c6058e7f64f638f78ec237eb8e65728710332babf2c25d831a61f2", 0x90}, {&(0x7f0000000180)="2ab75c7b2f822fe85ffaf9babc1021b6869c32448225a5b2f60b38fb564fc42275379bf74b845873b19ce430f1f17f0ac03aa43152094731cbbcf82ec76c6acc9283bbdfaf867dcc8916d74e507e192a783b387498d99feddbb4111e1206f39321f355cee30af4af388e412bf41ea313e6cc05b56be01eb3cfc4e8ef13a454158d1a3868b06d19ca7dd7b9faccee0147788fa8b9f06a37c4e6ac4a1f20c03e93ada919229e85a51f102f4c952e60e254", 0xb0}, {&(0x7f0000000240)="58fb9e5015ec2b7f81b390e63ac7b883e4ff0ef3f35a4be8a20231c248f69d9dbfac203eef4139b40c1408adaf8da460894c3c2e9362d580499d5ddb08baec", 0x3f}, {&(0x7f0000000280)="6887ee7b8258c497fe2223f28d32333d50170387625c0e785f389b746d4e47dff322521190f27d2dda5cbc4df28456f3c58e745df89df6037e9f753c5027bc2b3491f936b5b9b809312eb0d2c28615e965e62759dcd7fc09cd6e0260f0d1d5f181fad2985f7754c4aa6fee6cd7353d9d991dd06299f1c2b2a2d7512d92bd64bbbac35cff582d9cfa40343f05b87b2f5d8c01a7213f13c8a8cd5650f3044aae8049e4c5205e30154114d9fd75277e0884a41169c473d1", 0xb6}, {&(0x7f0000000340)="c69eeff9a597249b7ba3da77f23f852a833495deb8b6ac68a9a518e2a710d40cf04c28a674f16c4d8bc692a8d9fa529059773150d1a2c75b47bb0f5901a426e15dc3f36e702bb9cd3e57fedb1165507ed2adedb7b09502e0599d2db45a5b31d7ca0112ff9068ec7fac8496cf153bcdb4b71ed628124fd3e9ae3e1cdce3f12be99ca0020fc0bbae01dedf1364826818534904860355b63b8f2ac9f0c478f0a49897a138e3f5b1c0dc2844aa733ec948ab7d99babd6c005820695acd921a3365e661f58a9f1bb863434c14db9b95471277c54c88c98a09e8142e75f8e4881e8e7a4bf579a9e9cd38a5becd631a6edb341299e9d4aee4fa35fe156edcf7ac80945a3f5139ae9c16e22492ed1dd592e3f4f9a5e79145c789a2194ab4311ca2e75e293e69019b932397ca1c796a01d2bab428227e67610f255e8517089e4ba3a6e953d8d106d90ac20dff202d675979216564750b6c0d910fb05fed4f864b7040c632d291562d0fac3452f546c8ad360eeb171291ba95e39076e07207cf7e72186c8ffcadbb73e7bf7011d9f078d0e9f8f9d8982a4462980cf7dc9540b493ad1fc6f45c03f1e4b70c1ec37ea64c48890feec7bc892e6a163202d8dfb0a60782b6288046f20708054bf37a727beabf0f470dc1a2afe80ff50f7ef2b7aa0c789198c6b1ec029db086b53e790d642bb29d924fbd2a1eb7ffbed3331fcc17aa3b1777a8a315fadaa584d57b30d0aecd534c712a0448ab286fec39af00f5f4860f984586cb4ad37a4fa9834466764a0c5eb89d28936843227ccaf1af99723db87ec97b870b791683b210906e434b3767ce61e4bac3514df984e18f671e68e4a139487f342b02650412a4b6aa2c02c8c7798bf66b4966686f0ee4bb15def80e2970bd0a1adc643b382f8750dd01a605b0a979c4a9c5072dfe8d16af1bb7cce94a79740fda579b8c99b58d52da3633931cc6f8fd9d98a24abaa279b9ec7860ac5ba7a4bbe7b9c9ce88bfd303b2ae5c757fbc42506ae09f1c1a1958d835a2b98e57ceb03a30aa62a5bea8caa3115cd1cb0e8fe1a9eb0fb67305f366c1456943fe29a3a3422ae75e6301adb07fb05c64778be8055f22253ccfb747a6dcf6e58a9e40e887b1578bf9d34a44274f7cfb15d1901b57abbc4b18d39c0458929872db6f2e957d47177488e1ed0b4a03966d67d6572659fe8d21f54dc468ac458e84b1282e134ef63efa148bfc959bc4b4f90c86ba331d3c78da1394aacc9c47d0f5e134e46a61e91fa9b3670403317c8631576210fc2b72323d5bcb9c4855e6d6f40a44505350621881970e07094f23af3be53443c39bda74506208992bc43eb1c786badf8d06be2f702af877ca4eae0ce2bf295991b590d3f94b83646b4f4ae424b52cf4f2d4aee0678e5a9002d8c8e90f93325f41c7aa13c9d5a70856b5c27fa69d855ebbaea79e4713a857bc008585c40f8f47b2b39209e7708cce18e0b2578f0c0b7e0e9f2ee0681743d8bc939a566960755d4f2f9573fa3be2e23f53a54234a6224a21b31d5ca94db68322ba970ba5d70621cb27cd04429240e1abdf7d23628511116f9d01a2a31bd0f2483e28755e327f7c7b8579fa87a53dfbe8cf4bc4aaee93955379a308c2ad8de3544fe0ad463fed929d07897c88edd5e4cef4e115f86e10e0d977b37eac53df7dacd8c329222b7113b2370b266acf9093e998b6421720866d8b42cf0576b5661b3de16f6bb48f4d346a83710896d999075c85638c04f1e89a169bd06c373484b3ecbc2c4b8a2965d66db67d74e7948ce7a6b2f380b6f8ddabd450a201ae556f5c96a88ff8b33ab94c57b94c404092cd4ad076ecfde6706b36eb6e9a4bd2b5f84ba11c9261b4058bc7c05e0a0e7f85325d3094c83c10f7b8440e8a603fd69ff98aade3650213ffb4b12bcb9f2c131c53a9eae400004fa400aac40d52b462a593ed912b8fd987d911fa16cec027df72d2179924340dfffd7267032ddc05f45bf08122384b47d97b7eaeedfe35ef219549923ce6e75388b56e830fe41efd056adae02ed28a4f7dcec6363ad805d473f918472af26648db4a5a8561a976053af5cb262ead4daf4f9edbba8ac7bbaa190a6032b785b1644ce873b79554a31bbbfedd9d39d80c95e36701e5c588ce0dc803d1cc08d2922056cf7ab926d0ceff0cf59c9537c9612f65ea3ba147aec4f264b7ee9a21d55a577e6d19465215e8bd6a390997997e83cfbd0fcafdeb7c419397561a649aeb00b617e1f97d9c6f3e719cd9153535f87ed8d04257f90bb99d29157da850406f630b9f995e705fd269e73fbc7310a96f69c410deebb35d56173924ef73accd44821ee592581f9a44ae293f234a8faa337b9d6e755ac29798a0d740d63e2fd5c87a80edfbc59f620a5bde3dd7196c4dd3f28d2a8fd63aabdce86090454b85c0acf5edd48ee035d43b7ba8ef44ec60855267c57a5ac6d60bdaa3feaa77f0b4f57971f79ee2342f332ed07e57a7eeb5829732f8a43a7a10be1fd02c0890e3ac911aee0503f348db5c78067a61a7807ea5ccfcb44cc8e32cf131f639ce9c88852eee0c7950eb58c6e417b33ba7cad22c7b90400ee7cca284cac41e7f960441661dfd0b87c0a6aae198bbe979c81b0a0620c7378be07db767341ae4250629c1bce7297934d0adee2b4aadbb4c7e84da3ef9d068164658e5b529ac13aa790d074486966d50357b15d721f7a2eaef1c3a14c860a63724715a197ea4532dae71807b24736f8c9527b9694cf7d877763961eb133aca8e80a1acf16b02366ffb908003504dd341322a399b48fd904b062433dcb04f867dc7e689f60495625a1bc15b8585ba6067c2edc2ca03e7df98599af913ed41c04b721c91212d681df113a13a2a9b6aeabbad13bd8af5dd1cd596e271117e1c6a6bd3ca2a82b3624c7a7379eeab700c14d7fea74e44d56736312e9ac3b7327c9d5b172ba6e38e9fc1cd4608fd89b12df58cf65b8337d86edfd97e73a17a3f2a92eeefc18b6f6a66c9b17c9ae813d9b2e88e5a5a36de380319f01ba2bef9864959de1f0b4f35d90fa01f036c1efc135327e784609f38cb12697de483a5a0c309662a5fff780153638b39410a80d500c817bd181eeff688bc16ef07c4a7b674a24b40ceed21c523ea20edf51f89a15b76466a27de110cc3d4e9762b6ea02a73ba11e3201dde96f25f37b43a79d00121336e6b101f05233bb3bea27d655106b80158cedd1db05963a4be1f6e97cacfdc68c1ad4738bbf32b89475ac82d0d87fe8ef8154a844e6867dd3ead1be16831be740a3efab400ffbe2f0a3bbe60da74fdd8d18f32c57d591f7966e1a91f4eb830a4743b3d4c5ad9115e1d187434bd7f21e3259ac7716c4256a99ae86a611f33952d2f96e2389de8e771e12a58fc188edfd56734563e87270f2e3ce88da427ede792c2a9c977d2334d8d4a48ead5989a8c53610fb326e469fce991ff8225e9c39dce9126d109e011bd3cdc54554b10a19c3753f73ad08623106ce21c18c9808edfedd71bedbc186b73de369e72cf5d8271c38c8cc20d933bb9d77f628432b327c0e10a475f36f5ff8e954a27d1758e9961c76b92dd6a3884c88fe06d14fde17579288deef59687fd503b1b3559cf83dd0aa7f6414ff32927f562f943eb48305dd4d1d02a40841f9666f72944d14ebe198044f1d12584ab0494208925fd1ae6602f5d3f947df4908141fe11c07ba2333bf9f1f0e758ce6d88422e4f31b9ae5f59e90c9fd3ad84fb611f737f30cbdc739e50ff9903600dba514a34eb55a447a7899af4ac66dca5825d8f46606b82505b5a6a85eddad56f5a60d20f5a9050e75f4ac882e0586a365dbdd7dcc3107323a028ed30bd81e85c794a7886ed58ee3d5fe95484c6ae5270aebe262a5dfebfd7c206d739cbf6273cf2f17a13fe390b91cb70d599ab11ed61455f4d225563e529d37731260c6a47d83749621ace8b31524a8e61788584b1cc61c141de7ee831bbb35518c5685cdc165caae771291054e270de5350111e206100edfcdfd925b28c73a418e6b5f1481e1b12f69dac63bda24fe04defb001f12aa7e6b752c3068b4e219e61882b1db22e4df325001e805746720fa3bb9e371f14c299128a89175ec7365ee7e121e957fbec623f5d209a11330d31125a3e93b7610c7880546faab57ebba5616c84de2c5affa1d7f527098ad1088bffdec12b262f496bbff027cfc50d66802eee1ca7c9d679b46771c42e71935735561cc6a0b9864561bb59b1465507cb3ebebbb91decda98beed6212eaa2e7c5aa999ae2956ef96f3f7fc55be80fa42b58c437a85e37d2cb4148df22d789cfed7145c34ddd7427e9f4853f6e24d742f3e7c6b570c05537ef722e24fa97b2b2499342efe15618f482cf891d109be0b264e2a2e0ddd32bb49cbac47b415d5765b43385222d15273d1ea9a740c57ed84c3bb0a8b8818d6b2aaf6f7598bfd7046cc39bc7ef7721b3392b9e2e4136774fdb237cb69afdee2b493bb8fc0bcd74608f240a30b80c626d7791525a68a1f1e9d04c8e76032c63176266a199097a6dc59bdeeb02a10002d3bcdb40a0e9b5a3acbd0d027defc519fa94b88b9a0e21e17e2566508dcdc1c92cc4379827e6a28f0ae431a734ef2027ad74d78f95a7ae558dfd9066336b2196c26f3827044dce953afd412f2f8774b705c85a424eda56accf6eeef4daa5901295958fa31e0cef96fb29f8daa10345363aed72617b73975d62362b486b8c63c33103f5169c8b22b96f75b921cd0de608930be6fce387571c2dab223a7b4ef1cb357013e9dc19df27862bdce65a918d74ed5e8681c376ccf6d023da9c292d3d335accebf04ef481f192b8c1db60304b533810e3121058518b5ac0ba77cdc7b81d4f2b363797d5307f00d3343df1e5a95480888988f007cb5f9338b09a7d26041d8ebf491ef35c1005bbe63a40732ebeb23021af0140bf690de91ecdb0bd1b27e42dbd2eca16232680a8b4834e32aeb718c5182776f64881b4c3181643027383d788baed57e4055264d349a2f1d2b74a4df0c110101d2c5658664389410df0b39be74e34193276a91cb936ef1ce2f64c59e80e4af715e33a6029525e4ef767a4febc7f4e2ebb2cbaec642e75ea0325aa509ec9c2e279af75c4a1341f53bbafa25402034a65c23f6f66c05904e77224ac299d01b25cc9fff068f7739c22a9a86f019cd7530cc0329aa438c40aa1519aed926a493e1a14498c34a4dc4c03cb41876447bbe06d3021f4313dbea35d58aa9be4d1ebe6fbb3d93288e5b407b9601efbd0919e3230c9b586a4abcee95853ffb470483d2fbfb6b33415717f810230ea5072ec5bc0de427736b9e90d9a834bba0a522d69752ad6e398870fcdbfb3063e112490576b82df983a6a8410a78c462ed69b39ee5b86615e721700b235a592d3ba1d0acc02b1f9d3cf031673450631d20aad30a0dacf285458284120867ceaa3c0791e20a772deb77345455afa933e178f5173930fe4d56a8147e9f494a95625bb6cbfd7f1c7304745b0c2e3634fda3067a71d5d45994018eb3fd5af4ddf8c023642bf2da4d068b895ec91ef4e3e26efdfa9ee0f38ce7f578ffcdb640c762eb55e1e966060dba53603fba95efd1910b24a1a6f2eb8c3f4883d21dd60f91eab4a75d154e5d5c3149200b9b4c29a624bed93e82f1720f6a696ac57c8866b128690330e3c332d7db338a5c6cd335be2327b3e8982cf6ed03694029079a385674b04d8597e64a00cff0763985a440bb099af9291ad19df5c8aabf7cea235aa25b34b4c655b820c4fe371642efe", 0x1000}, {&(0x7f0000001340)="d45085ea3fb9ce427062e1b921e324032258b7386a5e6af0f34ed401dcc56fb82ba1bc869146979dba5f6b365e5c9dfd06c2ef170c60ebf4e927cf55918ce56661a073ac2ed0e70ef387a0abf34c24713f8dcc4ef652767810e934a575c5cc2fd5d85b1f510924b9b3a319be3ef03e46a6caed9b293d3df4fb3944f42a514f109bd806fce85843d98a1afba42fc9b1b9c8b3064d1dba947a0364effe7ae2476c42587413d306419e", 0xa8}], 0x6, &(0x7f0000001480)="2d50e4440abbee30bf8224e029413be51bd228bdad74229d587b4d41c63f6c4aa21a362724badf8544623c9ff22bc63f4f1d00dd12e7e8a945645f54e6328f484d62fe6bcf95802430e04aa911104fa39d8c8dfd2568bb94a28b42c3031787d6ae803d229324c27146ff9810baa71bcac7bc676fbe2cabe5a1e08941d38bd5e4cf9c7975f73cc64dddfdc87635f4caf04705e9e42cdd5e280667e64c525c3fcf07c63178391bbe7d793082e1e2c38ab61f395356434a3bfceed0219fcd691275c6fb41b6d396517a40f97c027126e85f1939837d5e351c602f3821125e7d812ee8bffaa5355745c6d4d91f7320cfcbbe8792188bea305b", 0xf7, 0x8811}, 0x20000002) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async) sendmsg$tipc(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000040)="52596066eedfbc6e884e7dd39f4d8e12af8d27b4e95a340508af267c1f18c7f01acd551644e0ccca2f8102296b783ce507e075d2e4fcc3374e29f1153f39d8036c40ccdfee0d0335b9415b6c9248b3debe3c58e53bb4a4018b0abb1ccaca53feaebbc24446c1ce36580d18509e068acb2250ca6510c6058e7f64f638f78ec237eb8e65728710332babf2c25d831a61f2", 0x90}, {&(0x7f0000000180)="2ab75c7b2f822fe85ffaf9babc1021b6869c32448225a5b2f60b38fb564fc42275379bf74b845873b19ce430f1f17f0ac03aa43152094731cbbcf82ec76c6acc9283bbdfaf867dcc8916d74e507e192a783b387498d99feddbb4111e1206f39321f355cee30af4af388e412bf41ea313e6cc05b56be01eb3cfc4e8ef13a454158d1a3868b06d19ca7dd7b9faccee0147788fa8b9f06a37c4e6ac4a1f20c03e93ada919229e85a51f102f4c952e60e254", 0xb0}, {&(0x7f0000000240)="58fb9e5015ec2b7f81b390e63ac7b883e4ff0ef3f35a4be8a20231c248f69d9dbfac203eef4139b40c1408adaf8da460894c3c2e9362d580499d5ddb08baec", 0x3f}, {&(0x7f0000000280)="6887ee7b8258c497fe2223f28d32333d50170387625c0e785f389b746d4e47dff322521190f27d2dda5cbc4df28456f3c58e745df89df6037e9f753c5027bc2b3491f936b5b9b809312eb0d2c28615e965e62759dcd7fc09cd6e0260f0d1d5f181fad2985f7754c4aa6fee6cd7353d9d991dd06299f1c2b2a2d7512d92bd64bbbac35cff582d9cfa40343f05b87b2f5d8c01a7213f13c8a8cd5650f3044aae8049e4c5205e30154114d9fd75277e0884a41169c473d1", 0xb6}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="d45085ea3fb9ce427062e1b921e324032258b7386a5e6af0f34ed401dcc56fb82ba1bc869146979dba5f6b365e5c9dfd06c2ef170c60ebf4e927cf55918ce56661a073ac2ed0e70ef387a0abf34c24713f8dcc4ef652767810e934a575c5cc2fd5d85b1f510924b9b3a319be3ef03e46a6caed9b293d3df4fb3944f42a514f109bd806fce85843d98a1afba42fc9b1b9c8b3064d1dba947a0364effe7ae2476c42587413d306419e", 0xa8}], 0x6, &(0x7f0000001480)="2d50e4440abbee30bf8224e029413be51bd228bdad74229d587b4d41c63f6c4aa21a362724badf8544623c9ff22bc63f4f1d00dd12e7e8a945645f54e6328f484d62fe6bcf95802430e04aa911104fa39d8c8dfd2568bb94a28b42c3031787d6ae803d229324c27146ff9810baa71bcac7bc676fbe2cabe5a1e08941d38bd5e4cf9c7975f73cc64dddfdc87635f4caf04705e9e42cdd5e280667e64c525c3fcf07c63178391bbe7d793082e1e2c38ab61f395356434a3bfceed0219fcd691275c6fb41b6d396517a40f97c027126e85f1939837d5e351c602f3821125e7d812ee8bffaa5355745c6d4d91f7320cfcbbe8792188bea305b", 0xf7, 0x8811}, 0x20000002) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:36:20 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)=@multiplanar_overlay={0x1, 0x3, 0x4, 0x70000, 0x3f, {0x0, 0xea60}, {0x4, 0xc, 0x0, 0xcb, 0x9, 0x1f, "f2f07918"}, 0x81, 0x3, {&(0x7f0000000000)=[{0x9, 0x81, {0x7fffffff}, 0x5f02}, {0x1, 0x5, {0x7fffffff}, 0x7fff}]}, 0x2, 0x0, r1}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000240)=@overlay={0x800, 0x8, 0x4, 0x70000, 0x1f, {r4, r5/1000+10000}, {0x2, 0x8, 0xa4, 0x0, 0x38, 0x9, "f7c0e0b3"}, 0x5, 0x3, {}, 0x9, 0x0, r2}) 23:36:20 executing program 3: socketpair(0x23, 0xd5, 0x7fffffff, &(0x7f0000000100)) 23:36:20 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x1, @sdr={0x32314d4e, 0x54}}) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async, rerun: 64) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405608, &(0x7f0000000040)={0x4b45, 0x2, 0x0, "475d003fe11ee00000938200", 0x43564548}) (rerun: 64) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) (async) socket$inet6_udplite(0xa, 0x2, 0x88) 23:36:20 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x6599, 0xaab7}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:36:20 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x35a, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) 23:36:20 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)=@multiplanar_overlay={0x1, 0x3, 0x4, 0x70000, 0x3f, {0x0, 0xea60}, {0x4, 0xc, 0x0, 0xcb, 0x9, 0x1f, "f2f07918"}, 0x81, 0x3, {&(0x7f0000000000)=[{0x9, 0x81, {0x7fffffff}, 0x5f02}, {0x1, 0x5, {0x7fffffff}, 0x7fff}]}, 0x2, 0x0, r1}) (async) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) (async) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000240)=@overlay={0x800, 0x8, 0x4, 0x70000, 0x1f, {r4, r5/1000+10000}, {0x2, 0x8, 0xa4, 0x0, 0x38, 0x9, "f7c0e0b3"}, 0x5, 0x3, {}, 0x9, 0x0, r2}) 23:36:20 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, 0xfffffffffffffffc, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)) 23:36:20 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) setsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x5, &(0x7f00000000c0)=0x6, 0x4) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000200)={0x400, 0xfffffffd, 0x3, {0x2, @win={{0x2ff4, 0x7, 0x2, 0x58d}, 0x7, 0x8, &(0x7f0000000080)={{0x0, 0x7, 0x9, 0x3}, &(0x7f0000000040)={{0x8, 0xb18, 0x7fffffff}, &(0x7f0000000000)={{0x3, 0x8000, 0x3, 0x45}}}}, 0x3, &(0x7f0000000180)="f37cd8099d4e7fec242eec34ff20fc6b37f6404ee1a7f25456f4cdf8c0106d33c6f9eb3ba80a44c7c4090713274ab12aca60647831aff79cde46317dc43dd55b64f62f877253883b30b3b689c874a57be61df711fb4afe452510d3339d33e7fd298f5b58851c65b2e344fe2d55250fb34ae821b30a23fa1a", 0x1f}}, 0xfffffe01}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000300)={0x2, @pix={0x0, 0xba, 0x41414770, 0x7, 0x5, 0x9, 0x1, 0x2, 0x1, 0x8, 0x2, 0x5}}) 23:36:20 executing program 3: socketpair(0x23, 0xd6, 0x7fffffff, &(0x7f0000000100)) 23:36:20 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x1, @stepwise}) 23:36:20 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x35a, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) 23:36:20 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, 0xfffffffffffffffc, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)) 23:36:20 executing program 3: socketpair(0x23, 0xd7, 0x7fffffff, &(0x7f0000000100)) 23:36:20 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)=@multiplanar_overlay={0x1, 0x3, 0x4, 0x70000, 0x3f, {0x0, 0xea60}, {0x4, 0xc, 0x0, 0xcb, 0x9, 0x1f, "f2f07918"}, 0x81, 0x3, {&(0x7f0000000000)=[{0x9, 0x81, {0x7fffffff}, 0x5f02}, {0x1, 0x5, {0x7fffffff}, 0x7fff}]}, 0x2, 0x0, r1}) (async) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) (async) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000240)=@overlay={0x800, 0x8, 0x4, 0x70000, 0x1f, {r4, r5/1000+10000}, {0x2, 0x8, 0xa4, 0x0, 0x38, 0x9, "f7c0e0b3"}, 0x5, 0x3, {}, 0x9, 0x0, r2}) 23:36:20 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x35a, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x0, @sdr={0x31364d59, 0x1}}) 23:36:20 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x1, @stepwise}) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x1, @stepwise}) (async) 23:36:20 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) setsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x5, &(0x7f00000000c0)=0x6, 0x4) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000200)={0x400, 0xfffffffd, 0x3, {0x2, @win={{0x2ff4, 0x7, 0x2, 0x58d}, 0x7, 0x8, &(0x7f0000000080)={{0x0, 0x7, 0x9, 0x3}, &(0x7f0000000040)={{0x8, 0xb18, 0x7fffffff}, &(0x7f0000000000)={{0x3, 0x8000, 0x3, 0x45}}}}, 0x3, &(0x7f0000000180)="f37cd8099d4e7fec242eec34ff20fc6b37f6404ee1a7f25456f4cdf8c0106d33c6f9eb3ba80a44c7c4090713274ab12aca60647831aff79cde46317dc43dd55b64f62f877253883b30b3b689c874a57be61df711fb4afe452510d3339d33e7fd298f5b58851c65b2e344fe2d55250fb34ae821b30a23fa1a", 0x1f}}, 0xfffffe01}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000300)={0x2, @pix={0x0, 0xba, 0x41414770, 0x7, 0x5, 0x9, 0x1, 0x2, 0x1, 0x8, 0x2, 0x5}}) 23:36:20 executing program 3: socketpair(0x23, 0xd8, 0x7fffffff, &(0x7f0000000100)) 23:36:20 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x35a, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x0, @sdr={0x31364d59, 0x1}}) 23:36:20 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x284000, 0x0) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0xffffffffffffffff, 0x100000, 0x10}, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x2, 0x1, 0xac, 0x800, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1, 0x5}, 0x48) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0xc3, 0x4, 0x7, 0x845, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x7, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff9}, @generic={0x7e, 0x7, 0x2, 0x19dd, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @exit, @alu={0x4, 0x0, 0x6, 0x0, 0x5, 0x18, 0xfffffffffffffffc}], &(0x7f0000000040)='syzkaller\x00', 0x3f, 0xd1, &(0x7f0000000180)=""/209, 0x41000, 0x10882ddb6341d976, '\x00', 0x0, 0x1c, r1, 0x8, &(0x7f00000000c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0xc, 0x6, 0xffff7fff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)=[r2, 0xffffffffffffffff, 0x1, r3, 0x1, r4, r5, 0x1]}, 0x80) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:20 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, 0xfffffffffffffffc, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)) openat$vim2m(0xffffffffffffff9c, 0xfffffffffffffffc, 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)) (async) 23:36:20 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) setsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x5, &(0x7f00000000c0)=0x6, 0x4) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000200)={0x400, 0xfffffffd, 0x3, {0x2, @win={{0x2ff4, 0x7, 0x2, 0x58d}, 0x7, 0x8, &(0x7f0000000080)={{0x0, 0x7, 0x9, 0x3}, &(0x7f0000000040)={{0x8, 0xb18, 0x7fffffff}, &(0x7f0000000000)={{0x3, 0x8000, 0x3, 0x45}}}}, 0x3, &(0x7f0000000180)="f37cd8099d4e7fec242eec34ff20fc6b37f6404ee1a7f25456f4cdf8c0106d33c6f9eb3ba80a44c7c4090713274ab12aca60647831aff79cde46317dc43dd55b64f62f877253883b30b3b689c874a57be61df711fb4afe452510d3339d33e7fd298f5b58851c65b2e344fe2d55250fb34ae821b30a23fa1a", 0x1f}}, 0xfffffe01}) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000300)={0x2, @pix={0x0, 0xba, 0x41414770, 0x7, 0x5, 0x9, 0x1, 0x2, 0x1, 0x8, 0x2, 0x5}}) 23:36:20 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x1, @stepwise}) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x1, @stepwise}) (async) 23:36:20 executing program 3: socketpair(0x23, 0xd9, 0x7fffffff, &(0x7f0000000100)) 23:36:20 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x284000, 0x0) (async) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0xffffffffffffffff, 0x100000, 0x10}, 0xc) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x2, 0x1, 0xac, 0x800, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1, 0x5}, 0x48) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0xc3, 0x4, 0x7, 0x845, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x7, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff9}, @generic={0x7e, 0x7, 0x2, 0x19dd, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @exit, @alu={0x4, 0x0, 0x6, 0x0, 0x5, 0x18, 0xfffffffffffffffc}], &(0x7f0000000040)='syzkaller\x00', 0x3f, 0xd1, &(0x7f0000000180)=""/209, 0x41000, 0x10882ddb6341d976, '\x00', 0x0, 0x1c, r1, 0x8, &(0x7f00000000c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0xc, 0x6, 0xffff7fff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)=[r2, 0xffffffffffffffff, 0x1, r3, 0x1, r4, r5, 0x1]}, 0x80) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:20 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x35a, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x0, @sdr={0x31364d59, 0x1}}) 23:36:20 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x1, 0x1f}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000080)=@mmap={0x14b, 0x1, 0x4, 0x40, 0x4, {r1, r2/1000+60000}, {0x4, 0x2, 0x0, 0x3, 0x1, 0x6, "8b3d0afa"}, 0x9}) 23:36:20 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x1, "475d003fe11e089bc305dfd01ea9c23ddea78ab4220200000000000000001de0", 0x34324948}) 23:36:20 executing program 3: socketpair(0x23, 0xda, 0x7fffffff, &(0x7f0000000100)) 23:36:20 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x284000, 0x0) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0xffffffffffffffff, 0x100000, 0x10}, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x2, 0x1, 0xac, 0x800, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1, 0x5}, 0x48) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0xc3, 0x4, 0x7, 0x845, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x7, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff9}, @generic={0x7e, 0x7, 0x2, 0x19dd, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @exit, @alu={0x4, 0x0, 0x6, 0x0, 0x5, 0x18, 0xfffffffffffffffc}], &(0x7f0000000040)='syzkaller\x00', 0x3f, 0xd1, &(0x7f0000000180)=""/209, 0x41000, 0x10882ddb6341d976, '\x00', 0x0, 0x1c, r1, 0x8, &(0x7f00000000c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0xc, 0x6, 0xffff7fff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)=[r2, 0xffffffffffffffff, 0x1, r3, 0x1, r4, r5, 0x1]}, 0x80) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x284000, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0xffffffffffffffff, 0x100000, 0x10}, 0xc) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x2, 0x1, 0xac, 0x800, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1, 0x5}, 0x48) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0xc3, 0x4, 0x7, 0x845, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3, 0x3}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x7, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff9}, @generic={0x7e, 0x7, 0x2, 0x19dd, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @exit, @alu={0x4, 0x0, 0x6, 0x0, 0x5, 0x18, 0xfffffffffffffffc}], &(0x7f0000000040)='syzkaller\x00', 0x3f, 0xd1, &(0x7f0000000180)=""/209, 0x41000, 0x10882ddb6341d976, '\x00', 0x0, 0x1c, r1, 0x8, &(0x7f00000000c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0xc, 0x6, 0xffff7fff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)=[r2, 0xffffffffffffffff, 0x1, r3, 0x1, r4, r5, 0x1]}, 0x80) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:36:20 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x1, 0x1f}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000080)=@mmap={0x14b, 0x1, 0x4, 0x40, 0x4, {r1, r2/1000+60000}, {0x4, 0x2, 0x0, 0x3, 0x1, 0x6, "8b3d0afa"}, 0x9}) 23:36:20 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000240)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000a40)) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000940), 0x20001, 0x0) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x1, &(0x7f0000000740)=@raw=[@call={0x85, 0x0, 0x0, 0x2c}], &(0x7f0000000780)='syzkaller\x00', 0x6, 0xd4, &(0x7f00000007c0)=""/212, 0x41100, 0x8, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000900)={0x0, 0x3, 0x8, 0x7fff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000980)=[r2, r2, r6, r7]}, 0x80) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000004c0), 0x80200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x19, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000200000000000008070000007455000101000000185a00000a00000000000000000000004c360001000000008520000002000000950000000000002588b5aca77d230220f987df2b2610f76b804db47aa9b772e6583f565dfce9e01ffd7b85a619ba2f7e82123d7b598e38847118ad6c5181bf368ce757a52bd97787efda66e8a1f8f92f858d80939b211477b6523cd5be17a7120a534cad5e3409d90a867579f6431108f4a497b81f7661ac737cafbfb65a44eab038ea06189be2d71c7b5d158dabb6881c577d0e329847f902a5433d762110484d91a7b9f234d446d22b6300"], &(0x7f0000000080)='syzkaller\x00', 0xfffffbff, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0x0, 0x2, 0x9}, 0x10, r1, 0xffffffffffffffff, 0x0, &(0x7f0000000500)=[0x1, r2, 0x1, r8, 0xffffffffffffffff, r9]}, 0x80) r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) write$tcp_mem(r10, &(0x7f00000006c0)={0x0, 0x20, 0x574fe0d2, 0x20, 0xa4aa}, 0x48) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:36:20 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x35a, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x2, @sdr={0x0, 0x1}}) 23:36:20 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x1, "475d003fe11e089bc305dfd01ea9c23ddea78ab4220200000000000000001de0", 0x34324948}) 23:36:20 executing program 3: socketpair(0x23, 0xdb, 0x7fffffff, &(0x7f0000000100)) 23:36:20 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4000000}}, 0x100, 0xee0}, 0x90) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0x3, 0x28d1, 0x4, {0x2, @sdr={0x47504a4d, 0x1000}}, 0x172e}) socket$inet_dccp(0x2, 0x6, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) setsockopt$inet_dccp_buf(r2, 0x21, 0x2, &(0x7f00000000c0), 0x0) 23:36:20 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000240)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) (async) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000a40)) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) (async) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000940), 0x20001, 0x0) (async) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x1, &(0x7f0000000740)=@raw=[@call={0x85, 0x0, 0x0, 0x2c}], &(0x7f0000000780)='syzkaller\x00', 0x6, 0xd4, &(0x7f00000007c0)=""/212, 0x41100, 0x8, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000900)={0x0, 0x3, 0x8, 0x7fff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000980)=[r2, r2, r6, r7]}, 0x80) (async) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000004c0), 0x80200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x19, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000200000000000008070000007455000101000000185a00000a00000000000000000000004c360001000000008520000002000000950000000000002588b5aca77d230220f987df2b2610f76b804db47aa9b772e6583f565dfce9e01ffd7b85a619ba2f7e82123d7b598e38847118ad6c5181bf368ce757a52bd97787efda66e8a1f8f92f858d80939b211477b6523cd5be17a7120a534cad5e3409d90a867579f6431108f4a497b81f7661ac737cafbfb65a44eab038ea06189be2d71c7b5d158dabb6881c577d0e329847f902a5433d762110484d91a7b9f234d446d22b6300"], &(0x7f0000000080)='syzkaller\x00', 0xfffffbff, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0x0, 0x2, 0x9}, 0x10, r1, 0xffffffffffffffff, 0x0, &(0x7f0000000500)=[0x1, r2, 0x1, r8, 0xffffffffffffffff, r9]}, 0x80) (async) r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) write$tcp_mem(r10, &(0x7f00000006c0)={0x0, 0x20, 0x574fe0d2, 0x20, 0xa4aa}, 0x48) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:36:20 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x1, 0x1f}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000080)=@mmap={0x14b, 0x1, 0x4, 0x40, 0x4, {r1, r2/1000+60000}, {0x4, 0x2, 0x0, 0x3, 0x1, 0x6, "8b3d0afa"}, 0x9}) 23:36:20 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x1, "475d003fe11e089bc305dfd01ea9c23ddea78ab4220200000000000000001de0", 0x34324948}) 23:36:20 executing program 3: socketpair(0x23, 0xdc, 0x7fffffff, &(0x7f0000000100)) 23:36:20 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x35a, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x2, @sdr}) 23:36:20 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4000000}}, 0x100, 0xee0}, 0x90) (async, rerun: 32) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async, rerun: 64) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0x3, 0x28d1, 0x4, {0x2, @sdr={0x47504a4d, 0x1000}}, 0x172e}) (async, rerun: 64) socket$inet_dccp(0x2, 0x6, 0x0) (async, rerun: 32) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) setsockopt$inet_dccp_buf(r2, 0x21, 0x2, &(0x7f00000000c0), 0x0) 23:36:20 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r1, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) 23:36:20 executing program 1: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5015, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000040)) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:20 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:20 executing program 3: socketpair(0x23, 0xdd, 0x7fffffff, &(0x7f0000000100)) 23:36:20 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000240)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000a40)) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000940), 0x20001, 0x0) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x1, &(0x7f0000000740)=@raw=[@call={0x85, 0x0, 0x0, 0x2c}], &(0x7f0000000780)='syzkaller\x00', 0x6, 0xd4, &(0x7f00000007c0)=""/212, 0x41100, 0x8, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000900)={0x0, 0x3, 0x8, 0x7fff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000980)=[r2, r2, r6, r7]}, 0x80) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000004c0), 0x80200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x19, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000200000000000008070000007455000101000000185a00000a00000000000000000000004c360001000000008520000002000000950000000000002588b5aca77d230220f987df2b2610f76b804db47aa9b772e6583f565dfce9e01ffd7b85a619ba2f7e82123d7b598e38847118ad6c5181bf368ce757a52bd97787efda66e8a1f8f92f858d80939b211477b6523cd5be17a7120a534cad5e3409d90a867579f6431108f4a497b81f7661ac737cafbfb65a44eab038ea06189be2d71c7b5d158dabb6881c577d0e329847f902a5433d762110484d91a7b9f234d446d22b6300"], &(0x7f0000000080)='syzkaller\x00', 0xfffffbff, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0x0, 0x2, 0x9}, 0x10, r1, 0xffffffffffffffff, 0x0, &(0x7f0000000500)=[0x1, r2, 0x1, r8, 0xffffffffffffffff, r9]}, 0x80) r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) write$tcp_mem(r10, &(0x7f00000006c0)={0x0, 0x20, 0x574fe0d2, 0x20, 0xa4aa}, 0x48) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000240)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) (async) ioctl$sock_inet_udp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000a40)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000940), 0x20001, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x1, &(0x7f0000000740)=@raw=[@call={0x85, 0x0, 0x0, 0x2c}], &(0x7f0000000780)='syzkaller\x00', 0x6, 0xd4, &(0x7f00000007c0)=""/212, 0x41100, 0x8, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000900)={0x0, 0x3, 0x8, 0x7fff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000980)=[r2, r2, r6, r7]}, 0x80) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000004c0), 0x80200, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x19, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000200000000000008070000007455000101000000185a00000a00000000000000000000004c360001000000008520000002000000950000000000002588b5aca77d230220f987df2b2610f76b804db47aa9b772e6583f565dfce9e01ffd7b85a619ba2f7e82123d7b598e38847118ad6c5181bf368ce757a52bd97787efda66e8a1f8f92f858d80939b211477b6523cd5be17a7120a534cad5e3409d90a867579f6431108f4a497b81f7661ac737cafbfb65a44eab038ea06189be2d71c7b5d158dabb6881c577d0e329847f902a5433d762110484d91a7b9f234d446d22b6300"], &(0x7f0000000080)='syzkaller\x00', 0xfffffbff, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0x0, 0x2, 0x9}, 0x10, r1, 0xffffffffffffffff, 0x0, &(0x7f0000000500)=[0x1, r2, 0x1, r8, 0xffffffffffffffff, r9]}, 0x80) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) (async) write$tcp_mem(r10, &(0x7f00000006c0)={0x0, 0x20, 0x574fe0d2, 0x20, 0xa4aa}, 0x48) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) 23:36:20 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r1, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) 23:36:20 executing program 1: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5015, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000040)) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:20 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4000000}}, 0x100, 0xee0}, 0x90) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0x3, 0x28d1, 0x4, {0x2, @sdr={0x47504a4d, 0x1000}}, 0x172e}) (async) socket$inet_dccp(0x2, 0x6, 0x0) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) setsockopt$inet_dccp_buf(r2, 0x21, 0x2, &(0x7f00000000c0), 0x0) 23:36:20 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0xc00, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:20 executing program 3: socketpair(0x23, 0xde, 0x7fffffff, &(0x7f0000000100)) 23:36:21 executing program 1: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5015, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000040)) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5015, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000040)) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:36:21 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r1, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r1, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) (async) 23:36:21 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @discrete={0x4, 0xf7a}}) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0xffffffff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000080)={0x0, 0x52424752, 0x2, @stepwise={0x1, 0x2, 0x2, 0x27, 0x2, 0x4a86}}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000001c0)=@multiplanar_overlay={0xfc, 0x1, 0x4, 0x10, 0x6a1, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x1, 0x43, 0x61, "567be9f6"}, 0x4, 0x3, {&(0x7f00000000c0)=[{0x1, 0xda, {0x98}, 0x3}, {0x4f1c, 0xb1, {0x7}, 0x3}]}, 0x1, 0x0, r2}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:36:21 executing program 3: socketpair(0x23, 0xdf, 0x7fffffff, &(0x7f0000000100)) 23:36:21 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:21 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0xc00, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:21 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @discrete={0x4, 0xf7a}}) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0xffffffff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000080)={0x0, 0x52424752, 0x2, @stepwise={0x1, 0x2, 0x2, 0x27, 0x2, 0x4a86}}) (async, rerun: 64) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000001c0)=@multiplanar_overlay={0xfc, 0x1, 0x4, 0x10, 0x6a1, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x1, 0x43, 0x61, "567be9f6"}, 0x4, 0x3, {&(0x7f00000000c0)=[{0x1, 0xda, {0x98}, 0x3}, {0x4f1c, 0xb1, {0x7}, 0x3}]}, 0x1, 0x0, r2}) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:36:21 executing program 0: ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0xffffffe1, 0x5}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000080)={0x5, 0xb5315241, 0x400, 0x6, 0x3, @discrete={0x7, 0x3}}) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000180)={0x420, "f098408b8a6f9ed9a5d9bb77816a9e7af54b3ebcd0d35022bba59bf747cb791b", 0x2, 0x7fff, 0x34d, 0x4000, 0x4}) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000200)={0x0, 0x1, @raw_data=[0x5, 0x7, 0x0, 0xa136, 0x6, 0x6, 0x6, 0xe02, 0x7, 0x5, 0x5d84, 0x0, 0x401, 0x3, 0x20, 0xaf9]}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:21 executing program 3: socketpair(0x23, 0xe0, 0x7fffffff, &(0x7f0000000100)) 23:36:21 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0xc00, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:21 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:21 executing program 0: ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0xffffffe1, 0x5}) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000080)={0x5, 0xb5315241, 0x400, 0x6, 0x3, @discrete={0x7, 0x3}}) (async) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000180)={0x420, "f098408b8a6f9ed9a5d9bb77816a9e7af54b3ebcd0d35022bba59bf747cb791b", 0x2, 0x7fff, 0x34d, 0x4000, 0x4}) (async) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000200)={0x0, 0x1, @raw_data=[0x5, 0x7, 0x0, 0xa136, 0x6, 0x6, 0x6, 0xe02, 0x7, 0x5, 0x5d84, 0x0, 0x401, 0x3, 0x20, 0xaf9]}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:21 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x4040, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000180)={0x3, @pix={0x9, 0x3, 0x31435750, 0x1, 0x100, 0xfffffffb, 0xb, 0x6, 0x0, 0x7, 0x0, 0x2}}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x40) 23:36:21 executing program 3: socketpair(0x23, 0xe1, 0x7fffffff, &(0x7f0000000100)) 23:36:21 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @discrete={0x4, 0xf7a}}) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0xffffffff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000080)={0x0, 0x52424752, 0x2, @stepwise={0x1, 0x2, 0x2, 0x27, 0x2, 0x4a86}}) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000001c0)=@multiplanar_overlay={0xfc, 0x1, 0x4, 0x10, 0x6a1, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x1, 0x43, 0x61, "567be9f6"}, 0x4, 0x3, {&(0x7f00000000c0)=[{0x1, 0xda, {0x98}, 0x3}, {0x4f1c, 0xb1, {0x7}, 0x3}]}, 0x1, 0x0, r2}) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:36:21 executing program 5: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0x40045613, &(0x7f0000000140)={0xc00, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:21 executing program 0: ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0xffffffe1, 0x5}) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000080)={0x5, 0xb5315241, 0x400, 0x6, 0x3, @discrete={0x7, 0x3}}) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000180)={0x420, "f098408b8a6f9ed9a5d9bb77816a9e7af54b3ebcd0d35022bba59bf747cb791b", 0x2, 0x7fff, 0x34d, 0x4000, 0x4}) (async) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000200)={0x0, 0x1, @raw_data=[0x5, 0x7, 0x0, 0xa136, 0x6, 0x6, 0x6, 0xe02, 0x7, 0x5, 0x5d84, 0x0, 0x401, 0x3, 0x20, 0xaf9]}) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:21 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:21 executing program 3: socketpair(0x23, 0xe2, 0x7fffffff, &(0x7f0000000100)) 23:36:21 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise={0x24, 0x75e75ca6, 0x89a0, 0x2, 0x4, 0x2}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000001c0)={0x1, @vbi={0x102, 0x1, 0x8, 0x32525942, [0x3ff, 0x2], [0x7, 0x13b6], 0x108}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x7, 0x0, 0x2, "2774fc18d2f41d584e7798480b092fa7fa8914ccbcaea102ba1d09f1d46fe889", 0x39555659}) 23:36:21 executing program 5: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0x40045613, &(0x7f0000000140)={0xc00, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:21 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x9, 0x8000}) 23:36:21 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:21 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async, rerun: 32) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x4040, 0x0) (rerun: 32) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000180)={0x3, @pix={0x9, 0x3, 0x31435750, 0x1, 0x100, 0xfffffffb, 0xb, 0x6, 0x0, 0x7, 0x0, 0x2}}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x40) 23:36:21 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise={0x24, 0x75e75ca6, 0x89a0, 0x2, 0x4, 0x2}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000001c0)={0x1, @vbi={0x102, 0x1, 0x8, 0x32525942, [0x3ff, 0x2], [0x7, 0x13b6], 0x108}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x7, 0x0, 0x2, "2774fc18d2f41d584e7798480b092fa7fa8914ccbcaea102ba1d09f1d46fe889", 0x39555659}) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise={0x24, 0x75e75ca6, 0x89a0, 0x2, 0x4, 0x2}}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000001c0)={0x1, @vbi={0x102, 0x1, 0x8, 0x32525942, [0x3ff, 0x2], [0x7, 0x13b6], 0x108}}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x7, 0x0, 0x2, "2774fc18d2f41d584e7798480b092fa7fa8914ccbcaea102ba1d09f1d46fe889", 0x39555659}) (async) 23:36:21 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x9, 0x8000}) 23:36:21 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:21 executing program 3: socketpair(0x23, 0xe3, 0x7fffffff, &(0x7f0000000100)) 23:36:21 executing program 5: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0x40045613, &(0x7f0000000140)={0xc00, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:21 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x4040, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000180)={0x3, @pix={0x9, 0x3, 0x31435750, 0x1, 0x100, 0xfffffffb, 0xb, 0x6, 0x0, 0x7, 0x0, 0x2}}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x40) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x4040, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000180)={0x3, @pix={0x9, 0x3, 0x31435750, 0x1, 0x100, 0xfffffffb, 0xb, 0x6, 0x0, 0x7, 0x0, 0x2}}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) (async) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x40) (async) 23:36:21 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x9, 0x8000}) 23:36:21 executing program 3: socketpair(0x23, 0xe4, 0x7fffffff, &(0x7f0000000100)) 23:36:21 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:36:21 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise={0x24, 0x75e75ca6, 0x89a0, 0x2, 0x4, 0x2}}) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000001c0)={0x1, @vbi={0x102, 0x1, 0x8, 0x32525942, [0x3ff, 0x2], [0x7, 0x13b6], 0x108}}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x7, 0x0, 0x2, "2774fc18d2f41d584e7798480b092fa7fa8914ccbcaea102ba1d09f1d46fe889", 0x39555659}) 23:36:21 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0xc00, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:21 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000180)=@multiplanar_overlay={0x10001, 0x1, 0x4, 0x4, 0x1f, {r1, r2/1000+60000}, {0x3, 0x2, 0x7, 0xbe, 0xfa, 0x1}, 0x1001, 0x3, {&(0x7f0000000040)=[{0x3, 0x10001, {}, 0x2}, {0x6, 0x84, {0x1}, 0x8001}]}, 0x3}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:21 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) bind$tipc(r1, 0x0, 0x0) 23:36:21 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0xc00, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:21 executing program 3: socketpair(0x23, 0xe5, 0x7fffffff, &(0x7f0000000100)) 23:36:21 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000180)=@multiplanar_overlay={0x10001, 0x1, 0x4, 0x4, 0x1f, {r1, r2/1000+60000}, {0x3, 0x2, 0x7, 0xbe, 0xfa, 0x1}, 0x1001, 0x3, {&(0x7f0000000040)=[{0x3, 0x10001, {}, 0x2}, {0x6, 0x84, {0x1}, 0x8001}]}, 0x3}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:21 executing program 4: ioctl$VIDIOC_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000000040)) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:36:21 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) bind$tipc(r1, 0x0, 0x0) 23:36:21 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000080), 0x10) socket$l2tp6(0xa, 0x2, 0x73) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:21 executing program 3: socketpair(0x23, 0xe6, 0x7fffffff, &(0x7f0000000100)) 23:36:21 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0xc00, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:21 executing program 4: ioctl$VIDIOC_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000000040)) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) ioctl$VIDIOC_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000000040)) (async) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) 23:36:21 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000180)=@multiplanar_overlay={0x10001, 0x1, 0x4, 0x4, 0x1f, {r1, r2/1000+60000}, {0x3, 0x2, 0x7, 0xbe, 0xfa, 0x1}, 0x1001, 0x3, {&(0x7f0000000040)=[{0x3, 0x10001, {}, 0x2}, {0x6, 0x84, {0x1}, 0x8001}]}, 0x3}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) clock_gettime(0x0, &(0x7f0000000000)) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000180)=@multiplanar_overlay={0x10001, 0x1, 0x4, 0x4, 0x1f, {r1, r2/1000+60000}, {0x3, 0x2, 0x7, 0xbe, 0xfa, 0x1}, 0x1001, 0x3, {&(0x7f0000000040)=[{0x3, 0x10001, {}, 0x2}, {0x6, 0x84, {0x1}, 0x8001}]}, 0x3}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:36:22 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) bind$tipc(r1, 0x0, 0x0) 23:36:22 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000080), 0x10) socket$l2tp6(0xa, 0x2, 0x73) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) connect$can_bcm(r2, &(0x7f0000000080), 0x10) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000000)) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:36:22 executing program 3: socketpair(0x23, 0xe7, 0x7fffffff, &(0x7f0000000100)) 23:36:22 executing program 4: ioctl$VIDIOC_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000000040)) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:36:22 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0x40045613, &(0x7f0000000140)={0xc00, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:22 executing program 3: socketpair(0x23, 0xe8, 0x7fffffff, &(0x7f0000000100)) 23:36:22 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x4002, 0x2, 0x7, "475d003fe11ed59bb805dfd0d9892f7200000000220000000000000000001d83", 0x34325241}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000280)={0x1, @win={{0x21800000, 0x1ff, 0x6, 0x7fffffff}, 0x0, 0x7, &(0x7f00000000c0)={{0x3, 0x9, 0xfff, 0x1f}, &(0x7f0000000080)={{0x7, 0xfffffffd, 0xfffffd53, 0x1}, &(0x7f0000000040)={{0x2000000, 0x9, 0x1, 0x1ff}}}}, 0x100, &(0x7f0000000180)="09672aa069585371f4bfb195f690b572d8e6aab6e393c6fbac77a6e20f5d85ce30cc5b42795a84d2d86cfc921e83974e746910918a45e1a481d9e884e26fb691b67afc57f29a5ea597c5f9364dba64b92d342d363957ff34f69bb8b5850d452962a4a5ec5e1d639567580a7a36771aa89af2fcc7a94306b96d0ed34398d270cf8575749fc5f212ec814b1457706d61730b8d2dbb42efa799c9acfcc6517c560d7139f5caf8ba51638b24d4b79d113cabceeb9dcd6c78f6530b9aa11c8dd006aaa41ddf23b3c48686af77ec97850db204d677f01534f9e9baca9067191f", 0x8}}) 23:36:22 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000040)={0x3, 0x1, 0x0, "475d003fe11ed59bb805dfd0f1c62f720d24eb1cbcaac2010000000000001de0"}) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x8, 0x0, 0x2, "c2f302dd02e26f582cbd6b8b19b14dcf41a3cacd955245ee744185e8fb711c4c", 0x59565955}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 23:36:22 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0x40045613, &(0x7f0000000140)={0xc00, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:22 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000080), 0x10) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000000)) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:22 executing program 3: socketpair(0x23, 0xe9, 0x7fffffff, &(0x7f0000000100)) 23:36:22 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x4002, 0x2, 0x7, "475d003fe11ed59bb805dfd0d9892f7200000000220000000000000000001d83", 0x34325241}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000280)={0x1, @win={{0x21800000, 0x1ff, 0x6, 0x7fffffff}, 0x0, 0x7, &(0x7f00000000c0)={{0x3, 0x9, 0xfff, 0x1f}, &(0x7f0000000080)={{0x7, 0xfffffffd, 0xfffffd53, 0x1}, &(0x7f0000000040)={{0x2000000, 0x9, 0x1, 0x1ff}}}}, 0x100, &(0x7f0000000180)="09672aa069585371f4bfb195f690b572d8e6aab6e393c6fbac77a6e20f5d85ce30cc5b42795a84d2d86cfc921e83974e746910918a45e1a481d9e884e26fb691b67afc57f29a5ea597c5f9364dba64b92d342d363957ff34f69bb8b5850d452962a4a5ec5e1d639567580a7a36771aa89af2fcc7a94306b96d0ed34398d270cf8575749fc5f212ec814b1457706d61730b8d2dbb42efa799c9acfcc6517c560d7139f5caf8ba51638b24d4b79d113cabceeb9dcd6c78f6530b9aa11c8dd006aaa41ddf23b3c48686af77ec97850db204d677f01534f9e9baca9067191f", 0x8}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x4002, 0x2, 0x7, "475d003fe11ed59bb805dfd0d9892f7200000000220000000000000000001d83", 0x34325241}) (async) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000280)={0x1, @win={{0x21800000, 0x1ff, 0x6, 0x7fffffff}, 0x0, 0x7, &(0x7f00000000c0)={{0x3, 0x9, 0xfff, 0x1f}, &(0x7f0000000080)={{0x7, 0xfffffffd, 0xfffffd53, 0x1}, &(0x7f0000000040)={{0x2000000, 0x9, 0x1, 0x1ff}}}}, 0x100, &(0x7f0000000180)="09672aa069585371f4bfb195f690b572d8e6aab6e393c6fbac77a6e20f5d85ce30cc5b42795a84d2d86cfc921e83974e746910918a45e1a481d9e884e26fb691b67afc57f29a5ea597c5f9364dba64b92d342d363957ff34f69bb8b5850d452962a4a5ec5e1d639567580a7a36771aa89af2fcc7a94306b96d0ed34398d270cf8575749fc5f212ec814b1457706d61730b8d2dbb42efa799c9acfcc6517c560d7139f5caf8ba51638b24d4b79d113cabceeb9dcd6c78f6530b9aa11c8dd006aaa41ddf23b3c48686af77ec97850db204d677f01534f9e9baca9067191f", 0x8}}) (async) 23:36:22 executing program 4: ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x4, 0x5, 0x3001, 0x7, 0x5, 0x1, 0x2, 0x6}}) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x4ae, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise={0x0, 0x0, 0x7, 0x1}}) 23:36:22 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000040)={0x3, 0x1, 0x0, "475d003fe11ed59bb805dfd0f1c62f720d24eb1cbcaac2010000000000001de0"}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x8, 0x0, 0x2, "c2f302dd02e26f582cbd6b8b19b14dcf41a3cacd955245ee744185e8fb711c4c", 0x59565955}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 23:36:22 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000000)={0x1, 0x0, {0x4, 0xfff, 0x3004, 0x0, 0x2, 0x8, 0x2}}) 23:36:22 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0x40045613, &(0x7f0000000140)={0xc00, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:22 executing program 3: socketpair(0x23, 0xea, 0x7fffffff, &(0x7f0000000100)) 23:36:22 executing program 4: ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x4, 0x5, 0x3001, 0x7, 0x5, 0x1, 0x2, 0x6}}) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x4ae, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise={0x0, 0x0, 0x7, 0x1}}) 23:36:22 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x4002, 0x2, 0x7, "475d003fe11ed59bb805dfd0d9892f7200000000220000000000000000001d83", 0x34325241}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000280)={0x1, @win={{0x21800000, 0x1ff, 0x6, 0x7fffffff}, 0x0, 0x7, &(0x7f00000000c0)={{0x3, 0x9, 0xfff, 0x1f}, &(0x7f0000000080)={{0x7, 0xfffffffd, 0xfffffd53, 0x1}, &(0x7f0000000040)={{0x2000000, 0x9, 0x1, 0x1ff}}}}, 0x100, &(0x7f0000000180)="09672aa069585371f4bfb195f690b572d8e6aab6e393c6fbac77a6e20f5d85ce30cc5b42795a84d2d86cfc921e83974e746910918a45e1a481d9e884e26fb691b67afc57f29a5ea597c5f9364dba64b92d342d363957ff34f69bb8b5850d452962a4a5ec5e1d639567580a7a36771aa89af2fcc7a94306b96d0ed34398d270cf8575749fc5f212ec814b1457706d61730b8d2dbb42efa799c9acfcc6517c560d7139f5caf8ba51638b24d4b79d113cabceeb9dcd6c78f6530b9aa11c8dd006aaa41ddf23b3c48686af77ec97850db204d677f01534f9e9baca9067191f", 0x8}}) 23:36:22 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000040)={0x3, 0x1, 0x0, "475d003fe11ed59bb805dfd0f1c62f720d24eb1cbcaac2010000000000001de0"}) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x8, 0x0, 0x2, "c2f302dd02e26f582cbd6b8b19b14dcf41a3cacd955245ee744185e8fb711c4c", 0x59565955}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000040)={0x3, 0x1, 0x0, "475d003fe11ed59bb805dfd0f1c62f720d24eb1cbcaac2010000000000001de0"}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x8, 0x0, 0x2, "c2f302dd02e26f582cbd6b8b19b14dcf41a3cacd955245ee744185e8fb711c4c", 0x59565955}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) 23:36:22 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, 0x0) 23:36:22 executing program 4: ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x4, 0x5, 0x3001, 0x7, 0x5, 0x1, 0x2, 0x6}}) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x4ae, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise={0x0, 0x0, 0x7, 0x1}}) 23:36:22 executing program 3: socketpair(0x23, 0xeb, 0x7fffffff, &(0x7f0000000100)) 23:36:22 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000000)={0x1, 0x0, {0x4, 0xfff, 0x3004, 0x0, 0x2, 0x8, 0x2}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000000)={0x1, 0x0, {0x4, 0xfff, 0x3004, 0x0, 0x2, 0x8, 0x2}}) (async) 23:36:22 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000001c0)={0x2, 0x200, 0x400}) socket$inet(0x2, 0x1, 0x600) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x208000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000240)={0x0, 0x1, r2}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r3, 0xc01064c1, &(0x7f0000000280)={r4}) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r5, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r6}) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000180), &(0x7f00000000c0)=0x8) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x30314442}) 23:36:22 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) setsockopt$inet_dccp_buf(r2, 0x21, 0xd, &(0x7f0000000180)="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", 0x1000) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r1, r0, 0x0, r0}, 0x10) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0ebc62f72000000002200"}) 23:36:22 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, 0x0) 23:36:22 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000000)={0x1, 0x0, {0x4, 0xfff, 0x3004, 0x0, 0x2, 0x8, 0x2}}) 23:36:22 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000001c0)={0x2, 0x200, 0x400}) socket$inet(0x2, 0x1, 0x600) r1 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x208000, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000240)={0x0, 0x1, r2}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r3, 0xc01064c1, &(0x7f0000000280)={r4}) (async) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) (async) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r5, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r6}) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8) (async) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x0) (async) getsockopt$inet_sctp_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000180), &(0x7f00000000c0)=0x8) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x30314442}) 23:36:22 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x8, 0x2, 0x2}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x1d, r2}, 0x10, &(0x7f00000004c0)={&(0x7f0000000440)={0x4, 0x480, 0x0, {0x77359400}, {r3, r4/1000+60000}, {0x1}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "4c1935d4caa4a5e5"}}, 0x48}, 0x1, 0x0, 0x0, 0x41}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000580)=0x2, 0x4) 23:36:22 executing program 3: socketpair(0x23, 0xec, 0x7fffffff, &(0x7f0000000100)) 23:36:22 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async, rerun: 64) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async, rerun: 32) setsockopt$inet_dccp_buf(r2, 0x21, 0xd, &(0x7f0000000180)="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", 0x1000) (rerun: 32) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r1, r0, 0x0, r0}, 0x10) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0ebc62f72000000002200"}) 23:36:22 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, 0x0) 23:36:22 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x0, 0x3f, 0x3, {0x2, @sliced={0x0, [0xc067, 0x401, 0x7fff, 0x8, 0x8, 0x7, 0x0, 0x6, 0x1000, 0x4, 0x5, 0x3, 0xfff7, 0x1, 0x40, 0x7, 0x4, 0x5, 0x4, 0xfeff, 0x140, 0x8, 0x9, 0x8000, 0x6, 0x7, 0x4, 0x0, 0x1, 0x6, 0x7f, 0x8, 0x6, 0x6, 0x100, 0x5, 0x6, 0x81, 0x1ff, 0x2, 0xe23, 0x200, 0x6, 0x5, 0x100, 0x6, 0x3f, 0x8064], 0x1}}, 0x33e}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$SYNC_IOC_FILE_INFO(r2, 0xc0383e04, &(0x7f0000000180)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)=[{}]}) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000000)={0x61d4, 0x34363248, 0x3, @discrete={0xed08, 0x3}}) 23:36:22 executing program 3: socketpair(0x23, 0xed, 0x7fffffff, &(0x7f0000000100)) 23:36:22 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000001c0)={0x2, 0x200, 0x400}) socket$inet(0x2, 0x1, 0x600) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x208000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000240)={0x0, 0x1, r2}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r3, 0xc01064c1, &(0x7f0000000280)={r4}) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r5, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r6}) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000180), &(0x7f00000000c0)=0x8) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x30314442}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000001c0)={0x2, 0x200, 0x400}) (async) socket$inet(0x2, 0x1, 0x600) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x208000, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000240)={0x0, 0x1, r2}) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r3, 0xc01064c1, &(0x7f0000000280)={r4}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r5, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r6}) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x0) (async) getsockopt$inet_sctp_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000180), &(0x7f00000000c0)=0x8) (async) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x30314442}) (async) 23:36:22 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async, rerun: 64) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async, rerun: 64) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async, rerun: 64) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) setsockopt$inet_dccp_buf(r2, 0x21, 0xd, &(0x7f0000000180)="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", 0x1000) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r1, r0, 0x0, r0}, 0x10) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0ebc62f72000000002200"}) 23:36:22 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x8, 0x2, 0x2}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x1d, r2}, 0x10, &(0x7f00000004c0)={&(0x7f0000000440)={0x4, 0x480, 0x0, {0x77359400}, {r3, r4/1000+60000}, {0x1}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "4c1935d4caa4a5e5"}}, 0x48}, 0x1, 0x0, 0x0, 0x41}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000580)=0x2, 0x4) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x8, 0x2, 0x2}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) (async) clock_gettime(0x0, &(0x7f0000000400)) (async) sendmsg$can_bcm(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x1d, r2}, 0x10, &(0x7f00000004c0)={&(0x7f0000000440)={0x4, 0x480, 0x0, {0x77359400}, {r3, r4/1000+60000}, {0x1}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "4c1935d4caa4a5e5"}}, 0x48}, 0x1, 0x0, 0x0, 0x41}, 0x10) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) (async) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000580)=0x2, 0x4) (async) 23:36:22 executing program 3: socketpair(0x23, 0xee, 0x7fffffff, &(0x7f0000000100)) 23:36:22 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x0, 0x3f, 0x3, {0x2, @sliced={0x0, [0xc067, 0x401, 0x7fff, 0x8, 0x8, 0x7, 0x0, 0x6, 0x1000, 0x4, 0x5, 0x3, 0xfff7, 0x1, 0x40, 0x7, 0x4, 0x5, 0x4, 0xfeff, 0x140, 0x8, 0x9, 0x8000, 0x6, 0x7, 0x4, 0x0, 0x1, 0x6, 0x7f, 0x8, 0x6, 0x6, 0x100, 0x5, 0x6, 0x81, 0x1ff, 0x2, 0xe23, 0x200, 0x6, 0x5, 0x100, 0x6, 0x3f, 0x8064], 0x1}}, 0x33e}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$SYNC_IOC_FILE_INFO(r2, 0xc0383e04, &(0x7f0000000180)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)=[{}]}) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000000)={0x61d4, 0x34363248, 0x3, @discrete={0xed08, 0x3}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x0, 0x3f, 0x3, {0x2, @sliced={0x0, [0xc067, 0x401, 0x7fff, 0x8, 0x8, 0x7, 0x0, 0x6, 0x1000, 0x4, 0x5, 0x3, 0xfff7, 0x1, 0x40, 0x7, 0x4, 0x5, 0x4, 0xfeff, 0x140, 0x8, 0x9, 0x8000, 0x6, 0x7, 0x4, 0x0, 0x1, 0x6, 0x7f, 0x8, 0x6, 0x6, 0x100, 0x5, 0x6, 0x81, 0x1ff, 0x2, 0xe23, 0x200, 0x6, 0x5, 0x100, 0x6, 0x3f, 0x8064], 0x1}}, 0x33e}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$SYNC_IOC_FILE_INFO(r2, 0xc0383e04, &(0x7f0000000180)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)=[{}]}) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000000)={0x61d4, 0x34363248, 0x3, @discrete={0xed08, 0x3}}) (async) 23:36:22 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:22 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x42200, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f00000000c0)={0x7, 0x5, 0x3}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000740)='syz1\x00') sendmsg$tipc(r0, &(0x7f0000000700)={&(0x7f00000004c0)=@name={0x1e, 0x2, 0x0, {{0x0, 0x4}, 0x1}}, 0x10, &(0x7f0000000600), 0x0, &(0x7f0000000640)="c27b5f755a6f7a7e51d23d45f7a4525f312031490f540b00e482fd36ee3de493145e368f2d6394664af9346f9cd3bf2c82d3b32f2edaeb12a1e928a5621caa25af9ec31212e854e0d7e7fe3e4a26fe6962e5e30eb2922f64cefd3067f52fb9255f2f7c01e3b5c9e859d80a54906191f6b6dc9dd8f086572ed09b8cd5b9760609f248086adf103e82a6aed9d828c70f92eeb9112dc6c17aa70b14dfeb03f4f876e2388771bb", 0xa5, 0x8008}, 0x20004010) ioctl$PTP_ENABLE_PPS(r0, 0x40043d04, 0x1) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f0000000180)={0x11}) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000780)={0x0, r2}, 0x10) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x3) 23:36:22 executing program 3: socketpair(0x23, 0xef, 0x7fffffff, &(0x7f0000000100)) 23:36:22 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x8, 0x2, 0x2}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) (async) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x1d, r2}, 0x10, &(0x7f00000004c0)={&(0x7f0000000440)={0x4, 0x480, 0x0, {0x77359400}, {r3, r4/1000+60000}, {0x1}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "4c1935d4caa4a5e5"}}, 0x48}, 0x1, 0x0, 0x0, 0x41}, 0x10) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000580)=0x2, 0x4) 23:36:22 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:22 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x0, 0x3f, 0x3, {0x2, @sliced={0x0, [0xc067, 0x401, 0x7fff, 0x8, 0x8, 0x7, 0x0, 0x6, 0x1000, 0x4, 0x5, 0x3, 0xfff7, 0x1, 0x40, 0x7, 0x4, 0x5, 0x4, 0xfeff, 0x140, 0x8, 0x9, 0x8000, 0x6, 0x7, 0x4, 0x0, 0x1, 0x6, 0x7f, 0x8, 0x6, 0x6, 0x100, 0x5, 0x6, 0x81, 0x1ff, 0x2, 0xe23, 0x200, 0x6, 0x5, 0x100, 0x6, 0x3f, 0x8064], 0x1}}, 0x33e}) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$SYNC_IOC_FILE_INFO(r2, 0xc0383e04, &(0x7f0000000180)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)=[{}]}) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000000)={0x61d4, 0x34363248, 0x3, @discrete={0xed08, 0x3}}) 23:36:22 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000180)={0x1, @sliced={0x7, [0x5a48, 0x400, 0x7, 0xffff, 0x9, 0x1ff, 0x6000, 0x3, 0xfff, 0x0, 0x2, 0x1, 0x2b0, 0x401, 0x5, 0x6, 0xe2, 0x8, 0x0, 0xff, 0x401, 0x7, 0xe31, 0x6, 0x4, 0x1f, 0x4, 0x9, 0x4, 0x71, 0x2, 0x3, 0x40, 0x7, 0x0, 0x8, 0x132a, 0xfff, 0x5, 0x31b4, 0x1ff, 0x5, 0x0, 0x2, 0x6, 0x2, 0x7, 0x3ff], 0x1}}) ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, &(0x7f0000000000)={'\x00', 0x9c, 0x2, 0x3}) 23:36:22 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x42200, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f00000000c0)={0x7, 0x5, 0x3}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000740)='syz1\x00') sendmsg$tipc(r0, &(0x7f0000000700)={&(0x7f00000004c0)=@name={0x1e, 0x2, 0x0, {{0x0, 0x4}, 0x1}}, 0x10, &(0x7f0000000600), 0x0, &(0x7f0000000640)="c27b5f755a6f7a7e51d23d45f7a4525f312031490f540b00e482fd36ee3de493145e368f2d6394664af9346f9cd3bf2c82d3b32f2edaeb12a1e928a5621caa25af9ec31212e854e0d7e7fe3e4a26fe6962e5e30eb2922f64cefd3067f52fb9255f2f7c01e3b5c9e859d80a54906191f6b6dc9dd8f086572ed09b8cd5b9760609f248086adf103e82a6aed9d828c70f92eeb9112dc6c17aa70b14dfeb03f4f876e2388771bb", 0xa5, 0x8008}, 0x20004010) (async) ioctl$PTP_ENABLE_PPS(r0, 0x40043d04, 0x1) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f0000000180)={0x11}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000780)={0x0, r2}, 0x10) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x3) 23:36:22 executing program 3: socketpair(0x23, 0xf0, 0x7fffffff, &(0x7f0000000100)) 23:36:22 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000080)={0x400, 0x2, 0x3, "475d9f3fe11ed59bb80516f300002f7200000000220000000000070200001de0", 0x31364d59}) 23:36:22 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x1, @pix={0xfffffff8, 0x10001, 0x32315659, 0x7, 0x4, 0x80000000, 0x4, 0x1ff, 0x1, 0x3, 0x1}}) 23:36:22 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:22 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000180)={0x1, @sliced={0x7, [0x5a48, 0x400, 0x7, 0xffff, 0x9, 0x1ff, 0x6000, 0x3, 0xfff, 0x0, 0x2, 0x1, 0x2b0, 0x401, 0x5, 0x6, 0xe2, 0x8, 0x0, 0xff, 0x401, 0x7, 0xe31, 0x6, 0x4, 0x1f, 0x4, 0x9, 0x4, 0x71, 0x2, 0x3, 0x40, 0x7, 0x0, 0x8, 0x132a, 0xfff, 0x5, 0x31b4, 0x1ff, 0x5, 0x0, 0x2, 0x6, 0x2, 0x7, 0x3ff], 0x1}}) ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, &(0x7f0000000000)={'\x00', 0x9c, 0x2, 0x3}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000180)={0x1, @sliced={0x7, [0x5a48, 0x400, 0x7, 0xffff, 0x9, 0x1ff, 0x6000, 0x3, 0xfff, 0x0, 0x2, 0x1, 0x2b0, 0x401, 0x5, 0x6, 0xe2, 0x8, 0x0, 0xff, 0x401, 0x7, 0xe31, 0x6, 0x4, 0x1f, 0x4, 0x9, 0x4, 0x71, 0x2, 0x3, 0x40, 0x7, 0x0, 0x8, 0x132a, 0xfff, 0x5, 0x31b4, 0x1ff, 0x5, 0x0, 0x2, 0x6, 0x2, 0x7, 0x3ff], 0x1}}) (async) ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, &(0x7f0000000000)={'\x00', 0x9c, 0x2, 0x3}) (async) 23:36:22 executing program 3: socketpair(0x23, 0xf1, 0x7fffffff, &(0x7f0000000100)) 23:36:23 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x42200, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f00000000c0)={0x7, 0x5, 0x3}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000740)='syz1\x00') (async) sendmsg$tipc(r0, &(0x7f0000000700)={&(0x7f00000004c0)=@name={0x1e, 0x2, 0x0, {{0x0, 0x4}, 0x1}}, 0x10, &(0x7f0000000600), 0x0, &(0x7f0000000640)="c27b5f755a6f7a7e51d23d45f7a4525f312031490f540b00e482fd36ee3de493145e368f2d6394664af9346f9cd3bf2c82d3b32f2edaeb12a1e928a5621caa25af9ec31212e854e0d7e7fe3e4a26fe6962e5e30eb2922f64cefd3067f52fb9255f2f7c01e3b5c9e859d80a54906191f6b6dc9dd8f086572ed09b8cd5b9760609f248086adf103e82a6aed9d828c70f92eeb9112dc6c17aa70b14dfeb03f4f876e2388771bb", 0xa5, 0x8008}, 0x20004010) (async) ioctl$PTP_ENABLE_PPS(r0, 0x40043d04, 0x1) (async) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f0000000180)={0x11}) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000780)={0x0, r2}, 0x10) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x3) 23:36:23 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x1, @pix={0xfffffff8, 0x10001, 0x32315659, 0x7, 0x4, 0x80000000, 0x4, 0x1ff, 0x1, 0x3, 0x1}}) 23:36:23 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async, rerun: 32) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x2) (rerun: 32) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000180)={0x1, @sliced={0x7, [0x5a48, 0x400, 0x7, 0xffff, 0x9, 0x1ff, 0x6000, 0x3, 0xfff, 0x0, 0x2, 0x1, 0x2b0, 0x401, 0x5, 0x6, 0xe2, 0x8, 0x0, 0xff, 0x401, 0x7, 0xe31, 0x6, 0x4, 0x1f, 0x4, 0x9, 0x4, 0x71, 0x2, 0x3, 0x40, 0x7, 0x0, 0x8, 0x132a, 0xfff, 0x5, 0x31b4, 0x1ff, 0x5, 0x0, 0x2, 0x6, 0x2, 0x7, 0x3ff], 0x1}}) (async, rerun: 64) ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, &(0x7f0000000000)={'\x00', 0x9c, 0x2, 0x3}) (rerun: 64) 23:36:23 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async, rerun: 64) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000080)={0x400, 0x2, 0x3, "475d9f3fe11ed59bb80516f300002f7200000000220000000000070200001de0", 0x31364d59}) 23:36:23 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, 0x0) 23:36:23 executing program 3: socketpair(0x23, 0xf2, 0x7fffffff, &(0x7f0000000100)) 23:36:23 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x31363553}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @remote}}, 0x1e) 23:36:23 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x1, @pix={0xfffffff8, 0x10001, 0x32315659, 0x7, 0x4, 0x80000000, 0x4, 0x1ff, 0x1, 0x3, 0x1}}) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x1, @pix={0xfffffff8, 0x10001, 0x32315659, 0x7, 0x4, 0x80000000, 0x4, 0x1ff, 0x1, 0x3, 0x1}}) (async) 23:36:23 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0xffffffff, 0x1, 0x3, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x47524247}) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x2) 23:36:23 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:23 executing program 3: socketpair(0x23, 0xf3, 0x7fffffff, &(0x7f0000000100)) 23:36:23 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x31363553}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @remote}}, 0x1e) 23:36:23 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0xffffffff, 0x1, 0x3, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x47524247}) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0xffffffff, 0x1, 0x3, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x47524247}) (async) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x2) (async) 23:36:23 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x32315559, 0x0, @stepwise={0xfffffffe}}) 23:36:23 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000080)={0x400, 0x2, 0x3, "475d9f3fe11ed59bb80516f300002f7200000000220000000000070200001de0", 0x31364d59}) 23:36:23 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0xc, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:23 executing program 3: socketpair(0x23, 0xf4, 0x7fffffff, &(0x7f0000000100)) 23:36:23 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x31363553}) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @remote}}, 0x1e) 23:36:23 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x32315559, 0x0, @stepwise={0xfffffffe}}) 23:36:23 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0xffffffff, 0x1, 0x3, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x47524247}) (async) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x2) 23:36:23 executing program 3: socketpair(0x23, 0xf5, 0x7fffffff, &(0x7f0000000100)) 23:36:23 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0xc, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:23 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2b0300, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7, 0x0, 0x2, 0x0, 0x9}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x32222ebd16b19ec, 0x0) ioctl$VIDIOC_S_AUDIO(r1, 0x40345622, &(0x7f0000000100)={0x6e, "71169577a791afa67d817fa4cb714ca0bfb6478d93d4b9537ba640c8dbae96e3", 0x6}) 23:36:23 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x32315559, 0x0, @stepwise={0xfffffffe}}) 23:36:23 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:23 executing program 3: socketpair(0x23, 0xf6, 0x7fffffff, &(0x7f0000000100)) 23:36:23 executing program 2: ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x121800, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) clock_gettime(0xf820becce9bdaf5d, &(0x7f0000000200)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000240)=@mmap={0x1, 0x3, 0x4, 0x2000, 0x6, {r2, r3/1000+10000}, {0x4, 0x8, 0x6, 0x6, 0x8, 0x7, "fe2595f1"}, 0x1}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) openat$cgroup_procs(r4, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) r5 = socket(0xb, 0x1, 0x1210) ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0x3) setsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f0000000000), 0x4) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380), 0x80000, 0x0) ioctl$SNDCTL_DSP_STEREO(r6, 0xc0045003, &(0x7f00000003c0)=0x1) accept4$tipc(r1, 0x0, &(0x7f00000000c0), 0x80800) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x0) ioctl$SNDCTL_DSP_STEREO(r7, 0xc0045003, &(0x7f00000002c0)) 23:36:23 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0xc, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:23 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2b0300, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7, 0x0, 0x2, 0x0, 0x9}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x32222ebd16b19ec, 0x0) ioctl$VIDIOC_S_AUDIO(r1, 0x40345622, &(0x7f0000000100)={0x6e, "71169577a791afa67d817fa4cb714ca0bfb6478d93d4b9537ba640c8dbae96e3", 0x6}) 23:36:23 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000080)=@overlay={0x7, 0x1, 0x4, 0x10000, 0x9, {}, {0x4, 0x1, 0x26, 0x3, 0x4, 0x35, "90d9c862"}, 0x2, 0x3, {}, 0x2}) 23:36:23 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:23 executing program 5: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0x40045613, &(0x7f0000000140)={0xc, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:23 executing program 2: ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x121800, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) (async, rerun: 64) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async, rerun: 64) clock_gettime(0xf820becce9bdaf5d, &(0x7f0000000200)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000240)=@mmap={0x1, 0x3, 0x4, 0x2000, 0x6, {r2, r3/1000+10000}, {0x4, 0x8, 0x6, 0x6, 0x8, 0x7, "fe2595f1"}, 0x1}) (async, rerun: 32) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) openat$cgroup_procs(r4, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) r5 = socket(0xb, 0x1, 0x1210) ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0x3) (async) setsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f0000000000), 0x4) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380), 0x80000, 0x0) ioctl$SNDCTL_DSP_STEREO(r6, 0xc0045003, &(0x7f00000003c0)=0x1) accept4$tipc(r1, 0x0, &(0x7f00000000c0), 0x80800) (async) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x0) (async) ioctl$SNDCTL_DSP_STEREO(r7, 0xc0045003, &(0x7f00000002c0)) 23:36:23 executing program 3: socketpair(0x23, 0xf7, 0x7fffffff, &(0x7f0000000100)) 23:36:23 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2b0300, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7, 0x0, 0x2, 0x0, 0x9}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x32222ebd16b19ec, 0x0) ioctl$VIDIOC_S_AUDIO(r1, 0x40345622, &(0x7f0000000100)={0x6e, "71169577a791afa67d817fa4cb714ca0bfb6478d93d4b9537ba640c8dbae96e3", 0x6}) 23:36:23 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000080)=@overlay={0x7, 0x1, 0x4, 0x10000, 0x9, {}, {0x4, 0x1, 0x26, 0x3, 0x4, 0x35, "90d9c862"}, 0x2, 0x3, {}, 0x2}) 23:36:23 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:23 executing program 3: socketpair(0x23, 0xf8, 0x7fffffff, &(0x7f0000000100)) 23:36:23 executing program 5: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0x40045613, &(0x7f0000000140)={0xc, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:23 executing program 2: ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x121800, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) clock_gettime(0xf820becce9bdaf5d, &(0x7f0000000200)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000240)=@mmap={0x1, 0x3, 0x4, 0x2000, 0x6, {r2, r3/1000+10000}, {0x4, 0x8, 0x6, 0x6, 0x8, 0x7, "fe2595f1"}, 0x1}) (async) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) (async, rerun: 32) openat$cgroup_procs(r4, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) (async) r5 = socket(0xb, 0x1, 0x1210) (async) ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0x3) setsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f0000000000), 0x4) (async) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380), 0x80000, 0x0) ioctl$SNDCTL_DSP_STEREO(r6, 0xc0045003, &(0x7f00000003c0)=0x1) (async, rerun: 32) accept4$tipc(r1, 0x0, &(0x7f00000000c0), 0x80800) (async, rerun: 32) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x0) (async) ioctl$SNDCTL_DSP_STEREO(r7, 0xc0045003, &(0x7f00000002c0)) 23:36:23 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000000)=@mmap={0x101, 0x1, 0x4, 0x10000, 0x4, {0x0, 0xea60}, {0x4, 0x2, 0x0, 0x4, 0x5, 0x8, "97c5a5ad"}, 0x101, 0x1, {}, 0x3, 0x0, r1}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080)={0x0, r1}, 0x10) 23:36:23 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x3, 0x4e4a, 0x6}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000280)={0x9d, 0x31324d4e, 0x2, @stepwise={0x8, 0x1, 0xaa8, 0x2, 0x9, 0x8}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000180)={0x2, @sdr={0x670a0d23, 0x8}}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x7f, 0xffff, 0x3, 0x8, r3, 0x0, '\x00', 0x0, r3, 0x0, 0x2, 0x8, 0xfffffffffffffffd}, 0x48) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000940)={'gretap0\x00', &(0x7f0000000900)={'syztnl2\x00', r5, 0x7800, 0x40, 0x200, 0xfff, {{0x8, 0x4, 0x0, 0x29, 0x20, 0x68, 0x0, 0x81, 0x29, 0x0, @private=0xa010101, @multicast2, {[@ssrr={0x89, 0xb, 0xa3, [@remote, @multicast2]}]}}}}}) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c80)=@bpf_ext={0x1c, 0xe, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0xd2}, @ldst={0x2, 0x2, 0x3, 0x7, 0x2, 0xfffffffffffffff4, 0x1}, @generic={0x3, 0x4, 0xb, 0xf281, 0x8}, @alu={0x7, 0x0, 0x2, 0x2, 0x6, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x4}, @map_fd={0x18, 0x6, 0x1, 0x0, r1}, @jmp={0x5, 0x1, 0x9, 0x0, 0xc, 0x2}]}, &(0x7f0000000a80)='GPL\x00', 0x80, 0xc9, &(0x7f0000000ac0)=""/201, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000c00)={0x1, 0x3, 0x5, 0xff}, 0x10, 0x4c50, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r3, r1]}, 0x80) r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d00), 0x202400, 0x0) r11 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000d40), 0x10b201, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=@base={0x16, 0x7, 0x93e3, 0x99, 0x2, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2}, 0x48) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=@bloom_filter={0x1e, 0x9, 0x9, 0x2, 0x1000, 0xffffffffffffffff, 0xd7, '\x00', r5, 0xffffffffffffffff, 0x4, 0x0, 0x2, 0xa}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0xd, 0xa, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7ff}, [@map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x84}, @call={0x85, 0x0, 0x0, 0xa}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x6}, @map_val={0x18, 0xb, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x8000}]}, &(0x7f0000000800)='GPL\x00', 0x7, 0xb8, &(0x7f0000000840)=""/184, 0x40f00, 0x10, '\x00', r8, 0x13, r1, 0x8, &(0x7f0000000980)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000009c0)={0x3, 0x4, 0xfc, 0x62af}, 0x10, r6, r9, 0x0, &(0x7f0000000e80)=[r3, r10, r11, r12, r13]}, 0x80) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0x9, 0x2, &(0x7f0000001280)=ANY=[@ANYBLOB="850000000000cdeed2110c689729c26282e9c100000091100010000000"], &(0x7f0000000f80)='GPL\x00', 0x4, 0x29, &(0x7f0000000fc0)=""/41, 0x41100, 0x8, '\x00', r8, 0x0, r10, 0x8, &(0x7f0000001000)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000001040)={0x4, 0x8, 0xfff, 0x1ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001080)=[r11, 0xffffffffffffffff, r7, r11, r12, r7, r3]}, 0x80) r15 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r15, 0xae03, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001140)={r3, r14, 0x0, r15}, 0x10) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x58, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x20004000) r16 = bpf$ITER_CREATE(0x21, &(0x7f0000001240)={r11}, 0x8) perf_event_open$cgroup(&(0x7f00000011c0)={0x4, 0x80, 0x2, 0x60, 0xfe, 0x7b, 0x0, 0x1, 0x17, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37a0, 0x0, @perf_bp={&(0x7f0000001180), 0xd}, 0x84, 0x2cb, 0x7, 0x8, 0x1, 0x8, 0x4, 0x0, 0x40, 0x0, 0x7fffffffffffffff}, r16, 0x1, r15, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000080)) 23:36:23 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000080)=@overlay={0x7, 0x1, 0x4, 0x10000, 0x9, {}, {0x4, 0x1, 0x26, 0x3, 0x4, 0x35, "90d9c862"}, 0x2, 0x3, {}, 0x2}) 23:36:23 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000000)=@mmap={0x101, 0x1, 0x4, 0x10000, 0x4, {0x0, 0xea60}, {0x4, 0x2, 0x0, 0x4, 0x5, 0x8, "97c5a5ad"}, 0x101, 0x1, {}, 0x3, 0x0, r1}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080)={0x0, r1}, 0x10) 23:36:23 executing program 5: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0x40045613, &(0x7f0000000140)={0xc, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:23 executing program 3: socketpair(0x23, 0xf9, 0x7fffffff, &(0x7f0000000100)) 23:36:23 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x3, 0x4e4a, 0x6}) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000280)={0x9d, 0x31324d4e, 0x2, @stepwise={0x8, 0x1, 0xaa8, 0x2, 0x9, 0x8}}) (async, rerun: 64) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async, rerun: 64) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000180)={0x2, @sdr={0x670a0d23, 0x8}}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x7f, 0xffff, 0x3, 0x8, r3, 0x0, '\x00', 0x0, r3, 0x0, 0x2, 0x8, 0xfffffffffffffffd}, 0x48) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000940)={'gretap0\x00', &(0x7f0000000900)={'syztnl2\x00', r5, 0x7800, 0x40, 0x200, 0xfff, {{0x8, 0x4, 0x0, 0x29, 0x20, 0x68, 0x0, 0x81, 0x29, 0x0, @private=0xa010101, @multicast2, {[@ssrr={0x89, 0xb, 0xa3, [@remote, @multicast2]}]}}}}}) (async) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c80)=@bpf_ext={0x1c, 0xe, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0xd2}, @ldst={0x2, 0x2, 0x3, 0x7, 0x2, 0xfffffffffffffff4, 0x1}, @generic={0x3, 0x4, 0xb, 0xf281, 0x8}, @alu={0x7, 0x0, 0x2, 0x2, 0x6, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x4}, @map_fd={0x18, 0x6, 0x1, 0x0, r1}, @jmp={0x5, 0x1, 0x9, 0x0, 0xc, 0x2}]}, &(0x7f0000000a80)='GPL\x00', 0x80, 0xc9, &(0x7f0000000ac0)=""/201, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000c00)={0x1, 0x3, 0x5, 0xff}, 0x10, 0x4c50, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r3, r1]}, 0x80) (async) r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d00), 0x202400, 0x0) (async) r11 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000d40), 0x10b201, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=@base={0x16, 0x7, 0x93e3, 0x99, 0x2, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2}, 0x48) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=@bloom_filter={0x1e, 0x9, 0x9, 0x2, 0x1000, 0xffffffffffffffff, 0xd7, '\x00', r5, 0xffffffffffffffff, 0x4, 0x0, 0x2, 0xa}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0xd, 0xa, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7ff}, [@map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x84}, @call={0x85, 0x0, 0x0, 0xa}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x6}, @map_val={0x18, 0xb, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x8000}]}, &(0x7f0000000800)='GPL\x00', 0x7, 0xb8, &(0x7f0000000840)=""/184, 0x40f00, 0x10, '\x00', r8, 0x13, r1, 0x8, &(0x7f0000000980)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000009c0)={0x3, 0x4, 0xfc, 0x62af}, 0x10, r6, r9, 0x0, &(0x7f0000000e80)=[r3, r10, r11, r12, r13]}, 0x80) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0x9, 0x2, &(0x7f0000001280)=ANY=[@ANYBLOB="850000000000cdeed2110c689729c26282e9c100000091100010000000"], &(0x7f0000000f80)='GPL\x00', 0x4, 0x29, &(0x7f0000000fc0)=""/41, 0x41100, 0x8, '\x00', r8, 0x0, r10, 0x8, &(0x7f0000001000)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000001040)={0x4, 0x8, 0xfff, 0x1ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001080)=[r11, 0xffffffffffffffff, r7, r11, r12, r7, r3]}, 0x80) r15 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r15, 0xae03, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001140)={r3, r14, 0x0, r15}, 0x10) (async, rerun: 32) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x58, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x20004000) (rerun: 32) r16 = bpf$ITER_CREATE(0x21, &(0x7f0000001240)={r11}, 0x8) perf_event_open$cgroup(&(0x7f00000011c0)={0x4, 0x80, 0x2, 0x60, 0xfe, 0x7b, 0x0, 0x1, 0x17, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37a0, 0x0, @perf_bp={&(0x7f0000001180), 0xd}, 0x84, 0x2cb, 0x7, 0x8, 0x1, 0x8, 0x4, 0x0, 0x40, 0x0, 0x7fffffffffffffff}, r16, 0x1, r15, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000080)) 23:36:23 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000001c0)=@multiplanar_userptr={0x7, 0x1, 0x4, 0x100, 0x3ff, {}, {0x0, 0x1, 0x1, 0x80, 0x20, 0x3, "d5bedc1c"}, 0x101, 0x2, {&(0x7f00000000c0)=[{0x1ff, 0x8000, {&(0x7f0000000040)}, 0x4a10}, {0x4, 0x7, {&(0x7f0000000080)}, 0xd8}]}, 0x400}) 23:36:23 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000000)=@mmap={0x101, 0x1, 0x4, 0x10000, 0x4, {0x0, 0xea60}, {0x4, 0x2, 0x0, 0x4, 0x5, 0x8, "97c5a5ad"}, 0x101, 0x1, {}, 0x3, 0x0, r1}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080)={0x0, r1}, 0x10) 23:36:23 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:23 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0xc, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:23 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:24 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0xc, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:24 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:24 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x3, 0x4e4a, 0x6}) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000280)={0x9d, 0x31324d4e, 0x2, @stepwise={0x8, 0x1, 0xaa8, 0x2, 0x9, 0x8}}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000180)={0x2, @sdr={0x670a0d23, 0x8}}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x7f, 0xffff, 0x3, 0x8, r3, 0x0, '\x00', 0x0, r3, 0x0, 0x2, 0x8, 0xfffffffffffffffd}, 0x48) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000940)={'gretap0\x00', &(0x7f0000000900)={'syztnl2\x00', r5, 0x7800, 0x40, 0x200, 0xfff, {{0x8, 0x4, 0x0, 0x29, 0x20, 0x68, 0x0, 0x81, 0x29, 0x0, @private=0xa010101, @multicast2, {[@ssrr={0x89, 0xb, 0xa3, [@remote, @multicast2]}]}}}}}) (async) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c80)=@bpf_ext={0x1c, 0xe, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0xd2}, @ldst={0x2, 0x2, 0x3, 0x7, 0x2, 0xfffffffffffffff4, 0x1}, @generic={0x3, 0x4, 0xb, 0xf281, 0x8}, @alu={0x7, 0x0, 0x2, 0x2, 0x6, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x4}, @map_fd={0x18, 0x6, 0x1, 0x0, r1}, @jmp={0x5, 0x1, 0x9, 0x0, 0xc, 0x2}]}, &(0x7f0000000a80)='GPL\x00', 0x80, 0xc9, &(0x7f0000000ac0)=""/201, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000c00)={0x1, 0x3, 0x5, 0xff}, 0x10, 0x4c50, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r3, r1]}, 0x80) (async) r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d00), 0x202400, 0x0) (async) r11 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000d40), 0x10b201, 0x0) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=@base={0x16, 0x7, 0x93e3, 0x99, 0x2, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2}, 0x48) (async) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=@bloom_filter={0x1e, 0x9, 0x9, 0x2, 0x1000, 0xffffffffffffffff, 0xd7, '\x00', r5, 0xffffffffffffffff, 0x4, 0x0, 0x2, 0xa}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0xd, 0xa, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7ff}, [@map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x84}, @call={0x85, 0x0, 0x0, 0xa}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x6}, @map_val={0x18, 0xb, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x8000}]}, &(0x7f0000000800)='GPL\x00', 0x7, 0xb8, &(0x7f0000000840)=""/184, 0x40f00, 0x10, '\x00', r8, 0x13, r1, 0x8, &(0x7f0000000980)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000009c0)={0x3, 0x4, 0xfc, 0x62af}, 0x10, r6, r9, 0x0, &(0x7f0000000e80)=[r3, r10, r11, r12, r13]}, 0x80) (async) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0x9, 0x2, &(0x7f0000001280)=ANY=[@ANYBLOB="850000000000cdeed2110c689729c26282e9c100000091100010000000"], &(0x7f0000000f80)='GPL\x00', 0x4, 0x29, &(0x7f0000000fc0)=""/41, 0x41100, 0x8, '\x00', r8, 0x0, r10, 0x8, &(0x7f0000001000)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000001040)={0x4, 0x8, 0xfff, 0x1ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001080)=[r11, 0xffffffffffffffff, r7, r11, r12, r7, r3]}, 0x80) (async) r15 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r15, 0xae03, 0x0) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001140)={r3, r14, 0x0, r15}, 0x10) (async) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x58, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x20004000) (async) r16 = bpf$ITER_CREATE(0x21, &(0x7f0000001240)={r11}, 0x8) perf_event_open$cgroup(&(0x7f00000011c0)={0x4, 0x80, 0x2, 0x60, 0xfe, 0x7b, 0x0, 0x1, 0x17, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37a0, 0x0, @perf_bp={&(0x7f0000001180), 0xd}, 0x84, 0x2cb, 0x7, 0x8, 0x1, 0x8, 0x4, 0x0, 0x40, 0x0, 0x7fffffffffffffff}, r16, 0x1, r15, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000080)) 23:36:24 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:36:24 executing program 3: socketpair(0x23, 0xfa, 0x7fffffff, &(0x7f0000000100)) 23:36:24 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000001c0)=@multiplanar_userptr={0x7, 0x1, 0x4, 0x100, 0x3ff, {}, {0x0, 0x1, 0x1, 0x80, 0x20, 0x3, "d5bedc1c"}, 0x101, 0x2, {&(0x7f00000000c0)=[{0x1ff, 0x8000, {&(0x7f0000000040)}, 0x4a10}, {0x4, 0x7, {&(0x7f0000000080)}, 0xd8}]}, 0x400}) 23:36:24 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:36:24 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0xc, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:24 executing program 3: socketpair(0x23, 0xfb, 0x7fffffff, &(0x7f0000000100)) 23:36:24 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x40, 0x2, 0x1}, 0x10) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) 23:36:24 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async, rerun: 64) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000001c0)=@multiplanar_userptr={0x7, 0x1, 0x4, 0x100, 0x3ff, {}, {0x0, 0x1, 0x1, 0x80, 0x20, 0x3, "d5bedc1c"}, 0x101, 0x2, {&(0x7f00000000c0)=[{0x1ff, 0x8000, {&(0x7f0000000040)}, 0x4a10}, {0x4, 0x7, {&(0x7f0000000080)}, 0xd8}]}, 0x400}) (rerun: 64) 23:36:24 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0x40045613, &(0x7f0000000140)={0xc, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:24 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x2, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x3f, 0x1}) 23:36:24 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:36:24 executing program 3: socketpair(0x23, 0xfc, 0x7fffffff, &(0x7f0000000100)) 23:36:24 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x40, 0x2, 0x1}, 0x10) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) 23:36:24 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$SYNC_IOC_MERGE(r0, 0xc0303e03, &(0x7f0000000040)={"c83da4e3ce5122dacc69dcb1385a53ed4abbd5c49a052879896e3ef86f1ef7b1"}) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:36:24 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0x40045613, &(0x7f0000000140)={0xc, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:24 executing program 3: socketpair(0x23, 0xfd, 0x7fffffff, &(0x7f0000000100)) 23:36:24 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x2, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x3f, 0x1}) 23:36:24 executing program 1: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x48102, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x1, 0x80, 0x81, 0x59, 0xfc, 0x1, 0x0, 0x9, 0x80, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x8, 0x7}, 0x1080a, 0x3f, 0x8, 0x9, 0x3, 0xfffff000, 0x6, 0x0, 0x9, 0x0, 0xffffffffffffffff}, r0, 0x2, r1, 0x1) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f0000000200)={'\x00', 0xffffd182, 0x0, 0x7fffffff}) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405608, &(0x7f0000000140)={0x800, 0x1, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@multiplanar_overlay={0x80a, 0x2, 0x4, 0x1000, 0x0, {}, {0x3, 0x8, 0x6, 0x4, 0x3, 0x7f, "8ca909ca"}, 0xa1c, 0x3, {&(0x7f0000000040)=[{0x2, 0x2, {0x7}}, {0x2, 0x81, {}, 0x648944fe}]}, 0x9}) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) 23:36:24 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x40, 0x2, 0x1}, 0x10) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x40, 0x2, 0x1}, 0x10) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) (async) 23:36:24 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$SYNC_IOC_MERGE(r0, 0xc0303e03, &(0x7f0000000040)={"c83da4e3ce5122dacc69dcb1385a53ed4abbd5c49a052879896e3ef86f1ef7b1"}) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) ioctl$SYNC_IOC_MERGE(r0, 0xc0303e03, &(0x7f0000000040)={"c83da4e3ce5122dacc69dcb1385a53ed4abbd5c49a052879896e3ef86f1ef7b1"}) (async) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) 23:36:24 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0x40045613, &(0x7f0000000140)={0xc, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:24 executing program 3: socketpair(0x23, 0xfe, 0x7fffffff, &(0x7f0000000100)) 23:36:24 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x2, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x3f, 0x1}) 23:36:24 executing program 1: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x48102, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x1, 0x80, 0x81, 0x59, 0xfc, 0x1, 0x0, 0x9, 0x80, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x8, 0x7}, 0x1080a, 0x3f, 0x8, 0x9, 0x3, 0xfffff000, 0x6, 0x0, 0x9, 0x0, 0xffffffffffffffff}, r0, 0x2, r1, 0x1) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f0000000200)={'\x00', 0xffffd182, 0x0, 0x7fffffff}) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405608, &(0x7f0000000140)={0x800, 0x1, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@multiplanar_overlay={0x80a, 0x2, 0x4, 0x1000, 0x0, {}, {0x3, 0x8, 0x6, 0x4, 0x3, 0x7f, "8ca909ca"}, 0xa1c, 0x3, {&(0x7f0000000040)=[{0x2, 0x2, {0x7}}, {0x2, 0x81, {}, 0x648944fe}]}, 0x9}) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x48102, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) perf_event_open$cgroup(&(0x7f0000000280)={0x1, 0x80, 0x81, 0x59, 0xfc, 0x1, 0x0, 0x9, 0x80, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x8, 0x7}, 0x1080a, 0x3f, 0x8, 0x9, 0x3, 0xfffff000, 0x6, 0x0, 0x9, 0x0, 0xffffffffffffffff}, r0, 0x2, r1, 0x1) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f0000000200)={'\x00', 0xffffd182, 0x0, 0x7fffffff}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405608, &(0x7f0000000140)={0x800, 0x1, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@multiplanar_overlay={0x80a, 0x2, 0x4, 0x1000, 0x0, {}, {0x3, 0x8, 0x6, 0x4, 0x3, 0x7f, "8ca909ca"}, 0xa1c, 0x3, {&(0x7f0000000040)=[{0x2, 0x2, {0x7}}, {0x2, 0x81, {}, 0x648944fe}]}, 0x9}) (async) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) (async) 23:36:24 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, 0x0) 23:36:24 executing program 0: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x2, @raw_data="9949adbd5fdc7248397f88bd85dccbf841414038a461e094e2165b8860ae8350d7cbcce9839b38b1c59a039b67f0e0dde547e3f6099e923b92c41984f027af13772ecd9644034cc54ac1d09dd741c6765270d0268178303f5bf6507c6a86a36a431d5191fcb001b3b5f9d3068a6e69923238591ab7565ee139a8b9e064332d2360af96f033ebb0b31d5b1151e93ddbdd854d11d11485cdbd823f79cf6e7253f9b8df2f00973b230e1363aff1da1769d80bb634892b357e60937dedffe955eb89212645db7c01caac"}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0x40045613, &(0x7f0000000140)={0x4000, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x52424752}) 23:36:24 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) ioctl$SYNC_IOC_MERGE(r0, 0xc0303e03, &(0x7f0000000040)={"c83da4e3ce5122dacc69dcb1385a53ed4abbd5c49a052879896e3ef86f1ef7b1"}) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:36:24 executing program 3: socketpair(0x23, 0x102, 0x7fffffff, &(0x7f0000000100)) 23:36:24 executing program 1: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x48102, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x1, 0x80, 0x81, 0x59, 0xfc, 0x1, 0x0, 0x9, 0x80, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x8, 0x7}, 0x1080a, 0x3f, 0x8, 0x9, 0x3, 0xfffff000, 0x6, 0x0, 0x9, 0x0, 0xffffffffffffffff}, r0, 0x2, r1, 0x1) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f0000000200)={'\x00', 0xffffd182, 0x0, 0x7fffffff}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405608, &(0x7f0000000140)={0x800, 0x1, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@multiplanar_overlay={0x80a, 0x2, 0x4, 0x1000, 0x0, {}, {0x3, 0x8, 0x6, 0x4, 0x3, 0x7f, "8ca909ca"}, 0xa1c, 0x3, {&(0x7f0000000040)=[{0x2, 0x2, {0x7}}, {0x2, 0x81, {}, 0x648944fe}]}, 0x9}) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) 23:36:24 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000180)=@multiplanar_fd={0x1, 0x1, 0x4, 0x8, 0x1, {0x77359400}, {0x2, 0x1, 0x81, 0x4, 0x9, 0x6, "73830259"}, 0x1f, 0x4, {&(0x7f0000000080)=[{0xff, 0xfffffc9d, {}, 0x8000}, {0xfffffffd, 0x7, {r2}, 0x7d9}]}, 0x9}) 23:36:24 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f00000000c0)={0x5, "68aaecb5d4ddf68efcc9582430f1a72c8e446f6e53230efdff31807334128cae", 0x2513652a5cdda356, 0x1}) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x20009, 0x2) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:36:24 executing program 3: socketpair(0x23, 0x103, 0x7fffffff, &(0x7f0000000100)) 23:36:24 executing program 0: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x2, @raw_data="9949adbd5fdc7248397f88bd85dccbf841414038a461e094e2165b8860ae8350d7cbcce9839b38b1c59a039b67f0e0dde547e3f6099e923b92c41984f027af13772ecd9644034cc54ac1d09dd741c6765270d0268178303f5bf6507c6a86a36a431d5191fcb001b3b5f9d3068a6e69923238591ab7565ee139a8b9e064332d2360af96f033ebb0b31d5b1151e93ddbdd854d11d11485cdbd823f79cf6e7253f9b8df2f00973b230e1363aff1da1769d80bb634892b357e60937dedffe955eb89212645db7c01caac"}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0x40045613, &(0x7f0000000140)={0x4000, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x52424752}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x2, @raw_data="9949adbd5fdc7248397f88bd85dccbf841414038a461e094e2165b8860ae8350d7cbcce9839b38b1c59a039b67f0e0dde547e3f6099e923b92c41984f027af13772ecd9644034cc54ac1d09dd741c6765270d0268178303f5bf6507c6a86a36a431d5191fcb001b3b5f9d3068a6e69923238591ab7565ee139a8b9e064332d2360af96f033ebb0b31d5b1151e93ddbdd854d11d11485cdbd823f79cf6e7253f9b8df2f00973b230e1363aff1da1769d80bb634892b357e60937dedffe955eb89212645db7c01caac"}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0x40045613, &(0x7f0000000140)={0x4000, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x52424752}) (async) 23:36:24 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, 0x0) 23:36:24 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000180)=@multiplanar_fd={0x1, 0x1, 0x4, 0x8, 0x1, {0x77359400}, {0x2, 0x1, 0x81, 0x4, 0x9, 0x6, "73830259"}, 0x1f, 0x4, {&(0x7f0000000080)=[{0xff, 0xfffffc9d, {}, 0x8000}, {0xfffffffd, 0x7, {r2}, 0x7d9}]}, 0x9}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000180)=@multiplanar_fd={0x1, 0x1, 0x4, 0x8, 0x1, {0x77359400}, {0x2, 0x1, 0x81, 0x4, 0x9, 0x6, "73830259"}, 0x1f, 0x4, {&(0x7f0000000080)=[{0xff, 0xfffffc9d, {}, 0x8000}, {0xfffffffd, 0x7, {r2}, 0x7d9}]}, 0x9}) (async) 23:36:24 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async, rerun: 64) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f00000000c0)={0x5, "68aaecb5d4ddf68efcc9582430f1a72c8e446f6e53230efdff31807334128cae", 0x2513652a5cdda356, 0x1}) (async, rerun: 64) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x20009, 0x2) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:36:24 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async, rerun: 32) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000180)=@multiplanar_fd={0x1, 0x1, 0x4, 0x8, 0x1, {0x77359400}, {0x2, 0x1, 0x81, 0x4, 0x9, 0x6, "73830259"}, 0x1f, 0x4, {&(0x7f0000000080)=[{0xff, 0xfffffc9d, {}, 0x8000}, {0xfffffffd, 0x7, {r2}, 0x7d9}]}, 0x9}) 23:36:24 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d005ae11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:24 executing program 3: socketpair(0x23, 0x104, 0x7fffffff, &(0x7f0000000100)) 23:36:24 executing program 0: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x2, @raw_data="9949adbd5fdc7248397f88bd85dccbf841414038a461e094e2165b8860ae8350d7cbcce9839b38b1c59a039b67f0e0dde547e3f6099e923b92c41984f027af13772ecd9644034cc54ac1d09dd741c6765270d0268178303f5bf6507c6a86a36a431d5191fcb001b3b5f9d3068a6e69923238591ab7565ee139a8b9e064332d2360af96f033ebb0b31d5b1151e93ddbdd854d11d11485cdbd823f79cf6e7253f9b8df2f00973b230e1363aff1da1769d80bb634892b357e60937dedffe955eb89212645db7c01caac"}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0x40045613, &(0x7f0000000140)={0x4000, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x52424752}) 23:36:24 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f00000000c0)={0x5, "68aaecb5d4ddf68efcc9582430f1a72c8e446f6e53230efdff31807334128cae", 0x2513652a5cdda356, 0x1}) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x20009, 0x2) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f00000000c0)={0x5, "68aaecb5d4ddf68efcc9582430f1a72c8e446f6e53230efdff31807334128cae", 0x2513652a5cdda356, 0x1}) (async) syz_open_dev$vim2m(&(0x7f0000000080), 0x20009, 0x2) (async) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) 23:36:24 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, 0x0) 23:36:24 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d005ae11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:24 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0xc0045009, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:24 executing program 3: socketpair(0x23, 0x105, 0x7fffffff, &(0x7f0000000100)) 23:36:24 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:24 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d005ae11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:24 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x5, "475d003fe11ed59bb82f7200000000220000000000000000001de000", 0x3147504d}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$VIDIOC_G_AUDOUT(r1, 0x80345631, &(0x7f0000000000)) 23:36:24 executing program 3: socketpair(0x23, 0x106, 0x7fffffff, &(0x7f0000000100)) 23:36:24 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0xc0045009, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:24 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x1, 0x3, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) socketpair(0x28, 0x804, 0x6, &(0x7f0000000000)) 23:36:24 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x5, "475d003fe11ed59bb82f7200000000220000000000000000001de000", 0x3147504d}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$VIDIOC_G_AUDOUT(r1, 0x80345631, &(0x7f0000000000)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x5, "475d003fe11ed59bb82f7200000000220000000000000000001de000", 0x3147504d}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$VIDIOC_G_AUDOUT(r1, 0x80345631, &(0x7f0000000000)) (async) 23:36:25 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000080)=0x3) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:36:25 executing program 3: socketpair(0x23, 0x107, 0x7fffffff, &(0x7f0000000100)) 23:36:25 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:25 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x5, "475d003fe11ed59bb82f7200000000220000000000000000001de000", 0x3147504d}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$VIDIOC_G_AUDOUT(r1, 0x80345631, &(0x7f0000000000)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x5, "475d003fe11ed59bb82f7200000000220000000000000000001de000", 0x3147504d}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$VIDIOC_G_AUDOUT(r1, 0x80345631, &(0x7f0000000000)) (async) 23:36:25 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x1, 0x3, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) socketpair(0x28, 0x804, 0x6, &(0x7f0000000000)) 23:36:25 executing program 3: socketpair(0x23, 0x108, 0x7fffffff, &(0x7f0000000100)) 23:36:25 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000080)=0x3) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:36:25 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0xc0045009, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:25 executing program 3: socketpair(0x23, 0x109, 0x7fffffff, &(0x7f0000000100)) 23:36:25 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000080)=0x3) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:36:25 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:25 executing program 3: socketpair(0x23, 0x10a, 0x7fffffff, &(0x7f0000000100)) 23:36:25 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000040)={0x40, 0x2, 0x3, "475d000000000000000000000000d90000000200", 0x31424752}) 23:36:25 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x1, 0x3, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) socketpair(0x28, 0x804, 0x6, &(0x7f0000000000)) 23:36:25 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000180)=@multiplanar_overlay={0x7, 0x2, 0x4, 0x1000, 0x13, {0x0, 0x2710}, {0x4, 0x0, 0x1, 0x7, 0x0, 0x4, "5fdea294"}, 0x6, 0x3, {&(0x7f0000000040)=[{0x4, 0x4, {0x80}, 0x800}, {0x8, 0x8, {0x9}, 0x480}]}, 0x5, 0x0, r2}) 23:36:25 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f00000000c0)={0x5, "68aaecb5d4ddf68efcc9582430f1a72c8e446f6e53230efdff31807334128cae", 0x2513652a5cdda356, 0x1}) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x20009, 0x2) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:36:25 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000000)=@fd={0x0, 0x3, 0x4, 0x40, 0x1, {}, {0x5, 0x8, 0x2, 0x7, 0x9, 0x20, "b6f5ae49"}, 0xb43, 0x4, {}, 0x0, 0x0, r1}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f0000000080)={0x8, "5c215e041bac44cc046f6e87424e391cbaac093474445f89266372550d3f7130", 0x2, 0x6, 0x6, 0x7, 0x8}) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405608, &(0x7f0000000140)={0x0, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:25 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise={0x9, 0x4, 0x200, 0x3ab15d13, 0x4, 0x80}}) 23:36:25 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000040)={0x40, 0x2, 0x3, "475d000000000000000000000000d90000000200", 0x31424752}) 23:36:25 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000180)=@multiplanar_overlay={0x7, 0x2, 0x4, 0x1000, 0x13, {0x0, 0x2710}, {0x4, 0x0, 0x1, 0x7, 0x0, 0x4, "5fdea294"}, 0x6, 0x3, {&(0x7f0000000040)=[{0x4, 0x4, {0x80}, 0x800}, {0x8, 0x8, {0x9}, 0x480}]}, 0x5, 0x0, r2}) 23:36:25 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000000)=@fd={0x0, 0x3, 0x4, 0x40, 0x1, {}, {0x5, 0x8, 0x2, 0x7, 0x9, 0x20, "b6f5ae49"}, 0xb43, 0x4, {}, 0x0, 0x0, r1}) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async, rerun: 64) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f0000000080)={0x8, "5c215e041bac44cc046f6e87424e391cbaac093474445f89266372550d3f7130", 0x2, 0x6, 0x6, 0x7, 0x8}) (async, rerun: 64) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405608, &(0x7f0000000140)={0x0, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:25 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x121800, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) clock_gettime(0xf820becce9bdaf5d, &(0x7f0000000200)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000240)=@mmap={0x1, 0x3, 0x4, 0x2000, 0x6, {r2, r3/1000+10000}, {0x4, 0x8, 0x6, 0x6, 0x8, 0x7, "fe2595f1"}, 0x1}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) openat$cgroup_procs(r4, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) r5 = socket(0xb, 0x1, 0x1210) ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0x3) setsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f0000000000), 0x4) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380), 0x80000, 0x0) ioctl$SNDCTL_DSP_STEREO(r6, 0xc0045003, &(0x7f00000003c0)=0x1) accept4$tipc(r1, 0x0, &(0x7f00000000c0), 0x80800) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x0) ioctl$SNDCTL_DSP_STEREO(r7, 0xc0045003, &(0x7f00000002c0)) 23:36:25 executing program 3: socketpair(0x23, 0x10b, 0x7fffffff, &(0x7f0000000100)) 23:36:25 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000040)={0x40, 0x2, 0x3, "475d000000000000000000000000d90000000200", 0x31424752}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000040)={0x40, 0x2, 0x3, "475d000000000000000000000000d90000000200", 0x31424752}) (async) 23:36:25 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise={0x9, 0x4, 0x200, 0x3ab15d13, 0x4, 0x80}}) 23:36:25 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async, rerun: 32) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000000)=@fd={0x0, 0x3, 0x4, 0x40, 0x1, {}, {0x5, 0x8, 0x2, 0x7, 0x9, 0x20, "b6f5ae49"}, 0xb43, 0x4, {}, 0x0, 0x0, r1}) (async, rerun: 32) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f0000000080)={0x8, "5c215e041bac44cc046f6e87424e391cbaac093474445f89266372550d3f7130", 0x2, 0x6, 0x6, 0x7, 0x8}) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405608, &(0x7f0000000140)={0x0, 0x2, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:25 executing program 3: socketpair(0x23, 0x10c, 0x7fffffff, &(0x7f0000000100)) 23:36:25 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x121800, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) clock_gettime(0xf820becce9bdaf5d, &(0x7f0000000200)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000240)=@mmap={0x1, 0x3, 0x4, 0x2000, 0x6, {r2, r3/1000+10000}, {0x4, 0x8, 0x6, 0x6, 0x8, 0x7, "fe2595f1"}, 0x1}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) openat$cgroup_procs(r4, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) r5 = socket(0xb, 0x1, 0x1210) ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0x3) setsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f0000000000), 0x4) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380), 0x80000, 0x0) ioctl$SNDCTL_DSP_STEREO(r6, 0xc0045003, &(0x7f00000003c0)=0x1) accept4$tipc(r1, 0x0, &(0x7f00000000c0), 0x80800) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x0) ioctl$SNDCTL_DSP_STEREO(r7, 0xc0045003, &(0x7f00000002c0)) 23:36:25 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) r2 = socket(0x2, 0x800, 0x3) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f00000005c0)={'sit0\x00', &(0x7f00000004c0)={@initdev={0xac, 0x1e, 0x5, 0x0}, 0x1, 0x0, 0x70, 0x0, [{@broadcast}, {@multicast1}, {@multicast1}, {@dev}, {@private}, {}, {@dev}]}}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x7bac, 0x1, 0x1, {0x2, @win={{0x9, 0x2, 0x20, 0x6}, 0x7, 0x8000, &(0x7f0000000080)={{0x8, 0x6, 0x2, 0x4}, &(0x7f0000000040)={{0xd9, 0x100, 0x7ff, 0xd2e5}, &(0x7f0000000000)={{0x49584a70, 0x9, 0x20, 0x5}}}}, 0x7fff, &(0x7f0000000180)="bf1edbe60c0bda2babd5d1e0ac1cb7ecc21f116f0698fac68cb568a482cd1be8893cd7d9d227598e2d5c9474284148d7d7aef3dcd1ec26c93cb5ea0d0a941e099cd1c48e26f39d88de317976b91af465bc40fb971f23bda5e972b7c2e1d94bbea8dbc1fd0cd4796e3057c8025a0eb153bfe4d52869503f013af94e39ab595bf8c1616025a34cabe41055f240d78175b30c2c6f8d40675b4cde44357b51a93d2e36174e59c5ae", 0x25}}, 0x10000}) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000480)={0x9d0000, 0x5, 0x5, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x9d0903, 0x2, '\x00', @p_u32=&(0x7f00000000c0)=0x9}}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0x0, @pix={0x5, 0x81, 0x34324142, 0x7, 0x5, 0x80000001, 0x5, 0x800, 0x0, 0x2, 0x2, 0x1}}) 23:36:25 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) (rerun: 64) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000180)=@multiplanar_overlay={0x7, 0x2, 0x4, 0x1000, 0x13, {0x0, 0x2710}, {0x4, 0x0, 0x1, 0x7, 0x0, 0x4, "5fdea294"}, 0x6, 0x3, {&(0x7f0000000040)=[{0x4, 0x4, {0x80}, 0x800}, {0x8, 0x8, {0x9}, 0x480}]}, 0x5, 0x0, r2}) 23:36:25 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise={0x9, 0x4, 0x200, 0x3ab15d13, 0x4, 0x80}}) 23:36:25 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x2, @vbi={0x3, 0x1, 0x0, 0x20385655, [0xb8, 0x1000], [0x40, 0x80], 0x108}}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000080)={0x1, 0xa9525d53, 0x1, 0x5695, 0x2, @stepwise={{0x48000, 0xfffffff8}, {0x4, 0x8000}, {0x1, 0x5}}}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_AUDIO(r2, 0x40345622, &(0x7f0000000040)={0xa4e, "5da3cf694f663dbbe23e2c42edf8e652808be37c1d59b8366613bb2deb7b148d", 0x1}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:25 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x121800, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) clock_gettime(0xf820becce9bdaf5d, &(0x7f0000000200)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000240)=@mmap={0x1, 0x3, 0x4, 0x2000, 0x6, {r2, r3/1000+10000}, {0x4, 0x8, 0x6, 0x6, 0x8, 0x7, "fe2595f1"}, 0x1}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) openat$cgroup_procs(r4, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) r5 = socket(0xb, 0x1, 0x1210) ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0x3) setsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f0000000000), 0x4) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380), 0x80000, 0x0) ioctl$SNDCTL_DSP_STEREO(r6, 0xc0045003, &(0x7f00000003c0)=0x1) accept4$tipc(r1, 0x0, &(0x7f00000000c0), 0x80800) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x0) ioctl$SNDCTL_DSP_STEREO(r7, 0xc0045003, &(0x7f00000002c0)) 23:36:25 executing program 4: syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast1, @broadcast}, &(0x7f0000000200)=0xc) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x1, @stepwise={0x0, 0xfffffffd, 0x1, 0x0, 0x7fffffff, 0xfffffffe}}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, r3, 0x0, 0x2, &(0x7f0000000100)='^\x00'}, 0x30) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000240)=0x4, 0x4) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x10001, 0x2, 0x2, 0x0, 0x5}) 23:36:25 executing program 3: socketpair(0x23, 0x10d, 0x7fffffff, &(0x7f0000000100)) 23:36:25 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async, rerun: 32) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x2, @vbi={0x3, 0x1, 0x0, 0x20385655, [0xb8, 0x1000], [0x40, 0x80], 0x108}}) (rerun: 32) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000080)={0x1, 0xa9525d53, 0x1, 0x5695, 0x2, @stepwise={{0x48000, 0xfffffff8}, {0x4, 0x8000}, {0x1, 0x5}}}) (async) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_AUDIO(r2, 0x40345622, &(0x7f0000000040)={0xa4e, "5da3cf694f663dbbe23e2c42edf8e652808be37c1d59b8366613bb2deb7b148d", 0x1}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:25 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x121800, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) clock_gettime(0xf820becce9bdaf5d, &(0x7f0000000200)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000240)=@mmap={0x1, 0x3, 0x4, 0x2000, 0x6, {r2, r3/1000+10000}, {0x4, 0x8, 0x6, 0x6, 0x8, 0x7, "fe2595f1"}, 0x1}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) openat$cgroup_procs(r4, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) r5 = socket(0xb, 0x1, 0x1210) ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0x3) setsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f0000000000), 0x4) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380), 0x80000, 0x0) ioctl$SNDCTL_DSP_STEREO(r6, 0xc0045003, &(0x7f00000003c0)=0x1) accept4$tipc(r1, 0x0, &(0x7f00000000c0), 0x80800) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x0) 23:36:25 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) r2 = socket(0x2, 0x800, 0x3) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f00000005c0)={'sit0\x00', &(0x7f00000004c0)={@initdev={0xac, 0x1e, 0x5, 0x0}, 0x1, 0x0, 0x70, 0x0, [{@broadcast}, {@multicast1}, {@multicast1}, {@dev}, {@private}, {}, {@dev}]}}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0) (async, rerun: 32) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x7bac, 0x1, 0x1, {0x2, @win={{0x9, 0x2, 0x20, 0x6}, 0x7, 0x8000, &(0x7f0000000080)={{0x8, 0x6, 0x2, 0x4}, &(0x7f0000000040)={{0xd9, 0x100, 0x7ff, 0xd2e5}, &(0x7f0000000000)={{0x49584a70, 0x9, 0x20, 0x5}}}}, 0x7fff, &(0x7f0000000180)="bf1edbe60c0bda2babd5d1e0ac1cb7ecc21f116f0698fac68cb568a482cd1be8893cd7d9d227598e2d5c9474284148d7d7aef3dcd1ec26c93cb5ea0d0a941e099cd1c48e26f39d88de317976b91af465bc40fb971f23bda5e972b7c2e1d94bbea8dbc1fd0cd4796e3057c8025a0eb153bfe4d52869503f013af94e39ab595bf8c1616025a34cabe41055f240d78175b30c2c6f8d40675b4cde44357b51a93d2e36174e59c5ae", 0x25}}, 0x10000}) (async, rerun: 32) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000480)={0x9d0000, 0x5, 0x5, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x9d0903, 0x2, '\x00', @p_u32=&(0x7f00000000c0)=0x9}}) (async, rerun: 64) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0x0, @pix={0x5, 0x81, 0x34324142, 0x7, 0x5, 0x80000001, 0x5, 0x800, 0x0, 0x2, 0x2, 0x1}}) (rerun: 64) 23:36:25 executing program 4: syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast1, @broadcast}, &(0x7f0000000200)=0xc) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x1, @stepwise={0x0, 0xfffffffd, 0x1, 0x0, 0x7fffffff, 0xfffffffe}}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, r3, 0x0, 0x2, &(0x7f0000000100)='^\x00'}, 0x30) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000240)=0x4, 0x4) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x10001, 0x2, 0x2, 0x0, 0x5}) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) socket$inet_dccp(0x2, 0x6, 0x0) (async) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) (async) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast1, @broadcast}, &(0x7f0000000200)=0xc) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x1, @stepwise={0x0, 0xfffffffd, 0x1, 0x0, 0x7fffffff, 0xfffffffe}}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, r3, 0x0, 0x2, &(0x7f0000000100)='^\x00'}, 0x30) (async) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000240)=0x4, 0x4) (async) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x10001, 0x2, 0x2, 0x0, 0x5}) (async) 23:36:25 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000040)=@userptr={0xd395, 0x3, 0x4, 0x8, 0x7, {0x0, 0xea60}, {0x3, 0x0, 0x0, 0x1, 0xf8, 0x2, "d29d7de7"}, 0xffff8000, 0x2, {}, 0x4}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:25 executing program 3: socketpair(0x23, 0x10e, 0x7fffffff, &(0x7f0000000100)) 23:36:25 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x2, @vbi={0x3, 0x1, 0x0, 0x20385655, [0xb8, 0x1000], [0x40, 0x80], 0x108}}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000080)={0x1, 0xa9525d53, 0x1, 0x5695, 0x2, @stepwise={{0x48000, 0xfffffff8}, {0x4, 0x8000}, {0x1, 0x5}}}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_AUDIO(r2, 0x40345622, &(0x7f0000000040)={0xa4e, "5da3cf694f663dbbe23e2c42edf8e652808be37c1d59b8366613bb2deb7b148d", 0x1}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:25 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x121800, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) clock_gettime(0xf820becce9bdaf5d, &(0x7f0000000200)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000240)=@mmap={0x1, 0x3, 0x4, 0x2000, 0x6, {r2, r3/1000+10000}, {0x4, 0x8, 0x6, 0x6, 0x8, 0x7, "fe2595f1"}, 0x1}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) openat$cgroup_procs(r4, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) r5 = socket(0xb, 0x1, 0x1210) ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0x3) setsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f0000000000), 0x4) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380), 0x80000, 0x0) ioctl$SNDCTL_DSP_STEREO(r6, 0xc0045003, &(0x7f00000003c0)=0x1) accept4$tipc(r1, 0x0, &(0x7f00000000c0), 0x80800) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 23:36:25 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000040)=@userptr={0xd395, 0x3, 0x4, 0x8, 0x7, {0x0, 0xea60}, {0x3, 0x0, 0x0, 0x1, 0xf8, 0x2, "d29d7de7"}, 0xffff8000, 0x2, {}, 0x4}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:25 executing program 1: ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000000)={0xc828, 0x34324142, 0x2, @discrete={0x9, 0x400}}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x2, 0x0, 0x0, "3f00000c0003000008000000000000000000980f220074a4aa825a8ade221de0", 0x36314d59}) 23:36:25 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async, rerun: 32) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) r2 = socket(0x2, 0x800, 0x3) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f00000005c0)={'sit0\x00', &(0x7f00000004c0)={@initdev={0xac, 0x1e, 0x5, 0x0}, 0x1, 0x0, 0x70, 0x0, [{@broadcast}, {@multicast1}, {@multicast1}, {@dev}, {@private}, {}, {@dev}]}}) (async, rerun: 32) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0) (rerun: 32) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x7bac, 0x1, 0x1, {0x2, @win={{0x9, 0x2, 0x20, 0x6}, 0x7, 0x8000, &(0x7f0000000080)={{0x8, 0x6, 0x2, 0x4}, &(0x7f0000000040)={{0xd9, 0x100, 0x7ff, 0xd2e5}, &(0x7f0000000000)={{0x49584a70, 0x9, 0x20, 0x5}}}}, 0x7fff, &(0x7f0000000180)="bf1edbe60c0bda2babd5d1e0ac1cb7ecc21f116f0698fac68cb568a482cd1be8893cd7d9d227598e2d5c9474284148d7d7aef3dcd1ec26c93cb5ea0d0a941e099cd1c48e26f39d88de317976b91af465bc40fb971f23bda5e972b7c2e1d94bbea8dbc1fd0cd4796e3057c8025a0eb153bfe4d52869503f013af94e39ab595bf8c1616025a34cabe41055f240d78175b30c2c6f8d40675b4cde44357b51a93d2e36174e59c5ae", 0x25}}, 0x10000}) (async) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000480)={0x9d0000, 0x5, 0x5, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x9d0903, 0x2, '\x00', @p_u32=&(0x7f00000000c0)=0x9}}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0x0, @pix={0x5, 0x81, 0x34324142, 0x7, 0x5, 0x80000001, 0x5, 0x800, 0x0, 0x2, 0x2, 0x1}}) 23:36:25 executing program 4: syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast1, @broadcast}, &(0x7f0000000200)=0xc) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x1, @stepwise={0x0, 0xfffffffd, 0x1, 0x0, 0x7fffffff, 0xfffffffe}}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, r3, 0x0, 0x2, &(0x7f0000000100)='^\x00'}, 0x30) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000240)=0x4, 0x4) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x10001, 0x2, 0x2, 0x0, 0x5}) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) socket$inet_dccp(0x2, 0x6, 0x0) (async) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) (async) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast1, @broadcast}, &(0x7f0000000200)=0xc) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x1, @stepwise={0x0, 0xfffffffd, 0x1, 0x0, 0x7fffffff, 0xfffffffe}}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, r3, 0x0, 0x2, &(0x7f0000000100)='^\x00'}, 0x30) (async) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000240)=0x4, 0x4) (async) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x10001, 0x2, 0x2, 0x0, 0x5}) (async) 23:36:25 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x121800, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) clock_gettime(0xf820becce9bdaf5d, &(0x7f0000000200)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000240)=@mmap={0x1, 0x3, 0x4, 0x2000, 0x6, {r2, r3/1000+10000}, {0x4, 0x8, 0x6, 0x6, 0x8, 0x7, "fe2595f1"}, 0x1}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) openat$cgroup_procs(r4, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) r5 = socket(0xb, 0x1, 0x1210) ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0x3) setsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f0000000000), 0x4) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380), 0x80000, 0x0) ioctl$SNDCTL_DSP_STEREO(r6, 0xc0045003, &(0x7f00000003c0)=0x1) accept4$tipc(r1, 0x0, &(0x7f00000000c0), 0x80800) 23:36:25 executing program 3: socketpair(0x23, 0x10f, 0x7fffffff, &(0x7f0000000100)) 23:36:26 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000040)=@userptr={0xd395, 0x3, 0x4, 0x8, 0x7, {0x0, 0xea60}, {0x3, 0x0, 0x0, 0x1, 0xf8, 0x2, "d29d7de7"}, 0xffff8000, 0x2, {}, 0x4}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:26 executing program 1: ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000000)={0xc828, 0x34324142, 0x2, @discrete={0x9, 0x400}}) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x2, 0x0, 0x0, "3f00000c0003000008000000000000000000980f220074a4aa825a8ade221de0", 0x36314d59}) 23:36:26 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x121800, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) clock_gettime(0xf820becce9bdaf5d, &(0x7f0000000200)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000240)=@mmap={0x1, 0x3, 0x4, 0x2000, 0x6, {r2, r3/1000+10000}, {0x4, 0x8, 0x6, 0x6, 0x8, 0x7, "fe2595f1"}, 0x1}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) openat$cgroup_procs(r4, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) r5 = socket(0xb, 0x1, 0x1210) ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0x3) setsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f0000000000), 0x4) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380), 0x80000, 0x0) ioctl$SNDCTL_DSP_STEREO(r6, 0xc0045003, &(0x7f00000003c0)=0x1) 23:36:26 executing program 3: socketpair(0x23, 0x110, 0x7fffffff, &(0x7f0000000100)) 23:36:26 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:26 executing program 0: ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000001c0)={0x9d0000, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x980906, 0x10001, '\x00', @ptr=0x9}}) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, &(0x7f0000000000)={0x40000000, 0x102, "de9cf471a5ec01b7fbcb3bfa2440678e2e71ac6fd7defbbf6f9e32d55fce8ac5", 0xb68, 0x5, 0xd3ab, 0xfff, 0x1000, 0x1000, 0x40, 0x0, [0x10001, 0x7, 0x10000, 0xffff8747]}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:26 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x8200, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x1ff, 0x3, 0x3, "ba51085fe5e91de3a62896f274d569b337fafb39d7792c3db4b32022e9c5c1e7", 0x39555659}) 23:36:26 executing program 1: ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000000)={0xc828, 0x34324142, 0x2, @discrete={0x9, 0x400}}) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x2, 0x0, 0x0, "3f00000c0003000008000000000000000000980f220074a4aa825a8ade221de0", 0x36314d59}) 23:36:26 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x121800, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) clock_gettime(0xf820becce9bdaf5d, &(0x7f0000000200)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000240)=@mmap={0x1, 0x3, 0x4, 0x2000, 0x6, {r2, r3/1000+10000}, {0x4, 0x8, 0x6, 0x6, 0x8, 0x7, "fe2595f1"}, 0x1}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) openat$cgroup_procs(r4, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) r5 = socket(0xb, 0x1, 0x1210) ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0x3) setsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f0000000000), 0x4) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380), 0x80000, 0x0) 23:36:26 executing program 3: socketpair(0x23, 0x111, 0x7fffffff, &(0x7f0000000100)) 23:36:26 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:26 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x10202, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x30313953}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 23:36:26 executing program 0: ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000001c0)={0x9d0000, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x980906, 0x10001, '\x00', @ptr=0x9}}) (async, rerun: 32) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, &(0x7f0000000000)={0x40000000, 0x102, "de9cf471a5ec01b7fbcb3bfa2440678e2e71ac6fd7defbbf6f9e32d55fce8ac5", 0xb68, 0x5, 0xd3ab, 0xfff, 0x1000, 0x1000, 0x40, 0x0, [0x10001, 0x7, 0x10000, 0xffff8747]}) (async, rerun: 32) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:26 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x8200, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x1ff, 0x3, 0x3, "ba51085fe5e91de3a62896f274d569b337fafb39d7792c3db4b32022e9c5c1e7", 0x39555659}) 23:36:26 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (rerun: 64) 23:36:26 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x121800, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) clock_gettime(0xf820becce9bdaf5d, &(0x7f0000000200)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000240)=@mmap={0x1, 0x3, 0x4, 0x2000, 0x6, {r2, r3/1000+10000}, {0x4, 0x8, 0x6, 0x6, 0x8, 0x7, "fe2595f1"}, 0x1}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) openat$cgroup_procs(r4, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) r5 = socket(0xb, 0x1, 0x1210) ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0x3) setsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f0000000000), 0x4) 23:36:26 executing program 0: ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000001c0)={0x9d0000, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x980906, 0x10001, '\x00', @ptr=0x9}}) (async, rerun: 32) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, &(0x7f0000000000)={0x40000000, 0x102, "de9cf471a5ec01b7fbcb3bfa2440678e2e71ac6fd7defbbf6f9e32d55fce8ac5", 0xb68, 0x5, 0xd3ab, 0xfff, 0x1000, 0x1000, 0x40, 0x0, [0x10001, 0x7, 0x10000, 0xffff8747]}) (async, rerun: 32) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:26 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x8200, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x1ff, 0x3, 0x3, "ba51085fe5e91de3a62896f274d569b337fafb39d7792c3db4b32022e9c5c1e7", 0x39555659}) syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x8200, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x1ff, 0x3, 0x3, "ba51085fe5e91de3a62896f274d569b337fafb39d7792c3db4b32022e9c5c1e7", 0x39555659}) (async) 23:36:26 executing program 3: socketpair(0x23, 0x112, 0x7fffffff, &(0x7f0000000100)) 23:36:26 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x10202, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x30313953}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 23:36:26 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000001c0)) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x9, 0x36, 0x1, {0x2, @sliced={0xba4, [0x8001, 0x40, 0x0, 0x1, 0x9, 0x8, 0x9, 0x8, 0x4, 0xbe5, 0xfeff, 0x8001, 0x3ff, 0x8, 0x1, 0x2, 0x4, 0x2, 0x400, 0x2d6, 0xffff, 0x0, 0x401, 0x9, 0x34, 0x9, 0x7c7, 0xff81, 0x1, 0x6, 0x4, 0x1, 0xfd, 0x2, 0x2, 0x5, 0x15c2, 0x0, 0x6, 0xd43, 0x5, 0x7f, 0x8, 0x3, 0xfffc, 0x80, 0xffe1, 0xcfbc], 0xffffffff}}, 0x8001}) 23:36:26 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x121800, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) clock_gettime(0xf820becce9bdaf5d, &(0x7f0000000200)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000240)=@mmap={0x1, 0x3, 0x4, 0x2000, 0x6, {r2, r3/1000+10000}, {0x4, 0x8, 0x6, 0x6, 0x8, 0x7, "fe2595f1"}, 0x1}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) openat$cgroup_procs(r4, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) socket(0xb, 0x1, 0x1210) ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0x3) 23:36:26 executing program 3: socketpair(0x23, 0x113, 0x7fffffff, &(0x7f0000000100)) 23:36:26 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x10202, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0", 0x30313953}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 23:36:26 executing program 4: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x1, 0x8}, 0xc) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001200)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x3, 0xd, &(0x7f0000000080)=@raw=[@ldst={0x3, 0x0, 0x2, 0x2, 0x9, 0xfffffffffffffff4, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x69b, 0x0, 0x0, 0x0, 0x87}, @exit, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x6}, @generic={0x9f, 0x1, 0x4, 0xd3, 0x1ff}, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x401}, @generic={0x8, 0xd, 0xd, 0xfc00, 0x6de}], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xb, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000011c0)={0x1, 0xa, 0x8, 0x9}, 0x10, r3, 0xffffffffffffffff, 0x0, &(0x7f0000001240)=[0xffffffffffffffff]}, 0x80) r4 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:36:26 executing program 3: socketpair(0x23, 0x114, 0x7fffffff, &(0x7f0000000100)) [ 2345.370792] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2345.407158] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2345.411938] CPU: 0 PID: 8077 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 2345.419377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2345.428726] Call Trace: [ 2345.431324] dump_stack+0x1fc/0x2ef [ 2345.434955] dump_header+0x15d/0xc3f [ 2345.438667] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2345.443770] ? ___ratelimit+0x319/0x590 [ 2345.447747] oom_kill_process.cold+0x10/0x692 [ 2345.452244] ? check_preemption_disabled+0x41/0x280 [ 2345.457264] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2345.462550] out_of_memory+0x1072/0x1390 [ 2345.466611] ? oom_killer_disable+0x270/0x270 [ 2345.471102] ? mutex_trylock+0x15f/0x1a0 [ 2345.475164] __alloc_pages_nodemask+0x23a2/0x2890 [ 2345.480011] ? find_get_entry+0x4cd/0x8a0 [ 2345.484167] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2345.489039] alloc_pages_current+0x193/0x2a0 [ 2345.493449] filemap_fault+0x146e/0x2180 [ 2345.497524] ext4_filemap_fault+0x84/0xb0 [ 2345.501667] __do_fault+0x10b/0x4b0 [ 2345.505297] __handle_mm_fault+0x273b/0x41c0 [ 2345.509713] ? vm_insert_page+0x9c0/0x9c0 [ 2345.513859] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2345.518456] ? check_preemption_disabled+0x41/0x280 [ 2345.523477] handle_mm_fault+0x436/0xb10 [ 2345.527579] __do_page_fault+0x68e/0xd60 [ 2345.531642] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2345.536655] ? spurious_fault+0x840/0x840 [ 2345.540800] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2345.545909] ? page_fault+0x8/0x30 [ 2345.549456] page_fault+0x1e/0x30 [ 2345.552903] RIP: 0033:0x4420eb [ 2345.556092] Code: Bad RIP value. [ 2345.559449] RSP: 002b:000000c00005ff30 EFLAGS: 00010206 [ 2345.564804] RAX: 0000022219f961fd RBX: 000000c000050000 RCX: 0000000000000000 [ 2345.572068] RDX: 000000001d1507fd RSI: 000000c00005ff00 RDI: 000000c00005fedc [ 2345.579337] RBP: 000000c00005ff88 R08: 00007ffe349f9000 R09: 00000259a255a803 [ 2345.586622] R10: 000e8a83feaec6f5 R11: 0000000000000001 R12: 000000c00005ff10 [ 2345.593890] R13: 000000c00051d800 R14: 000000c0000004e0 R15: 00007f615969ae9c [ 2345.607026] Mem-Info: [ 2345.609471] active_anon:15569 inactive_anon:10849 isolated_anon:0 [ 2345.609471] active_file:24 inactive_file:0 isolated_file:0 [ 2345.609471] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2345.609471] slab_reclaimable:16052 slab_unreclaimable:122884 [ 2345.609471] mapped:22383 shmem:11281 pagetables:559 bounce:0 [ 2345.609471] free:25151 free_pcp:62 free_cma:0 [ 2345.684590] Node 0 active_anon:60680kB inactive_anon:18944kB active_file:96kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:86824kB dirty:0kB writeback:0kB shmem:20544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2345.744296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2345.749902] ieee802154 phy1 wpan1: encryption failed: -22 [ 2345.792272] Node 1 active_anon:1596kB inactive_anon:24452kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2708kB dirty:0kB writeback:0kB shmem:24580kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2345.886883] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2345.958197] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2345.969531] Node 0 DMA32 free:35560kB min:35996kB low:44992kB high:53988kB active_anon:60680kB inactive_anon:18944kB active_file:100kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7488kB pagetables:2016kB bounce:0kB free_pcp:372kB local_pcp:0kB free_cma:0kB [ 2346.028672] lowmem_reserve[]: 0 0 1 1 1 [ 2346.048281] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2346.113584] lowmem_reserve[]: 0 0 0 0 0 [ 2346.117610] Node 1 Normal free:53860kB min:53876kB low:67344kB high:80812kB active_anon:1596kB inactive_anon:24452kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:224kB pagetables:220kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2346.162067] lowmem_reserve[]: 0 0 0 0 0 [ 2346.166079] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10968kB [ 2346.179402] Node 0 DMA32: 1923*4kB (UME) 1205*8kB (UME) 437*16kB (UME) 73*32kB (UME) 13*64kB (ME) 14*128kB (UME) 7*256kB (M) 4*512kB (UM) 1*1024kB (U) 1*2048kB (M) 0*4096kB = 36196kB [ 2346.203699] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2346.230975] Node 1 Normal: 137*4kB (UME) 110*8kB (UME) 88*16kB (UME) 50*32kB (ME) 41*64kB (UM) 20*128kB (UME) 5*256kB (M) 4*512kB (UME) 2*1024kB (ME) 3*2048kB (UME) 8*4096kB (U) = 53908kB [ 2346.275974] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2346.300836] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2346.325678] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2346.348381] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2346.387670] 11341 total pagecache pages [ 2346.391676] 0 pages in swap cache [ 2346.416568] Swap cache stats: add 0, delete 0, find 0/0 [ 2346.436932] Free swap = 0kB [ 2346.439967] Total swap = 0kB [ 2346.449327] 2097051 pages RAM [ 2346.455848] 0 pages HighMem/MovableOnly [ 2346.459830] 369649 pages reserved [ 2346.489780] 0 pages cma reserved [ 2346.501693] Unreclaimable slab info: [ 2346.520007] Name Used Total [ 2346.534379] pid_2 155KB 220KB [ 2346.539826] batadv_tl_cache 4KB 12KB [ 2346.561321] TIPC 10KB 30KB [ 2346.571470] SCTPv6 14KB 24KB [ 2346.578573] SCTP 23KB 81KB [ 2346.595131] DCCPv6 17KB 30KB [ 2346.600520] DCCP 23KB 57KB [ 2346.629481] L2TP/IPv6 9KB 13KB [ 2346.643628] L2TP/IP 12KB 52KB [ 2346.649018] RXRPC 11KB 19KB [ 2346.670287] rxrpc_call_jar 78KB 102KB [ 2346.688288] bridge_fdb_cache 8KB 19KB [ 2346.700605] fib6_nodes 157KB 280KB [ 2346.721369] ip6_dst_cache 66KB 397KB [ 2346.738488] RAWv6 70KB 87KB [ 2346.750167] UDPLITEv6 5KB 7KB [ 2346.768489] UDPv6 26KB 41KB [ 2346.795446] TCPv6 27KB 42KB [ 2346.800876] nf_conntrack 1KB 3KB [ 2346.808699] t10_alua_lu_gp_cache 0KB 3KB [ 2346.820616] sd_ext_cdb 0KB 7KB [ 2346.847023] scsi_sense_cache 1056KB 1060KB [ 2346.860781] virtio_scsi_cmd 16KB 16KB [ 2346.878913] sgpool-128 8KB 8KB [ 2346.893799] sgpool-64 4KB 12KB [ 2346.899347] sgpool-32 2KB 15KB [ 2346.929619] sgpool-16 1KB 7KB [ 2346.943626] sgpool-8 0KB 7KB [ 2346.949025] mqueue_inode_cache 10KB 22KB [ 2346.954525] bio_post_read_ctx 14KB 15KB [ 2346.959957] bio-2 14KB 15KB [ 2346.965384] jfs_mp 7KB 7KB [ 2346.970776] cifs_small_rq 15KB 16KB [ 2346.976178] cifs_request 67KB 67KB [ 2346.981544] cifs_mpx_ids 0KB 7KB [ 2346.986958] nfs_commit_data 3KB 14KB [ 2346.992360] nfs_write_data 34KB 44KB [ 2346.997756] ext4_system_zone 1KB 7KB [ 2347.022295] bio-1 1KB 7KB [ 2347.027684] pid_namespace 2KB 11KB [ 2347.057087] rpc_buffers 17KB 25KB [ 2347.083064] rpc_tasks 2KB 7KB [ 2347.088458] UNIX 155KB 161KB [ 2347.125331] tcp_bind_bucket 1KB 4KB [ 2347.130716] ip_fib_trie 23KB 47KB [ 2347.147462] ip_fib_alias 111KB 197KB [ 2347.152918] ip_dst_cache 4KB 16KB [ 2347.169173] RAW 42KB 60KB [ 2347.174660] UDP 25KB 54KB [ 2347.180024] TCP 11KB 16KB [ 2347.190583] hugetlbfs_inode_cache 3KB 15KB [ 2347.196348] fscache_cookie_jar 1KB 11KB [ 2347.208114] eventpoll_pwq 8KB 47KB [ 2347.221522] eventpoll_epi 16KB 59KB [ 2347.229396] inotify_inode_mark 30KB 55KB [ 2347.254576] request_queue 199KB 199KB [ 2347.259961] blkdev_requests 1KB 3KB [ 2347.295375] blkdev_ioc 11KB 23KB [ 2347.300767] bio-0 162KB 191KB [ 2347.321930] biovec-max 1287KB 1394KB [ 2347.331245] biovec-64 139KB 181KB [ 2347.361852] biovec-16 21KB 22KB [ 2347.374935] bio_integrity_payload 1KB 8KB [ 2347.380660] khugepaged_mm_slot 23KB 42KB [ 2347.408523] uid_cache 0KB 4KB [ 2347.419884] dmaengine-unmap-2 0KB 3KB [ 2347.425364] skbuff_fclone_cache 252KB 442KB [ 2347.461087] skbuff_head_cache 1725KB 2928KB [ 2347.494505] configfs_dir_cache 3KB 7KB [ 2347.499986] file_lock_cache 162KB 198KB [ 2347.524680] file_lock_ctx 9KB 11KB [ 2347.530084] fsnotify_mark_connector 18KB 31KB [ 2347.565353] net_namespace 52KB 52KB [ 2347.570740] shmem_inode_cache 8414KB 8520KB [ 2347.608282] task_delay_info 304KB 395KB [ 2347.626934] taskstats 170KB 298KB [ 2347.647786] proc_dir_entry 695KB 802KB [ 2347.660485] pde_opener 9KB 34KB [ 2347.669493] seq_file 230KB 334KB [ 2347.682434] sigqueue 19KB 35KB [ 2347.687814] kernfs_node_cache 18234KB 18238KB [ 2347.704177] mnt_cache 172KB 188KB [ 2347.709556] filp 5728KB 7125KB [ 2347.725769] names_cache 153607KB 153667KB [ 2347.731147] iint_cache 20KB 51KB [ 2347.769233] key_jar 4KB 7KB [ 2347.794095] uts_namespace 2KB 3KB [ 2347.799488] nsproxy 1KB 7KB [ 2347.834172] vm_area_struct 3276KB 5035KB [ 2347.854782] mm_struct 817KB 1163KB [ 2347.860173] fs_cache 155KB 328KB [ 2347.872344] files_cache 600KB 907KB [ 2347.877720] signal_cache 1185KB 1847KB [ 2347.888202] sighand_cache 538KB 624KB [ 2347.900860] task_struct 9405KB 9462KB [ 2347.929884] cred_jar 898KB 2264KB [ 2347.943719] anon_vma_chain 1006KB 1834KB [ 2347.949110] anon_vma 147KB 350KB [ 2347.960701] pid 51KB 216KB [ 2347.986029] Acpi-Operand 156KB 198KB [ 2347.991423] Acpi-ParseExt 8KB 11KB [ 2348.019579] Acpi-Parse 41KB 47KB [ 2348.033169] Acpi-State 52KB 63KB [ 2348.046292] Acpi-Namespace 21KB 23KB [ 2348.064877] numa_policy 0KB 3KB [ 2348.070266] debug_objects_cache 1816KB 2403KB [ 2348.097431] trace_event_file 297KB 298KB [ 2348.117393] ftrace_event_field 398KB 401KB [ 2348.130230] pool_workqueue 121KB 148KB [ 2348.150146] page->ptl 760KB 1363KB [ 2348.163228] kmalloc-2097152 2050KB 2050KB [ 2348.168627] kmalloc-524288 2056KB 2056KB [ 2348.184105] kmalloc-262144 1290KB 1290KB [ 2348.189492] kmalloc-131072 650KB 650KB [ 2348.194926] kmalloc-65536 1848KB 1914KB [ 2348.200292] kmalloc-32768 1650KB 1650KB [ 2348.218610] kmalloc-16384 940KB 1006KB [ 2348.237286] kmalloc-8192 4017KB 4059KB [ 2348.242722] kmalloc-4096 18487KB 18547KB [ 2348.248095] kmalloc-2048 12452KB 13132KB [ 2348.268881] kmalloc-1024 6080KB 9024KB [ 2348.274328] kmalloc-512 5736KB 9075KB [ 2348.279694] kmalloc-256 4895KB 5831KB [ 2348.302854] kmalloc-128 1066KB 1523KB [ 2348.308248] kmalloc-96 3589KB 4556KB [ 2348.324946] kmalloc-64 3180KB 4336KB [ 2348.330336] kmalloc-32 1875KB 2579KB [ 2348.340886] kmalloc-192 1495KB 2588KB [ 2348.346331] kmem_cache 177KB 180KB [ 2348.358121] Out of memory (oom_kill_allocating_task): Kill process 8077 (syz-fuzzer) score 0 or sacrifice child [ 2348.389596] Killed process 24326 (syz-executor.1) total-vm:48512kB, anon-rss:428kB, file-rss:0kB, shmem-rss:0kB [ 2348.440626] oom_reaper: reaped process 9435 (syz-executor.0), now anon-rss:0kB, file-rss:13552kB, shmem-rss:0kB [ 2348.542463] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2348.567215] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2348.584386] CPU: 0 PID: 8109 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 2348.591867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2348.601222] Call Trace: [ 2348.603818] dump_stack+0x1fc/0x2ef [ 2348.607450] dump_header+0x15d/0xc3f [ 2348.611178] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2348.616279] ? ___ratelimit+0x319/0x590 [ 2348.620254] oom_kill_process.cold+0x10/0x692 [ 2348.624749] ? check_preemption_disabled+0x41/0x280 [ 2348.629772] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2348.635052] out_of_memory+0x1072/0x1390 [ 2348.639117] ? oom_killer_disable+0x270/0x270 [ 2348.643612] ? mutex_trylock+0x15f/0x1a0 [ 2348.647672] __alloc_pages_nodemask+0x23a2/0x2890 [ 2348.652515] ? find_get_entry+0x4cd/0x8a0 [ 2348.656657] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2348.661508] alloc_pages_current+0x193/0x2a0 [ 2348.665909] filemap_fault+0x146e/0x2180 [ 2348.669967] ext4_filemap_fault+0x84/0xb0 [ 2348.674103] __do_fault+0x10b/0x4b0 [ 2348.677722] __handle_mm_fault+0x273b/0x41c0 [ 2348.682121] ? vm_insert_page+0x9c0/0x9c0 [ 2348.686253] ? __fget+0x356/0x510 [ 2348.689703] ? check_preemption_disabled+0x41/0x280 [ 2348.694713] handle_mm_fault+0x436/0xb10 [ 2348.698766] __do_page_fault+0x68e/0xd60 [ 2348.702824] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2348.707830] ? spurious_fault+0x840/0x840 [ 2348.711970] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2348.716806] ? page_fault+0x8/0x30 [ 2348.720333] page_fault+0x1e/0x30 [ 2348.723775] RIP: 0033:0x454943 [ 2348.726956] Code: Bad RIP value. [ 2348.730304] RSP: 002b:000000c000b31d80 EFLAGS: 00010206 [ 2348.735650] RAX: 000000c000042ed8 RBX: 0000000000000005 RCX: 0000000000000000 [ 2348.742905] RDX: 0000000000c0ea00 RSI: 0000000000000001 RDI: 000000c000721300 [ 2348.750160] RBP: 000000c000b31dc8 R08: 0000000000000000 R09: 0000000000000001 [ 2348.757414] R10: 00000223eedcce62 R11: 0000000000000001 R12: 00000223eedcce62 [ 2348.764670] R13: 0000000000000004 R14: 000000c0006ef520 R15: 0000022c858bfa1d [ 2348.775274] Mem-Info: [ 2348.779531] active_anon:14932 inactive_anon:10849 isolated_anon:0 [ 2348.779531] active_file:48 inactive_file:0 isolated_file:0 [ 2348.779531] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2348.779531] slab_reclaimable:16015 slab_unreclaimable:122453 [ 2348.779531] mapped:18798 shmem:11281 pagetables:522 bounce:0 [ 2348.779531] free:13932 free_pcp:0 free_cma:0 [ 2348.789972] syz-executor.0: vmalloc: allocation failure, allocated 1786978304 of 4278132736 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2348.815878] Node 0 active_anon:58132kB inactive_anon:18944kB active_file:188kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:72484kB dirty:0kB writeback:0kB shmem:20544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2348.853174] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2348.857654] Node 1 active_anon:1596kB inactive_anon:24452kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2708kB dirty:0kB writeback:0kB shmem:24580kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2348.859140] CPU: 1 PID: 9435 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 2348.891181] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2348.893757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2348.893762] Call Trace: [ 2348.893781] dump_stack+0x1fc/0x2ef [ 2348.893799] warn_alloc.cold+0x7b/0x18f [ 2348.893819] ? zone_watermark_ok_safe+0x260/0x260 [ 2348.893852] __vmalloc_area_node+0x4fd/0x780 [ 2348.923602] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2348.929304] ? __vmalloc_node_range+0x180/0x180 [ 2348.931932] Node 0 DMA32 free:17724kB min:35996kB low:44992kB high:53988kB active_anon:58132kB inactive_anon:18944kB active_file:56kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7520kB pagetables:1868kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2348.935481] ? _raw_spin_unlock+0x29/0x40 [ 2348.939421] lowmem_reserve[]: 0 0 1 1 1 [ 2348.944247] ? __get_vm_area_node+0x2e2/0x3a0 [ 2348.944266] __vmalloc_node_range+0xed/0x180 [ 2348.944283] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2348.944297] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2348.944308] vmalloc_user+0x70/0xe0 [ 2348.944327] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2348.944341] vb2_vmalloc_alloc+0xb3/0x2f0 [ 2348.944360] __vb2_queue_alloc+0x472/0xe60 [ 2348.952065] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2348.953764] vb2_core_create_bufs+0x273/0x7e0 [ 2348.958397] lowmem_reserve[]: 0 0 0 0 0 [ 2348.986927] ? __vb2_queue_free+0x870/0x870 [ 2348.986941] ? __video_do_ioctl+0x632/0xcd0 [ 2348.986959] ? __mutex_lock+0x368/0x1190 [ 2348.986976] vb2_create_bufs+0x332/0x620 [ 2348.986994] ? mark_held_locks+0xf0/0xf0 [ 2348.987005] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 2348.987020] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 2348.987035] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 2348.987057] v4l_create_bufs+0xb2/0x160 [ 2348.987072] __video_do_ioctl+0x49a/0xcd0 [ 2348.987095] ? v4l_querycap+0x340/0x340 [ 2348.987114] ? __might_fault+0x192/0x1d0 [ 2348.987129] ? v4l_querycap+0x340/0x340 [ 2348.987145] video_usercopy+0x13f/0xfa0 [ 2348.987167] ? v4l_enumstd+0x60/0x60 [ 2348.987182] ? do_futex+0x171/0x1880 [ 2348.987199] ? mark_held_locks+0xf0/0xf0 [ 2348.987218] ? debug_check_no_obj_freed+0x201/0x490 [ 2348.987242] ? video_usercopy+0xfa0/0xfa0 [ 2348.987255] v4l2_ioctl+0x147/0x1a0 [ 2348.987268] ? video_devdata+0xa0/0xa0 [ 2348.987284] do_vfs_ioctl+0xcdb/0x12e0 [ 2348.987300] ? lock_downgrade+0x720/0x720 [ 2348.987316] ? check_preemption_disabled+0x41/0x280 [ 2348.987337] ? ioctl_preallocate+0x200/0x200 [ 2348.987356] ? __fget+0x356/0x510 [ 2348.987373] ? do_dup2+0x450/0x450 [ 2348.987387] ? __se_sys_futex+0x298/0x3b0 [ 2348.987409] ksys_ioctl+0x9b/0xc0 [ 2348.987426] __x64_sys_ioctl+0x6f/0xb0 [ 2348.987442] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2348.987456] do_syscall_64+0xf9/0x620 [ 2348.987475] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2348.987485] RIP: 0033:0x7f63ae2010c9 [ 2348.987499] Code: Bad RIP value. [ 2348.987507] RSP: 002b:00007f63ac773168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2348.987521] RAX: ffffffffffffffda RBX: 00007f63ae320f80 RCX: 00007f63ae2010c9 [ 2348.987529] RDX: 0000000020000000 RSI: 00000000c100565c RDI: 0000000000000003 [ 2348.987537] RBP: 00007f63ae25cae9 R08: 0000000000000000 R09: 0000000000000000 [ 2348.987544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2348.987553] R13: 00007ffc79632fdf R14: 00007f63ac773300 R15: 0000000000022000 [ 2348.996258] Mem-Info: [ 2349.013975] Node 1 Normal free:27212kB min:53876kB low:67344kB high:80812kB active_anon:1576kB inactive_anon:24452kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:224kB pagetables:220kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2349.017209] active_anon:14902 inactive_anon:10849 isolated_anon:0 [ 2349.017209] active_file:13 inactive_file:1 isolated_file:12 [ 2349.017209] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2349.017209] slab_reclaimable:16015 slab_unreclaimable:122437 [ 2349.017209] mapped:18789 shmem:11281 pagetables:533 bounce:0 [ 2349.017209] free:14046 free_pcp:1 free_cma:0 [ 2349.019356] lowmem_reserve[]: 0 0 0 0 0 [ 2349.023653] Node 0 active_anon:58032kB inactive_anon:18944kB active_file:48kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:72448kB dirty:0kB writeback:0kB shmem:20544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2349.023679] Node 1 active_anon:1576kB inactive_anon:24452kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2708kB dirty:0kB writeback:0kB shmem:24580kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2349.023684] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2349.023715] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2349.023735] Node 0 DMA32 free:18080kB min:35996kB low:44992kB high:53988kB active_anon:58032kB inactive_anon:18944kB active_file:48kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7424kB pagetables:1912kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 2349.023768] lowmem_reserve[]: 0 0 1 1 1 [ 2349.040022] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10884kB [ 2349.063078] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2349.069040] Node 0 DMA32: 1412*4kB (UME) 834*8kB (UME) 285*16kB (UME) 38*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18096kB [ 2349.071048] lowmem_reserve[]: 0 0 0 0 0 [ 2349.075980] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2349.081620] Node 1 Normal free:27212kB min:53876kB low:67344kB high:80812kB active_anon:1576kB inactive_anon:24452kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:224kB pagetables:220kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2349.086116] Node 1 Normal: 137*4kB (ME) 107*8kB (ME) 85*16kB (ME) 48*32kB (ME) 38*64kB (M) 20*128kB (UME) 6*256kB (M) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (ME) 2*4096kB (U) = 27212kB [ 2349.089211] lowmem_reserve[]: 0 0 0 0 0 [ 2349.092795] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2349.100070] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10884kB [ 2349.105385] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2349.107081] Node 0 DMA32: 1412*4kB (UME) 834*8kB (UME) 285*16kB (UME) 38*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18096kB [ 2349.111270] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2349.119660] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2349.124147] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2349.127437] Node 1 Normal: 137*4kB (ME) 107*8kB (ME) 85*16kB (ME) 48*32kB (ME) 38*64kB (M) 20*128kB (UME) 6*256kB (M) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (ME) 2*4096kB (U) = 27212kB [ 2349.131141] 11307 total pagecache pages [ 2349.139375] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2349.145256] 0 pages in swap cache [ 2349.148354] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2349.152900] Swap cache stats: add 0, delete 0, find 0/0 [ 2349.160444] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2349.165990] Free swap = 0kB [ 2349.169062] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2349.169068] 11307 total pagecache pages [ 2349.169080] 0 pages in swap cache [ 2349.169088] Swap cache stats: add 0, delete 0, find 0/0 [ 2349.169093] Free swap = 0kB [ 2349.169098] Total swap = 0kB [ 2349.169107] 2097051 pages RAM [ 2349.169112] 0 pages HighMem/MovableOnly [ 2349.169116] 369649 pages reserved [ 2349.169120] 0 pages cma reserved [ 2349.747870] Total swap = 0kB [ 2349.750912] 2097051 pages RAM [ 2349.756766] 0 pages HighMem/MovableOnly [ 2349.760752] 369649 pages reserved [ 2349.766835] 0 pages cma reserved [ 2349.770210] Unreclaimable slab info: [ 2349.776376] Name Used Total [ 2349.789402] pid_2 154KB 220KB [ 2349.797291] batadv_tl_cache 4KB 12KB [ 2349.805088] TIPC 10KB 30KB [ 2349.810477] SCTPv6 14KB 24KB [ 2349.818284] SCTP 23KB 81KB [ 2349.831077] DCCPv6 17KB 30KB [ 2349.838920] DCCP 21KB 57KB [ 2349.847071] L2TP/IPv6 9KB 13KB [ 2349.854861] L2TP/IP 12KB 52KB [ 2349.860240] RXRPC 11KB 19KB [ 2349.876847] rxrpc_call_jar 78KB 102KB [ 2349.884668] bridge_fdb_cache 8KB 19KB [ 2349.890701] fib6_nodes 157KB 280KB [ 2349.898509] ip6_dst_cache 66KB 397KB [ 2349.911410] RAWv6 70KB 87KB [ 2349.919230] UDPLITEv6 5KB 7KB [ 2349.934127] UDPv6 26KB 41KB [ 2349.939526] TCPv6 24KB 42KB [ 2349.947296] nf_conntrack 1KB 3KB [ 2349.955313] t10_alua_lu_gp_cache 0KB 3KB [ 2349.960973] sd_ext_cdb 0KB 7KB [ 2349.976032] scsi_sense_cache 1056KB 1060KB [ 2349.981438] virtio_scsi_cmd 16KB 16KB [ 2349.995389] sgpool-128 8KB 8KB [ 2350.000798] sgpool-64 4KB 12KB [ 2350.047953] sgpool-32 2KB 15KB [ 2350.057048] sgpool-16 1KB 7KB [ 2350.079425] sgpool-8 0KB 7KB [ 2350.142303] mqueue_inode_cache 10KB 22KB [ 2350.147898] bio_post_read_ctx 14KB 15KB [ 2350.201014] bio-2 14KB 15KB [ 2350.228782] jfs_mp 7KB 7KB [ 2350.234406] cifs_small_rq 15KB 16KB [ 2350.239777] cifs_request 67KB 67KB [ 2350.252213] cifs_mpx_ids 0KB 7KB [ 2350.257630] nfs_commit_data 3KB 14KB [ 2350.263074] nfs_write_data 34KB 44KB [ 2350.268480] ext4_system_zone 1KB 7KB [ 2350.280903] bio-1 1KB 7KB [ 2350.289320] pid_namespace 2KB 11KB [ 2350.330058] rpc_buffers 17KB 25KB [ 2350.367449] rpc_tasks 2KB 7KB [ 2350.398563] UNIX 155KB 161KB [ 2350.417155] tcp_bind_bucket 1KB 4KB [ 2350.436665] ip_fib_trie 23KB 47KB [ 2350.444518] ip_fib_alias 111KB 197KB [ 2350.451222] ip_dst_cache 4KB 16KB [ 2350.459770] RAW 42KB 60KB [ 2350.468424] UDP 25KB 54KB [ 2350.487143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2350.495725] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2350.506879] TCP 8KB 16KB [ 2350.516228] hugetlbfs_inode_cache 3KB 15KB [ 2350.531367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2350.539618] fscache_cookie_jar 1KB 11KB [ 2350.554645] eventpoll_pwq 8KB 47KB [ 2350.558392] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2350.560061] eventpoll_epi 16KB 59KB [ 2350.560070] inotify_inode_mark 30KB 55KB [ 2350.560080] request_queue 199KB 199KB [ 2350.560088] blkdev_requests 1KB 3KB [ 2350.560096] blkdev_ioc 16KB 23KB [ 2350.560105] bio-0 201KB 202KB [ 2350.560112] biovec-max 1287KB 1394KB [ 2350.560123] biovec-64 192KB 196KB [ 2350.560131] biovec-16 24KB 26KB [ 2350.560141] bio_integrity_payload 1KB 8KB [ 2350.560150] khugepaged_mm_slot 23KB 42KB [ 2350.560170] uid_cache 0KB 4KB [ 2350.598589] device bridge_slave_1 left promiscuous mode [ 2350.605670] dmaengine-unmap-2 0KB 3KB [ 2350.605684] skbuff_fclone_cache 252KB 442KB [ 2350.605694] skbuff_head_cache 2045KB 2928KB [ 2350.605709] configfs_dir_cache 3KB 7KB [ 2350.605720] file_lock_cache 159KB 198KB [ 2350.605729] file_lock_ctx 9KB 11KB [ 2350.605739] fsnotify_mark_connector 18KB 31KB [ 2350.605748] net_namespace 52KB 52KB [ 2350.605758] shmem_inode_cache 8407KB 8520KB [ 2350.605768] task_delay_info 304KB 395KB [ 2350.605777] taskstats 166KB 298KB [ 2350.605787] proc_dir_entry 695KB 802KB [ 2350.605796] pde_opener 8KB 34KB [ 2350.605806] seq_file 227KB 334KB [ 2350.605815] sigqueue 31KB 35KB [ 2350.605825] kernfs_node_cache 18071KB 18175KB [ 2350.605835] mnt_cache 172KB 188KB [ 2350.605844] filp 5627KB 7125KB [ 2350.605854] names_cache 150811KB 150811KB [ 2350.605863] iint_cache 20KB 51KB [ 2350.605873] key_jar 4KB 7KB [ 2350.605882] uts_namespace 2KB 3KB [ 2350.605891] nsproxy 1KB 7KB [ 2350.605901] vm_area_struct 3238KB 5035KB [ 2350.605910] mm_struct 814KB 1163KB [ 2350.605920] fs_cache 155KB 328KB [ 2350.605930] files_cache 600KB 907KB [ 2350.605939] signal_cache 1185KB 1847KB [ 2350.605949] sighand_cache 538KB 624KB [ 2350.605957] task_struct 9355KB 9399KB [ 2350.605966] cred_jar 898KB 2264KB [ 2350.605975] anon_vma_chain 1003KB 1834KB [ 2350.605989] anon_vma 147KB 350KB [ 2350.641671] bridge0: port 2(bridge_slave_1) entered disabled state [ 2350.716865] pid 51KB 216KB [ 2350.842912] Acpi-Operand 156KB 198KB [ 2350.867463] Acpi-ParseExt 8KB 11KB [ 2350.878693] Acpi-Parse 41KB 47KB [ 2350.884179] Acpi-State 52KB 63KB [ 2350.889552] Acpi-Namespace 21KB 23KB [ 2350.900768] numa_policy 0KB 3KB [ 2350.906244] debug_objects_cache 1891KB 2403KB [ 2350.917064] trace_event_file 297KB 298KB [ 2350.922519] ftrace_event_field 398KB 401KB [ 2350.927969] pool_workqueue 121KB 148KB [ 2350.938152] page->ptl 747KB 1363KB [ 2350.947753] device bridge_slave_0 left promiscuous mode [ 2350.958207] bridge0: port 1(bridge_slave_0) entered disabled state [ 2350.964930] kmalloc-2097152 2050KB 2050KB [ 2350.970307] kmalloc-524288 2056KB 2056KB [ 2350.995256] device veth1_macvtap left promiscuous mode [ 2351.000591] device veth0_macvtap left promiscuous mode [ 2351.011445] kmalloc-262144 1290KB 1290KB [ 2351.016832] kmalloc-131072 650KB 650KB [ 2351.031992] device veth1_vlan left promiscuous mode [ 2351.041488] device veth0_vlan left promiscuous mode [ 2351.046468] kmalloc-65536 1848KB 1914KB [ 2351.058053] kmalloc-32768 1650KB 1650KB [ 2351.086148] kmalloc-16384 940KB 1006KB [ 2351.091952] kmalloc-8192 4017KB 4059KB [ 2351.106702] kmalloc-4096 18270KB 18275KB [ 2351.115027] kmalloc-2048 12376KB 13126KB [ 2351.120472] kmalloc-1024 6310KB 9024KB [ 2351.136068] kmalloc-512 6108KB 9075KB [ 2351.156344] kmalloc-256 4827KB 5827KB [ 2351.164572] kmalloc-128 1066KB 1523KB [ 2351.171848] kmalloc-96 3649KB 4556KB [ 2351.177301] kmalloc-64 3090KB 4336KB [ 2351.195935] kmalloc-32 1849KB 2579KB [ 2351.205104] kmalloc-192 1510KB 2588KB [ 2351.210584] kmem_cache 177KB 180KB [ 2351.230714] Out of memory (oom_kill_allocating_task): Kill process 8109 (syz-fuzzer) score 0 or sacrifice child [ 2351.246451] Killed process 26534 (syz-executor.4) total-vm:48512kB, anon-rss:428kB, file-rss:0kB, shmem-rss:0kB [ 2351.320959] device hsr_slave_1 left promiscuous mode [ 2351.339283] device hsr_slave_0 left promiscuous mode [ 2351.363215] team0 (unregistering): Port device team_slave_1 removed [ 2351.380557] team0 (unregistering): Port device team_slave_0 removed [ 2351.399782] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2351.419170] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2351.483044] bond0 (unregistering): Released all slaves 23:36:38 executing program 3: socketpair(0x23, 0x115, 0x7fffffff, &(0x7f0000000100)) 23:36:38 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x121800, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) clock_gettime(0xf820becce9bdaf5d, &(0x7f0000000200)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000240)=@mmap={0x1, 0x3, 0x4, 0x2000, 0x6, {r2, r3/1000+10000}, {0x4, 0x8, 0x6, 0x6, 0x8, 0x7, "fe2595f1"}, 0x1}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) openat$cgroup_procs(r4, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) socket(0xb, 0x1, 0x1210) 23:36:38 executing program 4: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x1, 0x8}, 0xc) (async, rerun: 32) r1 = socket$l2tp(0x2, 0x2, 0x73) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x48) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001200)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x3, 0xd, &(0x7f0000000080)=@raw=[@ldst={0x3, 0x0, 0x2, 0x2, 0x9, 0xfffffffffffffff4, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x69b, 0x0, 0x0, 0x0, 0x87}, @exit, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x6}, @generic={0x9f, 0x1, 0x4, 0xd3, 0x1ff}, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x401}, @generic={0x8, 0xd, 0xd, 0xfc00, 0x6de}], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xb, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000011c0)={0x1, 0xa, 0x8, 0x9}, 0x10, r3, 0xffffffffffffffff, 0x0, &(0x7f0000001240)=[0xffffffffffffffff]}, 0x80) (async, rerun: 32) r4 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (rerun: 32) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:36:38 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x0, 0x0, "4755003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:38 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) r6 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7}, 0x48) socket$tipc(0x1e, 0x2, 0x0) r8 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r9}, 0x48) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @dev, @broadcast}, &(0x7f0000000180)=0xc) r11 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r12}, 0x48) ioctl$VIDIOC_QUERYSTD(r5, 0x8008563f, &(0x7f00000009c0)) socket$pptp(0x18, 0x1, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r14, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r15}, 0x48) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000980)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000a00)=ANY=[@ANYBLOB="10070000", @ANYRES16=0x0, @ANYBLOB="200028bd7000fbdbdf250300000008000100", @ANYRES32=r4, @ANYBLOB="67d553990800010071e11508d066a52d475989f7eb7c719f2b7885e0ff94d3897b0f1b2943394680cab5533535426557b9f71a65c14a5c26ad2ad9259817d1a4faf3ff2cb7e6594835ffc562f96da6fbc30de30bdb4e46eea24bf21ee4a8beaaf0445114a0a48b32a40f6c827131fc09baae53b7d62f4873e90d895d5522f8a46d37", @ANYRES32=0x0, @ANYBLOB="880102804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000900000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000004000008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400b10700003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="c000028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400c552000008000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040004000000080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="ec00028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000100008038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000300000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040008000000080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000000000008000100", @ANYRES32=0x0, @ANYBLOB="2c02028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r7, @ANYBLOB="080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r10, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000008000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400ff03000008000600", @ANYRES32=r12, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400330000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000f00000008000100", @ANYRES32=r13, @ANYBLOB="6801028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r15, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004008000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000100000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f616463617374000000"], 0x710}, 0x1, 0x0, 0x0, 0x5}, 0x40) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000000)={0xfffffff8, 0xb5315241, 0x0, @stepwise={0x5, 0x0, 0x6, 0x0, 0x1, 0xce76}}) 23:36:38 executing program 3: socketpair(0x23, 0x116, 0x7fffffff, &(0x7f0000000100)) [ 2353.370027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2353.385191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2353.404162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2353.410886] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2353.429000] device bridge_slave_1 left promiscuous mode [ 2353.437723] bridge0: port 2(bridge_slave_1) entered disabled state [ 2353.450002] device bridge_slave_0 left promiscuous mode [ 2353.467603] bridge0: port 1(bridge_slave_0) entered disabled state [ 2353.504796] device veth1_macvtap left promiscuous mode [ 2353.510138] device veth0_macvtap left promiscuous mode [ 2353.530816] device veth1_vlan left promiscuous mode [ 2353.546207] device veth0_vlan left promiscuous mode [ 2353.764327] device hsr_slave_1 left promiscuous mode [ 2353.777285] device hsr_slave_0 left promiscuous mode [ 2353.800982] team0 (unregistering): Port device team_slave_1 removed [ 2353.817734] team0 (unregistering): Port device team_slave_0 removed [ 2353.828440] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2353.846688] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2353.900432] bond0 (unregistering): Released all slaves [ 2353.926672] IPVS: ftp: loaded support on port[0] = 21 [ 2353.926678] IPVS: ftp: loaded support on port[0] = 21 [ 2354.298354] chnl_net:caif_netlink_parms(): no params data found [ 2354.336317] chnl_net:caif_netlink_parms(): no params data found [ 2354.500480] bridge0: port 1(bridge_slave_0) entered blocking state [ 2354.531200] bridge0: port 1(bridge_slave_0) entered disabled state [ 2354.540630] device bridge_slave_0 entered promiscuous mode [ 2354.577461] bridge0: port 1(bridge_slave_0) entered blocking state [ 2354.591140] bridge0: port 1(bridge_slave_0) entered disabled state [ 2354.598586] device bridge_slave_0 entered promiscuous mode [ 2354.617083] bridge0: port 2(bridge_slave_1) entered blocking state [ 2354.631049] bridge0: port 2(bridge_slave_1) entered disabled state [ 2354.638489] device bridge_slave_1 entered promiscuous mode [ 2354.661754] bridge0: port 2(bridge_slave_1) entered blocking state [ 2354.668145] bridge0: port 2(bridge_slave_1) entered disabled state [ 2354.697056] device bridge_slave_1 entered promiscuous mode [ 2354.757508] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2354.784456] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2354.817820] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2354.841698] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2354.894021] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2354.912096] team0: Port device team_slave_0 added [ 2354.925787] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2354.951953] team0: Port device team_slave_0 added [ 2354.957376] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2354.986965] team0: Port device team_slave_1 added [ 2354.994722] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2355.011807] team0: Port device team_slave_1 added [ 2355.057624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2355.076378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2355.146052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2355.167607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2355.180968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2355.230981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2355.253051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2355.259326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2355.298035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2355.309993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2355.322922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2355.354963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2355.376120] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2355.384353] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2355.402740] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2355.410212] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2355.466707] device hsr_slave_0 entered promiscuous mode [ 2355.478340] device hsr_slave_1 entered promiscuous mode [ 2355.488157] device hsr_slave_0 entered promiscuous mode [ 2355.500095] device hsr_slave_1 entered promiscuous mode [ 2355.508245] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2355.522041] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2355.529082] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2355.552069] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2355.581013] Bluetooth: hci1: command 0x0409 tx timeout [ 2355.660935] Bluetooth: hci5: command 0x0409 tx timeout [ 2355.819558] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2355.877996] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2355.969070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2355.994294] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2356.012324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2356.022020] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2356.029688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2356.040081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2356.051909] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2356.060631] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2356.076443] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2356.086834] 8021q: adding VLAN 0 to HW filter on device team0 [ 2356.095876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2356.107239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2356.119604] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2356.130317] 8021q: adding VLAN 0 to HW filter on device team0 [ 2356.141966] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2356.160448] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2356.168310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2356.182993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2356.190770] bridge0: port 1(bridge_slave_0) entered blocking state [ 2356.197199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2356.211119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2356.219165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2356.233615] bridge0: port 2(bridge_slave_1) entered blocking state [ 2356.239999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2356.256035] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2356.269476] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2356.279895] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2356.290449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2356.304691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2356.315470] bridge0: port 1(bridge_slave_0) entered blocking state [ 2356.321917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2356.333882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2356.346565] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2356.360082] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2356.369464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2356.380478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2356.398162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2356.407988] bridge0: port 2(bridge_slave_1) entered blocking state [ 2356.414416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2356.428087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2356.439371] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2356.454998] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2356.466585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2356.478395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2356.490414] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2356.507012] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2356.518275] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2356.530197] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2356.540141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2356.555812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2356.568421] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2356.581967] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2356.597238] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2356.606803] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2356.620203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2356.630560] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2356.645771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2356.656575] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2356.668947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2356.679321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2356.695247] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2356.708413] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2356.718674] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2356.730357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2356.740701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2356.754941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2356.766726] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2356.779859] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2356.798632] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2356.806183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2356.819391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2356.828324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2356.844218] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2356.850313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:36:43 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000001c0)) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x9, 0x36, 0x1, {0x2, @sliced={0xba4, [0x8001, 0x40, 0x0, 0x1, 0x9, 0x8, 0x9, 0x8, 0x4, 0xbe5, 0xfeff, 0x8001, 0x3ff, 0x8, 0x1, 0x2, 0x4, 0x2, 0x400, 0x2d6, 0xffff, 0x0, 0x401, 0x9, 0x34, 0x9, 0x7c7, 0xff81, 0x1, 0x6, 0x4, 0x1, 0xfd, 0x2, 0x2, 0x5, 0x15c2, 0x0, 0x6, 0xd43, 0x5, 0x7f, 0x8, 0x3, 0xfffc, 0x80, 0xffe1, 0xcfbc], 0xffffffff}}, 0x8001}) 23:36:43 executing program 3: socketpair(0x23, 0x117, 0x7fffffff, &(0x7f0000000100)) 23:36:43 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x121800, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) clock_gettime(0xf820becce9bdaf5d, &(0x7f0000000200)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000240)=@mmap={0x1, 0x3, 0x4, 0x2000, 0x6, {r2, r3/1000+10000}, {0x4, 0x8, 0x6, 0x6, 0x8, 0x7, "fe2595f1"}, 0x1}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) openat$cgroup_procs(r4, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) 23:36:43 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) (async, rerun: 64) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x0, 0x0, "4755003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) 23:36:43 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x121800, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) clock_gettime(0xf820becce9bdaf5d, &(0x7f0000000200)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000240)=@mmap={0x1, 0x3, 0x4, 0x2000, 0x6, {r2, r3/1000+10000}, {0x4, 0x8, 0x6, 0x6, 0x8, 0x7, "fe2595f1"}, 0x1}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) openat$cgroup_procs(r4, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) 23:36:43 executing program 3: socketpair(0x23, 0x118, 0x7fffffff, &(0x7f0000000100)) [ 2356.972227] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2356.996841] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready 23:36:43 executing program 3: socketpair(0x23, 0x119, 0x7fffffff, &(0x7f0000000100)) [ 2357.023744] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2357.037155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2357.047275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2357.061720] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2357.086113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2357.094107] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2357.104809] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2357.130988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2357.224124] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2357.236289] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2357.250323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2357.268813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2357.293979] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2357.312467] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2357.319815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2357.331759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2357.394969] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2357.406717] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2357.416163] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2357.435658] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2357.448434] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2357.456920] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2357.472502] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2357.487341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2357.495688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2357.513880] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2357.521652] device veth0_vlan entered promiscuous mode [ 2357.532718] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2357.540425] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2357.548932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2357.562197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2357.571849] device veth1_vlan entered promiscuous mode [ 2357.578004] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2357.594382] device veth0_vlan entered promiscuous mode [ 2357.605806] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2357.613862] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2357.625905] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2357.636449] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2357.647445] device veth1_vlan entered promiscuous mode [ 2357.654708] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2357.661776] Bluetooth: hci1: command 0x041b tx timeout [ 2357.673176] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2357.686733] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2357.707357] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2357.719226] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2357.732589] device veth0_macvtap entered promiscuous mode [ 2357.739249] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2357.746914] Bluetooth: hci5: command 0x041b tx timeout [ 2357.752965] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2357.762244] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2357.772144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2357.779708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2357.793998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2357.806525] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2357.818057] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2357.830393] device veth1_macvtap entered promiscuous mode [ 2357.843934] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2357.850919] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2357.858270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2357.867561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2357.888118] device veth0_macvtap entered promiscuous mode [ 2357.896387] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2357.912762] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2357.934271] device veth1_macvtap entered promiscuous mode [ 2357.954686] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2357.968068] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2357.996606] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2358.007758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2358.017703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2358.027319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2358.037615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2358.047126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2358.057291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2358.066895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2358.078231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2358.089190] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2358.096843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2358.105243] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2358.115209] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2358.125829] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2358.137347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2358.152296] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2358.159596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2358.169571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2358.180460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2358.190724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2358.199960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2358.210173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2358.219739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2358.229899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2358.241176] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2358.248205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2358.257717] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2358.268024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2358.277383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2358.291869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2358.306128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2358.318429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2358.331521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2358.346474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2358.357360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2358.371868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2358.392439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2358.406320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2358.419450] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2358.432444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2358.465411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2358.478244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2358.497562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2358.508670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2358.518720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2358.529842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2358.539885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2358.550558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2358.559789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2358.570831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2358.580072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2358.592437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2358.607002] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2358.616742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2358.629894] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2358.645013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2358.951975] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 2358.959307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2358.970655] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2359.024603] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2359.039906] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 2359.057224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2359.069996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2359.096594] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2359.124578] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 2359.135324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2359.155456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2359.172717] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2359.188594] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 2359.195596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2359.206155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2359.217188] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 23:36:45 executing program 4: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x1, 0x8}, 0xc) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001200)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x3, 0xd, &(0x7f0000000080)=@raw=[@ldst={0x3, 0x0, 0x2, 0x2, 0x9, 0xfffffffffffffff4, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x69b, 0x0, 0x0, 0x0, 0x87}, @exit, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x6}, @generic={0x9f, 0x1, 0x4, 0xd3, 0x1ff}, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x401}, @generic={0x8, 0xd, 0xd, 0xfc00, 0x6de}], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xb, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000011c0)={0x1, 0xa, 0x8, 0x9}, 0x10, r3, 0xffffffffffffffff, 0x0, &(0x7f0000001240)=[0xffffffffffffffff]}, 0x80) (async) r4 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) [ 2359.741565] Bluetooth: hci1: command 0x040f tx timeout [ 2359.830899] Bluetooth: hci5: command 0x040f tx timeout 23:36:46 executing program 3: socketpair(0x23, 0x11a, 0x7fffffff, &(0x7f0000000100)) 23:36:46 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x121800, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) clock_gettime(0xf820becce9bdaf5d, &(0x7f0000000200)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000240)=@mmap={0x1, 0x3, 0x4, 0x2000, 0x6, {r2, r3/1000+10000}, {0x4, 0x8, 0x6, 0x6, 0x8, 0x7, "fe2595f1"}, 0x1}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) 23:36:46 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x6, 0x2) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000100)=@multiplanar_mmap={0x9, 0x0, 0x4, 0x0, 0x2, {0x77359400}, {0x3, 0x0, 0x7, 0x20, 0x0, 0x7f, "d6a2569f"}, 0x7, 0x1, {&(0x7f0000000080)=[{0x6, 0xffffffff, {0x9}, 0x3}, {0x800, 0x83, {0x7}, 0x7f}]}, 0x2, 0x0, r2}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:36:46 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) (async, rerun: 32) r3 = socket$l2tp(0x2, 0x2, 0x73) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) r6 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7}, 0x48) socket$tipc(0x1e, 0x2, 0x0) (async) r8 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r9}, 0x48) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @dev, @broadcast}, &(0x7f0000000180)=0xc) (async, rerun: 32) r11 = socket$l2tp(0x2, 0x2, 0x73) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r12}, 0x48) (async, rerun: 32) ioctl$VIDIOC_QUERYSTD(r5, 0x8008563f, &(0x7f00000009c0)) (rerun: 32) socket$pptp(0x18, 0x1, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) (async) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r14, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r15}, 0x48) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000980)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000a00)=ANY=[@ANYBLOB="10070000", @ANYRES16=0x0, @ANYBLOB="200028bd7000fbdbdf250300000008000100", @ANYRES32=r4, @ANYBLOB="67d553990800010071e11508d066a52d475989f7eb7c719f2b7885e0ff94d3897b0f1b2943394680cab5533535426557b9f71a65c14a5c26ad2ad9259817d1a4faf3ff2cb7e6594835ffc562f96da6fbc30de30bdb4e46eea24bf21ee4a8beaaf0445114a0a48b32a40f6c827131fc09baae53b7d62f4873e90d895d5522f8a46d37", @ANYRES32=0x0, @ANYBLOB="880102804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000900000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000004000008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400b10700003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="c000028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400c552000008000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040004000000080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="ec00028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000100008038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000300000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040008000000080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000000000008000100", @ANYRES32=0x0, @ANYBLOB="2c02028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r7, @ANYBLOB="080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r10, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000008000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400ff03000008000600", @ANYRES32=r12, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400330000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000f00000008000100", @ANYRES32=r13, @ANYBLOB="6801028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r15, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004008000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000100000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f616463617374000000"], 0x710}, 0x1, 0x0, 0x0, 0x5}, 0x40) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async, rerun: 64) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000000)={0xfffffff8, 0xb5315241, 0x0, @stepwise={0x5, 0x0, 0x6, 0x0, 0x1, 0xce76}}) (rerun: 64) [ 2361.820514] Bluetooth: hci1: command 0x0419 tx timeout [ 2361.900323] Bluetooth: hci5: command 0x0419 tx timeout [ 2363.105284] oom_reaper: reaped process 9931 (syz-executor.0), now anon-rss:0kB, file-rss:13608kB, shmem-rss:0kB [ 2363.139161] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2363.169938] systemd-journal cpuset=/ mems_allowed=0-1 [ 2363.178883] CPU: 1 PID: 27950 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 2363.186860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2363.196238] Call Trace: [ 2363.198836] dump_stack+0x1fc/0x2ef [ 2363.202470] dump_header+0x15d/0xc3f [ 2363.206187] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2363.211288] ? ___ratelimit+0x319/0x590 [ 2363.215272] oom_kill_process.cold+0x10/0x692 [ 2363.219768] ? check_preemption_disabled+0x41/0x280 [ 2363.224792] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2363.230087] out_of_memory+0x1072/0x1390 [ 2363.234135] ? oom_killer_disable+0x270/0x270 [ 2363.238613] ? mutex_trylock+0x15f/0x1a0 [ 2363.240132] syz-executor.0: vmalloc: allocation failure, allocated 1795256320 of 4278132736 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2363.242662] __alloc_pages_nodemask+0x23a2/0x2890 [ 2363.256492] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2363.261264] ? find_get_entry+0x4cd/0x8a0 [ 2363.261302] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2363.261341] alloc_pages_current+0x193/0x2a0 [ 2363.261354] filemap_fault+0x146e/0x2180 [ 2363.261380] ext4_filemap_fault+0x84/0xb0 [ 2363.261394] __do_fault+0x10b/0x4b0 [ 2363.261410] __handle_mm_fault+0x273b/0x41c0 [ 2363.261427] ? vm_insert_page+0x9c0/0x9c0 [ 2363.261454] ? check_preemption_disabled+0x41/0x280 [ 2363.261469] handle_mm_fault+0x436/0xb10 [ 2363.261486] __do_page_fault+0x68e/0xd60 [ 2363.261504] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2363.261518] ? spurious_fault+0x840/0x840 [ 2363.261532] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2363.261549] ? page_fault+0x8/0x30 [ 2363.330839] page_fault+0x1e/0x30 [ 2363.334292] RIP: 0033:0x7f6edb25d2e3 [ 2363.338024] Code: Bad RIP value. [ 2363.341381] RSP: 002b:00007ffce21de268 EFLAGS: 00010246 [ 2363.346734] RAX: 0000000000000001 RBX: 00005572845ea1e0 RCX: 00007f6edb25d2e3 [ 2363.353992] RDX: 0000000000000014 RSI: 00007ffce21de270 RDI: 000000000000000c [ 2363.361246] RBP: 00007ffce21de460 R08: 00007ffce21e2000 R09: 0000025dfde2c38a [ 2363.368500] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffce21de270 [ 2363.375759] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005f36f9285b437 [ 2363.383044] CPU: 0 PID: 9931 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 2363.390845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2363.393327] Mem-Info: [ 2363.400190] Call Trace: [ 2363.400212] dump_stack+0x1fc/0x2ef [ 2363.400228] warn_alloc.cold+0x7b/0x18f [ 2363.400246] ? zone_watermark_ok_safe+0x260/0x260 [ 2363.402665] active_anon:15154 inactive_anon:10849 isolated_anon:0 [ 2363.402665] active_file:22 inactive_file:7 isolated_file:0 [ 2363.402665] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2363.402665] slab_reclaimable:15268 slab_unreclaimable:116275 [ 2363.402665] mapped:22472 shmem:11282 pagetables:598 bounce:0 [ 2363.402665] free:13896 free_pcp:1048 free_cma:0 [ 2363.405225] ? write_comp_data+0x6c/0x70 [ 2363.408835] Node 0 active_anon:58744kB inactive_anon:18932kB active_file:84kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:86840kB dirty:0kB writeback:0kB shmem:20536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2363.412787] __vmalloc_area_node+0x4fd/0x780 [ 2363.412809] ? __vmalloc_node_range+0x180/0x180 [ 2363.412825] ? _raw_spin_unlock+0x29/0x40 [ 2363.417674] Node 1 active_anon:1872kB inactive_anon:24464kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3048kB dirty:0kB writeback:0kB shmem:24592kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2363.450869] ? __get_vm_area_node+0x2e2/0x3a0 [ 2363.450887] __vmalloc_node_range+0xed/0x180 [ 2363.450908] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2363.454940] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2363.482529] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2363.482542] vmalloc_user+0x70/0xe0 [ 2363.482555] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2363.482569] vb2_vmalloc_alloc+0xb3/0x2f0 [ 2363.486951] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2363.491605] __vb2_queue_alloc+0x472/0xe60 [ 2363.491634] vb2_core_create_bufs+0x273/0x7e0 [ 2363.495755] Node 0 DMA32 free:17788kB min:35996kB low:44992kB high:53988kB active_anon:58744kB inactive_anon:18932kB active_file:264kB inactive_file:256kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7584kB pagetables:2172kB bounce:0kB free_pcp:2136kB local_pcp:1292kB free_cma:0kB [ 2363.522633] ? __vb2_queue_free+0x870/0x870 [ 2363.522648] ? __video_do_ioctl+0x632/0xcd0 [ 2363.522667] ? __mutex_lock+0x368/0x1190 [ 2363.527135] lowmem_reserve[]: 0 0 1 1 1 [ 2363.531530] vb2_create_bufs+0x332/0x620 [ 2363.531547] ? mark_held_locks+0xf0/0xf0 [ 2363.531561] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 2363.535857] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2363.561960] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 2363.561980] v4l_create_bufs+0xb2/0x160 [ 2363.561996] __video_do_ioctl+0x49a/0xcd0 [ 2363.567347] lowmem_reserve[]: 0 0 0 0 0 [ 2363.570967] ? v4l_querycap+0x340/0x340 [ 2363.570984] ? __might_fault+0x192/0x1d0 [ 2363.570999] ? v4l_querycap+0x340/0x340 [ 2363.575292] Node 1 Normal free:26904kB min:53876kB low:67344kB high:80812kB active_anon:1872kB inactive_anon:24464kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:256kB pagetables:220kB bounce:0kB free_pcp:2056kB local_pcp:372kB free_cma:0kB [ 2363.579427] video_usercopy+0x13f/0xfa0 [ 2363.584459] lowmem_reserve[]: 0 0 0 0 0 [ 2363.588665] ? v4l_enumstd+0x60/0x60 [ 2363.593155] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10884kB [ 2363.622349] ? mark_held_locks+0xf0/0xf0 [ 2363.622364] ? __lock_acquire+0x6de/0x3ff0 [ 2363.622387] ? video_usercopy+0xfa0/0xfa0 [ 2363.626692] Node 0 DMA32: 1734*4kB (UME) 832*8kB (UME) 251*16kB (UME) 13*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18024kB [ 2363.630995] v4l2_ioctl+0x147/0x1a0 [ 2363.631007] ? video_devdata+0xa0/0xa0 [ 2363.631020] do_vfs_ioctl+0xcdb/0x12e0 [ 2363.631036] ? lock_downgrade+0x720/0x720 [ 2363.635066] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2363.639030] ? check_preemption_disabled+0x41/0x280 [ 2363.643081] Node 1 Normal: 222*4kB (ME) 164*8kB (UME) 114*16kB (UME) 65*32kB (ME) 53*64kB (M) 14*128kB (UME) 1*256kB (M) 2*512kB (ME) 2*1024kB (ME) 2*2048kB (UE) 2*4096kB (U) = 26904kB [ 2363.647106] ? ioctl_preallocate+0x200/0x200 [ 2363.652210] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2363.678021] ? __fget+0x356/0x510 [ 2363.678036] ? do_dup2+0x450/0x450 [ 2363.678052] ? lock_acquire+0x170/0x3c0 [ 2363.683253] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2363.687189] ? finish_task_switch+0x118/0x760 [ 2363.691351] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2363.695290] ksys_ioctl+0x9b/0xc0 [ 2363.699238] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2363.703280] __x64_sys_ioctl+0x6f/0xb0 [ 2363.703294] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2363.703312] do_syscall_64+0xf9/0x620 [ 2363.707258] 11319 total pagecache pages [ 2363.735879] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2363.735891] RIP: 0033:0x7f63ae2010c9 [ 2363.735905] Code: Bad RIP value. [ 2363.739859] 0 pages in swap cache [ 2363.743805] RSP: 002b:00007f63ac731168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2363.743817] RAX: ffffffffffffffda RBX: 00007f63ae321120 RCX: 00007f63ae2010c9 [ 2363.743824] RDX: 0000000020000000 RSI: 00000000c100565c RDI: 0000000000000003 [ 2363.743831] RBP: 00007f63ae25cae9 R08: 0000000000000000 R09: 0000000000000000 [ 2363.743841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2363.747535] Swap cache stats: add 0, delete 0, find 0/0 [ 2363.759999] R13: 00007ffc79632fdf R14: 00007f63ac731300 R15: 0000000000022000 [ 2363.762743] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2363.764075] Free swap = 0kB [ 2363.781661] Mem-Info: [ 2363.801372] Total swap = 0kB [ 2363.802752] active_anon:15154 inactive_anon:10849 isolated_anon:0 [ 2363.802752] active_file:22 inactive_file:7 isolated_file:0 [ 2363.802752] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2363.802752] slab_reclaimable:15268 slab_unreclaimable:116275 [ 2363.802752] mapped:22472 shmem:11282 pagetables:598 bounce:0 [ 2363.802752] free:13896 free_pcp:1041 free_cma:0 [ 2363.813632] 2097051 pages RAM [ 2363.813638] 0 pages HighMem/MovableOnly [ 2363.813643] 369649 pages reserved [ 2363.813647] 0 pages cma reserved [ 2363.813653] Unreclaimable slab info: [ 2363.813657] Name Used Total [ 2363.813668] pid_2 109KB 220KB [ 2363.813739] batadv_tt_change_cache 2KB 3KB [ 2363.813752] batadv_tl_cache 6KB 12KB [ 2363.813780] TIPC 16KB 30KB [ 2363.813801] SCTPv6 18KB 24KB [ 2363.813810] SCTP 1KB 34KB [ 2363.813827] DCCPv6 17KB 30KB [ 2363.813840] DCCP 16KB 35KB [ 2363.813873] L2TP/IPv6 1KB 13KB [ 2363.813882] L2TP/IP 169KB 172KB [ 2363.813897] RXRPC 14KB 19KB [ 2363.813907] rxrpc_call_jar 101KB 102KB [ 2363.813921] bridge_fdb_cache 12KB 19KB [ 2363.813937] fib6_nodes 218KB 280KB [ 2363.813947] ip6_dst_cache 335KB 397KB [ 2363.813960] RAWv6 91KB 101KB [ 2363.813971] UDPv6 35KB 41KB [ 2363.813986] TCPv6 30KB 36KB [ 2363.814005] nf_conntrack 7KB 7KB [ 2363.814071] t10_alua_lu_gp_cache 0KB 3KB [ 2363.814086] sd_ext_cdb 0KB 7KB [ 2363.814096] scsi_sense_cache 1056KB 1060KB [ 2363.814105] virtio_scsi_cmd 16KB 16KB [ 2363.814119] sgpool-128 8KB 8KB [ 2363.814128] sgpool-64 4KB 12KB [ 2363.814136] sgpool-32 2KB 15KB [ 2363.814144] sgpool-16 1KB 7KB [ 2363.814152] sgpool-8 0KB 7KB [ 2363.814170] mqueue_inode_cache 13KB 30KB [ 2363.814185] bio_post_read_ctx 14KB 15KB [ 2363.814307] bio-2 14KB 15KB [ 2363.819406] Node 0 active_anon:58744kB inactive_anon:18932kB active_file:84kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:86840kB dirty:0kB writeback:0kB shmem:20536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2363.835909] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2363.835958] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2363.845396] jfs_mp 7KB 7KB [ 2363.855534] Node 1 active_anon:1872kB inactive_anon:24464kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3048kB dirty:0kB writeback:0kB shmem:24592kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2363.859681] cifs_small_rq 15KB 16KB [ 2363.860759] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2363.873041] cifs_request 67KB 67KB [ 2363.877984] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2363.890906] cifs_mpx_ids 0KB 7KB [ 2363.898811] Node 0 DMA32 free:17788kB min:35996kB low:44992kB high:53988kB active_anon:58744kB inactive_anon:18932kB active_file:32kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7584kB pagetables:2172kB bounce:0kB free_pcp:2104kB local_pcp:812kB free_cma:0kB [ 2363.912102] nfs_commit_data 3KB 14KB [ 2363.923625] lowmem_reserve[]: 0 0 1 1 1 [ 2363.932621] nfs_write_data 34KB 44KB [ 2363.934245] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2363.955098] ext4_system_zone 1KB 7KB [ 2363.956220] lowmem_reserve[]: 0 0 0 0 0 [ 2363.977336] bio-1 1KB 7KB [ 2363.983087] Node 1 Normal free:26904kB min:53876kB low:67344kB high:80812kB active_anon:1868kB inactive_anon:24464kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:256kB pagetables:220kB bounce:0kB free_pcp:2056kB local_pcp:1684kB free_cma:0kB [ 2363.998836] pid_namespace 2KB 11KB [ 2364.029630] lowmem_reserve[]: 0 0 0 0 0 [ 2364.043275] rpc_buffers 17KB 25KB [ 2364.051233] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10884kB [ 2364.056635] rpc_tasks 2KB 7KB [ 2364.060308] Node 0 DMA32: 1734*4kB (UME) 831*8kB (UME) 251*16kB (UME) 13*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18016kB [ 2364.068902] UNIX 1005KB 1005KB [ 2364.079206] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2364.086820] tcp_bind_bucket 1KB 4KB [ 2364.098966] Node 1 Normal: 222*4kB (ME) 164*8kB (UME) 114*16kB (UME) 65*32kB (ME) 53*64kB (M) 14*128kB (UME) 1*256kB (M) 2*512kB (ME) 2*1024kB (ME) 2*2048kB (UE) 2*4096kB (U) = 26904kB [ 2364.108481] ip_fib_trie 32KB 47KB [ 2364.117544] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2364.123451] ip_fib_alias 151KB 197KB [ 2364.123819] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2364.129094] ip_dst_cache 14KB 16KB [ 2364.137645] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2364.154342] RAW 54KB 67KB [ 2364.165976] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2364.176081] UDP 40KB 54KB [ 2364.178125] 11305 total pagecache pages [ 2364.187854] TCP 11KB 16KB [ 2364.193010] 0 pages in swap cache [ 2364.200637] hugetlbfs_inode_cache 3KB 15KB [ 2364.207707] Swap cache stats: add 0, delete 0, find 0/0 [ 2364.221422] fscache_cookie_jar 1KB 11KB [ 2364.251575] Free swap = 0kB [ 2364.267908] eventpoll_pwq 18KB 47KB [ 2364.295197] Total swap = 0kB [ 2364.333387] eventpoll_epi 34KB 59KB [ 2364.347846] 2097051 pages RAM [ 2364.375857] inotify_inode_mark 23KB 55KB [ 2364.386182] 0 pages HighMem/MovableOnly [ 2364.417765] request_queue 199KB 199KB [ 2364.429435] 369649 pages reserved [ 2364.461239] blkdev_requests 1KB 3KB [ 2364.471039] 0 pages cma reserved [ 2364.489009] blkdev_ioc 16KB 23KB [ 2364.686362] bio-0 446KB 446KB [ 2364.691780] biovec-max 1353KB 1394KB [ 2364.697151] biovec-64 412KB 425KB [ 2364.707581] biovec-16 44KB 48KB [ 2364.713054] bio_integrity_payload 1KB 8KB [ 2364.718767] khugepaged_mm_slot 18KB 42KB [ 2364.729039] uid_cache 0KB 4KB [ 2364.734459] dmaengine-unmap-2 0KB 3KB [ 2364.744829] skbuff_fclone_cache 167KB 420KB [ 2364.750420] skbuff_head_cache 4781KB 4785KB [ 2364.755789] configfs_dir_cache 3KB 7KB [ 2364.766324] file_lock_cache 121KB 198KB [ 2364.771739] file_lock_ctx 9KB 11KB [ 2364.777102] fsnotify_mark_connector 12KB 31KB [ 2364.791915] net_namespace 70KB 70KB [ 2364.797304] shmem_inode_cache 8336KB 8520KB [ 2364.805198] task_delay_info 293KB 395KB [ 2364.813112] taskstats 127KB 287KB [ 2364.818482] proc_dir_entry 825KB 832KB [ 2364.826340] pde_opener 13KB 34KB [ 2364.834304] seq_file 218KB 334KB [ 2364.839675] sigqueue 34KB 35KB [ 2364.847651] kernfs_node_cache 18241KB 18246KB [ 2364.855554] mnt_cache 207KB 216KB [ 2364.868213] filp 6454KB 7125KB [ 2364.876183] names_cache 127262KB 127300KB [ 2364.884095] iint_cache 23KB 51KB [ 2364.889464] key_jar 4KB 7KB [ 2364.897481] uts_namespace 3KB 7KB [ 2364.905476] nsproxy 2KB 7KB [ 2364.913388] vm_area_struct 3242KB 5019KB [ 2364.918754] mm_struct 734KB 1144KB [ 2364.926744] fs_cache 224KB 328KB [ 2364.934715] files_cache 843KB 907KB [ 2364.946438] signal_cache 1575KB 1847KB [ 2364.954379] sighand_cache 649KB 666KB [ 2364.959754] task_struct 9197KB 9266KB [ 2364.967559] cred_jar 1468KB 2264KB [ 2364.975489] anon_vma_chain 1007KB 1834KB [ 2364.983444] anon_vma 182KB 350KB [ 2364.988815] pid 110KB 216KB [ 2364.996773] Acpi-Operand 156KB 198KB [ 2365.004674] Acpi-ParseExt 8KB 11KB [ 2365.012569] Acpi-Parse 41KB 47KB [ 2365.017942] Acpi-State 52KB 63KB [ 2365.026305] Acpi-Namespace 21KB 23KB [ 2365.034243] numa_policy 0KB 3KB [ 2365.039615] debug_objects_cache 1934KB 2403KB [ 2365.047582] trace_event_file 297KB 298KB [ 2365.055516] ftrace_event_field 398KB 401KB [ 2365.063569] pool_workqueue 136KB 148KB [ 2365.068943] page->ptl 632KB 1363KB [ 2365.076832] kmalloc-2097152 2050KB 2050KB [ 2365.087776] kmalloc-524288 2056KB 2056KB [ 2365.095676] kmalloc-262144 1290KB 1290KB [ 2365.116515] kmalloc-131072 650KB 650KB [ 2365.125296] kmalloc-65536 2376KB 2442KB [ 2365.137338] kmalloc-32768 1980KB 1980KB [ 2365.146669] kmalloc-16384 1171KB 1237KB [ 2365.158391] kmalloc-8192 4974KB 5016KB [ 2365.167119] kmalloc-4096 24713KB 24752KB [ 2365.178835] kmalloc-2048 15433KB 15446KB [ 2365.187895] kmalloc-1024 9637KB 9646KB [ 2365.203428] kmalloc-512 10263KB 10263KB [ 2365.208813] kmalloc-256 5527KB 5827KB [ 2365.217556] kmalloc-128 1219KB 1523KB [ 2365.229446] kmalloc-96 3116KB 4552KB [ 2365.238371] kmalloc-64 3033KB 4332KB [ 2365.254478] kmalloc-32 1894KB 2579KB [ 2365.263205] kmalloc-192 1915KB 2588KB [ 2365.268595] kmem_cache 177KB 180KB [ 2365.284113] Out of memory (oom_kill_allocating_task): Kill process 27950 (systemd-journal) score 0 or sacrifice child [ 2365.298271] Killed process 27950 (systemd-journal) total-vm:46096kB, anon-rss:488kB, file-rss:4kB, shmem-rss:2976kB [ 2365.320704] oom_reaper: reaped process 27950 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:2976kB [ 2365.322883] systemd-journal: page allocation failure: order:0, mode:0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null) [ 2365.338845] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2365.351373] systemd-journal cpuset=/ mems_allowed=0-1 [ 2365.358284] CPU: 0 PID: 27950 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 2365.366249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2365.375605] Call Trace: [ 2365.378201] dump_stack+0x1fc/0x2ef [ 2365.379805] in:imklog cpuset=/ mems_allowed=0-1 [ 2365.381833] warn_alloc.cold+0x7b/0x18f [ 2365.390443] ? zone_watermark_ok_safe+0x260/0x260 [ 2365.395284] ? mark_oom_victim+0x68/0x420 [ 2365.399448] ? wait_for_completion_io+0x10/0x10 [ 2365.404122] __alloc_pages_nodemask+0x232f/0x2890 [ 2365.408965] ? find_get_entry+0x4cd/0x8a0 [ 2365.413122] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2365.417992] alloc_pages_current+0x193/0x2a0 [ 2365.422402] filemap_fault+0x146e/0x2180 [ 2365.426467] ext4_filemap_fault+0x84/0xb0 [ 2365.430611] __do_fault+0x10b/0x4b0 [ 2365.434243] __handle_mm_fault+0x273b/0x41c0 [ 2365.438659] ? vm_insert_page+0x9c0/0x9c0 [ 2365.442821] ? check_preemption_disabled+0x41/0x280 [ 2365.447834] handle_mm_fault+0x436/0xb10 [ 2365.451896] __do_page_fault+0x68e/0xd60 [ 2365.455963] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2365.460984] ? spurious_fault+0x840/0x840 [ 2365.465128] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2365.469970] ? page_fault+0x8/0x30 [ 2365.473542] page_fault+0x1e/0x30 [ 2365.476997] RIP: 0033:0x7f6edb25d2e3 [ 2365.480706] Code: Bad RIP value. [ 2365.484059] RSP: 002b:00007ffce21de268 EFLAGS: 00010246 [ 2365.489421] RAX: 0000000000000001 RBX: 00005572845ea1e0 RCX: 00007f6edb25d2e3 [ 2365.496696] RDX: 0000000000000014 RSI: 00007ffce21de270 RDI: 000000000000000c [ 2365.503966] RBP: 00007ffce21de460 R08: 00007ffce21e2000 R09: 0000025dfde2c38a [ 2365.511230] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffce21de270 [ 2365.518503] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005f36f9285b437 [ 2365.525793] CPU: 1 PID: 27763 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 2365.533250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2365.535846] Mem-Info: [ 2365.542596] Call Trace: [ 2365.542618] dump_stack+0x1fc/0x2ef [ 2365.542635] dump_header+0x15d/0xc3f [ 2365.542651] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2365.542663] ? ___ratelimit+0x319/0x590 [ 2365.542682] oom_kill_process.cold+0x10/0x692 [ 2365.568498] ? check_preemption_disabled+0x41/0x280 [ 2365.573532] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2365.578812] out_of_memory+0x1072/0x1390 [ 2365.579132] active_anon:15037 inactive_anon:10849 isolated_anon:0 [ 2365.579132] active_file:12 inactive_file:11 isolated_file:0 [ 2365.579132] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2365.579132] slab_reclaimable:15249 slab_unreclaimable:116336 [ 2365.579132] mapped:22458 shmem:11282 pagetables:597 bounce:0 [ 2365.579132] free:13888 free_pcp:1161 free_cma:0 [ 2365.582874] ? oom_killer_disable+0x270/0x270 [ 2365.582890] ? mutex_trylock+0x15f/0x1a0 [ 2365.582906] __alloc_pages_nodemask+0x23a2/0x2890 [ 2365.582925] ? find_get_entry+0x4cd/0x8a0 [ 2365.582957] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2365.638708] alloc_pages_current+0x193/0x2a0 [ 2365.643126] filemap_fault+0x146e/0x2180 [ 2365.647206] ext4_filemap_fault+0x84/0xb0 [ 2365.651359] __do_fault+0x10b/0x4b0 [ 2365.654992] __handle_mm_fault+0x273b/0x41c0 [ 2365.659413] ? vm_insert_page+0x9c0/0x9c0 [ 2365.663571] ? lock_downgrade+0x720/0x720 [ 2365.667731] ? check_preemption_disabled+0x41/0x280 [ 2365.672753] handle_mm_fault+0x436/0xb10 [ 2365.676818] __do_page_fault+0x68e/0xd60 [ 2365.680886] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2365.685900] Node 0 active_anon:58680kB inactive_anon:18932kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:86784kB dirty:0kB writeback:0kB shmem:20536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2365.685928] Node 1 active_anon:1468kB inactive_anon:24464kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3048kB dirty:0kB writeback:0kB shmem:24592kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2365.713481] ? spurious_fault+0x840/0x840 [ 2365.713495] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2365.713512] ? page_fault+0x8/0x30 [ 2365.713524] page_fault+0x1e/0x30 [ 2365.713536] RIP: 0033:0x7f5746fd222d [ 2365.713551] Code: Bad RIP value. [ 2365.713558] RSP: 002b:00007f574496e580 EFLAGS: 00010293 [ 2365.713568] RAX: 0000000000000076 RBX: 0000000000000000 RCX: 00007f5746fd222d [ 2365.713575] RDX: 0000000000001fa0 RSI: 00007f574496eda0 RDI: 0000000000000004 [ 2365.713582] RBP: 0000560e1d4fb9d0 R08: 0000000000000000 R09: 0000000004000001 [ 2365.713589] R10: 0000000000000001 R11: 0000000000000293 R12: 00007f574496eda0 [ 2365.713600] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f574496eddd [ 2365.810395] Mem-Info: [ 2365.812847] active_anon:15037 inactive_anon:10849 isolated_anon:0 [ 2365.812847] active_file:12 inactive_file:11 isolated_file:0 [ 2365.812847] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2365.812847] slab_reclaimable:15249 slab_unreclaimable:116336 [ 2365.812847] mapped:22458 shmem:11282 pagetables:597 bounce:0 [ 2365.812847] free:13888 free_pcp:1159 free_cma:0 [ 2365.855076] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2365.886528] Node 0 active_anon:58680kB inactive_anon:18932kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:86784kB dirty:0kB writeback:0kB shmem:20536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2365.916453] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2365.928725] Node 0 DMA32 free:17756kB min:35996kB low:44992kB high:53988kB active_anon:58648kB inactive_anon:18932kB active_file:0kB inactive_file:80kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7584kB pagetables:2168kB bounce:0kB free_pcp:2292kB local_pcp:1488kB free_cma:0kB [ 2365.962741] lowmem_reserve[]: 0 0 1 1 1 [ 2365.966744] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2365.998255] Node 1 active_anon:1412kB inactive_anon:24464kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3048kB dirty:0kB writeback:0kB shmem:24592kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2366.030320] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2366.061366] lowmem_reserve[]: 0 0 0 0 0 [ 2366.065376] Node 1 Normal free:27104kB min:53876kB low:67344kB high:80812kB active_anon:1412kB inactive_anon:24464kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:256kB pagetables:220kB bounce:0kB free_pcp:2240kB local_pcp:828kB free_cma:0kB [ 2366.094200] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2366.099232] Node 0 DMA32 free:17756kB min:35996kB low:44992kB high:53988kB active_anon:58648kB inactive_anon:18932kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7584kB pagetables:2168kB bounce:0kB free_pcp:2276kB local_pcp:1484kB free_cma:0kB [ 2366.128398] lowmem_reserve[]: 0 0 0 0 0 [ 2366.132448] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10884kB [ 2366.145478] lowmem_reserve[]: 0 0 1 1 1 [ 2366.149514] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2366.157288] Node 0 DMA32: 1671*4kB (UME) 837*8kB (UME) 251*16kB (UME) 13*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17812kB [ 2366.189721] lowmem_reserve[]: 0 0 0 0 0 [ 2366.194540] Node 1 Normal free:27104kB min:53876kB low:67344kB high:80812kB active_anon:1412kB inactive_anon:24464kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:256kB pagetables:220kB bounce:0kB free_pcp:2224kB local_pcp:828kB free_cma:0kB [ 2366.205363] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2366.249705] lowmem_reserve[]: 0 0 0 0 0 [ 2366.249893] Node 1 Normal: 219*4kB (ME) 162*8kB (UME) 113*16kB (UME) 68*32kB (UME) 52*64kB (M) 14*128kB (ME) 2*256kB (UM) 2*512kB (ME) 2*1024kB (ME) 2*2048kB (UE) 2*4096kB (U) = 27148kB [ 2366.253715] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10884kB [ 2366.286868] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2366.311915] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2366.319699] Node 0 DMA32: 1671*4kB (UME) 835*8kB (UME) 251*16kB (UME) 13*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17796kB [ 2366.334593] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2366.349705] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2366.357398] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2366.369692] Node 1 Normal: 219*4kB (ME) 162*8kB (UME) 113*16kB (UME) 68*32kB (UME) 52*64kB (M) 14*128kB (ME) 2*256kB (UM) 2*512kB (ME) 2*1024kB (ME) 2*2048kB (UE) 2*4096kB (U) = 27148kB [ 2366.369780] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2366.369790] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2366.369800] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2366.369809] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2366.369815] 11305 total pagecache pages [ 2366.369828] 0 pages in swap cache [ 2366.369836] Swap cache stats: add 0, delete 0, find 0/0 [ 2366.369841] Free swap = 0kB [ 2366.369846] Total swap = 0kB [ 2366.369854] 2097051 pages RAM [ 2366.369859] 0 pages HighMem/MovableOnly [ 2366.369864] 369649 pages reserved [ 2366.369868] 0 pages cma reserved [ 2366.369874] Unreclaimable slab info: [ 2366.369880] Name Used Total [ 2366.369890] pid_2 94KB 220KB [ 2366.369962] batadv_tt_change_cache 2KB 3KB [ 2366.369976] batadv_tl_cache 6KB 12KB [ 2366.370002] TIPC 16KB 30KB [ 2366.370023] SCTPv6 18KB 24KB [ 2366.370033] SCTP 0KB 19KB [ 2366.370049] DCCPv6 17KB 30KB [ 2366.370062] DCCP 16KB 35KB [ 2366.370094] L2TP/IPv6 1KB 6KB [ 2366.370109] L2TP/IP 166KB 172KB [ 2366.370124] RXRPC 14KB 19KB [ 2366.370134] rxrpc_call_jar 101KB 102KB [ 2366.370148] bridge_fdb_cache 12KB 19KB [ 2366.370164] fib6_nodes 215KB 280KB [ 2366.370173] ip6_dst_cache 335KB 397KB [ 2366.370187] RAWv6 91KB 101KB [ 2366.370198] UDPv6 33KB 41KB [ 2366.370211] TCPv6 27KB 30KB [ 2366.370231] nf_conntrack 7KB 7KB [ 2366.370296] t10_alua_lu_gp_cache 0KB 3KB [ 2366.370312] sd_ext_cdb 0KB 7KB [ 2366.370322] scsi_sense_cache 1056KB 1060KB [ 2366.370332] virtio_scsi_cmd 16KB 16KB [ 2366.370345] sgpool-128 8KB 8KB [ 2366.370354] sgpool-64 4KB 12KB [ 2366.370364] sgpool-32 2KB 15KB [ 2366.370374] sgpool-16 1KB 7KB [ 2366.370383] sgpool-8 0KB 7KB [ 2366.370401] mqueue_inode_cache 13KB 30KB [ 2366.370416] bio_post_read_ctx 14KB 15KB [ 2366.370490] bio-2 14KB 15KB [ 2366.370500] jfs_mp 7KB 7KB [ 2366.370541] cifs_small_rq 15KB 16KB [ 2366.370550] cifs_request 67KB 67KB [ 2366.370559] cifs_mpx_ids 0KB 7KB [ 2366.370588] nfs_commit_data 3KB 14KB [ 2366.370597] nfs_write_data 34KB 44KB [ 2366.370640] ext4_system_zone 1KB 7KB [ 2366.370671] bio-1 1KB 7KB [ 2366.370682] pid_namespace 2KB 11KB [ 2366.370701] rpc_buffers 17KB 25KB [ 2366.370711] rpc_tasks 2KB 7KB [ 2366.370721] UNIX 1005KB 1005KB [ 2366.370736] tcp_bind_bucket 1KB 4KB [ 2366.370753] ip_fib_trie 31KB 47KB [ 2366.370762] ip_fib_alias 149KB 197KB [ 2366.370772] ip_dst_cache 8KB 16KB [ 2366.370784] RAW 54KB 67KB [ 2366.370793] UDP 38KB 54KB [ 2366.370806] TCP 8KB 11KB [ 2366.370818] hugetlbfs_inode_cache 3KB 15KB [ 2366.370827] fscache_cookie_jar 1KB 11KB [ 2366.370837] eventpoll_pwq 17KB 47KB [ 2366.370846] eventpoll_epi 33KB 59KB [ 2366.370856] inotify_inode_mark 22KB 55KB [ 2366.370868] request_queue 199KB 199KB [ 2366.370877] blkdev_requests 1KB 3KB [ 2366.370886] blkdev_ioc 16KB 23KB [ 2366.370896] bio-0 446KB 446KB [ 2366.370905] biovec-max 1353KB 1394KB [ 2366.370918] biovec-64 407KB 425KB [ 2366.370927] biovec-16 44KB 48KB [ 2366.370937] bio_integrity_payload 1KB 8KB [ 2366.370946] khugepaged_mm_slot 17KB 42KB [ 2366.370963] uid_cache 0KB 4KB [ 2366.370977] dmaengine-unmap-2 0KB 3KB [ 2366.403371] 11305 total pagecache pages [ 2366.463628] skbuff_fclone_cache 153KB 408KB [ 2366.464855] 0 pages in swap cache [ 2366.479440] skbuff_head_cache 4886KB 4890KB [ 2366.490171] Swap cache stats: add 0, delete 0, find 0/0 [ 2366.540447] configfs_dir_cache 3KB 7KB [ 2366.542497] Free swap = 0kB [ 2366.547694] file_lock_cache 114KB 198KB [ 2366.559703] Total swap = 0kB [ 2366.573092] file_lock_ctx 9KB 11KB [ 2366.601970] 2097051 pages RAM [ 2366.609166] fsnotify_mark_connector 12KB 31KB [ 2366.629694] 0 pages HighMem/MovableOnly [ 2366.638570] net_namespace 70KB 70KB [ 2366.750844] 369649 pages reserved [ 2366.759051] shmem_inode_cache 8303KB 8516KB [ 2366.779994] 0 pages cma reserved [ 2366.785396] task_delay_info 283KB 395KB [ 2366.785406] taskstats 119KB 283KB [ 2366.785414] proc_dir_entry 825KB 832KB [ 2366.785423] pde_opener 12KB 34KB [ 2366.785432] seq_file 215KB 334KB [ 2366.927256] sigqueue 35KB 35KB [ 2366.932811] kernfs_node_cache 18240KB 18246KB [ 2366.938185] mnt_cache 207KB 216KB [ 2366.943766] filp 6454KB 7125KB [ 2366.949140] names_cache 127296KB 127300KB [ 2366.954700] iint_cache 27KB 51KB [ 2366.960149] key_jar 4KB 7KB [ 2366.965512] uts_namespace 3KB 7KB [ 2366.970975] nsproxy 2KB 7KB [ 2366.976339] vm_area_struct 3239KB 5019KB [ 2366.981757] mm_struct 726KB 1144KB [ 2366.987151] fs_cache 224KB 328KB [ 2366.992599] files_cache 833KB 907KB [ 2366.997970] signal_cache 1568KB 1847KB [ 2367.003393] sighand_cache 592KB 666KB [ 2367.008757] task_struct 9184KB 9241KB [ 2367.014202] cred_jar 1468KB 2264KB [ 2367.019659] anon_vma_chain 1005KB 1834KB [ 2367.025031] anon_vma 176KB 350KB [ 2367.030471] pid 110KB 216KB [ 2367.035839] Acpi-Operand 156KB 198KB [ 2367.041276] Acpi-ParseExt 8KB 11KB [ 2367.046646] Acpi-Parse 41KB 47KB [ 2367.052083] Acpi-State 52KB 63KB [ 2367.057450] Acpi-Namespace 21KB 23KB [ 2367.062867] numa_policy 0KB 3KB [ 2367.068232] debug_objects_cache 1934KB 2403KB [ 2367.073843] trace_event_file 297KB 298KB [ 2367.079213] ftrace_event_field 398KB 401KB [ 2367.084708] pool_workqueue 135KB 148KB [ 2367.090241] page->ptl 630KB 1363KB [ 2367.095646] kmalloc-2097152 2050KB 2050KB [ 2367.101478] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2367.105647] kmalloc-524288 2056KB 2056KB [ 2367.114342] kmalloc-262144 1290KB 1290KB [ 2367.115787] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2367.119762] kmalloc-131072 650KB 650KB [ 2367.119772] kmalloc-65536 2376KB 2442KB [ 2367.119780] kmalloc-32768 1980KB 1980KB [ 2367.119789] kmalloc-16384 1171KB 1237KB [ 2367.119798] kmalloc-8192 4974KB 5016KB [ 2367.119806] kmalloc-4096 24747KB 24752KB [ 2367.119815] kmalloc-2048 15423KB 15446KB [ 2367.119823] kmalloc-1024 9676KB 9678KB [ 2367.119832] kmalloc-512 10436KB 10436KB [ 2367.119840] kmalloc-256 5514KB 5827KB [ 2367.119849] kmalloc-128 1219KB 1523KB [ 2367.119858] kmalloc-96 3139KB 4552KB [ 2367.119867] kmalloc-64 3021KB 4332KB [ 2367.119876] kmalloc-32 1902KB 2579KB [ 2367.119886] kmalloc-192 1913KB 2588KB [ 2367.119895] kmem_cache 177KB 180KB [ 2367.119906] Out of memory (oom_kill_allocating_task): Kill process 27763 (in:imklog) score 0 or sacrifice child [ 2367.120311] Killed process 27761 (rsyslogd) total-vm:254332kB, anon-rss:812kB, file-rss:0kB, shmem-rss:0kB [ 2367.179968] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 2367.193610] oom_reaper: reaped process 27761 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2367.219997] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 2367.262728] systemd[1]: Stopped Journal Service. [ 2367.306348] systemd[1]: Starting Journal Service... [ 2367.321926] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 2367.358381] systemd[1]: rsyslog.service: Unit entered failed state. [ 2367.368792] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 2367.544487] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 2367.582210] systemd-journald[10084]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. 23:36:57 executing program 3: socketpair(0x23, 0x11b, 0x7fffffff, &(0x7f0000000100)) 23:36:57 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000001c0)) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x9, 0x36, 0x1, {0x2, @sliced={0xba4, [0x8001, 0x40, 0x0, 0x1, 0x9, 0x8, 0x9, 0x8, 0x4, 0xbe5, 0xfeff, 0x8001, 0x3ff, 0x8, 0x1, 0x2, 0x4, 0x2, 0x400, 0x2d6, 0xffff, 0x0, 0x401, 0x9, 0x34, 0x9, 0x7c7, 0xff81, 0x1, 0x6, 0x4, 0x1, 0xfd, 0x2, 0x2, 0x5, 0x15c2, 0x0, 0x6, 0xd43, 0x5, 0x7f, 0x8, 0x3, 0xfffc, 0x80, 0xffe1, 0xcfbc], 0xffffffff}}, 0x8001}) 23:36:57 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x121800, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) clock_gettime(0xf820becce9bdaf5d, &(0x7f0000000200)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000240)=@mmap={0x1, 0x3, 0x4, 0x2000, 0x6, {r2, r3/1000+10000}, {0x4, 0x8, 0x6, 0x6, 0x8, 0x7, "fe2595f1"}, 0x1}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 23:36:57 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000140)={0x0, 0x0, 0x0, "475d003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) (async) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) (async) r6 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7}, 0x48) (async, rerun: 64) socket$tipc(0x1e, 0x2, 0x0) (rerun: 64) r8 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r9}, 0x48) (async) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @dev, @broadcast}, &(0x7f0000000180)=0xc) (async) r11 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r12}, 0x48) ioctl$VIDIOC_QUERYSTD(r5, 0x8008563f, &(0x7f00000009c0)) (async) socket$pptp(0x18, 0x1, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r14, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r15}, 0x48) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000980)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000a00)=ANY=[@ANYBLOB="10070000", @ANYRES16=0x0, @ANYBLOB="200028bd7000fbdbdf250300000008000100", @ANYRES32=r4, @ANYBLOB="67d553990800010071e11508d066a52d475989f7eb7c719f2b7885e0ff94d3897b0f1b2943394680cab5533535426557b9f71a65c14a5c26ad2ad9259817d1a4faf3ff2cb7e6594835ffc562f96da6fbc30de30bdb4e46eea24bf21ee4a8beaaf0445114a0a48b32a40f6c827131fc09baae53b7d62f4873e90d895d5522f8a46d37", @ANYRES32=0x0, @ANYBLOB="880102804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000900000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000004000008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400b10700003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="c000028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400c552000008000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040004000000080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="ec00028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000100008038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000300000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040008000000080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000000000008000100", @ANYRES32=0x0, @ANYBLOB="2c02028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r7, @ANYBLOB="080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r10, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000008000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400ff03000008000600", @ANYRES32=r12, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400330000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000f00000008000100", @ANYRES32=r13, @ANYBLOB="6801028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r15, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004008000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000100000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f616463617374000000"], 0x710}, 0x1, 0x0, 0x0, 0x5}, 0x40) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000000)={0xfffffff8, 0xb5315241, 0x0, @stepwise={0x5, 0x0, 0x6, 0x0, 0x1, 0xce76}}) 23:36:57 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x0, 0x0, "4755003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x0, 0x0, "4755003fe11ed59bb805dfd0f1c62f7200000000220000000000000000001de0"}) (async) 23:36:57 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x6, 0x2) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000100)=@multiplanar_mmap={0x9, 0x0, 0x4, 0x0, 0x2, {0x77359400}, {0x3, 0x0, 0x7, 0x20, 0x0, 0x7f, "d6a2569f"}, 0x7, 0x1, {&(0x7f0000000080)=[{0x6, 0xffffffff, {0x9}, 0x3}, {0x800, 0x83, {0x7}, 0x7f}]}, 0x2, 0x0, r2}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:36:57 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x6, 0x2) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000100)=@multiplanar_mmap={0x9, 0x0, 0x4, 0x0, 0x2, {0x77359400}, {0x3, 0x0, 0x7, 0x20, 0x0, 0x7f, "d6a2569f"}, 0x7, 0x1, {&(0x7f0000000080)=[{0x6, 0xffffffff, {0x9}, 0x3}, {0x800, 0x83, {0x7}, 0x7f}]}, 0x2, 0x0, r2}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x36314d59, 0x0, @stepwise}) 23:36:57 executing program 3: socketpair(0x23, 0x11c, 0x7fffffff, &(0x7f0000000100)) 23:36:57 executing program 3: socketpair(0x23, 0x11d, 0x7fffffff, &(0x7f0000000100)) 23:36:57 executing program 3: socketpair(0x23, 0x11e, 0x7fffffff, &(0x7f0000000100)) 23:36:57 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200), 0x2200, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0040, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000300)=@multiplanar_overlay={0xab, 0x2, 0x4, 0xcf05543d1f399c30, 0x7, {0x0, 0xea60}, {0x1, 0xc, 0x0, 0x2, 0x3, 0x3, "94763622"}, 0x2, 0x3, {&(0x7f0000000240)=[{0x5, 0x4, {0x1}}, {0x5, 0x5, {0x401}, 0x7fffffff}]}, 0x1c, 0x0, r3}) r4 = syz_open_dev$vim2m(&(0x7f0000000380), 0x4, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f00000003c0)={0x4, 0x0, 0x1, "9feab7b2b8ae5a72475d7f6763176a1a78db959f5cfe2a1d0d3a64d19188af25", 0x30314247}) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0xa0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000001c0)={0x0, 0x20323159, 0x0, @stepwise={0x0, 0xffff, 0x7fffffff, 0x9, 0x2c, 0x20}}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @raw_data="39b86a68119b9de5b5f97d494dc8b3527f97b36eb5f6f80d16de7dd269ac8089e8c29f84d69770c95118923e33b148d4e6ee72e8a4db9e2c7b99bf3d19f2493d88d5cf31b60225712b2753437d79b52aa26b80b9aa9901f2668d5eb05a65e27a9081e6dd3a7a80e5dea62b765a08a97b659a6efaa3f705c64ea3bdb3018bf82400e23659beffc0c7004021459b8e082c1eadf0c68b08c6eeecc8254e885f82d3f5d6515d80d5041724fccc19d466c3529042cd08a5028f8dbbcf629e2926456580da58afde66b5dc"}) 23:36:57 executing program 3: socketpair(0x23, 0x11f, 0x7fffffff, &(0x7f0000000100)) 23:36:57 executing program 3: socketpair(0x23, 0x120, 0x7fffffff, &(0x7f0000000100)) 23:36:58 executing program 2: ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="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"]}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000380)={0x2, @pix_mp={0xfffffffd, 0x8, 0x50565559, 0x8, 0x0, [{0x3, 0x6}, {0x1ff, 0xf727}, {0x0, 0x4}, {0x9, 0x3}, {0x1000, 0xffffffff}, {0x7ff, 0xfffeffff}, {0xfa90, 0xe48e}, {0xb68e}], 0x5, 0x2, 0x2, 0x1}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, "c0b8056e862d2f00f2190000eef000f500000400001c00010000272d00"}) 23:36:58 executing program 3: socketpair(0x23, 0x121, 0x7fffffff, &(0x7f0000000100)) [ 2376.497307] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2376.510934] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2376.515723] CPU: 1 PID: 8077 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 2376.523164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2376.532525] Call Trace: [ 2376.535123] dump_stack+0x1fc/0x2ef [ 2376.538753] dump_header+0x15d/0xc3f [ 2376.542469] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2376.547571] ? ___ratelimit+0x319/0x590 [ 2376.551563] oom_kill_process.cold+0x10/0x692 [ 2376.556069] ? check_preemption_disabled+0x41/0x280 [ 2376.561090] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2376.566359] out_of_memory+0x1072/0x1390 [ 2376.570408] ? oom_killer_disable+0x270/0x270 [ 2376.574905] ? mutex_trylock+0x15f/0x1a0 [ 2376.578950] __alloc_pages_nodemask+0x23a2/0x2890 [ 2376.583777] ? find_get_entry+0x4cd/0x8a0 [ 2376.587911] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2376.592753] alloc_pages_current+0x193/0x2a0 [ 2376.597172] filemap_fault+0x146e/0x2180 [ 2376.601222] ext4_filemap_fault+0x84/0xb0 [ 2376.605351] __do_fault+0x10b/0x4b0 [ 2376.608961] __handle_mm_fault+0x273b/0x41c0 [ 2376.613352] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2376.618455] ? vm_insert_page+0x9c0/0x9c0 [ 2376.622591] ? check_preemption_disabled+0x41/0x280 [ 2376.627591] handle_mm_fault+0x436/0xb10 [ 2376.631641] __do_page_fault+0x68e/0xd60 [ 2376.635687] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2376.640684] ? spurious_fault+0x840/0x840 [ 2376.644813] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2376.649639] ? page_fault+0x8/0x30 [ 2376.653163] page_fault+0x1e/0x30 [ 2376.656613] RIP: 0033:0x44227a [ 2376.659789] Code: Bad RIP value. [ 2376.663133] RSP: 002b:000000c00005ff30 EFLAGS: 00010206 [ 2376.668475] RAX: 0000000001f4f1d8 RBX: 000000c000050000 RCX: 000000000000003d [ 2376.675742] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000c00005fedc [ 2376.682990] RBP: 000000c00005ff88 R08: 00007ffe349f9000 R09: 00000261919ac71b [ 2376.690242] R10: 000dfb37323284a7 R11: 0000000000000001 R12: 000000c00005ff10 [ 2376.697510] R13: 000000c00051d800 R14: 000000c0000004e0 R15: 00007f615969ae9c [ 2376.706854] Mem-Info: [ 2376.709343] active_anon:16093 inactive_anon:12880 isolated_anon:0 [ 2376.709343] active_file:13 inactive_file:29 isolated_file:0 [ 2376.709343] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2376.709343] slab_reclaimable:15076 slab_unreclaimable:116260 [ 2376.709343] mapped:22095 shmem:13329 pagetables:588 bounce:0 [ 2376.709343] free:25126 free_pcp:50 free_cma:0 [ 2376.744987] Node 0 active_anon:63160kB inactive_anon:18940kB active_file:32kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:86784kB dirty:0kB writeback:0kB shmem:20544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2376.772706] Node 1 active_anon:1212kB inactive_anon:32580kB active_file:20kB inactive_file:80kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1596kB dirty:0kB writeback:0kB shmem:32772kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2376.804784] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2376.837810] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2376.843054] Node 0 DMA32 free:35404kB min:35996kB low:44992kB high:53988kB active_anon:63160kB inactive_anon:18940kB active_file:32kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7680kB pagetables:2184kB bounce:0kB free_pcp:400kB local_pcp:152kB free_cma:0kB [ 2376.913492] lowmem_reserve[]: 0 0 1 1 1 [ 2376.919755] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2376.953032] lowmem_reserve[]: 0 0 0 0 0 [ 2376.957038] Node 1 Normal free:53816kB min:53876kB low:67344kB high:80812kB active_anon:1212kB inactive_anon:32580kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:160kB pagetables:168kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 2376.987708] lowmem_reserve[]: 0 0 0 0 0 [ 2376.991755] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10968kB [ 2377.006861] Node 0 DMA32: 1790*4kB (UME) 969*8kB (UME) 302*16kB (ME) 35*32kB (ME) 1*64kB (M) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 3*2048kB (UM) 2*4096kB (U) = 35392kB [ 2377.025132] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2377.036279] Node 1 Normal: 112*4kB (ME) 101*8kB (UME) 87*16kB (M) 53*32kB (UME) 43*64kB (UME) 29*128kB (ME) 12*256kB (UM) 2*512kB (ME) 2*1024kB (ME) 2*2048kB (UE) 8*4096kB (UM) = 53816kB [ 2377.055012] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2377.063915] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2377.074449] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2377.083360] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2377.095627] 13354 total pagecache pages [ 2377.099653] 0 pages in swap cache [ 2377.103100] Swap cache stats: add 0, delete 0, find 0/0 [ 2377.108528] Free swap = 0kB [ 2377.111541] Total swap = 0kB [ 2377.114554] 2097051 pages RAM [ 2377.117651] 0 pages HighMem/MovableOnly [ 2377.122814] 369649 pages reserved [ 2377.126262] 0 pages cma reserved [ 2377.129665] Unreclaimable slab info: [ 2377.133366] Name Used Total [ 2377.138936] pid_2 58KB 220KB [ 2377.144371] batadv_tt_change_cache 1KB 3KB [ 2377.150254] batadv_tl_cache 6KB 12KB [ 2377.155742] TIPC 114KB 120KB [ 2377.161303] SCTPv6 18KB 24KB [ 2377.166672] DCCPv6 17KB 30KB [ 2377.172129] DCCP 16KB 35KB [ 2377.177521] L2TP/IP 171KB 180KB [ 2377.182926] RXRPC 14KB 19KB [ 2377.188272] rxrpc_call_jar 101KB 102KB [ 2377.193682] bridge_fdb_cache 12KB 19KB [ 2377.199102] fib6_nodes 209KB 280KB [ 2377.204465] ip6_dst_cache 368KB 397KB [ 2377.209896] RAWv6 91KB 101KB [ 2377.215257] UDPv6 33KB 41KB [ 2377.220660] TCPv6 24KB 36KB [ 2377.227100] nf_conntrack 6KB 7KB [ 2377.232602] t10_alua_lu_gp_cache 0KB 3KB [ 2377.238234] sd_ext_cdb 0KB 7KB [ 2377.243630] scsi_sense_cache 1056KB 1060KB [ 2377.249049] virtio_scsi_cmd 16KB 16KB [ 2377.254417] sgpool-128 8KB 8KB [ 2377.259887] sgpool-64 4KB 12KB [ 2377.265251] sgpool-32 2KB 15KB [ 2377.270696] sgpool-16 1KB 7KB [ 2377.276052] sgpool-8 0KB 7KB [ 2377.281478] mqueue_inode_cache 13KB 30KB [ 2377.286931] bio_post_read_ctx 14KB 15KB [ 2377.292403] bio-2 14KB 15KB [ 2377.297756] jfs_mp 7KB 7KB [ 2377.303151] cifs_small_rq 15KB 16KB [ 2377.308549] cifs_request 67KB 67KB [ 2377.313909] cifs_mpx_ids 0KB 7KB [ 2377.319332] nfs_commit_data 3KB 14KB [ 2377.326209] nfs_write_data 34KB 44KB [ 2377.331641] ext4_system_zone 1KB 7KB [ 2377.337003] bio-1 1KB 7KB [ 2377.342564] pid_namespace 2KB 11KB [ 2377.348016] rpc_buffers 17KB 25KB [ 2377.353470] rpc_tasks 2KB 7KB [ 2377.358896] UNIX 1050KB 1057KB [ 2377.364261] tcp_bind_bucket 1KB 4KB [ 2377.369702] ip_fib_trie 30KB 47KB [ 2377.375055] ip_fib_alias 148KB 197KB [ 2377.380451] ip_dst_cache 8KB 16KB [ 2377.385810] RAW 54KB 67KB [ 2377.391211] UDP 43KB 54KB [ 2377.396567] TCP 8KB 16KB [ 2377.401960] hugetlbfs_inode_cache 3KB 15KB [ 2377.407662] fscache_cookie_jar 1KB 11KB [ 2377.413142] eventpoll_pwq 21KB 47KB [ 2377.418541] eventpoll_epi 39KB 59KB [ 2377.423902] inotify_inode_mark 20KB 55KB [ 2377.431158] request_queue 199KB 199KB [ 2377.436527] blkdev_requests 1KB 3KB [ 2377.441915] blkdev_ioc 19KB 27KB [ 2377.447258] bio-0 652KB 652KB [ 2377.452688] biovec-max 1419KB 1460KB [ 2377.458046] biovec-64 598KB 598KB [ 2377.463462] biovec-16 63KB 63KB [ 2377.468891] bio_integrity_payload 1KB 8KB [ 2377.474595] khugepaged_mm_slot 10KB 42KB [ 2377.480088] uid_cache 0KB 4KB [ 2377.485447] dmaengine-unmap-2 0KB 3KB [ 2377.490859] skbuff_fclone_cache 89KB 318KB [ 2377.496385] skbuff_head_cache 5624KB 5625KB [ 2377.501761] configfs_dir_cache 3KB 7KB [ 2377.507201] file_lock_cache 81KB 198KB [ 2377.512607] file_lock_ctx 9KB 11KB [ 2377.517979] fsnotify_mark_connector 9KB 31KB [ 2377.523898] net_namespace 70KB 70KB [ 2377.531118] shmem_inode_cache 8222KB 8501KB [ 2377.536485] task_delay_info 241KB 395KB [ 2377.541905] taskstats 78KB 245KB [ 2377.547259] proc_dir_entry 824KB 832KB [ 2377.552685] pde_opener 11KB 34KB [ 2377.558037] seq_file 235KB 334KB [ 2377.563466] sigqueue 36KB 39KB [ 2377.568896] kernfs_node_cache 18229KB 18246KB [ 2377.574258] mnt_cache 207KB 216KB [ 2377.579664] filp 6857KB 7125KB [ 2377.585016] names_cache 126492KB 126531KB [ 2377.590415] iint_cache 26KB 51KB [ 2377.595788] key_jar 4KB 7KB [ 2377.601190] uts_namespace 3KB 7KB [ 2377.606548] nsproxy 2KB 7KB [ 2377.611958] vm_area_struct 3245KB 5019KB [ 2377.617316] mm_struct 628KB 1124KB [ 2377.622711] fs_cache 208KB 328KB [ 2377.628055] files_cache 779KB 903KB [ 2377.635221] signal_cache 1510KB 1847KB [ 2377.640640] sighand_cache 534KB 645KB [ 2377.646001] task_struct 8067KB 8136KB [ 2377.651442] cred_jar 1703KB 2264KB [ 2377.656795] anon_vma_chain 1014KB 1834KB [ 2377.662219] anon_vma 155KB 350KB [ 2377.667576] pid 109KB 216KB [ 2377.673006] Acpi-Operand 156KB 198KB [ 2377.678360] Acpi-ParseExt 8KB 11KB [ 2377.683769] Acpi-Parse 41KB 47KB [ 2377.689206] Acpi-State 52KB 63KB [ 2377.694572] Acpi-Namespace 21KB 23KB [ 2377.700041] numa_policy 0KB 3KB [ 2377.705395] debug_objects_cache 1930KB 2403KB [ 2377.710974] trace_event_file 297KB 298KB [ 2377.716328] ftrace_event_field 398KB 401KB [ 2377.721812] pool_workqueue 135KB 148KB [ 2377.727166] page->ptl 565KB 1363KB [ 2377.732611] kmalloc-2097152 2050KB 2050KB [ 2377.739423] kmalloc-524288 2056KB 2056KB [ 2377.744798] kmalloc-262144 1290KB 1290KB [ 2377.750211] kmalloc-131072 650KB 650KB [ 2377.755574] kmalloc-65536 2376KB 2442KB [ 2377.760988] kmalloc-32768 1980KB 1980KB [ 2377.766349] kmalloc-16384 1204KB 1237KB [ 2377.771781] kmalloc-8192 4974KB 5016KB [ 2377.777140] kmalloc-4096 24569KB 24607KB [ 2377.782546] kmalloc-2048 15087KB 15440KB [ 2377.787896] kmalloc-1024 9731KB 9733KB [ 2377.793296] kmalloc-512 11866KB 11868KB [ 2377.798700] kmalloc-256 5361KB 5827KB [ 2377.804056] kmalloc-128 1188KB 1523KB [ 2377.809466] kmalloc-96 3379KB 4552KB [ 2377.814830] kmalloc-64 2822KB 4332KB [ 2377.820210] kmalloc-32 1890KB 2579KB [ 2377.825553] kmalloc-192 1903KB 2588KB [ 2377.830949] kmem_cache 177KB 180KB [ 2377.838092] Out of memory (oom_kill_allocating_task): Kill process 8077 (syz-fuzzer) score 0 or sacrifice child [ 2377.848494] Killed process 9506 (syz-executor.1) total-vm:48512kB, anon-rss:432kB, file-rss:4kB, shmem-rss:0kB [ 2377.870005] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2377.892070] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2377.896853] CPU: 1 PID: 8077 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 2377.904290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2377.913623] Call Trace: [ 2377.916199] dump_stack+0x1fc/0x2ef [ 2377.919812] dump_header+0x15d/0xc3f [ 2377.923508] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2377.928591] ? ___ratelimit+0x319/0x590 [ 2377.932550] oom_kill_process.cold+0x10/0x692 [ 2377.937028] ? check_preemption_disabled+0x41/0x280 [ 2377.942030] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2377.947313] out_of_memory+0x1072/0x1390 [ 2377.951362] ? oom_killer_disable+0x270/0x270 [ 2377.955841] ? mutex_trylock+0x15f/0x1a0 [ 2377.959887] __alloc_pages_nodemask+0x23a2/0x2890 [ 2377.964716] ? find_get_entry+0x4cd/0x8a0 [ 2377.968856] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2377.973693] alloc_pages_current+0x193/0x2a0 [ 2377.978096] filemap_fault+0x146e/0x2180 [ 2377.982146] ext4_filemap_fault+0x84/0xb0 [ 2377.986289] __do_fault+0x10b/0x4b0 [ 2377.989907] __handle_mm_fault+0x273b/0x41c0 [ 2377.994309] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2377.999411] ? vm_insert_page+0x9c0/0x9c0 [ 2378.003552] ? check_preemption_disabled+0x41/0x280 [ 2378.008560] handle_mm_fault+0x436/0xb10 [ 2378.012612] __do_page_fault+0x68e/0xd60 [ 2378.016663] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2378.021670] ? spurious_fault+0x840/0x840 [ 2378.025823] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2378.030662] ? page_fault+0x8/0x30 [ 2378.034210] page_fault+0x1e/0x30 [ 2378.037654] RIP: 0033:0x44227a [ 2378.040844] Code: Bad RIP value. [ 2378.044197] RSP: 002b:000000c00005ff30 EFLAGS: 00010206 [ 2378.049547] RAX: 0000000001f4f1d8 RBX: 000000c000050000 RCX: 000000000000003d [ 2378.056803] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000c00005fedc [ 2378.064062] RBP: 000000c00005ff88 R08: 00007ffe349f9000 R09: 00000261919ac71b [ 2378.071315] R10: 000dfb37323284a7 R11: 0000000000000001 R12: 000000c00005ff10 [ 2378.078567] R13: 000000c00051d800 R14: 000000c0000004e0 R15: 00007f615969ae9c [ 2378.097073] Mem-Info: [ 2378.099623] active_anon:16063 inactive_anon:12880 isolated_anon:0 [ 2378.099623] active_file:13 inactive_file:12 isolated_file:0 [ 2378.099623] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2378.099623] slab_reclaimable:15069 slab_unreclaimable:116350 [ 2378.099623] mapped:22076 shmem:13329 pagetables:563 bounce:0 [ 2378.099623] free:24987 free_pcp:238 free_cma:0 [ 2378.136823] Node 0 active_anon:63044kB inactive_anon:18940kB active_file:36kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:86784kB dirty:0kB writeback:0kB shmem:20544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2378.173387] Node 1 active_anon:1208kB inactive_anon:32580kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1520kB dirty:0kB writeback:0kB shmem:32772kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2378.203055] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2378.234179] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2378.239300] Node 0 DMA32 free:35156kB min:35996kB low:44992kB high:53988kB active_anon:63044kB inactive_anon:18940kB active_file:32kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7648kB pagetables:2084kB bounce:0kB free_pcp:676kB local_pcp:408kB free_cma:0kB [ 2378.268606] lowmem_reserve[]: 0 0 1 1 1 [ 2378.272597] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2378.298531] lowmem_reserve[]: 0 0 0 0 0 [ 2378.302497] Node 1 Normal free:53816kB min:53876kB low:67344kB high:80812kB active_anon:1208kB inactive_anon:32580kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:160kB pagetables:168kB bounce:0kB free_pcp:252kB local_pcp:252kB free_cma:0kB [ 2378.331314] lowmem_reserve[]: 0 0 0 0 0 [ 2378.335295] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10968kB [ 2378.350338] Node 0 DMA32: 1789*4kB (ME) 974*8kB (UME) 302*16kB (ME) 36*32kB (UME) 1*64kB (M) 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (M) 2*4096kB (U) = 35204kB [ 2378.366453] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2378.377545] Node 1 Normal: 112*4kB (ME) 101*8kB (UME) 87*16kB (M) 53*32kB (UME) 43*64kB (UME) 29*128kB (ME) 12*256kB (UM) 2*512kB (ME) 2*1024kB (ME) 2*2048kB (UE) 8*4096kB (UM) = 53816kB [ 2378.394520] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2378.403448] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2378.412099] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2378.420982] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2378.429593] 13354 total pagecache pages [ 2378.433564] 0 pages in swap cache [ 2378.437017] Swap cache stats: add 0, delete 0, find 0/0 [ 2378.442402] Free swap = 0kB [ 2378.445399] Total swap = 0kB [ 2378.448440] 2097051 pages RAM [ 2378.453309] 0 pages HighMem/MovableOnly [ 2378.457279] 369649 pages reserved [ 2378.460786] 0 pages cma reserved [ 2378.464238] Unreclaimable slab info: [ 2378.467941] Name Used Total [ 2378.473515] pid_2 55KB 220KB [ 2378.479003] batadv_tt_change_cache 1KB 3KB [ 2378.484807] batadv_tl_cache 6KB 12KB [ 2378.490239] TIPC 114KB 120KB [ 2378.495610] SCTPv6 18KB 24KB [ 2378.501022] DCCPv6 17KB 30KB [ 2378.506374] DCCP 16KB 35KB [ 2378.511797] L2TP/IP 171KB 180KB [ 2378.517169] RXRPC 14KB 19KB [ 2378.522586] rxrpc_call_jar 101KB 102KB [ 2378.527955] bridge_fdb_cache 12KB 19KB [ 2378.533347] fib6_nodes 209KB 280KB [ 2378.538738] ip6_dst_cache 368KB 397KB [ 2378.544101] RAWv6 91KB 101KB [ 2378.549513] UDPv6 33KB 41KB [ 2378.556642] TCPv6 24KB 36KB [ 2378.562048] nf_conntrack 6KB 7KB [ 2378.567429] t10_alua_lu_gp_cache 0KB 3KB [ 2378.573132] sd_ext_cdb 0KB 7KB [ 2378.578533] scsi_sense_cache 1056KB 1060KB [ 2378.583892] virtio_scsi_cmd 16KB 16KB [ 2378.589326] sgpool-128 8KB 8KB [ 2378.594682] sgpool-64 4KB 12KB [ 2378.600086] sgpool-32 2KB 15KB [ 2378.605438] sgpool-16 1KB 7KB [ 2378.610872] sgpool-8 0KB 7KB [ 2378.616237] mqueue_inode_cache 13KB 30KB [ 2378.621742] bio_post_read_ctx 14KB 15KB [ 2378.627140] bio-2 14KB 15KB [ 2378.632539] jfs_mp 7KB 7KB [ 2378.637912] cifs_small_rq 15KB 16KB [ 2378.643309] cifs_request 67KB 67KB [ 2378.648712] cifs_mpx_ids 0KB 7KB [ 2378.654096] nfs_commit_data 3KB 14KB [ 2378.661274] nfs_write_data 34KB 44KB [ 2378.666663] ext4_system_zone 1KB 7KB [ 2378.672098] bio-1 1KB 7KB [ 2378.677457] pid_namespace 2KB 11KB [ 2378.682889] rpc_buffers 17KB 25KB [ 2378.688264] rpc_tasks 2KB 7KB [ 2378.693696] UNIX 1048KB 1057KB [ 2378.699110] tcp_bind_bucket 1KB 4KB [ 2378.704474] ip_fib_trie 30KB 47KB [ 2378.709908] ip_fib_alias 148KB 197KB [ 2378.715262] ip_dst_cache 8KB 16KB [ 2378.720669] RAW 54KB 67KB [ 2378.726023] UDP 43KB 54KB [ 2378.731466] TCP 8KB 16KB [ 2378.736830] hugetlbfs_inode_cache 3KB 15KB [ 2378.742599] fscache_cookie_jar 1KB 11KB [ 2378.748041] eventpoll_pwq 21KB 47KB [ 2378.753421] eventpoll_epi 39KB 59KB [ 2378.760587] inotify_inode_mark 19KB 55KB [ 2378.766041] request_queue 199KB 199KB [ 2378.771451] blkdev_requests 1KB 3KB [ 2378.776817] blkdev_ioc 19KB 27KB [ 2378.782420] bio-0 652KB 652KB [ 2378.787769] biovec-max 1419KB 1460KB [ 2378.793209] biovec-64 597KB 598KB [ 2378.798627] biovec-16 61KB 63KB [ 2378.803999] bio_integrity_payload 1KB 8KB [ 2378.809772] khugepaged_mm_slot 10KB 42KB [ 2378.815222] uid_cache 0KB 4KB [ 2378.820642] dmaengine-unmap-2 0KB 3KB [ 2378.825999] skbuff_fclone_cache 87KB 311KB [ 2378.831594] skbuff_head_cache 5736KB 5737KB [ 2378.836948] configfs_dir_cache 3KB 7KB [ 2378.842437] file_lock_cache 80KB 198KB [ 2378.847793] file_lock_ctx 9KB 11KB [ 2378.853189] fsnotify_mark_connector 9KB 31KB [ 2378.859116] net_namespace 70KB 70KB [ 2378.866260] shmem_inode_cache 8219KB 8493KB [ 2378.871708] task_delay_info 237KB 395KB [ 2378.877063] taskstats 73KB 241KB [ 2378.882483] proc_dir_entry 824KB 832KB [ 2378.887834] pde_opener 11KB 34KB [ 2378.893288] seq_file 235KB 334KB [ 2378.898706] sigqueue 36KB 39KB [ 2378.904065] kernfs_node_cache 18229KB 18246KB [ 2378.909476] mnt_cache 207KB 216KB [ 2378.914831] filp 6850KB 7125KB [ 2378.920226] names_cache 126484KB 126522KB [ 2378.925586] iint_cache 26KB 51KB [ 2378.931000] key_jar 4KB 7KB [ 2378.936359] uts_namespace 3KB 7KB [ 2378.941849] nsproxy 2KB 7KB [ 2378.947211] vm_area_struct 3242KB 5019KB [ 2378.952613] mm_struct 620KB 1124KB [ 2378.957966] fs_cache 207KB 328KB [ 2378.965114] files_cache 774KB 903KB [ 2378.970550] signal_cache 1503KB 1847KB [ 2378.975908] sighand_cache 534KB 645KB [ 2378.981336] task_struct 8054KB 8124KB [ 2378.986690] cred_jar 1697KB 2264KB [ 2378.992090] anon_vma_chain 1011KB 1834KB [ 2378.997442] anon_vma 149KB 350KB [ 2379.002864] pid 109KB 216KB [ 2379.008218] Acpi-Operand 156KB 198KB [ 2379.013631] Acpi-ParseExt 8KB 11KB [ 2379.019102] Acpi-Parse 41KB 47KB [ 2379.024460] Acpi-State 52KB 63KB [ 2379.029873] Acpi-Namespace 21KB 23KB [ 2379.035232] numa_policy 0KB 3KB [ 2379.040665] debug_objects_cache 1930KB 2403KB [ 2379.046193] trace_event_file 297KB 298KB [ 2379.051593] ftrace_event_field 398KB 401KB [ 2379.057036] pool_workqueue 135KB 148KB [ 2379.062433] page->ptl 563KB 1363KB [ 2379.069339] kmalloc-2097152 2050KB 2050KB [ 2379.074711] kmalloc-524288 2056KB 2056KB [ 2379.080123] kmalloc-262144 1290KB 1290KB [ 2379.085479] kmalloc-131072 650KB 650KB [ 2379.090887] kmalloc-65536 2376KB 2442KB [ 2379.096258] kmalloc-32768 1980KB 1980KB [ 2379.101676] kmalloc-16384 1204KB 1237KB [ 2379.107023] kmalloc-8192 4974KB 5016KB [ 2379.112442] kmalloc-4096 24560KB 24599KB [ 2379.117806] kmalloc-2048 15076KB 15440KB [ 2379.123212] kmalloc-1024 9747KB 9749KB [ 2379.128633] kmalloc-512 12061KB 12063KB [ 2379.133992] kmalloc-256 5361KB 5827KB [ 2379.139411] kmalloc-128 1183KB 1523KB [ 2379.144775] kmalloc-96 3394KB 4552KB [ 2379.150223] kmalloc-64 2822KB 4332KB [ 2379.155672] kmalloc-32 1890KB 2579KB [ 2379.161071] kmalloc-192 1903KB 2588KB [ 2379.166427] kmem_cache 177KB 180KB [ 2379.173637] Out of memory (oom_kill_allocating_task): Kill process 8077 (syz-fuzzer) score 0 or sacrifice child [ 2379.183987] Killed process 24330 (syz-executor.0) total-vm:48512kB, anon-rss:424kB, file-rss:0kB, shmem-rss:0kB [ 2379.194607] oom_reaper: reaped process 24330 (syz-executor.0), now anon-rss:0kB, file-rss:14336kB, shmem-rss:0kB [ 2379.207167] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2379.221686] systemd-journal cpuset=/ mems_allowed=0-1 [ 2379.226905] CPU: 0 PID: 10084 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 2379.234872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2379.244216] Call Trace: [ 2379.246789] dump_stack+0x1fc/0x2ef [ 2379.250413] dump_header+0x15d/0xc3f [ 2379.254129] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2379.259233] ? ___ratelimit+0x319/0x590 [ 2379.263215] oom_kill_process.cold+0x10/0x692 [ 2379.267804] ? check_preemption_disabled+0x41/0x280 [ 2379.272826] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2379.278106] out_of_memory+0x1072/0x1390 [ 2379.282163] ? oom_killer_disable+0x270/0x270 [ 2379.286644] ? mutex_trylock+0x15f/0x1a0 [ 2379.290705] __alloc_pages_nodemask+0x23a2/0x2890 [ 2379.295555] ? find_get_entry+0x4cd/0x8a0 [ 2379.299714] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2379.304589] alloc_pages_current+0x193/0x2a0 [ 2379.308999] filemap_fault+0x146e/0x2180 [ 2379.313070] ext4_filemap_fault+0x84/0xb0 [ 2379.317219] __do_fault+0x10b/0x4b0 [ 2379.320850] __handle_mm_fault+0x273b/0x41c0 [ 2379.325258] ? vm_insert_page+0x9c0/0x9c0 [ 2379.329419] ? check_preemption_disabled+0x41/0x280 [ 2379.334439] handle_mm_fault+0x436/0xb10 [ 2379.338504] __do_page_fault+0x68e/0xd60 [ 2379.342570] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2379.347602] ? spurious_fault+0x840/0x840 [ 2379.351748] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2379.356591] ? page_fault+0x8/0x30 [ 2379.360132] page_fault+0x1e/0x30 [ 2379.363581] RIP: 0033:0x7f247ec022e3 [ 2379.367283] Code: Bad RIP value. [ 2379.370629] RSP: 002b:00007ffdbaf7afa8 EFLAGS: 00010246 [ 2379.375990] RAX: 0000000000000001 RBX: 0000560bc51511e0 RCX: 00007f247ec022e3 [ 2379.383256] RDX: 0000000000000013 RSI: 00007ffdbaf7afb0 RDI: 000000000000000d [ 2379.390522] RBP: 00007ffdbaf7b1a0 R08: 00007ffdbafd8000 R09: 0000025f97aa21dc [ 2379.397781] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdbaf7afb0 [ 2379.405038] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005f36f92e51249 [ 2379.419764] Mem-Info: [ 2379.422203] active_anon:16038 inactive_anon:12880 isolated_anon:0 [ 2379.422203] active_file:12 inactive_file:13 isolated_file:0 [ 2379.422203] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2379.422203] slab_reclaimable:15061 slab_unreclaimable:116413 [ 2379.422203] mapped:22076 shmem:13329 pagetables:526 bounce:0 [ 2379.422203] free:24995 free_pcp:229 free_cma:0 [ 2379.459972] Node 0 active_anon:62944kB inactive_anon:18940kB active_file:32kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:86784kB dirty:0kB writeback:0kB shmem:20544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2379.491422] Node 1 active_anon:1208kB inactive_anon:32580kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1520kB dirty:0kB writeback:0kB shmem:32772kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2379.522237] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2379.552148] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2379.557213] Node 0 DMA32 free:35188kB min:35996kB low:44992kB high:53988kB active_anon:62944kB inactive_anon:18940kB active_file:32kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7616kB pagetables:1936kB bounce:0kB free_pcp:632kB local_pcp:236kB free_cma:0kB [ 2379.589903] lowmem_reserve[]: 0 0 1 1 1 [ 2379.593904] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2379.625079] lowmem_reserve[]: 0 0 0 0 0 [ 2379.634499] Node 1 Normal free:53816kB min:53876kB low:67344kB high:80812kB active_anon:1208kB inactive_anon:32580kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:160kB pagetables:168kB bounce:0kB free_pcp:256kB local_pcp:256kB free_cma:0kB [ 2379.675960] lowmem_reserve[]: 0 0 0 0 0 [ 2379.684633] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10968kB [ 2379.710657] Node 0 DMA32: 1789*4kB (ME) 971*8kB (UME) 302*16kB (ME) 37*32kB (UME) 1*64kB (M) 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (M) 2*4096kB (U) = 35212kB [ 2379.731775] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2379.744797] Node 1 Normal: 112*4kB (ME) 101*8kB (UME) 87*16kB (M) 53*32kB (UME) 43*64kB (UME) 29*128kB (ME) 12*256kB (UM) 2*512kB (ME) 2*1024kB (ME) 2*2048kB (UE) 8*4096kB (UM) = 53816kB [ 2379.772898] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2379.795390] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2379.810653] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2379.822946] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2379.837369] 13354 total pagecache pages [ 2379.845155] 0 pages in swap cache [ 2379.850432] Swap cache stats: add 0, delete 0, find 0/0 [ 2379.855779] Free swap = 0kB [ 2379.866139] Total swap = 0kB [ 2379.872842] 2097051 pages RAM [ 2379.875939] 0 pages HighMem/MovableOnly [ 2379.883512] 369649 pages reserved [ 2379.888002] 0 pages cma reserved [ 2379.895208] Unreclaimable slab info: [ 2379.904974] Name Used Total [ 2379.911472] pid_2 55KB 220KB [ 2379.916903] batadv_tt_change_cache 1KB 3KB [ 2379.926501] batadv_tl_cache 6KB 12KB [ 2379.934673] TIPC 114KB 120KB [ 2379.941601] SCTPv6 18KB 24KB [ 2379.946981] DCCPv6 17KB 30KB [ 2379.954538] DCCP 16KB 35KB [ 2379.961519] L2TP/IP 171KB 180KB [ 2379.966901] RXRPC 14KB 19KB [ 2379.974558] rxrpc_call_jar 101KB 102KB [ 2379.981572] bridge_fdb_cache 12KB 19KB [ 2379.992220] fib6_nodes 209KB 280KB [ 2379.997596] ip6_dst_cache 368KB 397KB [ 2380.004945] RAWv6 91KB 101KB [ 2380.014022] UDPv6 33KB 41KB [ 2380.023082] TCPv6 24KB 36KB [ 2380.030056] nf_conntrack 6KB 7KB [ 2380.035484] t10_alua_lu_gp_cache 0KB 3KB [ 2380.046352] sd_ext_cdb 0KB 7KB [ 2380.055332] scsi_sense_cache 1056KB 1060KB [ 2380.065071] virtio_scsi_cmd 16KB 16KB [ 2380.074078] sgpool-128 8KB 8KB [ 2380.085462] sgpool-64 4KB 12KB [ 2380.096458] sgpool-32 2KB 15KB [ 2380.104984] sgpool-16 1KB 7KB [ 2380.113956] sgpool-8 0KB 7KB [ 2380.123071] mqueue_inode_cache 13KB 30KB [ 2380.135488] bio_post_read_ctx 14KB 15KB [ 2380.144629] bio-2 14KB 15KB [ 2380.154982] jfs_mp 7KB 7KB [ 2380.162193] cifs_small_rq 15KB 16KB [ 2380.167574] cifs_request 67KB 67KB [ 2380.174684] cifs_mpx_ids 0KB 7KB [ 2380.183656] nfs_commit_data 3KB 14KB [ 2380.191671] nfs_write_data 34KB 44KB [ 2380.197404] ext4_system_zone 1KB 7KB [ 2380.202892] bio-1 1KB 7KB [ 2380.215168] pid_namespace 2KB 11KB [ 2380.226896] rpc_buffers 17KB 25KB [ 2380.234913] rpc_tasks 2KB 7KB [ 2380.240353] UNIX 1048KB 1057KB [ 2380.245719] tcp_bind_bucket 1KB 4KB [ 2380.258391] ip_fib_trie 30KB 47KB [ 2380.263766] ip_fib_alias 148KB 197KB [ 2380.270972] ip_dst_cache 8KB 16KB [ 2380.276331] RAW 54KB 67KB [ 2380.283588] UDP 43KB 54KB [ 2380.292731] TCP 8KB 16KB [ 2380.303473] hugetlbfs_inode_cache 3KB 15KB [ 2380.311072] fscache_cookie_jar 1KB 11KB [ 2380.316511] eventpoll_pwq 21KB 47KB [ 2380.325570] eventpoll_epi 39KB 59KB [ 2380.334663] inotify_inode_mark 19KB 55KB [ 2380.342020] request_queue 199KB 199KB [ 2380.347376] blkdev_requests 1KB 3KB [ 2380.355532] blkdev_ioc 19KB 27KB [ 2380.372261] bio-0 652KB 652KB [ 2380.377651] biovec-max 1419KB 1460KB [ 2380.386656] biovec-64 597KB 598KB [ 2380.395691] biovec-16 61KB 63KB [ 2380.405838] bio_integrity_payload 1KB 8KB [ 2380.412898] khugepaged_mm_slot 10KB 42KB [ 2380.419638] uid_cache 0KB 4KB [ 2380.425008] dmaengine-unmap-2 0KB 3KB [ 2380.434861] skbuff_fclone_cache 87KB 311KB [ 2380.444072] skbuff_head_cache 5871KB 5872KB [ 2380.453096] configfs_dir_cache 3KB 7KB [ 2380.462376] file_lock_cache 80KB 198KB [ 2380.467754] file_lock_ctx 9KB 11KB [ 2380.476833] fsnotify_mark_connector 9KB 31KB [ 2380.484557] net_namespace 70KB 70KB [ 2380.491253] shmem_inode_cache 8219KB 8493KB [ 2380.496623] task_delay_info 237KB 395KB [ 2380.503017] taskstats 73KB 241KB [ 2380.511989] proc_dir_entry 824KB 832KB [ 2380.517357] pde_opener 11KB 34KB [ 2380.524556] seq_file 235KB 334KB [ 2380.531435] sigqueue 36KB 39KB [ 2380.536813] kernfs_node_cache 18229KB 18246KB [ 2380.551736] mnt_cache 207KB 216KB [ 2380.557113] filp 6850KB 7125KB [ 2380.564336] names_cache 126484KB 126522KB [ 2380.573412] iint_cache 26KB 51KB [ 2380.582534] key_jar 4KB 7KB [ 2380.587899] uts_namespace 3KB 7KB [ 2380.595101] nsproxy 2KB 7KB [ 2380.605877] vm_area_struct 3242KB 5019KB [ 2380.614904] mm_struct 620KB 1124KB [ 2380.621272] fs_cache 207KB 328KB [ 2380.626645] files_cache 774KB 903KB [ 2380.641735] signal_cache 1503KB 1847KB [ 2380.647115] sighand_cache 534KB 645KB [ 2380.654331] task_struct 8054KB 8124KB [ 2380.663330] cred_jar 1697KB 2264KB [ 2380.672465] anon_vma_chain 1011KB 1834KB [ 2380.677836] anon_vma 149KB 350KB [ 2380.685026] pid 109KB 216KB [ 2380.694043] Acpi-Operand 156KB 198KB [ 2380.704973] Acpi-ParseExt 8KB 11KB [ 2380.712219] Acpi-Parse 41KB 47KB [ 2380.717573] Acpi-State 52KB 63KB [ 2380.726364] Acpi-Namespace 21KB 23KB [ 2380.740629] numa_policy 0KB 3KB [ 2380.745998] debug_objects_cache 1930KB 2403KB [ 2380.760340] trace_event_file 297KB 298KB [ 2380.765735] ftrace_event_field 398KB 401KB [ 2380.782214] pool_workqueue 135KB 148KB [ 2380.787598] page->ptl 563KB 1363KB [ 2380.796607] kmalloc-2097152 2050KB 2050KB [ 2380.802649] kmalloc-524288 2056KB 2056KB [ 2380.808024] kmalloc-262144 1290KB 1290KB [ 2380.820665] kmalloc-131072 650KB 650KB [ 2380.826040] kmalloc-65536 2376KB 2442KB [ 2380.835176] kmalloc-32768 1980KB 1980KB [ 2380.844296] kmalloc-16384 1204KB 1237KB [ 2380.853479] kmalloc-8192 4974KB 5016KB [ 2380.862643] kmalloc-4096 24560KB 24599KB [ 2380.868010] kmalloc-2048 15076KB 15440KB [ 2380.877052] kmalloc-1024 9770KB 9772KB [ 2380.885707] kmalloc-512 12335KB 12337KB [ 2380.896874] kmalloc-256 5361KB 5827KB [ 2380.906196] kmalloc-128 1183KB 1523KB [ 2380.923921] kmalloc-96 3424KB 4552KB [ 2380.929390] kmalloc-64 2822KB 4332KB [ 2380.934751] kmalloc-32 1890KB 2579KB [ 2380.944327] kmalloc-192 1903KB 2588KB [ 2380.949801] kmem_cache 177KB 180KB [ 2380.955164] Out of memory (oom_kill_allocating_task): Kill process 10084 (systemd-journal) score 0 or sacrifice child [ 2380.966693] Killed process 10084 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:0kB, shmem-rss:1292kB [ 2380.987175] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2381.020376] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2381.025181] CPU: 1 PID: 8077 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 2381.032626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2381.041980] Call Trace: [ 2381.044578] dump_stack+0x1fc/0x2ef [ 2381.048211] dump_header+0x15d/0xc3f [ 2381.051928] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2381.057031] ? ___ratelimit+0x319/0x590 [ 2381.061016] oom_kill_process.cold+0x10/0x692 [ 2381.065512] ? check_preemption_disabled+0x41/0x280 [ 2381.070526] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2381.075789] out_of_memory+0x1072/0x1390 [ 2381.079842] ? oom_killer_disable+0x270/0x270 [ 2381.084321] ? mutex_trylock+0x15f/0x1a0 [ 2381.088368] __alloc_pages_nodemask+0x23a2/0x2890 [ 2381.093244] ? find_get_entry+0x4cd/0x8a0 [ 2381.097382] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2381.102217] alloc_pages_current+0x193/0x2a0 [ 2381.106609] filemap_fault+0x146e/0x2180 [ 2381.110682] ext4_filemap_fault+0x84/0xb0 [ 2381.114814] __do_fault+0x10b/0x4b0 [ 2381.118423] __handle_mm_fault+0x273b/0x41c0 [ 2381.122819] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2381.127903] ? vm_insert_page+0x9c0/0x9c0 [ 2381.132041] ? check_preemption_disabled+0x41/0x280 [ 2381.137043] handle_mm_fault+0x436/0xb10 [ 2381.141089] __do_page_fault+0x68e/0xd60 [ 2381.145131] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2381.150126] ? spurious_fault+0x840/0x840 [ 2381.154258] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2381.159083] ? page_fault+0x8/0x30 [ 2381.162605] page_fault+0x1e/0x30 [ 2381.166039] RIP: 0033:0x44227a [ 2381.169215] Code: Bad RIP value. [ 2381.172562] RSP: 002b:000000c00005ff30 EFLAGS: 00010206 [ 2381.177914] RAX: 0000000001f4f1d8 RBX: 000000c000050000 RCX: 000000000000003d [ 2381.185177] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000c00005fedc [ 2381.192450] RBP: 000000c00005ff88 R08: 00007ffe349f9000 R09: 00000261919ac71b [ 2381.199710] R10: 000dfb37323284a7 R11: 0000000000000001 R12: 000000c00005ff10 [ 2381.206964] R13: 000000c00051d800 R14: 000000c0000004e0 R15: 00007f615969ae9c [ 2381.228875] Mem-Info: [ 2381.231339] active_anon:15933 inactive_anon:12880 isolated_anon:0 [ 2381.231339] active_file:12 inactive_file:13 isolated_file:0 [ 2381.231339] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2381.231339] slab_reclaimable:15061 slab_unreclaimable:116528 [ 2381.231339] mapped:21701 shmem:13329 pagetables:536 bounce:0 [ 2381.231339] free:25005 free_pcp:108 free_cma:0 [ 2381.281683] Node 0 active_anon:62928kB inactive_anon:18940kB active_file:32kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:86784kB dirty:0kB writeback:0kB shmem:20544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2381.316719] Node 1 active_anon:804kB inactive_anon:32580kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:20kB dirty:0kB writeback:0kB shmem:32772kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2381.354861] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2381.384670] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2381.389761] Node 0 DMA32 free:35452kB min:35996kB low:44992kB high:53988kB active_anon:62920kB inactive_anon:18940kB active_file:64kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7616kB pagetables:1972kB bounce:0kB free_pcp:156kB local_pcp:156kB free_cma:0kB [ 2381.421265] lowmem_reserve[]: 0 0 1 1 1 [ 2381.425280] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2381.456540] lowmem_reserve[]: 0 0 0 0 0 [ 2381.467654] Node 1 Normal free:53644kB min:53876kB low:67344kB high:80812kB active_anon:740kB inactive_anon:32576kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:160kB pagetables:76kB bounce:0kB free_pcp:252kB local_pcp:252kB free_cma:0kB [ 2381.503338] lowmem_reserve[]: 0 0 0 0 0 [ 2381.507355] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10968kB [ 2381.522338] Node 0 DMA32: 1797*4kB (ME) 973*8kB (ME) 308*16kB (UME) 38*32kB (UME) 2*64kB (UM) 1*128kB (U) 0*256kB 1*512kB (U) 1*1024kB (U) 2*2048kB (M) 2*4096kB (U) = 35196kB [ 2381.546742] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2381.570407] Node 1 Normal: 93*4kB (UME) 79*8kB (ME) 64*16kB (M) 43*32kB (UME) 37*64kB (UME) 24*128kB (UME) 17*256kB (M) 5*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 8*4096kB (UM) = 53644kB [ 2381.595101] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2381.604877] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2381.617154] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2381.627729] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2381.640120] 13354 total pagecache pages [ 2381.644110] 0 pages in swap cache [ 2381.647557] Swap cache stats: add 0, delete 0, find 0/0 [ 2381.652970] Free swap = 0kB [ 2381.655976] Total swap = 0kB [ 2381.660959] 2097051 pages RAM [ 2381.664057] 0 pages HighMem/MovableOnly [ 2381.668049] 369649 pages reserved [ 2381.671493] 0 pages cma reserved [ 2381.674854] Unreclaimable slab info: [ 2381.682162] Name Used Total [ 2381.687712] pid_2 55KB 220KB [ 2381.693182] batadv_tt_change_cache 1KB 3KB [ 2381.701637] batadv_tl_cache 6KB 12KB [ 2381.707023] TIPC 114KB 120KB [ 2381.721598] SCTPv6 18KB 24KB [ 2381.728815] DCCPv6 17KB 30KB [ 2381.734199] DCCP 16KB 35KB [ 2381.742687] L2TP/IP 171KB 180KB [ 2381.754745] RXRPC 14KB 19KB [ 2381.761953] rxrpc_call_jar 101KB 102KB [ 2381.767305] bridge_fdb_cache 12KB 19KB [ 2381.777637] fib6_nodes 209KB 280KB [ 2381.786863] ip6_dst_cache 376KB 397KB [ 2381.794804] RAWv6 91KB 101KB [ 2381.803876] UDPv6 33KB 41KB [ 2381.814222] TCPv6 24KB 36KB [ 2381.821759] nf_conntrack 6KB 7KB [ 2381.827162] t10_alua_lu_gp_cache 0KB 3KB [ 2381.834407] sd_ext_cdb 0KB 7KB [ 2381.842908] scsi_sense_cache 1056KB 1060KB [ 2381.852900] virtio_scsi_cmd 16KB 16KB [ 2381.861950] sgpool-128 8KB 8KB [ 2381.867308] sgpool-64 4KB 12KB [ 2381.874363] sgpool-32 2KB 15KB [ 2381.881302] sgpool-16 1KB 7KB [ 2381.886667] sgpool-8 0KB 7KB [ 2381.896042] mqueue_inode_cache 13KB 30KB [ 2381.903342] bio_post_read_ctx 14KB 15KB [ 2381.913750] bio-2 14KB 15KB [ 2381.922743] jfs_mp 7KB 7KB [ 2381.931587] cifs_small_rq 15KB 16KB [ 2381.936956] cifs_request 67KB 67KB [ 2381.952995] cifs_mpx_ids 0KB 7KB [ 2381.961768] nfs_commit_data 3KB 14KB [ 2381.967148] nfs_write_data 34KB 44KB [ 2381.985707] ext4_system_zone 1KB 7KB [ 2381.995488] bio-1 1KB 7KB [ 2382.006236] pid_namespace 2KB 11KB [ 2382.018444] rpc_buffers 17KB 25KB [ 2382.023833] rpc_tasks 2KB 7KB [ 2382.032810] UNIX 1048KB 1057KB [ 2382.045422] tcp_bind_bucket 1KB 4KB [ 2382.056907] ip_fib_trie 30KB 47KB [ 2382.065946] ip_fib_alias 148KB 197KB [ 2382.074919] ip_dst_cache 8KB 16KB [ 2382.083937] RAW 54KB 67KB [ 2382.091161] UDP 43KB 54KB [ 2382.096532] TCP 8KB 16KB [ 2382.107294] hugetlbfs_inode_cache 3KB 15KB [ 2382.117475] fscache_cookie_jar 1KB 11KB [ 2382.124641] eventpoll_pwq 21KB 47KB [ 2382.133559] eventpoll_epi 39KB 59KB [ 2382.143623] inotify_inode_mark 19KB 55KB [ 2382.152806] request_queue 199KB 199KB [ 2382.172759] blkdev_requests 1KB 3KB [ 2382.178181] blkdev_ioc 19KB 27KB [ 2382.183527] bio-0 652KB 652KB [ 2382.203518] biovec-max 1419KB 1460KB [ 2382.208958] biovec-64 597KB 598KB [ 2382.214314] biovec-16 61KB 63KB [ 2382.233508] bio_integrity_payload 1KB 8KB [ 2382.245444] khugepaged_mm_slot 10KB 42KB [ 2382.253474] uid_cache 0KB 4KB [ 2382.271233] dmaengine-unmap-2 0KB 3KB [ 2382.276636] skbuff_fclone_cache 87KB 311KB [ 2382.282404] skbuff_head_cache 6017KB 6018KB [ 2382.287760] configfs_dir_cache 3KB 7KB [ 2382.295916] file_lock_cache 80KB 198KB [ 2382.307980] file_lock_ctx 9KB 11KB [ 2382.313357] fsnotify_mark_connector 9KB 31KB [ 2382.326692] net_namespace 70KB 70KB [ 2382.332104] shmem_inode_cache 8219KB 8493KB [ 2382.337463] task_delay_info 237KB 395KB [ 2382.348229] taskstats 73KB 241KB [ 2382.353978] proc_dir_entry 824KB 832KB [ 2382.359412] pde_opener 11KB 34KB [ 2382.364774] seq_file 235KB 334KB [ 2382.373829] sigqueue 36KB 39KB [ 2382.379273] kernfs_node_cache 18229KB 18246KB [ 2382.384631] mnt_cache 207KB 216KB [ 2382.393753] filp 6850KB 7125KB [ 2382.399195] names_cache 126501KB 126522KB [ 2382.404556] iint_cache 26KB 51KB [ 2382.413529] key_jar 4KB 7KB [ 2382.418933] uts_namespace 3KB 7KB [ 2382.424291] nsproxy 2KB 7KB [ 2382.433383] vm_area_struct 3242KB 5019KB [ 2382.438791] mm_struct 620KB 1124KB [ 2382.446539] fs_cache 207KB 328KB [ 2382.455647] files_cache 774KB 903KB [ 2382.461085] signal_cache 1503KB 1847KB [ 2382.466448] sighand_cache 534KB 645KB [ 2382.474470] task_struct 8080KB 8124KB [ 2382.483439] cred_jar 1697KB 2264KB [ 2382.502567] anon_vma_chain 1011KB 1834KB [ 2382.515839] anon_vma 149KB 350KB [ 2382.524947] pid 111KB 216KB [ 2382.530366] Acpi-Operand 156KB 198KB [ 2382.535726] Acpi-ParseExt 8KB 11KB [ 2382.552912] Acpi-Parse 41KB 47KB [ 2382.563663] Acpi-State 52KB 63KB [ 2382.572733] Acpi-Namespace 21KB 23KB [ 2382.592682] numa_policy 0KB 3KB [ 2382.598114] debug_objects_cache 1930KB 2403KB [ 2382.603632] trace_event_file 297KB 298KB [ 2382.612736] ftrace_event_field 398KB 401KB [ 2382.622748] pool_workqueue 135KB 148KB [ 2382.629277] page->ptl 563KB 1363KB [ 2382.634664] kmalloc-2097152 2050KB 2050KB [ 2382.651797] kmalloc-524288 2056KB 2056KB [ 2382.657421] kmalloc-262144 1290KB 1290KB [ 2382.666404] kmalloc-131072 650KB 650KB [ 2382.672471] kmalloc-65536 2376KB 2442KB [ 2382.685690] kmalloc-32768 1980KB 1980KB [ 2382.692504] kmalloc-16384 1204KB 1237KB [ 2382.697962] kmalloc-8192 4974KB 5016KB [ 2382.703324] kmalloc-4096 24577KB 24599KB [ 2382.717129] kmalloc-2048 15076KB 15440KB [ 2382.726895] kmalloc-1024 9810KB 9812KB [ 2382.737584] kmalloc-512 12613KB 12615KB [ 2382.748034] kmalloc-256 5361KB 5827KB [ 2382.755811] kmalloc-128 1183KB 1523KB [ 2382.765002] kmalloc-96 3446KB 4552KB [ 2382.775751] kmalloc-64 2822KB 4332KB [ 2382.784863] kmalloc-32 1890KB 2579KB [ 2382.803205] kmalloc-192 1903KB 2588KB [ 2382.812191] kmem_cache 177KB 180KB [ 2382.817553] Out of memory (oom_kill_allocating_task): Kill process 8077 (syz-fuzzer) score 0 or sacrifice child [ 2382.838913] Killed process 9505 (syz-executor.4) total-vm:48512kB, anon-rss:424kB, file-rss:4kB, shmem-rss:0kB [ 2382.849468] oom_reaper: reaped process 9505 (syz-executor.4), now anon-rss:0kB, file-rss:14336kB, shmem-rss:0kB [ 2382.852407] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2382.889545] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2382.894356] CPU: 0 PID: 8077 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 2382.901797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2382.911158] Call Trace: [ 2382.913733] dump_stack+0x1fc/0x2ef [ 2382.917344] dump_header+0x15d/0xc3f [ 2382.921040] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2382.926122] ? ___ratelimit+0x319/0x590 [ 2382.930080] oom_kill_process.cold+0x10/0x692 [ 2382.934563] ? check_preemption_disabled+0x41/0x280 [ 2382.939565] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2382.944825] out_of_memory+0x1072/0x1390 [ 2382.948871] ? oom_killer_disable+0x270/0x270 [ 2382.953351] ? mutex_trylock+0x15f/0x1a0 [ 2382.957414] __alloc_pages_nodemask+0x23a2/0x2890 [ 2382.962251] ? find_get_entry+0x4cd/0x8a0 [ 2382.966391] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2382.971228] alloc_pages_current+0x193/0x2a0 [ 2382.975620] filemap_fault+0x146e/0x2180 [ 2382.979670] ext4_filemap_fault+0x84/0xb0 [ 2382.983822] __do_fault+0x10b/0x4b0 [ 2382.987441] __handle_mm_fault+0x273b/0x41c0 [ 2382.991895] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2382.996988] ? vm_insert_page+0x9c0/0x9c0 [ 2383.001127] ? check_preemption_disabled+0x41/0x280 [ 2383.006126] handle_mm_fault+0x436/0xb10 [ 2383.010171] __do_page_fault+0x68e/0xd60 [ 2383.014219] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2383.019216] ? spurious_fault+0x840/0x840 [ 2383.023349] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2383.028179] ? page_fault+0x8/0x30 [ 2383.031719] page_fault+0x1e/0x30 [ 2383.035155] RIP: 0033:0x44227a [ 2383.038334] Code: Bad RIP value. [ 2383.041689] RSP: 002b:000000c00005ff30 EFLAGS: 00010206 [ 2383.047033] RAX: 0000000001f4f1d8 RBX: 000000c000050000 RCX: 000000000000003d [ 2383.054281] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000c00005fedc [ 2383.061530] RBP: 000000c00005ff88 R08: 00007ffe349f9000 R09: 00000261919ac71b [ 2383.068777] R10: 000dfb37323284a7 R11: 0000000000000001 R12: 000000c00005ff10 [ 2383.076030] R13: 000000c00051d800 R14: 000000c0000004e0 R15: 00007f615969ae9c [ 2383.106345] Mem-Info: [ 2383.109513] active_anon:15784 inactive_anon:12879 isolated_anon:0 [ 2383.109513] active_file:12 inactive_file:203 isolated_file:0 [ 2383.109513] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2383.109513] slab_reclaimable:15024 slab_unreclaimable:115927 [ 2383.109513] mapped:18144 shmem:13329 pagetables:485 bounce:0 [ 2383.109513] free:26511 free_pcp:183 free_cma:0 [ 2383.143328] Node 0 active_anon:62396kB inactive_anon:18940kB active_file:432kB inactive_file:568kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:72776kB dirty:0kB writeback:0kB shmem:20544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2383.223585] Node 1 active_anon:740kB inactive_anon:32576kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:32772kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2383.255397] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2383.287377] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2383.292608] Node 0 DMA32 free:35752kB min:35996kB low:44992kB high:53988kB active_anon:62396kB inactive_anon:18940kB active_file:332kB inactive_file:220kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7584kB pagetables:1864kB bounce:0kB free_pcp:364kB local_pcp:0kB free_cma:0kB [ 2383.357877] lowmem_reserve[]: 0 0 1 1 1 [ 2383.361903] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2383.617769] lowmem_reserve[]: 0 0 0 0 0 [ 2383.621789] Node 1 Normal free:53844kB min:53876kB low:67344kB high:80812kB active_anon:740kB inactive_anon:32576kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:160kB pagetables:76kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2383.843622] lowmem_reserve[]: 0 0 0 0 0 [ 2383.847639] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10968kB [ 2383.907779] Node 0 DMA32: 1835*4kB (UME) 1013*8kB (UME) 317*16kB (UME) 41*32kB (ME) 2*64kB (UM) 0*128kB 2*256kB (U) 0*512kB 1*1024kB (U) 2*2048kB (M) 2*4096kB (U) = 35780kB [ 2383.937758] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2383.977782] Node 1 Normal: 31*4kB (UME) 78*8kB (UME) 65*16kB (UM) 41*32kB (ME) 36*64kB (UME) 25*128kB (UME) 18*256kB (UM) 5*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 8*4096kB (UM) = 53660kB [ 2384.025728] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2384.046627] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2384.055271] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2384.064144] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2384.072728] 13364 total pagecache pages [ 2384.076681] 0 pages in swap cache [ 2384.080171] Swap cache stats: add 0, delete 0, find 0/0 [ 2384.085526] Free swap = 0kB [ 2384.088562] Total swap = 0kB [ 2384.091571] 2097051 pages RAM [ 2384.094652] 0 pages HighMem/MovableOnly [ 2384.098654] 369649 pages reserved [ 2384.102093] 0 pages cma reserved [ 2384.105439] Unreclaimable slab info: [ 2384.109156] Name Used Total [ 2384.114706] pid_2 52KB 220KB [ 2384.120178] batadv_tt_change_cache 1KB 3KB [ 2384.125971] batadv_tl_cache 6KB 12KB [ 2384.131361] TIPC 114KB 120KB [ 2384.136712] SCTPv6 18KB 24KB [ 2384.143315] DCCPv6 17KB 30KB [ 2384.148756] DCCP 16KB 35KB [ 2384.154209] L2TP/IP 171KB 180KB [ 2384.160376] RXRPC 14KB 19KB [ 2384.165733] rxrpc_call_jar 101KB 102KB [ 2384.171123] bridge_fdb_cache 12KB 19KB [ 2384.176473] fib6_nodes 209KB 280KB [ 2384.186362] ip6_dst_cache 376KB 397KB [ 2384.191811] RAWv6 91KB 101KB [ 2384.197183] UDPv6 33KB 41KB [ 2384.202629] TCPv6 24KB 30KB [ 2384.208039] nf_conntrack 6KB 7KB [ 2384.213435] t10_alua_lu_gp_cache 0KB 3KB [ 2384.219106] sd_ext_cdb 0KB 7KB [ 2384.224477] scsi_sense_cache 1056KB 1060KB [ 2384.229845] virtio_scsi_cmd 16KB 16KB [ 2384.235219] sgpool-128 8KB 8KB [ 2384.240622] sgpool-64 4KB 12KB [ 2384.245976] sgpool-32 2KB 15KB [ 2384.251419] sgpool-16 1KB 7KB [ 2384.256778] sgpool-8 0KB 7KB [ 2384.262985] mqueue_inode_cache 13KB 30KB [ 2384.268669] bio_post_read_ctx 14KB 15KB [ 2384.274064] bio-2 14KB 15KB [ 2384.282528] jfs_mp 7KB 7KB [ 2384.288364] cifs_small_rq 15KB 16KB [ 2384.293723] cifs_request 67KB 67KB [ 2384.306480] cifs_mpx_ids 0KB 7KB [ 2384.311951] nfs_commit_data 3KB 14KB [ 2384.317314] nfs_write_data 34KB 44KB [ 2384.324278] ext4_system_zone 1KB 7KB [ 2384.329758] bio-1 1KB 7KB [ 2384.335105] pid_namespace 2KB 11KB [ 2384.340594] rpc_buffers 17KB 25KB [ 2384.345938] rpc_tasks 2KB 7KB [ 2384.351335] UNIX 1048KB 1057KB [ 2384.356682] tcp_bind_bucket 1KB 4KB [ 2384.362061] ip_fib_trie 30KB 47KB [ 2384.367405] ip_fib_alias 148KB 197KB [ 2384.372787] ip_dst_cache 8KB 16KB [ 2384.378867] RAW 54KB 67KB [ 2384.384226] UDP 43KB 54KB [ 2384.391298] TCP 8KB 11KB [ 2384.396664] hugetlbfs_inode_cache 3KB 15KB [ 2384.402769] fscache_cookie_jar 1KB 11KB [ 2384.408366] eventpoll_pwq 20KB 47KB [ 2384.413717] eventpoll_epi 38KB 59KB [ 2384.419489] inotify_inode_mark 18KB 55KB [ 2384.424932] request_queue 199KB 199KB [ 2384.430350] blkdev_requests 1KB 3KB [ 2384.435702] blkdev_ioc 30KB 30KB [ 2384.441117] bio-0 675KB 675KB [ 2384.446463] biovec-max 1419KB 1460KB [ 2384.451965] biovec-64 622KB 622KB [ 2384.457318] biovec-16 63KB 63KB [ 2384.462690] bio_integrity_payload 1KB 8KB [ 2384.468431] khugepaged_mm_slot 9KB 42KB [ 2384.473886] uid_cache 0KB 4KB [ 2384.479294] dmaengine-unmap-2 0KB 3KB [ 2384.484651] skbuff_fclone_cache 81KB 300KB [ 2384.490243] skbuff_head_cache 6194KB 6195KB [ 2384.497123] configfs_dir_cache 3KB 7KB [ 2384.503195] file_lock_cache 74KB 194KB [ 2384.508801] file_lock_ctx 9KB 11KB [ 2384.514151] fsnotify_mark_connector 9KB 31KB [ 2384.525240] net_namespace 70KB 70KB [ 2384.531805] shmem_inode_cache 8191KB 8489KB [ 2384.537153] task_delay_info 234KB 395KB [ 2384.544334] taskstats 65KB 225KB [ 2384.550585] proc_dir_entry 824KB 832KB [ 2384.555929] pde_opener 11KB 34KB [ 2384.562952] seq_file 232KB 334KB [ 2384.569159] sigqueue 36KB 39KB [ 2384.574505] kernfs_node_cache 18229KB 18246KB [ 2384.581535] mnt_cache 207KB 216KB [ 2384.586880] filp 6850KB 7125KB [ 2384.593091] names_cache 125005KB 125043KB [ 2384.598901] iint_cache 26KB 51KB [ 2384.604262] key_jar 4KB 7KB [ 2384.609687] uts_namespace 3KB 7KB [ 2384.615036] nsproxy 2KB 7KB [ 2384.620614] vm_area_struct 3204KB 5019KB [ 2384.625980] mm_struct 572KB 1105KB [ 2384.631416] fs_cache 207KB 328KB [ 2384.636779] files_cache 765KB 903KB [ 2384.643116] signal_cache 1496KB 1847KB [ 2384.648514] sighand_cache 555KB 638KB [ 2384.653871] task_struct 7991KB 8061KB [ 2384.659598] cred_jar 1712KB 2264KB [ 2384.664954] anon_vma_chain 997KB 1834KB [ 2384.670329] anon_vma 117KB 350KB [ 2384.675671] pid 111KB 216KB [ 2384.681050] Acpi-Operand 156KB 198KB [ 2384.686395] Acpi-ParseExt 8KB 11KB [ 2384.691767] Acpi-Parse 41KB 47KB [ 2384.698823] Acpi-State 52KB 63KB [ 2384.704194] Acpi-Namespace 21KB 23KB [ 2384.709580] numa_policy 0KB 3KB [ 2384.714924] debug_objects_cache 1930KB 2403KB [ 2384.720492] trace_event_file 297KB 298KB [ 2384.725842] ftrace_event_field 398KB 401KB [ 2384.731324] pool_workqueue 135KB 148KB [ 2384.736688] page->ptl 552KB 1363KB [ 2384.742145] kmalloc-2097152 2050KB 2050KB [ 2384.747497] kmalloc-524288 2056KB 2056KB [ 2384.752991] kmalloc-262144 1290KB 1290KB [ 2384.759264] kmalloc-131072 650KB 650KB [ 2384.764638] kmalloc-65536 2376KB 2442KB [ 2384.773324] kmalloc-32768 1980KB 1980KB [ 2384.782417] kmalloc-16384 1204KB 1237KB [ 2384.791111] kmalloc-8192 4974KB 5016KB [ 2384.796482] kmalloc-4096 24501KB 24522KB [ 2384.821111] kmalloc-2048 15013KB 15440KB [ 2384.826502] kmalloc-1024 9857KB 9859KB [ 2384.832781] kmalloc-512 12926KB 12926KB [ 2384.841890] kmalloc-256 5361KB 5827KB [ 2384.847265] kmalloc-128 1176KB 1523KB [ 2384.852891] kmalloc-96 3469KB 4552KB [ 2384.861272] kmalloc-64 2810KB 4332KB [ 2384.866668] kmalloc-32 1890KB 2579KB [ 2384.890120] kmalloc-192 1906KB 2588KB [ 2384.895514] kmem_cache 177KB 180KB [ 2384.913139] Out of memory (oom_kill_allocating_task): Kill process 8077 (syz-fuzzer) score 0 or sacrifice child [ 2384.951508] Killed process 24327 (syz-executor.3) total-vm:48512kB, anon-rss:428kB, file-rss:0kB, shmem-rss:0kB [ 2384.978675] oom_reaper: reaped process 24327 (syz-executor.3), now anon-rss:0kB, file-rss:14336kB, shmem-rss:0kB [ 2384.990977] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2385.005927] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2385.044654] CPU: 1 PID: 8109 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 2385.052137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2385.061495] Call Trace: [ 2385.064089] dump_stack+0x1fc/0x2ef [ 2385.067730] dump_header+0x15d/0xc3f [ 2385.071450] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2385.076554] ? ___ratelimit+0x319/0x590 [ 2385.080534] oom_kill_process.cold+0x10/0x692 [ 2385.085030] ? check_preemption_disabled+0x41/0x280 [ 2385.090059] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2385.095336] out_of_memory+0x1072/0x1390 [ 2385.099408] ? oom_killer_disable+0x270/0x270 [ 2385.103910] ? mutex_trylock+0x15f/0x1a0 [ 2385.107978] __alloc_pages_nodemask+0x23a2/0x2890 [ 2385.112829] ? find_get_entry+0x4cd/0x8a0 [ 2385.116984] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2385.121850] alloc_pages_current+0x193/0x2a0 [ 2385.126259] filemap_fault+0x146e/0x2180 [ 2385.130333] ext4_filemap_fault+0x84/0xb0 [ 2385.134484] __do_fault+0x10b/0x4b0 [ 2385.138114] __handle_mm_fault+0x273b/0x41c0 [ 2385.142524] ? do_signal+0x49d/0x1670 [ 2385.146328] ? vm_insert_page+0x9c0/0x9c0 [ 2385.150491] ? check_preemption_disabled+0x41/0x280 [ 2385.155519] handle_mm_fault+0x436/0xb10 [ 2385.159595] __do_page_fault+0x68e/0xd60 [ 2385.163671] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2385.168693] ? spurious_fault+0x840/0x840 [ 2385.172840] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2385.177688] ? page_fault+0x8/0x30 [ 2385.181230] page_fault+0x1e/0x30 [ 2385.184686] RIP: 0033:0x435118 [ 2385.187878] Code: Bad RIP value. [ 2385.191234] RSP: 002b:000000c000b0b908 EFLAGS: 00010202 [ 2385.196589] RAX: 0000000000f769c8 RBX: 000000000117c760 RCX: 000000000117c760 [ 2385.203852] RDX: 0000000000197e38 RSI: 0000000000f0e340 RDI: 000000000000386f [ 2385.211116] RBP: 000000c000b0b910 R08: 0000000000f0e340 R09: 00000000000007f7 [ 2385.218381] R10: 00000000004ae0c0 R11: 0000000000000202 R12: 000000c000b0b9a0 [ 2385.225646] R13: 0000000000000000 R14: 000000c0006ef380 R15: 0000000000000050 [ 2385.257642] Mem-Info: [ 2385.260115] active_anon:15684 inactive_anon:12879 isolated_anon:0 [ 2385.260115] active_file:117 inactive_file:152 isolated_file:0 [ 2385.260115] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2385.260115] slab_reclaimable:15015 slab_unreclaimable:116031 [ 2385.260115] mapped:14661 shmem:13329 pagetables:448 bounce:0 [ 2385.260115] free:27344 free_pcp:547 free_cma:0 [ 2385.317985] Node 0 active_anon:61996kB inactive_anon:18940kB active_file:636kB inactive_file:780kB unevictable:0kB isolated(anon):0kB isolated(file):100kB mapped:59244kB dirty:0kB writeback:0kB shmem:20544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2385.349647] Node 1 active_anon:740kB inactive_anon:32576kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:32772kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2385.376960] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2385.403362] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2385.408458] Node 0 DMA32 free:36016kB min:35996kB low:44992kB high:53988kB active_anon:61996kB inactive_anon:18940kB active_file:0kB inactive_file:280kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7552kB pagetables:1716kB bounce:0kB free_pcp:1944kB local_pcp:548kB free_cma:0kB [ 2385.479513] lowmem_reserve[]: 0 0 1 1 1 [ 2385.484848] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2385.513758] lowmem_reserve[]: 0 0 0 0 0 [ 2385.518518] Node 1 Normal free:53656kB min:53876kB low:67344kB high:80812kB active_anon:740kB inactive_anon:32576kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:160kB pagetables:76kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2385.558636] lowmem_reserve[]: 0 0 0 0 0 [ 2385.562883] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10968kB [ 2385.576434] Node 0 DMA32: 1418*4kB (ME) 1239*8kB (UME) 325*16kB (UME) 55*32kB (UME) 7*64kB (UM) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 2*2048kB (M) 2*4096kB (U) = 36176kB [ 2385.606839] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2385.620025] Node 1 Normal: 91*4kB (UME) 76*8kB (ME) 63*16kB (M) 41*32kB (UME) 35*64kB (UME) 24*128kB (UME) 18*256kB (M) 5*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 8*4096kB (UM) = 53660kB [ 2385.637660] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2385.647269] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2385.656730] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2385.666608] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2385.682443] 13584 total pagecache pages [ 2385.696741] 0 pages in swap cache [ 2385.700281] Swap cache stats: add 0, delete 0, find 0/0 [ 2385.705638] Free swap = 0kB [ 2385.708714] Total swap = 0kB [ 2385.711725] 2097051 pages RAM [ 2385.716769] 0 pages HighMem/MovableOnly [ 2385.738343] 369649 pages reserved [ 2385.748591] 0 pages cma reserved [ 2385.756182] Unreclaimable slab info: [ 2385.760011] Name Used Total [ 2385.765545] pid_2 50KB 220KB [ 2385.776672] batadv_tt_change_cache 1KB 3KB [ 2385.782583] batadv_tl_cache 6KB 12KB [ 2385.790877] TIPC 114KB 120KB [ 2385.796258] SCTPv6 18KB 24KB [ 2385.813452] DCCPv6 17KB 30KB [ 2385.839220] DCCP 16KB 35KB [ 2385.844629] L2TP/IP 171KB 180KB [ 2385.896483] RXRPC 14KB 19KB [ 2385.938849] rxrpc_call_jar 101KB 102KB [ 2385.944248] bridge_fdb_cache 12KB 19KB [ 2386.010450] fib6_nodes 209KB 280KB [ 2386.015847] ip6_dst_cache 385KB 397KB [ 2386.041813] RAWv6 91KB 101KB [ 2386.047196] UDPv6 33KB 41KB [ 2386.086795] TCPv6 24KB 30KB [ 2386.094088] nf_conntrack 6KB 7KB [ 2386.117300] t10_alua_lu_gp_cache 0KB 3KB [ 2386.123030] sd_ext_cdb 0KB 7KB [ 2386.132705] scsi_sense_cache 1056KB 1060KB [ 2386.145008] virtio_scsi_cmd 16KB 16KB [ 2386.153907] sgpool-128 8KB 8KB [ 2386.166490] sgpool-64 4KB 12KB [ 2386.175630] sgpool-32 2KB 15KB [ 2386.191713] sgpool-16 1KB 7KB [ 2386.197095] sgpool-8 0KB 7KB [ 2386.202504] mqueue_inode_cache 13KB 30KB [ 2386.211858] bio_post_read_ctx 14KB 15KB [ 2386.217309] bio-2 14KB 15KB [ 2386.223523] jfs_mp 7KB 7KB [ 2386.254177] cifs_small_rq 15KB 16KB [ 2386.295039] cifs_request 67KB 67KB [ 2386.335185] cifs_mpx_ids 0KB 7KB [ 2386.350067] nfs_commit_data 3KB 14KB [ 2386.355453] nfs_write_data 34KB 44KB [ 2386.364337] ext4_system_zone 1KB 7KB [ 2386.376671] bio-1 1KB 7KB [ 2386.396066] pid_namespace 2KB 11KB [ 2386.402828] rpc_buffers 17KB 25KB [ 2386.409983] rpc_tasks 2KB 7KB [ 2386.415331] UNIX 1055KB 1057KB [ 2386.441757] tcp_bind_bucket 1KB 4KB [ 2386.447141] ip_fib_trie 30KB 47KB [ 2386.454273] ip_fib_alias 148KB 197KB [ 2386.464863] ip_dst_cache 8KB 16KB [ 2386.481719] RAW 54KB 67KB [ 2386.487087] UDP 43KB 54KB [ 2386.497396] TCP 8KB 11KB [ 2386.506212] hugetlbfs_inode_cache 3KB 15KB [ 2386.526556] fscache_cookie_jar 1KB 11KB [ 2386.537213] eventpoll_pwq 20KB 47KB [ 2386.544754] eventpoll_epi 38KB 59KB [ 2386.562834] inotify_inode_mark 18KB 55KB [ 2386.571799] request_queue 199KB 199KB [ 2386.577169] blkdev_requests 1KB 3KB [ 2386.597227] blkdev_ioc 30KB 30KB [ 2386.610597] bio-0 735KB 735KB [ 2386.615969] biovec-max 1419KB 1460KB [ 2386.633449] biovec-64 724KB 724KB [ 2386.644906] biovec-16 70KB 71KB [ 2386.651724] bio_integrity_payload 1KB 8KB [ 2386.669806] khugepaged_mm_slot 9KB 42KB [ 2386.675265] uid_cache 0KB 4KB [ 2386.684078] dmaengine-unmap-2 0KB 3KB [ 2386.724312] skbuff_fclone_cache 81KB 300KB [ 2386.729976] skbuff_head_cache 6396KB 6397KB [ 2386.735337] configfs_dir_cache 3KB 7KB [ 2386.746255] file_lock_cache 73KB 194KB [ 2386.751684] file_lock_ctx 9KB 11KB [ 2386.757044] fsnotify_mark_connector 8KB 31KB [ 2386.766467] net_namespace 70KB 70KB [ 2386.771910] shmem_inode_cache 8188KB 8489KB [ 2386.777272] task_delay_info 234KB 395KB [ 2386.789698] taskstats 63KB 222KB [ 2386.795073] proc_dir_entry 824KB 832KB [ 2386.803940] pde_opener 11KB 34KB [ 2386.812876] seq_file 231KB 334KB [ 2386.821882] sigqueue 39KB 39KB [ 2386.827246] kernfs_node_cache 18224KB 18246KB [ 2386.836192] mnt_cache 207KB 216KB [ 2386.845182] filp 6800KB 7125KB [ 2386.855862] names_cache 123560KB 123598KB [ 2386.868432] iint_cache 30KB 51KB [ 2386.873801] key_jar 4KB 7KB [ 2386.882769] uts_namespace 3KB 7KB [ 2386.895255] nsproxy 2KB 7KB [ 2386.904260] vm_area_struct 3190KB 5019KB [ 2386.916807] mm_struct 572KB 1105KB [ 2386.931205] fs_cache 222KB 328KB [ 2386.936578] files_cache 765KB 903KB [ 2386.943714] signal_cache 1496KB 1847KB [ 2386.966980] sighand_cache 582KB 638KB [ 2386.972486] task_struct 7941KB 8010KB [ 2386.988364] cred_jar 1712KB 2264KB [ 2386.993777] anon_vma_chain 994KB 1834KB [ 2386.999249] anon_vma 111KB 350KB [ 2387.004594] pid 113KB 216KB [ 2387.021003] Acpi-Operand 156KB 198KB [ 2387.026478] Acpi-ParseExt 8KB 11KB [ 2387.031883] Acpi-Parse 41KB 47KB [ 2387.037238] Acpi-State 52KB 63KB [ 2387.044682] Acpi-Namespace 21KB 23KB [ 2387.054064] numa_policy 0KB 3KB [ 2387.062942] debug_objects_cache 1930KB 2403KB [ 2387.084808] trace_event_file 297KB 298KB [ 2387.096251] ftrace_event_field 398KB 401KB [ 2387.106726] pool_workqueue 135KB 148KB [ 2387.130576] page->ptl 550KB 1363KB [ 2387.135979] kmalloc-2097152 2050KB 2050KB [ 2387.144459] kmalloc-524288 2056KB 2056KB [ 2387.165251] kmalloc-262144 1290KB 1290KB [ 2387.170711] kmalloc-131072 650KB 650KB [ 2387.176069] kmalloc-65536 2376KB 2442KB [ 2387.182975] kmalloc-32768 1980KB 1980KB [ 2387.191225] kmalloc-16384 1204KB 1237KB [ 2387.196595] kmalloc-8192 4974KB 5016KB [ 2387.205488] kmalloc-4096 24501KB 24522KB [ 2387.221676] kmalloc-2048 15013KB 15440KB [ 2387.227055] kmalloc-1024 9920KB 9922KB [ 2387.232476] kmalloc-512 13286KB 13286KB [ 2387.245867] kmalloc-256 5361KB 5827KB [ 2387.254585] kmalloc-128 1176KB 1523KB [ 2387.282359] kmalloc-96 3514KB 4552KB [ 2387.291438] kmalloc-64 2810KB 4332KB [ 2387.296811] kmalloc-32 1894KB 2579KB [ 2387.314776] kmalloc-192 1921KB 2588KB [ 2387.324406] kmem_cache 177KB 180KB [ 2387.329833] Out of memory (oom_kill_allocating_task): Kill process 8109 (syz-fuzzer) score 0 or sacrifice child [ 2387.346058] Killed process 28013 (syz-executor.5) total-vm:48512kB, anon-rss:424kB, file-rss:0kB, shmem-rss:0kB [ 2387.378502] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2387.396438] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2387.413397] CPU: 1 PID: 8109 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 2387.420862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2387.430213] Call Trace: [ 2387.432803] dump_stack+0x1fc/0x2ef [ 2387.436431] dump_header+0x15d/0xc3f [ 2387.440151] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2387.445253] ? ___ratelimit+0x319/0x590 [ 2387.449230] oom_kill_process.cold+0x10/0x692 [ 2387.453725] ? check_preemption_disabled+0x41/0x280 [ 2387.458751] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2387.464025] out_of_memory+0x1072/0x1390 [ 2387.468098] ? oom_killer_disable+0x270/0x270 [ 2387.472598] ? mutex_trylock+0x15f/0x1a0 [ 2387.476660] __alloc_pages_nodemask+0x23a2/0x2890 [ 2387.481510] ? find_get_entry+0x4cd/0x8a0 [ 2387.485664] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2387.490533] alloc_pages_current+0x193/0x2a0 [ 2387.494946] filemap_fault+0x146e/0x2180 [ 2387.499023] ext4_filemap_fault+0x84/0xb0 [ 2387.503164] __do_fault+0x10b/0x4b0 [ 2387.506774] __handle_mm_fault+0x273b/0x41c0 [ 2387.511175] ? do_signal+0x49d/0x1670 [ 2387.514975] ? vm_insert_page+0x9c0/0x9c0 [ 2387.519139] ? check_preemption_disabled+0x41/0x280 [ 2387.524163] handle_mm_fault+0x436/0xb10 [ 2387.528226] __do_page_fault+0x68e/0xd60 [ 2387.532292] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2387.537310] ? spurious_fault+0x840/0x840 [ 2387.541457] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2387.546302] ? page_fault+0x8/0x30 [ 2387.549841] page_fault+0x1e/0x30 [ 2387.553289] RIP: 0033:0x435118 [ 2387.556482] Code: Bad RIP value. [ 2387.559843] RSP: 002b:000000c000b0b908 EFLAGS: 00010202 [ 2387.565196] RAX: 0000000000f769c8 RBX: 000000000117c760 RCX: 000000000117c760 [ 2387.572451] RDX: 0000000000197e38 RSI: 0000000000f0e340 RDI: 000000000000386f [ 2387.579715] RBP: 000000c000b0b910 R08: 0000000000f0e340 R09: 00000000000007f7 [ 2387.586976] R10: 00000000004ae0c0 R11: 0000000000000202 R12: 000000c000b0b9a0 [ 2387.594245] R13: 0000000000000000 R14: 000000c0006ef380 R15: 0000000000000050 [ 2387.616401] Mem-Info: [ 2387.622504] active_anon:15660 inactive_anon:12878 isolated_anon:0 [ 2387.622504] active_file:33 inactive_file:25 isolated_file:0 [ 2387.622504] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2387.622504] slab_reclaimable:15015 slab_unreclaimable:115562 [ 2387.622504] mapped:14527 shmem:13329 pagetables:463 bounce:0 [ 2387.622504] free:24974 free_pcp:171 free_cma:0 [ 2387.664645] Node 0 active_anon:61904kB inactive_anon:18936kB active_file:120kB inactive_file:96kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58108kB dirty:0kB writeback:0kB shmem:20544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2387.696554] Node 1 active_anon:736kB inactive_anon:32576kB active_file:12kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:32772kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2387.756155] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2387.785854] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2387.790934] Node 0 DMA32 free:35260kB min:35996kB low:44992kB high:53988kB active_anon:61904kB inactive_anon:18936kB active_file:120kB inactive_file:96kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7488kB pagetables:1776kB bounce:0kB free_pcp:628kB local_pcp:372kB free_cma:0kB [ 2387.823438] lowmem_reserve[]: 0 0 1 1 1 [ 2387.827450] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2387.860599] lowmem_reserve[]: 0 0 0 0 0 [ 2387.864596] Node 1 Normal free:53660kB min:53876kB low:67344kB high:80812kB active_anon:736kB inactive_anon:32576kB active_file:12kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:160kB pagetables:76kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 2387.897637] lowmem_reserve[]: 0 0 0 0 0 [ 2387.901635] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10968kB [ 2387.914950] Node 0 DMA32: 1827*4kB (MEH) 1018*8kB (UMEH) 319*16kB (UME) 55*32kB (UMEH) 3*64kB (MH) 0*128kB 2*256kB (UH) 2*512kB (UH) 1*1024kB (U) 3*2048kB (UM) 1*4096kB (U) = 35308kB [ 2387.932715] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2387.943793] Node 1 Normal: 91*4kB (UME) 76*8kB (ME) 63*16kB (M) 41*32kB (UME) 35*64kB (UME) 24*128kB (UME) 18*256kB (M) 5*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 8*4096kB (UM) = 53660kB [ 2387.960543] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2387.969468] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2387.980668] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2387.989632] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2387.998273] 13363 total pagecache pages [ 2388.002237] 0 pages in swap cache [ 2388.005668] Swap cache stats: add 0, delete 0, find 0/0 [ 2388.011058] Free swap = 0kB [ 2388.014082] Total swap = 0kB [ 2388.017095] 2097051 pages RAM [ 2388.020327] 0 pages HighMem/MovableOnly [ 2388.024276] 369649 pages reserved [ 2388.027775] 0 pages cma reserved [ 2388.031271] Unreclaimable slab info: [ 2388.034978] Name Used Total [ 2388.040550] pid_2 49KB 220KB [ 2388.045939] batadv_tt_change_cache 1KB 3KB [ 2388.052088] batadv_tl_cache 6KB 12KB [ 2388.057517] TIPC 114KB 120KB [ 2388.062897] SCTPv6 18KB 24KB [ 2388.068303] DCCPv6 17KB 30KB [ 2388.073666] DCCP 16KB 35KB [ 2388.080933] L2TP/IP 171KB 180KB [ 2388.086306] RXRPC 14KB 19KB [ 2388.091700] rxrpc_call_jar 101KB 102KB [ 2388.097046] bridge_fdb_cache 12KB 19KB [ 2388.102453] fib6_nodes 209KB 280KB [ 2388.107846] ip6_dst_cache 401KB 401KB [ 2388.113200] RAWv6 91KB 101KB [ 2388.118612] UDPv6 33KB 41KB [ 2388.123964] TCPv6 24KB 30KB [ 2388.129348] nf_conntrack 6KB 7KB [ 2388.134724] t10_alua_lu_gp_cache 0KB 3KB [ 2388.140475] sd_ext_cdb 0KB 7KB [ 2388.145836] scsi_sense_cache 1056KB 1060KB [ 2388.151216] virtio_scsi_cmd 16KB 16KB [ 2388.156560] sgpool-128 8KB 8KB [ 2388.162836] sgpool-64 4KB 12KB [ 2388.168585] sgpool-32 2KB 15KB [ 2388.173953] sgpool-16 1KB 7KB [ 2388.180393] sgpool-8 0KB 7KB [ 2388.185761] mqueue_inode_cache 13KB 30KB [ 2388.191326] bio_post_read_ctx 14KB 15KB [ 2388.196719] bio-2 14KB 15KB [ 2388.202157] jfs_mp 7KB 7KB [ 2388.207595] cifs_small_rq 15KB 16KB [ 2388.212953] cifs_request 67KB 67KB [ 2388.218369] cifs_mpx_ids 0KB 7KB [ 2388.223746] nfs_commit_data 3KB 14KB [ 2388.229147] nfs_write_data 34KB 44KB [ 2388.234528] ext4_system_zone 1KB 7KB [ 2388.239953] bio-1 1KB 7KB [ 2388.245303] pid_namespace 2KB 11KB [ 2388.250678] rpc_buffers 17KB 25KB [ 2388.256021] rpc_tasks 2KB 7KB [ 2388.261422] UNIX 1055KB 1057KB [ 2388.266792] tcp_bind_bucket 1KB 4KB [ 2388.272172] ip_fib_trie 30KB 47KB [ 2388.277559] ip_fib_alias 148KB 197KB [ 2388.283998] ip_dst_cache 8KB 16KB [ 2388.290190] RAW 54KB 67KB [ 2388.295545] UDP 43KB 54KB [ 2388.300981] TCP 8KB 11KB [ 2388.306327] hugetlbfs_inode_cache 3KB 15KB [ 2388.315517] fscache_cookie_jar 1KB 11KB [ 2388.323413] eventpoll_pwq 20KB 47KB [ 2388.346877] eventpoll_epi 38KB 59KB [ 2388.395403] inotify_inode_mark 17KB 55KB [ 2388.404293] request_queue 199KB 199KB [ 2388.419887] blkdev_requests 1KB 3KB [ 2388.425263] blkdev_ioc 27KB 30KB [ 2388.432832] bio-0 735KB 735KB [ 2388.445457] biovec-max 1419KB 1460KB [ 2388.453851] biovec-64 724KB 724KB [ 2388.474849] biovec-16 70KB 71KB [ 2388.484144] bio_integrity_payload 1KB 8KB [ 2388.496980] khugepaged_mm_slot 8KB 42KB [ 2388.504240] uid_cache 0KB 4KB [ 2388.525434] dmaengine-unmap-2 0KB 3KB [ 2388.533635] skbuff_fclone_cache 80KB 292KB [ 2388.555912] skbuff_head_cache 6550KB 6551KB [ 2388.563142] configfs_dir_cache 3KB 7KB [ 2388.576126] file_lock_cache 72KB 194KB [ 2388.602639] file_lock_ctx 9KB 11KB [ 2388.611635] fsnotify_mark_connector 8KB 31KB [ 2388.625227] net_namespace 70KB 70KB [ 2388.635389] shmem_inode_cache 8180KB 8489KB [ 2388.656377] task_delay_info 234KB 395KB [ 2388.663988] taskstats 62KB 222KB [ 2388.683818] proc_dir_entry 824KB 832KB [ 2388.701854] pde_opener 11KB 34KB [ 2388.714345] seq_file 230KB 334KB [ 2388.726908] sigqueue 39KB 39KB [ 2388.746834] kernfs_node_cache 18219KB 18246KB [ 2388.752278] mnt_cache 207KB 216KB [ 2388.765976] filp 6772KB 7125KB [ 2388.774706] names_cache 123560KB 123598KB [ 2388.807132] iint_cache 30KB 51KB [ 2388.816134] key_jar 4KB 7KB [ 2388.827332] uts_namespace 3KB 7KB [ 2388.832711] nsproxy 2KB 7KB [ 2388.840717] vm_area_struct 3176KB 5019KB [ 2388.846087] mm_struct 531KB 1085KB [ 2388.864469] fs_cache 222KB 328KB [ 2388.873639] files_cache 765KB 903KB [ 2388.893689] signal_cache 1496KB 1847KB [ 2388.903011] sighand_cache 582KB 638KB [ 2388.912048] task_struct 7941KB 8010KB [ 2388.932150] cred_jar 1712KB 2264KB [ 2388.939981] anon_vma_chain 989KB 1834KB [ 2388.945348] anon_vma 106KB 350KB [ 2388.957026] pid 113KB 216KB [ 2388.971587] Acpi-Operand 156KB 198KB [ 2388.976956] Acpi-ParseExt 8KB 11KB [ 2388.996466] Acpi-Parse 41KB 47KB [ 2389.004651] Acpi-State 52KB 63KB [ 2389.024117] Acpi-Namespace 21KB 23KB [ 2389.036339] numa_policy 0KB 3KB [ 2389.043818] debug_objects_cache 1930KB 2403KB [ 2389.054940] trace_event_file 297KB 298KB [ 2389.066394] ftrace_event_field 398KB 401KB [ 2389.085424] pool_workqueue 135KB 148KB [ 2389.095611] page->ptl 541KB 1363KB [ 2389.111884] kmalloc-2097152 2050KB 2050KB [ 2389.124536] kmalloc-524288 2056KB 2056KB [ 2389.136278] kmalloc-262144 1290KB 1290KB [ 2389.146564] kmalloc-131072 650KB 650KB [ 2389.174506] kmalloc-65536 2376KB 2442KB [ 2389.181190] kmalloc-32768 1980KB 1980KB [ 2389.186562] kmalloc-16384 1204KB 1237KB [ 2389.216472] kmalloc-8192 4974KB 5016KB [ 2389.226032] kmalloc-4096 24501KB 24522KB [ 2389.245482] kmalloc-2048 14970KB 15440KB [ 2389.251855] kmalloc-1024 9951KB 9954KB [ 2389.285373] kmalloc-512 13627KB 13627KB [ 2389.294149] kmalloc-256 5361KB 5827KB [ 2389.300897] kmalloc-128 1175KB 1523KB [ 2389.306294] kmalloc-96 3544KB 4552KB [ 2389.335882] kmalloc-64 2798KB 4332KB [ 2389.345603] kmalloc-32 1894KB 2579KB [ 2389.354605] kmalloc-192 1921KB 2588KB [ 2389.375699] kmem_cache 177KB 180KB [ 2389.393914] Out of memory (oom_kill_allocating_task): Kill process 8109 (syz-fuzzer) score 0 or sacrifice child [ 2389.426946] Killed process 8108 (syz-executor.2) total-vm:48512kB, anon-rss:236kB, file-rss:0kB, shmem-rss:0kB [ 2389.463844] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2389.494523] in:imklog cpuset=/ mems_allowed=0-1 [ 2389.499340] CPU: 0 PID: 10087 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 2389.506777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2389.516109] Call Trace: [ 2389.518688] dump_stack+0x1fc/0x2ef [ 2389.522301] dump_header+0x15d/0xc3f [ 2389.525995] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2389.531099] ? ___ratelimit+0x319/0x590 [ 2389.535057] oom_kill_process.cold+0x10/0x692 [ 2389.539534] ? check_preemption_disabled+0x41/0x280 [ 2389.544531] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2389.549791] out_of_memory+0x1072/0x1390 [ 2389.553852] ? oom_killer_disable+0x270/0x270 [ 2389.558342] ? mutex_trylock+0x15f/0x1a0 [ 2389.562388] __alloc_pages_nodemask+0x23a2/0x2890 [ 2389.567216] ? find_get_entry+0x4cd/0x8a0 [ 2389.571375] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2389.576230] alloc_pages_current+0x193/0x2a0 [ 2389.580623] filemap_fault+0x146e/0x2180 [ 2389.584671] ext4_filemap_fault+0x84/0xb0 [ 2389.588798] __do_fault+0x10b/0x4b0 [ 2389.592412] __handle_mm_fault+0x273b/0x41c0 [ 2389.596806] ? vm_insert_page+0x9c0/0x9c0 [ 2389.600950] ? lock_downgrade+0x720/0x720 [ 2389.605088] ? check_preemption_disabled+0x41/0x280 [ 2389.610099] handle_mm_fault+0x436/0xb10 [ 2389.614161] __do_page_fault+0x68e/0xd60 [ 2389.618207] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2389.623206] ? spurious_fault+0x840/0x840 [ 2389.627341] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2389.632166] ? page_fault+0x8/0x30 [ 2389.635686] page_fault+0x1e/0x30 [ 2389.639120] RIP: 0033:0x7f0bfc264fd0 [ 2389.642816] Code: Bad RIP value. [ 2389.646158] RSP: 002b:00007f0bfab7e9c0 EFLAGS: 00010202 [ 2389.651503] RAX: 00000000fbad8001 RBX: 00007f0bfc372fe6 RCX: 0000000000000000 [ 2389.658766] RDX: 0000000000000000 RSI: 00007f0bfc371a25 RDI: 0000000000000001 [ 2389.666016] RBP: 00007f0bfab7f0a0 R08: 0000000000000000 R09: 00007f0bfab7f2cc [ 2389.673265] R10: 0000000000000000 R11: 0000000000072ae8 R12: 00007f0bfab7f1d8 [ 2389.680517] R13: 00007f0bfab7f0b0 R14: 0000000000001f9f R15: 00007f0bfab7f3d0 [ 2389.702569] Mem-Info: [ 2389.705027] active_anon:15505 inactive_anon:12878 isolated_anon:0 [ 2389.705027] active_file:37 inactive_file:64 isolated_file:0 [ 2389.705027] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2389.705027] slab_reclaimable:14986 slab_unreclaimable:115685 [ 2389.705027] mapped:10952 shmem:13329 pagetables:399 bounce:0 [ 2389.705027] free:26386 free_pcp:425 free_cma:0 [ 2389.792396] Node 0 active_anon:61288kB inactive_anon:18936kB active_file:440kB inactive_file:436kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44108kB dirty:0kB writeback:0kB shmem:20544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2389.851355] Node 1 active_anon:732kB inactive_anon:32576kB active_file:12kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:32772kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2389.900343] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2389.957088] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2389.962219] Node 0 DMA32 free:36284kB min:35996kB low:44992kB high:53988kB active_anon:61268kB inactive_anon:18936kB active_file:0kB inactive_file:248kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7488kB pagetables:1560kB bounce:0kB free_pcp:1788kB local_pcp:1444kB free_cma:0kB [ 2390.029616] lowmem_reserve[]: 0 0 1 1 1 [ 2390.033634] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2390.122076] lowmem_reserve[]: 0 0 0 0 0 [ 2390.126689] Node 1 Normal free:53668kB min:53876kB low:67344kB high:80812kB active_anon:728kB inactive_anon:32576kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:160kB pagetables:76kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2390.200444] lowmem_reserve[]: 0 0 0 0 0 [ 2390.204453] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10968kB [ 2390.268755] Node 0 DMA32: 1819*4kB (MEH) 1022*8kB (MEH) 320*16kB (ME) 54*32kB (UMEH) 3*64kB (MH) 1*128kB (U) 2*256kB (UH) 3*512kB (UH) 1*1024kB (U) 3*2048kB (UM) 1*4096kB (U) = 35932kB [ 2390.305410] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2390.325164] Node 1 Normal: 91*4kB (UME) 75*8kB (ME) 62*16kB (M) 42*32kB (UME) 35*64kB (UME) 24*128kB (UME) 18*256kB (M) 5*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 8*4096kB (UM) = 53668kB [ 2390.351115] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2390.364149] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2390.383151] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2390.392905] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2390.410081] 13368 total pagecache pages [ 2390.414072] 0 pages in swap cache [ 2390.421703] Swap cache stats: add 0, delete 0, find 0/0 [ 2390.436185] Free swap = 0kB [ 2390.446081] Total swap = 0kB [ 2390.453471] 2097051 pages RAM [ 2390.456575] 0 pages HighMem/MovableOnly [ 2390.481555] 369649 pages reserved [ 2390.485027] 0 pages cma reserved [ 2390.503994] Unreclaimable slab info: [ 2390.507757] Name Used Total [ 2390.513293] pid_2 49KB 220KB [ 2390.534270] batadv_tt_change_cache 1KB 3KB [ 2390.551171] batadv_tl_cache 6KB 12KB [ 2390.556580] TIPC 114KB 120KB [ 2390.565513] SCTPv6 18KB 24KB [ 2390.581460] DCCPv6 17KB 30KB [ 2390.586847] DCCP 16KB 35KB [ 2390.595808] L2TP/IP 171KB 180KB [ 2390.611506] RXRPC 14KB 19KB [ 2390.616922] rxrpc_call_jar 101KB 102KB [ 2390.625959] bridge_fdb_cache 12KB 19KB [ 2390.641881] fib6_nodes 209KB 280KB [ 2390.647306] ip6_dst_cache 408KB 408KB [ 2390.652756] RAWv6 91KB 101KB [ 2390.668453] UDPv6 33KB 41KB [ 2390.673866] TCPv6 24KB 30KB [ 2390.684775] nf_conntrack 6KB 7KB [ 2390.697152] t10_alua_lu_gp_cache 0KB 3KB [ 2390.702796] sd_ext_cdb 0KB 7KB [ 2390.715284] scsi_sense_cache 1056KB 1060KB [ 2390.722422] virtio_scsi_cmd 16KB 16KB [ 2390.734972] sgpool-128 8KB 8KB [ 2390.746120] sgpool-64 4KB 12KB [ 2390.755007] sgpool-32 2KB 15KB [ 2390.764106] sgpool-16 1KB 7KB [ 2390.776654] sgpool-8 0KB 7KB [ 2390.784089] mqueue_inode_cache 13KB 30KB [ 2390.796326] bio_post_read_ctx 14KB 15KB [ 2390.812167] bio-2 14KB 15KB [ 2390.820466] jfs_mp 7KB 7KB [ 2390.825870] cifs_small_rq 15KB 16KB [ 2390.834866] cifs_request 67KB 67KB [ 2390.844536] cifs_mpx_ids 0KB 7KB [ 2390.853647] nfs_commit_data 3KB 14KB [ 2390.862667] nfs_write_data 34KB 44KB [ 2390.871711] ext4_system_zone 1KB 7KB [ 2390.880612] bio-1 1KB 7KB [ 2390.885974] pid_namespace 2KB 11KB [ 2390.894903] rpc_buffers 17KB 25KB [ 2390.903836] rpc_tasks 2KB 7KB [ 2390.912793] UNIX 1046KB 1057KB [ 2390.921596] tcp_bind_bucket 1KB 4KB [ 2390.930637] ip_fib_trie 30KB 47KB [ 2390.935997] ip_fib_alias 148KB 197KB [ 2390.942298] ip_dst_cache 16KB 16KB [ 2390.955442] RAW 54KB 67KB [ 2390.964268] UDP 43KB 54KB [ 2390.974122] TCP 8KB 11KB [ 2390.983061] hugetlbfs_inode_cache 3KB 15KB [ 2390.997016] fscache_cookie_jar 1KB 11KB [ 2391.002470] eventpoll_pwq 20KB 47KB [ 2391.012338] eventpoll_epi 38KB 59KB [ 2391.024180] inotify_inode_mark 17KB 55KB [ 2391.031691] request_queue 199KB 199KB [ 2391.042767] blkdev_requests 1KB 3KB [ 2391.051871] blkdev_ioc 27KB 30KB [ 2391.061234] bio-0 847KB 847KB [ 2391.066602] biovec-max 1460KB 1460KB [ 2391.080774] biovec-64 811KB 811KB [ 2391.086251] biovec-16 97KB 97KB [ 2391.100405] bio_integrity_payload 1KB 8KB [ 2391.106131] khugepaged_mm_slot 8KB 42KB [ 2391.111697] uid_cache 0KB 4KB [ 2391.120884] dmaengine-unmap-2 0KB 3KB [ 2391.126260] skbuff_fclone_cache 80KB 292KB [ 2391.131877] skbuff_head_cache 6779KB 6780KB [ 2391.140798] configfs_dir_cache 3KB 7KB [ 2391.146246] file_lock_cache 71KB 194KB [ 2391.151673] file_lock_ctx 9KB 11KB [ 2391.160584] fsnotify_mark_connector 8KB 31KB [ 2391.166464] net_namespace 70KB 70KB [ 2391.172786] shmem_inode_cache 8180KB 8489KB [ 2391.181412] task_delay_info 234KB 395KB [ 2391.186777] taskstats 61KB 222KB [ 2391.211058] proc_dir_entry 824KB 832KB [ 2391.216445] pde_opener 11KB 34KB [ 2391.235768] seq_file 230KB 334KB [ 2391.245057] sigqueue 43KB 43KB [ 2391.255494] kernfs_node_cache 18214KB 18246KB [ 2391.266077] mnt_cache 207KB 216KB [ 2391.273986] filp 6772KB 7125KB [ 2391.286233] names_cache 121979KB 122017KB [ 2391.295096] iint_cache 30KB 51KB [ 2391.303912] key_jar 4KB 7KB [ 2391.316337] uts_namespace 3KB 7KB [ 2391.324920] nsproxy 2KB 7KB [ 2391.334655] vm_area_struct 3154KB 5019KB [ 2391.340078] mm_struct 528KB 1085KB [ 2391.345556] fs_cache 222KB 328KB [ 2391.366644] files_cache 765KB 903KB [ 2391.372188] signal_cache 1496KB 1847KB [ 2391.384601] sighand_cache 582KB 638KB [ 2391.390038] task_struct 7941KB 8010KB [ 2391.395395] cred_jar 1712KB 2264KB [ 2391.404567] anon_vma_chain 988KB 1834KB [ 2391.417063] anon_vma 104KB 350KB [ 2391.422446] pid 113KB 216KB [ 2391.434629] Acpi-Operand 156KB 198KB [ 2391.440046] Acpi-ParseExt 8KB 11KB [ 2391.445430] Acpi-Parse 41KB 47KB [ 2391.453005] Acpi-State 52KB 63KB [ 2391.471495] Acpi-Namespace 21KB 23KB [ 2391.486453] numa_policy 0KB 3KB [ 2391.494357] debug_objects_cache 1930KB 2403KB [ 2391.503523] trace_event_file 297KB 298KB [ 2391.512733] ftrace_event_field 398KB 401KB [ 2391.522029] pool_workqueue 135KB 148KB [ 2391.531813] page->ptl 540KB 1363KB [ 2391.540635] kmalloc-2097152 2050KB 2050KB [ 2391.546002] kmalloc-524288 2056KB 2056KB [ 2391.556644] kmalloc-262144 1290KB 1290KB [ 2391.564835] kmalloc-131072 650KB 650KB [ 2391.571794] kmalloc-65536 2376KB 2442KB [ 2391.584001] kmalloc-32768 1980KB 1980KB [ 2391.590501] kmalloc-16384 1204KB 1237KB [ 2391.595858] kmalloc-8192 4974KB 5016KB [ 2391.603360] kmalloc-4096 24420KB 24458KB [ 2391.610986] kmalloc-2048 14970KB 15440KB [ 2391.616345] kmalloc-1024 10006KB 10009KB [ 2391.623077] kmalloc-512 13983KB 13983KB [ 2391.633406] kmalloc-256 5361KB 5827KB [ 2391.643602] kmalloc-128 1175KB 1523KB [ 2391.651668] kmalloc-96 3574KB 4552KB [ 2391.664073] kmalloc-64 2798KB 4332KB [ 2391.671886] kmalloc-32 1902KB 2579KB [ 2391.679324] kmalloc-192 1921KB 2588KB [ 2391.684685] kmem_cache 177KB 180KB [ 2391.691513] Out of memory (oom_kill_allocating_task): Kill process 10087 (in:imklog) score 0 or sacrifice child [ 2391.702598] Killed process 10085 (rsyslogd) total-vm:254332kB, anon-rss:732kB, file-rss:0kB, shmem-rss:0kB [ 2391.722548] oom_reaper: reaped process 10085 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2391.775627] systemd invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2391.815085] systemd cpuset=/ mems_allowed=0-1 [ 2391.866133] CPU: 1 PID: 1 Comm: systemd Not tainted 4.19.211-syzkaller #0 [ 2391.873084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2391.882433] Call Trace: [ 2391.885024] dump_stack+0x1fc/0x2ef [ 2391.888656] dump_header+0x15d/0xc3f [ 2391.892372] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2391.897474] ? ___ratelimit+0x319/0x590 [ 2391.901476] oom_kill_process.cold+0x10/0x692 [ 2391.905970] ? oom_badness.part.0+0x135/0x6e0 [ 2391.910462] ? lock_downgrade+0x720/0x720 [ 2391.914612] ? check_preemption_disabled+0x41/0x280 [ 2391.919634] out_of_memory+0x34d/0x1390 [ 2391.923613] ? oom_killer_disable+0x270/0x270 [ 2391.928106] ? mutex_trylock+0x15f/0x1a0 [ 2391.932170] __alloc_pages_nodemask+0x23a2/0x2890 [ 2391.937017] ? find_get_entry+0x4cd/0x8a0 [ 2391.941174] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2391.946037] alloc_pages_current+0x193/0x2a0 [ 2391.950445] filemap_fault+0x146e/0x2180 [ 2391.954515] ext4_filemap_fault+0x84/0xb0 [ 2391.958664] __do_fault+0x10b/0x4b0 [ 2391.962294] __handle_mm_fault+0x273b/0x41c0 [ 2391.966700] ? kill_orphaned_pgrp+0x340/0x340 [ 2391.971201] ? vm_insert_page+0x9c0/0x9c0 [ 2391.975349] ? debug_object_active_state+0x254/0x330 [ 2391.980464] ? check_preemption_disabled+0x41/0x280 [ 2391.985486] handle_mm_fault+0x436/0xb10 [ 2391.989555] __do_page_fault+0x68e/0xd60 [ 2391.993618] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2391.998645] ? spurious_fault+0x840/0x840 [ 2392.002798] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2392.007649] ? page_fault+0x8/0x30 [ 2392.011189] page_fault+0x1e/0x30 [ 2392.014641] RIP: 0033:0x7fd94809e733 [ 2392.018373] Code: Bad RIP value. [ 2392.021728] RSP: 002b:00007ffc0fe32b28 EFLAGS: 00010283 [ 2392.027085] RAX: 0000000000000eb1 RBX: 00007ffc0fe330a0 RCX: 0000000000000005 [ 2392.034347] RDX: 0000000000000005 RSI: 0000000000000025 RDI: 00007fd94982deb1 [ 2392.041615] RBP: 00007ffc0fe33090 R08: 0000000000000001 R09: 000000000000000b [ 2392.048877] R10: 0000000000000069 R11: 00000000fffffffb R12: 00007fd94982dea9 [ 2392.056144] R13: 00007ffc0fe331d8 R14: 0000000000000000 R15: 00007fd94982deb1 [ 2392.484275] Mem-Info: [ 2392.486735] active_anon:15293 inactive_anon:12878 isolated_anon:0 [ 2392.486735] active_file:25 inactive_file:4 isolated_file:0 [ 2392.486735] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2392.486735] slab_reclaimable:14988 slab_unreclaimable:115173 [ 2392.486735] mapped:10943 shmem:13329 pagetables:384 bounce:0 [ 2392.486735] free:24985 free_pcp:37 free_cma:0 [ 2392.546377] Node 0 active_anon:60732kB inactive_anon:18936kB active_file:192kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:43772kB dirty:0kB writeback:0kB shmem:20544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2392.711814] Node 1 active_anon:440kB inactive_anon:32576kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:32772kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2392.862525] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2393.046064] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2393.094325] Node 0 DMA32 free:35372kB min:35996kB low:44992kB high:53988kB active_anon:60736kB inactive_anon:18936kB active_file:52kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7328kB pagetables:1540kB bounce:0kB free_pcp:204kB local_pcp:204kB free_cma:0kB [ 2393.264034] lowmem_reserve[]: 0 0 1 1 1 [ 2393.282676] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2393.354278] lowmem_reserve[]: 0 0 0 0 0 [ 2393.401707] Node 1 Normal free:53796kB min:53876kB low:67344kB high:80812kB active_anon:440kB inactive_anon:32576kB active_file:0kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:160kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2393.564175] lowmem_reserve[]: 0 0 0 0 0 [ 2393.590403] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10968kB [ 2393.686568] Node 0 DMA32: 1856*4kB (ME) 1032*8kB (UME) 324*16kB (ME) 61*32kB (UME) 4*64kB (UM) 1*128kB (U) 0*256kB 1*512kB (U) 1*1024kB (U) 3*2048kB (UM) 1*4096kB (U) = 34976kB [ 2393.805219] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2393.863470] Node 1 Normal: 80*4kB (UME) 54*8kB (UME) 47*16kB (UM) 36*32kB (UME) 31*64kB (UME) 20*128kB (ME) 19*256kB (M) 6*512kB (UME) 4*1024kB (UME) 1*2048kB (E) 8*4096kB (UM) = 54048kB [ 2393.932502] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2393.976753] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2393.985353] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2394.010186] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2394.031797] 13363 total pagecache pages [ 2394.035798] 0 pages in swap cache [ 2394.046065] Swap cache stats: add 0, delete 0, find 0/0 [ 2394.053281] Free swap = 0kB [ 2394.056283] Total swap = 0kB [ 2394.066115] 2097051 pages RAM [ 2394.072652] 0 pages HighMem/MovableOnly [ 2394.077974] 369649 pages reserved [ 2394.081432] 0 pages cma reserved [ 2394.084786] Unreclaimable slab info: [ 2394.089767] Name Used Total [ 2394.095311] pid_2 46KB 220KB [ 2394.111150] batadv_tt_change_cache 1KB 3KB [ 2394.120506] batadv_tl_cache 6KB 12KB [ 2394.125891] TIPC 114KB 120KB [ 2394.133152] SCTPv6 18KB 24KB [ 2394.140913] DCCPv6 17KB 30KB [ 2394.146366] DCCP 16KB 35KB [ 2394.152704] L2TP/IP 171KB 180KB [ 2394.163211] RXRPC 14KB 19KB [ 2394.171823] rxrpc_call_jar 101KB 102KB [ 2394.180007] bridge_fdb_cache 12KB 19KB [ 2394.185374] fib6_nodes 209KB 280KB [ 2394.203333] ip6_dst_cache 408KB 408KB [ 2394.209777] RAWv6 91KB 101KB [ 2394.215159] UDPv6 33KB 41KB [ 2394.242864] TCPv6 21KB 30KB [ 2394.253190] nf_conntrack 6KB 7KB [ 2394.262155] t10_alua_lu_gp_cache 0KB 3KB [ 2394.273285] sd_ext_cdb 0KB 7KB [ 2394.283776] scsi_sense_cache 1056KB 1060KB [ 2394.292609] virtio_scsi_cmd 16KB 16KB [ 2394.299841] sgpool-128 8KB 8KB [ 2394.305208] sgpool-64 4KB 12KB [ 2394.321690] sgpool-32 2KB 15KB [ 2394.327177] sgpool-16 1KB 7KB [ 2394.332540] sgpool-8 0KB 7KB [ 2394.341512] mqueue_inode_cache 13KB 30KB [ 2394.347058] bio_post_read_ctx 14KB 15KB [ 2394.352480] bio-2 14KB 15KB [ 2394.361366] jfs_mp 7KB 7KB [ 2394.366850] cifs_small_rq 15KB 16KB [ 2394.372211] cifs_request 67KB 67KB [ 2394.381163] cifs_mpx_ids 0KB 7KB [ 2394.386650] nfs_commit_data 3KB 14KB [ 2394.392036] nfs_write_data 34KB 44KB [ 2394.400932] ext4_system_zone 1KB 7KB [ 2394.406318] bio-1 1KB 7KB [ 2394.411762] pid_namespace 2KB 11KB [ 2394.420060] rpc_buffers 17KB 25KB [ 2394.429972] rpc_tasks 2KB 7KB [ 2394.435344] UNIX 1042KB 1057KB [ 2394.444072] tcp_bind_bucket 1KB 4KB [ 2394.450268] ip_fib_trie 30KB 47KB [ 2394.455629] ip_fib_alias 148KB 197KB [ 2394.470063] ip_dst_cache 10KB 16KB [ 2394.475434] RAW 54KB 67KB [ 2394.482894] UDP 43KB 54KB [ 2394.489777] TCP 8KB 11KB [ 2394.495148] hugetlbfs_inode_cache 3KB 15KB [ 2394.504298] fscache_cookie_jar 1KB 11KB [ 2394.511615] eventpoll_pwq 20KB 47KB [ 2394.520118] eventpoll_epi 38KB 59KB [ 2394.525477] inotify_inode_mark 17KB 55KB [ 2394.534388] request_queue 199KB 199KB [ 2394.543289] blkdev_requests 1KB 3KB [ 2394.552250] blkdev_ioc 27KB 30KB [ 2394.561115] bio-0 856KB 858KB [ 2394.566475] biovec-max 1460KB 1460KB [ 2394.571887] biovec-64 813KB 819KB [ 2394.580889] biovec-16 99KB 101KB [ 2394.586271] bio_integrity_payload 1KB 8KB [ 2394.592045] khugepaged_mm_slot 8KB 42KB [ 2394.602194] uid_cache 0KB 4KB [ 2394.612837] dmaengine-unmap-2 0KB 3KB [ 2394.626359] skbuff_fclone_cache 76KB 285KB [ 2394.634938] skbuff_head_cache 7087KB 7087KB [ 2394.643957] configfs_dir_cache 3KB 7KB [ 2394.652879] file_lock_cache 68KB 194KB [ 2394.662172] file_lock_ctx 9KB 11KB [ 2394.672098] fsnotify_mark_connector 8KB 31KB [ 2394.680853] net_namespace 70KB 70KB [ 2394.686218] shmem_inode_cache 8170KB 8485KB [ 2394.709666] task_delay_info 233KB 395KB [ 2394.715071] taskstats 60KB 222KB [ 2394.726412] proc_dir_entry 824KB 832KB [ 2394.736498] pde_opener 11KB 34KB [ 2394.752762] seq_file 230KB 334KB [ 2394.761589] sigqueue 44KB 47KB [ 2394.775986] kernfs_node_cache 18198KB 18246KB [ 2394.785861] mnt_cache 207KB 216KB [ 2394.794712] filp 6731KB 7125KB [ 2394.813849] names_cache 121316KB 121337KB [ 2394.820955] iint_cache 30KB 51KB [ 2394.826300] key_jar 4KB 7KB [ 2394.835944] uts_namespace 3KB 7KB [ 2394.843156] nsproxy 2KB 7KB [ 2394.848570] vm_area_struct 3142KB 5019KB [ 2394.853923] mm_struct 520KB 1072KB [ 2394.863140] fs_cache 210KB 328KB [ 2394.875592] files_cache 778KB 903KB [ 2394.884455] signal_cache 1474KB 1840KB [ 2394.903584] sighand_cache 559KB 638KB [ 2394.908992] task_struct 7903KB 7972KB [ 2394.914363] cred_jar 1704KB 2264KB [ 2394.933547] anon_vma_chain 978KB 1834KB [ 2394.939234] anon_vma 101KB 350KB [ 2394.944591] pid 112KB 216KB [ 2394.964085] Acpi-Operand 156KB 198KB [ 2394.972986] Acpi-ParseExt 8KB 11KB [ 2394.988743] Acpi-Parse 41KB 47KB [ 2394.994121] Acpi-State 52KB 63KB [ 2395.003050] Acpi-Namespace 21KB 23KB [ 2395.014485] numa_policy 0KB 3KB [ 2395.026446] debug_objects_cache 1930KB 2403KB [ 2395.041964] trace_event_file 297KB 298KB [ 2395.048212] ftrace_event_field 398KB 401KB [ 2395.053670] pool_workqueue 135KB 148KB [ 2395.073037] page->ptl 532KB 1363KB [ 2395.082106] kmalloc-2097152 2050KB 2050KB [ 2395.101239] kmalloc-524288 2056KB 2056KB [ 2395.113465] kmalloc-262144 1290KB 1290KB [ 2395.125741] kmalloc-131072 650KB 650KB [ 2395.135790] kmalloc-65536 2376KB 2442KB [ 2395.144446] kmalloc-32768 1980KB 1980KB [ 2395.162835] kmalloc-16384 1204KB 1237KB [ 2395.173151] kmalloc-8192 4974KB 5016KB [ 2395.184905] kmalloc-4096 24437KB 24458KB [ 2395.191579] kmalloc-2048 14928KB 15440KB [ 2395.205469] kmalloc-1024 10101KB 10103KB [ 2395.212617] kmalloc-512 14538KB 14538KB [ 2395.223100] kmalloc-256 5360KB 5827KB [ 2395.229664] kmalloc-128 1174KB 1523KB [ 2395.235040] kmalloc-96 3619KB 4552KB [ 2395.245903] kmalloc-64 2786KB 4332KB [ 2395.252651] kmalloc-32 1912KB 2579KB [ 2395.270462] kmalloc-192 1921KB 2588KB [ 2395.275844] kmem_cache 177KB 180KB [ 2395.283918] Out of memory: Kill process 10094 (syz-executor.5) score 1002 or sacrifice child [ 2395.294367] Killed process 10102 (syz-executor.5) total-vm:60812kB, anon-rss:2548kB, file-rss:14336kB, shmem-rss:72kB [ 2395.314804] oom_reaper: reaped process 10102 (syz-executor.5), now anon-rss:0kB, file-rss:14332kB, shmem-rss:8kB [ 2395.351566] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2395.364840] oom_reaper: reaped process 10101 (syz-executor.0), now anon-rss:0kB, file-rss:13632kB, shmem-rss:0kB [ 2395.430156] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2395.434956] CPU: 0 PID: 8081 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 2395.442398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2395.451745] Call Trace: [ 2395.454340] dump_stack+0x1fc/0x2ef [ 2395.457988] dump_header+0x15d/0xc3f [ 2395.461705] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2395.466808] ? ___ratelimit+0x319/0x590 [ 2395.470782] oom_kill_process.cold+0x10/0x692 [ 2395.475280] ? check_preemption_disabled+0x41/0x280 [ 2395.480299] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2395.485569] out_of_memory+0x1072/0x1390 [ 2395.489636] ? oom_killer_disable+0x270/0x270 [ 2395.494130] ? mutex_trylock+0x15f/0x1a0 [ 2395.498195] __alloc_pages_nodemask+0x23a2/0x2890 [ 2395.503040] ? find_get_entry+0x4cd/0x8a0 [ 2395.507197] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2395.512059] alloc_pages_current+0x193/0x2a0 [ 2395.516463] filemap_fault+0x146e/0x2180 [ 2395.520544] ext4_filemap_fault+0x84/0xb0 [ 2395.524690] __do_fault+0x10b/0x4b0 [ 2395.528315] __handle_mm_fault+0x273b/0x41c0 [ 2395.532721] ? vm_insert_page+0x9c0/0x9c0 [ 2395.536867] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2395.541979] ? check_preemption_disabled+0x41/0x280 [ 2395.546996] handle_mm_fault+0x436/0xb10 [ 2395.551059] __do_page_fault+0x68e/0xd60 [ 2395.555125] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2395.560142] ? spurious_fault+0x840/0x840 [ 2395.564291] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2395.569135] ? page_fault+0x8/0x30 [ 2395.572673] page_fault+0x1e/0x30 [ 2395.576120] RIP: 0033:0x44b036 [ 2395.579314] Code: Bad RIP value. [ 2395.582672] RSP: 002b:000000c00047b988 EFLAGS: 00010283 [ 2395.588035] RAX: 0000000000000017 RBX: 000000c00047bbf0 RCX: 000000c00047bac0 [ 2395.595296] RDX: 0000000000000017 RSI: 0000000000000000 RDI: 0000000000000045 [ 2395.602569] RBP: 000000c00047b9c0 R08: 0000000001db97e0 R09: 0000000000000000 [ 2395.609834] R10: 0002bd39c63d4c01 R11: 0000000000000206 R12: 0000000000000000 [ 2395.617095] R13: 0000000000000001 R14: 000000c000d1eea0 R15: ffffffffffffffff [ 2395.635163] Mem-Info: [ 2395.639635] active_anon:14049 inactive_anon:12878 isolated_anon:0 [ 2395.639635] active_file:32 inactive_file:4 isolated_file:0 [ 2395.639635] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2395.639635] slab_reclaimable:14964 slab_unreclaimable:114673 [ 2395.639635] mapped:10943 shmem:13329 pagetables:385 bounce:0 [ 2395.639635] free:13857 free_pcp:185 free_cma:0 [ 2395.652515] syz-executor.0: vmalloc: allocation failure, allocated 1848684544 of 4278132736 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2395.685460] Node 0 active_anon:55756kB inactive_anon:18936kB active_file:120kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:43772kB dirty:0kB writeback:0kB shmem:20544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2395.689839] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2395.723168] CPU: 1 PID: 10101 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 2395.731050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2395.740397] Call Trace: [ 2395.741338] Node 1 active_anon:440kB inactive_anon:32576kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:32772kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2395.742985] dump_stack+0x1fc/0x2ef [ 2395.770109] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2395.773210] warn_alloc.cold+0x7b/0x18f [ 2395.799312] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2395.803339] ? zone_watermark_ok_safe+0x260/0x260 [ 2395.808343] Node 0 DMA32 free:17700kB min:35996kB low:44992kB high:53988kB active_anon:56156kB inactive_anon:18936kB active_file:132kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7296kB pagetables:1540kB bounce:0kB free_pcp:480kB local_pcp:236kB free_cma:0kB [ 2395.813155] ? retint_kernel+0x2d/0x2d [ 2395.845001] lowmem_reserve[]: 0 0 1 1 1 [ 2395.848879] __vmalloc_area_node+0x4fd/0x780 [ 2395.848899] ? __vmalloc_node_range+0x180/0x180 [ 2395.852870] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2395.857267] ? _raw_spin_unlock+0x29/0x40 [ 2395.857281] ? __get_vm_area_node+0x2e2/0x3a0 [ 2395.857299] __vmalloc_node_range+0xed/0x180 [ 2395.857314] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2395.857326] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2395.857337] vmalloc_user+0x70/0xe0 [ 2395.857349] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2395.857361] vb2_vmalloc_alloc+0xb3/0x2f0 [ 2395.857374] __vb2_queue_alloc+0x472/0xe60 [ 2395.857400] vb2_core_create_bufs+0x273/0x7e0 [ 2395.857415] ? __vb2_queue_free+0x870/0x870 [ 2395.857430] ? __video_do_ioctl+0x632/0xcd0 [ 2395.857448] ? pi_state_update_owner+0x450/0x450 [ 2395.857462] ? __mutex_lock+0x368/0x1190 [ 2395.857479] vb2_create_bufs+0x332/0x620 [ 2395.857495] ? mark_held_locks+0xf0/0xf0 [ 2395.857509] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 2395.857521] ? futex_wait_queue_me+0x404/0x5e0 [ 2395.857535] ? pi_state_update_owner+0x450/0x450 [ 2395.857548] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2395.857563] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 2395.857584] v4l_create_bufs+0xb2/0x160 [ 2395.857600] __video_do_ioctl+0x49a/0xcd0 [ 2395.857620] ? v4l_querycap+0x340/0x340 [ 2395.857637] ? __might_fault+0x192/0x1d0 [ 2395.857653] ? v4l_querycap+0x340/0x340 [ 2395.857669] video_usercopy+0x13f/0xfa0 [ 2395.857689] ? v4l_enumstd+0x60/0x60 [ 2395.857703] ? do_futex+0x171/0x1880 [ 2395.857717] ? mark_held_locks+0xf0/0xf0 [ 2395.857734] ? debug_check_no_obj_freed+0x201/0x490 [ 2395.857757] ? video_usercopy+0xfa0/0xfa0 [ 2395.857768] v4l2_ioctl+0x147/0x1a0 [ 2395.857780] ? video_devdata+0xa0/0xa0 [ 2395.857794] do_vfs_ioctl+0xcdb/0x12e0 [ 2395.857809] ? lock_downgrade+0x720/0x720 [ 2395.862450] lowmem_reserve[]: 0 0 0 0 0 [ 2395.888287] ? check_preemption_disabled+0x41/0x280 [ 2395.888301] ? ioctl_preallocate+0x200/0x200 [ 2395.888315] ? __fget+0x356/0x510 [ 2395.888329] ? do_dup2+0x450/0x450 [ 2395.892454] Node 1 Normal free:26836kB min:53876kB low:67344kB high:80812kB active_anon:440kB inactive_anon:32576kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:160kB pagetables:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 2395.896933] ? __se_sys_futex+0x298/0x3b0 [ 2395.896953] ksys_ioctl+0x9b/0xc0 [ 2395.896968] __x64_sys_ioctl+0x6f/0xb0 [ 2395.901351] lowmem_reserve[]: 0 0 0 0 0 [ 2395.905662] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2395.911013] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10884kB [ 2395.914614] do_syscall_64+0xf9/0x620 [ 2395.918919] Node 0 DMA32: 1482*4kB (UME) 803*8kB (UME) 235*16kB (UME) 51*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17744kB [ 2395.923042] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2395.927263] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2395.931725] RIP: 0033:0x7f63ae2010c9 [ 2395.936041] Node 1 Normal: 69*4kB (UME) 50*8kB (ME) 45*16kB (M) 33*32kB (UME) 31*64kB (UME) 21*128kB (UME) 19*256kB (M) 5*512kB (ME) 4*1024kB (UME) 2*2048kB (UE) 1*4096kB (M) = 26836kB [ 2395.940347] Code: Bad RIP value. [ 2395.940354] RSP: 002b:00007f63ac773168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2395.940369] RAX: ffffffffffffffda RBX: 00007f63ae320f80 RCX: 00007f63ae2010c9 [ 2395.945108] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2395.949142] RDX: 0000000020000000 RSI: 00000000c100565c RDI: 0000000000000003 [ 2395.949149] RBP: 00007f63ae25cae9 R08: 0000000000000000 R09: 0000000000000000 [ 2395.949156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2395.949163] R13: 00007ffc79632fdf R14: 00007f63ac773300 R15: 0000000000022000 [ 2395.952751] Mem-Info: [ 2395.953250] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2395.957318] active_anon:14028 inactive_anon:12878 isolated_anon:0 [ 2395.957318] active_file:37 inactive_file:6 isolated_file:0 [ 2395.957318] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2395.957318] slab_reclaimable:14964 slab_unreclaimable:114679 [ 2395.957318] mapped:10960 shmem:13329 pagetables:383 bounce:0 [ 2395.957318] free:13857 free_pcp:181 free_cma:0 [ 2395.957342] Node 0 active_anon:55692kB inactive_anon:18936kB active_file:96kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:43840kB dirty:0kB writeback:0kB shmem:20544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2395.957366] Node 1 active_anon:420kB inactive_anon:32576kB active_file:52kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:32772kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2395.957370] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2395.957398] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2395.957416] Node 0 DMA32 free:17700kB min:35996kB low:44992kB high:53988kB active_anon:55692kB inactive_anon:18936kB active_file:112kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7296kB pagetables:1532kB bounce:0kB free_pcp:476kB local_pcp:244kB free_cma:0kB [ 2395.957444] lowmem_reserve[]: 0 0 1 1 1 [ 2395.957460] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2395.957488] lowmem_reserve[]: 0 0 0 0 0 [ 2395.957504] Node 1 Normal free:26836kB min:53876kB low:67344kB high:80812kB active_anon:420kB inactive_anon:32576kB active_file:52kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:160kB pagetables:0kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 2395.957533] lowmem_reserve[]: 0 0 0 0 0 [ 2395.984670] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2395.989397] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10884kB [ 2396.004333] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2396.009420] Node 0 DMA32: 1482*4kB (UME) 805*8kB (UME) 235*16kB (UME) 51*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17760kB [ 2396.019090] 13361 total pagecache pages [ 2396.022837] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2396.042033] 0 pages in swap cache [ 2396.049955] Node 1 Normal: 69*4kB (UME) 50*8kB (ME) 45*16kB (M) 33*32kB (UME) 31*64kB (UME) 21*128kB (UME) 19*256kB (M) 5*512kB (ME) 4*1024kB (UME) 2*2048kB (UE) 1*4096kB (M) = 26836kB [ 2396.062875] Swap cache stats: add 0, delete 0, find 0/0 [ 2396.069431] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2396.107646] Free swap = 0kB [ 2396.118719] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2396.140437] Total swap = 0kB [ 2396.150319] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2396.165686] 2097051 pages RAM [ 2396.195876] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2396.204117] 0 pages HighMem/MovableOnly [ 2396.221332] 13361 total pagecache pages [ 2396.235118] 369649 pages reserved [ 2396.254046] 0 pages in swap cache [ 2396.286836] 0 pages cma reserved [ 2396.312893] Swap cache stats: add 0, delete 0, find 0/0 [ 2396.357937] Unreclaimable slab info: [ 2396.365687] Free swap = 0kB [ 2396.414183] Name Used Total [ 2396.429615] Total swap = 0kB [ 2396.476194] pid_2 46KB 220KB [ 2396.490465] 2097051 pages RAM [ 2396.520176] batadv_tt_change_cache 1KB 3KB [ 2396.531380] 0 pages HighMem/MovableOnly [ 2396.555176] batadv_tl_cache 6KB 12KB [ 2396.565233] 369649 pages reserved [ 2396.584639] TIPC 114KB 120KB [ 2396.597473] 0 pages cma reserved [ 2396.616233] SCTPv6 18KB 24KB [ 2396.694491] DCCPv6 17KB 30KB [ 2396.720785] DCCP 16KB 35KB [ 2396.726200] L2TP/IP 171KB 180KB [ 2396.746978] RXRPC 14KB 19KB [ 2396.752367] rxrpc_call_jar 101KB 102KB [ 2396.775266] bridge_fdb_cache 12KB 19KB [ 2396.803365] fib6_nodes 209KB 280KB [ 2396.833006] ip6_dst_cache 408KB 408KB [ 2396.855816] RAWv6 91KB 101KB [ 2396.884435] UDPv6 33KB 41KB [ 2396.911009] TCPv6 21KB 30KB [ 2396.934285] nf_conntrack 6KB 7KB [ 2396.936370] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2396.939732] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2396.946190] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2396.952677] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2396.959178] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2396.965663] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2396.972149] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2396.985132] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2397.004545] t10_alua_lu_gp_cache 0KB 3KB [ 2397.023136] sd_ext_cdb 0KB 7KB [ 2397.031784] scsi_sense_cache 1056KB 1060KB [ 2397.043635] virtio_scsi_cmd 16KB 16KB [ 2397.052689] sgpool-128 8KB 8KB [ 2397.064481] sgpool-64 4KB 12KB [ 2397.073328] sgpool-32 2KB 15KB [ 2397.085085] sgpool-16 1KB 7KB [ 2397.103858] sgpool-8 0KB 7KB [ 2397.112329] mqueue_inode_cache 13KB 30KB [ 2397.130962] bio_post_read_ctx 14KB 15KB [ 2397.142781] bio-2 14KB 15KB [ 2397.154563] jfs_mp 7KB 7KB [ 2397.166175] cifs_small_rq 15KB 16KB [ 2397.184883] cifs_request 67KB 67KB [ 2397.193353] cifs_mpx_ids 0KB 7KB [ 2397.211759] nfs_commit_data 3KB 14KB [ 2397.223296] nfs_write_data 34KB 44KB [ 2397.234968] ext4_system_zone 1KB 7KB [ 2397.253383] bio-1 1KB 7KB [ 2397.262040] pid_namespace 2KB 11KB [ 2397.280090] rpc_buffers 17KB 25KB [ 2397.285472] rpc_tasks 2KB 7KB [ 2397.304138] UNIX 1042KB 1057KB [ 2397.312831] tcp_bind_bucket 1KB 4KB [ 2397.331048] ip_fib_trie 30KB 47KB [ 2397.342999] ip_fib_alias 148KB 197KB [ 2397.355017] ip_dst_cache 9KB 16KB [ 2397.373947] RAW 54KB 67KB [ 2397.382457] UDP 43KB 54KB [ 2397.400881] TCP 8KB 11KB [ 2397.412767] hugetlbfs_inode_cache 3KB 15KB [ 2397.424624] fscache_cookie_jar 1KB 11KB [ 2397.443205] eventpoll_pwq 20KB 47KB [ 2397.451700] eventpoll_epi 38KB 59KB [ 2397.470075] inotify_inode_mark 17KB 55KB [ 2397.475547] request_queue 199KB 199KB [ 2397.494032] blkdev_requests 1KB 3KB [ 2397.502739] blkdev_ioc 27KB 30KB [ 2397.520986] bio-0 860KB 862KB [ 2397.533075] biovec-max 1460KB 1460KB [ 2397.544783] biovec-64 821KB 826KB [ 2397.563984] biovec-16 99KB 101KB [ 2397.572589] bio_integrity_payload 1KB 8KB [ 2397.591947] khugepaged_mm_slot 8KB 42KB [ 2397.600739] uid_cache 0KB 4KB [ 2397.606119] dmaengine-unmap-2 0KB 3KB [ 2397.624943] skbuff_fclone_cache 76KB 285KB [ 2397.633716] skbuff_head_cache 7237KB 7237KB [ 2397.652195] configfs_dir_cache 3KB 7KB [ 2397.664180] file_lock_cache 68KB 194KB [ 2397.675855] file_lock_ctx 9KB 11KB [ 2397.701232] fsnotify_mark_connector 8KB 31KB [ 2397.713414] net_namespace 70KB 70KB [ 2397.735132] shmem_inode_cache 8170KB 8485KB [ 2397.743707] task_delay_info 233KB 395KB [ 2397.765829] taskstats 60KB 222KB [ 2397.771283] proc_dir_entry 824KB 832KB [ 2397.793704] pde_opener 11KB 34KB [ 2397.799176] seq_file 230KB 334KB [ 2397.804549] sigqueue 44KB 47KB [ 2397.829732] kernfs_node_cache 18193KB 18246KB [ 2397.835134] mnt_cache 207KB 216KB [ 2397.860165] filp 6714KB 7125KB [ 2397.865554] names_cache 120432KB 120470KB [ 2397.884848] iint_cache 30KB 51KB [ 2397.890292] key_jar 4KB 7KB [ 2397.895658] uts_namespace 3KB 7KB [ 2397.920784] nsproxy 2KB 7KB [ 2397.935452] vm_area_struct 3142KB 5019KB [ 2397.960260] mm_struct 520KB 1072KB [ 2397.965653] fs_cache 210KB 328KB [ 2397.974971] files_cache 778KB 903KB [ 2397.999902] signal_cache 1474KB 1840KB [ 2398.005294] sighand_cache 559KB 638KB [ 2398.024873] task_struct 7903KB 7972KB [ 2398.030328] cred_jar 1704KB 2264KB [ 2398.035700] anon_vma_chain 978KB 1834KB [ 2398.060924] anon_vma 101KB 350KB [ 2398.075724] pid 112KB 216KB [ 2398.100420] Acpi-Operand 156KB 198KB [ 2398.105819] Acpi-ParseExt 8KB 11KB [ 2398.125822] Acpi-Parse 41KB 47KB [ 2398.131284] Acpi-State 52KB 63KB [ 2398.153467] Acpi-Namespace 21KB 23KB [ 2398.165399] numa_policy 0KB 3KB [ 2398.187726] debug_objects_cache 1930KB 2403KB [ 2398.193306] trace_event_file 297KB 298KB [ 2398.215304] ftrace_event_field 398KB 401KB [ 2398.241143] pool_workqueue 135KB 148KB [ 2398.249759] page->ptl 532KB 1363KB [ 2398.255192] kmalloc-2097152 2050KB 2050KB [ 2398.272735] kmalloc-524288 2056KB 2056KB [ 2398.281367] kmalloc-262144 1290KB 1290KB [ 2398.293316] kmalloc-131072 650KB 650KB [ 2398.302187] kmalloc-65536 2376KB 2442KB [ 2398.314380] kmalloc-32768 1980KB 1980KB [ 2398.323181] kmalloc-16384 1204KB 1237KB [ 2398.334706] kmalloc-8192 4974KB 5016KB [ 2398.353354] kmalloc-4096 24412KB 24450KB [ 2398.361969] kmalloc-2048 14926KB 15440KB [ 2398.380804] kmalloc-1024 10111KB 10111KB [ 2398.393026] kmalloc-512 14568KB 14568KB [ 2398.405016] kmalloc-256 5360KB 5827KB [ 2398.423803] kmalloc-128 1173KB 1523KB [ 2398.432585] kmalloc-96 3626KB 4552KB [ 2398.451114] kmalloc-64 2786KB 4332KB [ 2398.463225] kmalloc-32 1916KB 2579KB [ 2398.475013] kmalloc-192 1921KB 2588KB [ 2398.489057] kmem_cache 177KB 180KB [ 2398.495043] Out of memory (oom_kill_allocating_task): Kill process 8081 (syz-fuzzer) score 0 or sacrifice child [ 2398.506379] Killed process 8075 (syz-fuzzer) total-vm:925200kB, anon-rss:43844kB, file-rss:0kB, shmem-rss:760kB [ 2398.561415] oom_reaper: reaped process 8075 (syz-fuzzer), now anon-rss:0kB, file-rss:0kB, shmem-rss:760kB