0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:01 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
syz_clone(0xa0205800, &(0x7f0000000080)="cf36427ea3420a", 0x7, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140))

00:36:01 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40086602, &(0x7f0000000080)=0x8)
ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000000))

00:36:01 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x6, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000100)={0x8001, 0x5}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x7fff, 0x0, 0x2, "a9f1fcb60e37f6400f01ca9a3268fe0c48ec7a35d4122ef7443dca4ef61e73e7", 0x35315241})

00:36:01 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x16, 0x1, 0x3, 0x3, 0x1, 0x1, 0x4, '\x00', 0x0, r1, 0x4, 0x3}, 0x48)

00:36:01 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1e, 0x3ff, 0x80, 0xfffffffe, 0xd4, r1, 0xb6, '\x00', 0x0, r2, 0x5, 0x5, 0x4}, 0x48)
ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[0x9, 0x40, 0xe513, 0x8, 0x3ff]})
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3f, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x3, 0x8, 0x4, {0x3, @pix={0x80000001, 0x942, 0x34325842, 0x0, 0x101, 0x6, 0x5, 0xfffff001, 0x1, 0x6, 0x0, 0x2}}, 0x9})
ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000440)={0x2, @sliced={0x3, [0x81, 0x1000, 0x3966, 0x4, 0x1, 0xdbe2, 0x800, 0x401, 0x9, 0x3, 0x4, 0x0, 0xd2, 0x8f0, 0x566, 0xffff, 0x6, 0x1f, 0x94fd, 0x8, 0xed8, 0x80, 0xff, 0x7, 0x7, 0x0, 0x4, 0x800, 0x8000, 0x26d2, 0x1, 0x400, 0x2, 0x3, 0xffc1, 0x401, 0xffff, 0x1, 0x40, 0x4, 0x9867, 0x101, 0x9, 0x5, 0x89de, 0x0, 0x6, 0x2], 0x7ff}})

00:36:01 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
syz_clone(0xa0205800, &(0x7f0000000080)="cf36427ea3420a", 0x7, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140))

00:36:01 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40086602, &(0x7f0000000080)=0x8)
ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000000)) (async)
ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000000))

00:36:01 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xfffffffc, 0xffffffff}) (async)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xfffffffc, 0xffffffff})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:01 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x6, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000100)={0x8001, 0x5}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x7fff, 0x0, 0x2, "a9f1fcb60e37f6400f01ca9a3268fe0c48ec7a35d4122ef7443dca4ef61e73e7", 0x35315241})

00:36:01 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x16, 0x1, 0x3, 0x3, 0x1, 0x1, 0x4, '\x00', 0x0, r1, 0x4, 0x3}, 0x48)
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x16, 0x1, 0x3, 0x3, 0x1, 0x1, 0x4, '\x00', 0x0, r1, 0x4, 0x3}, 0x48) (async)

00:36:01 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40086602, &(0x7f0000000080)=0x8)
ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000000))

00:36:01 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}}) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async, rerun: 64)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (rerun: 64)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1e, 0x3ff, 0x80, 0xfffffffe, 0xd4, r1, 0xb6, '\x00', 0x0, r2, 0x5, 0x5, 0x4}, 0x48) (async)
ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[0x9, 0x40, 0xe513, 0x8, 0x3ff]})
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3f, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x3, 0x8, 0x4, {0x3, @pix={0x80000001, 0x942, 0x34325842, 0x0, 0x101, 0x6, 0x5, 0xfffff001, 0x1, 0x6, 0x0, 0x2}}, 0x9}) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000440)={0x2, @sliced={0x3, [0x81, 0x1000, 0x3966, 0x4, 0x1, 0xdbe2, 0x800, 0x401, 0x9, 0x3, 0x4, 0x0, 0xd2, 0x8f0, 0x566, 0xffff, 0x6, 0x1f, 0x94fd, 0x8, 0xed8, 0x80, 0xff, 0x7, 0x7, 0x0, 0x4, 0x800, 0x8000, 0x26d2, 0x1, 0x400, 0x2, 0x3, 0xffc1, 0x401, 0xffff, 0x1, 0x40, 0x4, 0x9867, 0x101, 0x9, 0x5, 0x89de, 0x0, 0x6, 0x2], 0x7ff}})

00:36:01 executing program 2:
getgid()
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:01 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
syz_clone(0xa0205800, &(0x7f0000000080)="cf36427ea3420a", 0x7, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140))
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
syz_clone(0xa0205800, &(0x7f0000000080)="cf36427ea3420a", 0x7, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) (async)

00:36:01 executing program 4:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x3, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x3, @win={{0x7, 0x80000001, 0x1, 0x5}, 0x4, 0x0, &(0x7f00000004c0)={{0xfffffffe, 0x81, 0xffffffe1, 0x7}, &(0x7f0000000480)={{0x2, 0x7, 0x4, 0x471e80}, &(0x7f0000000440)={{0x0, 0x8e1, 0x3, 0x4}}}}, 0x3, &(0x7f0000000500)="617a01d84af8bdd5236b3fd5e0d393692629efcf970ec4502e14baee08f4d9552dd2097eaf73019f7467bec9c9585b4a4593a89dfa97f3838445adaff6cbdfc55866a48f8dd57f62e4557d6a28b39b98285deeca1670d886cf3e252eda4c4fa5be17619a65dd13f7b6f6ad77ec843ea78e6b8c6380d6d799ede10169c1ffc5e79ad5defcffc1161e4acbd46e9d8495b9308cea36e08fb535f4cfed23cebd129c1404e3a5c7dbf616a0a17483988f738837388f1e865fb0c62d4fd53c58cf302260dfc6f3", 0x9}})
r1 = syz_open_dev$vim2m(&(0x7f0000000740), 0xffffffffffffff5f, 0x2)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000780))
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0], 0x7, 0x1, 0x1, 0x1})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_open_dev$vim2m(&(0x7f0000000600), 0x6, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000640)={0x3, @sdr={0x41414770, 0x2}})
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000003ec9fb77bb92200420893c893d80d680c36daa1f5381e3028a5cb2164a6a39bbe8652507976648c28ec8ca3d11d1e0dd641d2454dd0d504de83ac6d5360e0fe0db17a1297a7e880b7971ee142264d6cd15d8", @ANYRES16=0x0, @ANYBLOB="00000000000000000f000000"], 0x14}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan3\x00'})

00:36:02 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x16, 0x1, 0x3, 0x3, 0x1, 0x1, 0x4, '\x00', 0x0, r1, 0x4, 0x3}, 0x48)
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x16, 0x1, 0x3, 0x3, 0x1, 0x1, 0x4, '\x00', 0x0, r1, 0x4, 0x3}, 0x48) (async)

00:36:02 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40086602, &(0x7f0000000080)=0x8)

00:36:02 executing program 2:
getgid()
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
getgid() (async)
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)

00:36:02 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x80000, 0x0, <r1=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000100)={0x2, @pix_mp={0x3, 0x7fffffff, 0x31363553, 0x4, 0x2, [{0x7fff, 0x1}, {0xffffffd5, 0x200}, {0xff, 0x9}, {0x0, 0x8}, {0x6, 0x4}, {0x89a3, 0x3ff}, {0x7f, 0x4}, {0x9, 0x4}], 0x4, 0x1, 0x0, 0x1, 0x1}})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x38414762})

00:36:02 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}}) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0) (async, rerun: 32)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1e, 0x3ff, 0x80, 0xfffffffe, 0xd4, r1, 0xb6, '\x00', 0x0, r2, 0x5, 0x5, 0x4}, 0x48) (rerun: 32)
ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[0x9, 0x40, 0xe513, 0x8, 0x3ff]})
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3f, 0x2) (async)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x3, 0x8, 0x4, {0x3, @pix={0x80000001, 0x942, 0x34325842, 0x0, 0x101, 0x6, 0x5, 0xfffff001, 0x1, 0x6, 0x0, 0x2}}, 0x9})
ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000440)={0x2, @sliced={0x3, [0x81, 0x1000, 0x3966, 0x4, 0x1, 0xdbe2, 0x800, 0x401, 0x9, 0x3, 0x4, 0x0, 0xd2, 0x8f0, 0x566, 0xffff, 0x6, 0x1f, 0x94fd, 0x8, 0xed8, 0x80, 0xff, 0x7, 0x7, 0x0, 0x4, 0x800, 0x8000, 0x26d2, 0x1, 0x400, 0x2, 0x3, 0xffc1, 0x401, 0xffff, 0x1, 0x40, 0x4, 0x9867, 0x101, 0x9, 0x5, 0x89de, 0x0, 0x6, 0x2], 0x7ff}})

00:36:02 executing program 2:
getgid()
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:02 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40086602, &(0x7f0000000080)=0x8) (async)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40086602, &(0x7f0000000080)=0x8)

00:36:02 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x80000, 0x0, <r1=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000100)={0x2, @pix_mp={0x3, 0x7fffffff, 0x31363553, 0x4, 0x2, [{0x7fff, 0x1}, {0xffffffd5, 0x200}, {0xff, 0x9}, {0x0, 0x8}, {0x6, 0x4}, {0x89a3, 0x3ff}, {0x7f, 0x4}, {0x9, 0x4}], 0x4, 0x1, 0x0, 0x1, 0x1}})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x38414762})
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x80000}) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000100)={0x2, @pix_mp={0x3, 0x7fffffff, 0x31363553, 0x4, 0x2, [{0x7fff, 0x1}, {0xffffffd5, 0x200}, {0xff, 0x9}, {0x0, 0x8}, {0x6, 0x4}, {0x89a3, 0x3ff}, {0x7f, 0x4}, {0x9, 0x4}], 0x4, 0x1, 0x0, 0x1, 0x1}}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x38414762}) (async)

00:36:02 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x55595659, [0x800000], [0xd, 0x2]}})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000000c0)={0x3, 0x4, 0x9, 0x80000})
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x40a802, 0x54)
ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000140)=@multiplanar_mmap={0x7, 0x3, 0x4, 0x2, 0x3, {0x77359400}, {0x1, 0x0, 0x81, 0x4, 0x9d, 0x9, "458a8318"}, 0xfa, 0x1, {&(0x7f0000000000)=[{0x0, 0x4, {0x5511}, 0x1}, {0x7f1, 0x9, {0xe8}}]}, 0x1f, 0x0, r2})
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x1, 0x3, 0x1, 0x0, 0x7})

00:36:02 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40086602, &(0x7f0000000080)=0x8)

00:36:02 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, <r1=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000180)=@multiplanar_overlay={0x1, 0x3, 0x4, 0x100, 0x7, {0x0, 0x2710}, {0x5, 0x0, 0x5, 0x2, 0x8, 0x5c, "40a99428"}, 0x8, 0x3, {&(0x7f0000000100)=[{0x3db3, 0x9, {0x6e}, 0x7fff}, {0x41ad5857, 0xe2f3, {0x6}, 0x2}]}, 0x4})
r2 = syz_open_dev$vim2m(&(0x7f0000000380), 0x2, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000003c0)={0xf69})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x0, <r3=>0xffffffffffffffff})
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000300)=@multiplanar_mmap={0x4, 0x1, 0x4, 0x0, 0x63eb, {}, {0x5, 0xc, 0x0, 0xff, 0xec, 0x4, "ef76305a"}, 0xfffffffd, 0x1, {&(0x7f0000000280)=[{0x80000001, 0x5, {0xfd}, 0xffffffff}, {0x0, 0xd310, {0x2}, 0x4}]}, 0x0, 0x0, r4})

00:36:02 executing program 4:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x3, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x3, @win={{0x7, 0x80000001, 0x1, 0x5}, 0x4, 0x0, &(0x7f00000004c0)={{0xfffffffe, 0x81, 0xffffffe1, 0x7}, &(0x7f0000000480)={{0x2, 0x7, 0x4, 0x471e80}, &(0x7f0000000440)={{0x0, 0x8e1, 0x3, 0x4}}}}, 0x3, &(0x7f0000000500)="617a01d84af8bdd5236b3fd5e0d393692629efcf970ec4502e14baee08f4d9552dd2097eaf73019f7467bec9c9585b4a4593a89dfa97f3838445adaff6cbdfc55866a48f8dd57f62e4557d6a28b39b98285deeca1670d886cf3e252eda4c4fa5be17619a65dd13f7b6f6ad77ec843ea78e6b8c6380d6d799ede10169c1ffc5e79ad5defcffc1161e4acbd46e9d8495b9308cea36e08fb535f4cfed23cebd129c1404e3a5c7dbf616a0a17483988f738837388f1e865fb0c62d4fd53c58cf302260dfc6f3", 0x9}}) (async)
r1 = syz_open_dev$vim2m(&(0x7f0000000740), 0xffffffffffffff5f, 0x2)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000780)) (async)
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1}) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0], 0x7, 0x1, 0x1, 0x1}) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_open_dev$vim2m(&(0x7f0000000600), 0x6, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000640)={0x3, @sdr={0x41414770, 0x2}}) (async)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000003ec9fb77bb92200420893c893d80d680c36daa1f5381e3028a5cb2164a6a39bbe8652507976648c28ec8ca3d11d1e0dd641d2454dd0d504de83ac6d5360e0fe0db17a1297a7e880b7971ee142264d6cd15d8", @ANYRES16=0x0, @ANYBLOB="00000000000000000f000000"], 0x14}}, 0x0) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan3\x00'}) (rerun: 32)

00:36:02 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000000c0)={0x0, <r1=>0x0, <r2=>0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0]})
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, r1, r2, 0x0], 0x4, 0x800})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:02 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x80000, 0x0, <r1=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000100)={0x2, @pix_mp={0x3, 0x7fffffff, 0x31363553, 0x4, 0x2, [{0x7fff, 0x1}, {0xffffffd5, 0x200}, {0xff, 0x9}, {0x0, 0x8}, {0x6, 0x4}, {0x89a3, 0x3ff}, {0x7f, 0x4}, {0x9, 0x4}], 0x4, 0x1, 0x0, 0x1, 0x1}}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x38414762})

00:36:02 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x55595659, [0x800000], [0xd, 0x2]}})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000000c0)={0x3, 0x4, 0x9, 0x80000})
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x40a802, 0x54)
ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000140)=@multiplanar_mmap={0x7, 0x3, 0x4, 0x2, 0x3, {0x77359400}, {0x1, 0x0, 0x81, 0x4, 0x9d, 0x9, "458a8318"}, 0xfa, 0x1, {&(0x7f0000000000)=[{0x0, 0x4, {0x5511}, 0x1}, {0x7f1, 0x9, {0xe8}}]}, 0x1f, 0x0, r2})
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x1, 0x3, 0x1, 0x0, 0x7})
syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x55595659, [0x800000], [0xd, 0x2]}}) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000000c0)={0x3, 0x4, 0x9, 0x80000}) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x40a802, 0x54) (async)
ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000140)=@multiplanar_mmap={0x7, 0x3, 0x4, 0x2, 0x3, {0x77359400}, {0x1, 0x0, 0x81, 0x4, 0x9d, 0x9, "458a8318"}, 0xfa, 0x1, {&(0x7f0000000000)=[{0x0, 0x4, {0x5511}, 0x1}, {0x7f1, 0x9, {0xe8}}]}, 0x1f, 0x0, r2}) (async)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x1, 0x3, 0x1, 0x0, 0x7}) (async)

00:36:02 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000040))
ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000000)={0x7, 0x3, {0xffffffffffffffff}, {0xffffffffffffffff}, 0xd6, 0x5})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40086602, &(0x7f0000000080)=0x8)

00:36:02 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, <r1=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000180)=@multiplanar_overlay={0x1, 0x3, 0x4, 0x100, 0x7, {0x0, 0x2710}, {0x5, 0x0, 0x5, 0x2, 0x8, 0x5c, "40a99428"}, 0x8, 0x3, {&(0x7f0000000100)=[{0x3db3, 0x9, {0x6e}, 0x7fff}, {0x41ad5857, 0xe2f3, {0x6}, 0x2}]}, 0x4}) (async)
r2 = syz_open_dev$vim2m(&(0x7f0000000380), 0x2, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000003c0)={0xf69}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x0, <r3=>0xffffffffffffffff})
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000300)=@multiplanar_mmap={0x4, 0x1, 0x4, 0x0, 0x63eb, {}, {0x5, 0xc, 0x0, 0xff, 0xec, 0x4, "ef76305a"}, 0xfffffffd, 0x1, {&(0x7f0000000280)=[{0x80000001, 0x5, {0xfd}, 0xffffffff}, {0x0, 0xd310, {0x2}, 0x4}]}, 0x0, 0x0, r4})

00:36:02 executing program 3:
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000000c0)={0x0, <r1=>0x0, <r2=>0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0]})
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, r1, r2, 0x0], 0x4, 0x800})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:02 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "6955ad5e81ddb8a6c300000000000000000400"})

00:36:02 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async, rerun: 32)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (rerun: 32)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000040)) (async)
ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000000)={0x7, 0x3, {0xffffffffffffffff}, {0xffffffffffffffff}, 0xd6, 0x5})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40086602, &(0x7f0000000080)=0x8)

00:36:02 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, <r1=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000180)=@multiplanar_overlay={0x1, 0x3, 0x4, 0x100, 0x7, {0x0, 0x2710}, {0x5, 0x0, 0x5, 0x2, 0x8, 0x5c, "40a99428"}, 0x8, 0x3, {&(0x7f0000000100)=[{0x3db3, 0x9, {0x6e}, 0x7fff}, {0x41ad5857, 0xe2f3, {0x6}, 0x2}]}, 0x4}) (async)
r2 = syz_open_dev$vim2m(&(0x7f0000000380), 0x2, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000003c0)={0xf69}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x0, <r3=>0xffffffffffffffff}) (async)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000300)=@multiplanar_mmap={0x4, 0x1, 0x4, 0x0, 0x63eb, {}, {0x5, 0xc, 0x0, 0xff, 0xec, 0x4, "ef76305a"}, 0xfffffffd, 0x1, {&(0x7f0000000280)=[{0x80000001, 0x5, {0xfd}, 0xffffffff}, {0x0, 0xd310, {0x2}, 0x4}]}, 0x0, 0x0, r4})

00:36:02 executing program 4:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x3, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x3, @win={{0x7, 0x80000001, 0x1, 0x5}, 0x4, 0x0, &(0x7f00000004c0)={{0xfffffffe, 0x81, 0xffffffe1, 0x7}, &(0x7f0000000480)={{0x2, 0x7, 0x4, 0x471e80}, &(0x7f0000000440)={{0x0, 0x8e1, 0x3, 0x4}}}}, 0x3, &(0x7f0000000500)="617a01d84af8bdd5236b3fd5e0d393692629efcf970ec4502e14baee08f4d9552dd2097eaf73019f7467bec9c9585b4a4593a89dfa97f3838445adaff6cbdfc55866a48f8dd57f62e4557d6a28b39b98285deeca1670d886cf3e252eda4c4fa5be17619a65dd13f7b6f6ad77ec843ea78e6b8c6380d6d799ede10169c1ffc5e79ad5defcffc1161e4acbd46e9d8495b9308cea36e08fb535f4cfed23cebd129c1404e3a5c7dbf616a0a17483988f738837388f1e865fb0c62d4fd53c58cf302260dfc6f3", 0x9}}) (async)
r1 = syz_open_dev$vim2m(&(0x7f0000000740), 0xffffffffffffff5f, 0x2)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000780)) (async)
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0], 0x7, 0x1, 0x1, 0x1}) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_open_dev$vim2m(&(0x7f0000000600), 0x6, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000640)={0x3, @sdr={0x41414770, 0x2}})
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000003ec9fb77bb92200420893c893d80d680c36daa1f5381e3028a5cb2164a6a39bbe8652507976648c28ec8ca3d11d1e0dd641d2454dd0d504de83ac6d5360e0fe0db17a1297a7e880b7971ee142264d6cd15d8", @ANYRES16=0x0, @ANYBLOB="00000000000000000f000000"], 0x14}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan3\x00'})

00:36:02 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x55595659, [0x800000], [0xd, 0x2]}})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000000c0)={0x3, 0x4, 0x9, 0x80000})
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x40a802, 0x54)
ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000140)=@multiplanar_mmap={0x7, 0x3, 0x4, 0x2, 0x3, {0x77359400}, {0x1, 0x0, 0x81, 0x4, 0x9d, 0x9, "458a8318"}, 0xfa, 0x1, {&(0x7f0000000000)=[{0x0, 0x4, {0x5511}, 0x1}, {0x7f1, 0x9, {0xe8}}]}, 0x1f, 0x0, r2})
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x1, 0x3, 0x1, 0x0, 0x7})
syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x55595659, [0x800000], [0xd, 0x2]}}) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000000c0)={0x3, 0x4, 0x9, 0x80000}) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x40a802, 0x54) (async)
ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000140)=@multiplanar_mmap={0x7, 0x3, 0x4, 0x2, 0x3, {0x77359400}, {0x1, 0x0, 0x81, 0x4, 0x9d, 0x9, "458a8318"}, 0xfa, 0x1, {&(0x7f0000000000)=[{0x0, 0x4, {0x5511}, 0x1}, {0x7f1, 0x9, {0xe8}}]}, 0x1f, 0x0, r2}) (async)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x1, 0x3, 0x1, 0x0, 0x7}) (async)

00:36:02 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000000c0)={0x0, <r1=>0x0, <r2=>0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0]}) (async)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, r1, r2, 0x0], 0x4, 0x800})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:02 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "6955ad5e81ddb8a6c300000000000000000400"})

00:36:02 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000040)) (async)
ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000000)={0x7, 0x3, {0xffffffffffffffff}, {0xffffffffffffffff}, 0xd6, 0x5}) (async)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40086602, &(0x7f0000000080)=0x8)

00:36:02 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "6955ad5e81ddb8a6c300000000000000000400"})

00:36:02 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14}, 0x14}}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14}, 0x14}}, 0x0)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r7=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r7, @ANYBLOB='\f'], 0x28}}, 0x0)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r10=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r10, @ANYBLOB='\f'], 0x28}}, 0x0)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x38}, 0x1, 0x0, 0x0, 0x48014}, 0x20008000)
r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r3)
sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r11, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5}]}, 0x1c}}, 0x0)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r11, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48051}, 0x1000)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:02 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000080)=@userptr={0x39bb6766, 0x0, 0x4, 0x400, 0xdb, {0x77359400}, {0x4, 0x8, 0x7, 0x1f, 0x5, 0x3, "e9996c32"}, 0xb0c, 0x2, {&(0x7f0000000040)}, 0x101})
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x400], [0x9]}})

00:36:02 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000080)={0x2, 0x6, 0x52c, 0x10080})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0xffffffff, 0x3, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x41414770})

00:36:02 executing program 5:
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)

00:36:02 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000080)=@userptr={0x39bb6766, 0x0, 0x4, 0x400, 0xdb, {0x77359400}, {0x4, 0x8, 0x7, 0x1f, 0x5, 0x3, "e9996c32"}, 0xb0c, 0x2, {&(0x7f0000000040)}, 0x101})
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x400], [0x9]}}) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x400], [0x9]}})

00:36:02 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40086602, &(0x7f0000000080)=0x8)

00:36:02 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
getgid()

00:36:02 executing program 5:
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)

00:36:02 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000080)={0x2, 0x6, 0x52c, 0x10080})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0xffffffff, 0x3, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x41414770})

00:36:02 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40086602, &(0x7f0000000080)=0x8)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40086602, &(0x7f0000000080)=0x8) (async)

00:36:02 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000080)=@userptr={0x39bb6766, 0x0, 0x4, 0x400, 0xdb, {0x77359400}, {0x4, 0x8, 0x7, 0x1f, 0x5, 0x3, "e9996c32"}, 0xb0c, 0x2, {&(0x7f0000000040)}, 0x101}) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x400], [0x9]}})

00:36:02 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14}, 0x14}}, 0x0) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14}, 0x14}}, 0x0) (async)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r7=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r7, @ANYBLOB='\f'], 0x28}}, 0x0) (async)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) (async)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r10=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r10, @ANYBLOB='\f'], 0x28}}, 0x0)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x38}, 0x1, 0x0, 0x0, 0x48014}, 0x20008000) (async)
r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r3)
sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r11, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5}]}, 0x1c}}, 0x0) (async)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r11, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48051}, 0x1000) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:02 executing program 5:
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)

00:36:02 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000080)={0x2, 0x6, 0x52c, 0x10080}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0xffffffff, 0x3, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x41414770})

00:36:02 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
getgid()

00:36:02 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40086602, &(0x7f0000000080)=0x8)

00:36:02 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xdd, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})

00:36:02 executing program 5:
shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2000)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:02 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
getgid()
syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
getgid() (async)

00:36:02 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88b65581ddb8a6c39cd926dbe17f005bed00"})

00:36:02 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14}, 0x14}}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14}, 0x14}}, 0x0)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r7=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r7, @ANYBLOB='\f'], 0x28}}, 0x0)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r10=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r10, @ANYBLOB='\f'], 0x28}}, 0x0)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x38}, 0x1, 0x0, 0x0, 0x48014}, 0x20008000)
r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r3)
sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r11, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5}]}, 0x1c}}, 0x0)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r11, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48051}, 0x1000)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14}, 0x14}}, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14}, 0x14}}, 0x0) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) (async)
sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r7, @ANYBLOB='\f'], 0x28}}, 0x0) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) (async)
sendmsg$NL802154_CMD_SET_CHANNEL(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r10, @ANYBLOB='\f'], 0x28}}, 0x0) (async)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x38}, 0x1, 0x0, 0x0, 0x48014}, 0x20008000) (async)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r3) (async)
sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r11, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5}]}, 0x1c}}, 0x0) (async)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r11, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48051}, 0x1000) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)

00:36:02 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xdd, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})

00:36:02 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x81, 0x6a6, 0x9, 0x80, 0x1, 0x3, '\x00', 0x0, r0, 0x5, 0x5, 0x2}, 0x48)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40086602, &(0x7f0000000080)=0x8)
syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x2)
clock_gettime(0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, 0x0)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r5, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000240)={0x0, 0x400, 0x8001, 0x80})
symlinkat(&(0x7f00000001c0)='./file0\x00', r5, &(0x7f0000000200)='./file0\x00')
ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000140)=@multiplanar_mmap={0x1ff, 0x1, 0x4, 0x70000, 0x3, {r2, r3/1000+10000}, {0x1, 0x5, 0x0, 0x9, 0x80, 0xff, "9dafe412"}, 0xf49, 0x1, {&(0x7f00000000c0)=[{0x1, 0x9, {0x8876}, 0x2000000}, {0xfffffc00, 0x3, {0x6}, 0x3f}]}, 0xc621, 0x0, r4})

00:36:02 executing program 5:
shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2000)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2000) (async)
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)

00:36:02 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x2, "69558100", 0x4745504d})
clock_gettime(0x0, &(0x7f0000000080)={<r1=>0x0, <r2=>0x0})
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_MAP_BUFS(r3, 0xc0186419, &(0x7f0000000840)={0x6, &(0x7f0000000280)=""/197, &(0x7f0000000780)=[{0x58, 0x86, 0x7, &(0x7f0000000380)=""/134}, {0x1000, 0xd2, 0x3f, &(0x7f0000000440)=""/210}, {0x5, 0x60, 0x1, &(0x7f0000000540)=""/96}, {0x80000000, 0x8a, 0x101, &(0x7f00000005c0)=""/138}, {0x988, 0xfc, 0x2, &(0x7f0000000680)=""/252}, {0x6, 0x28, 0x0, &(0x7f00000000c0)=""/40}]})
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000001c0)=@multiplanar_userptr={0x3f, 0x0, 0x4, 0x70000, 0x7f, {r1, r2/1000+60000}, {0x5, 0x0, 0x4, 0x7f, 0x4, 0x3}, 0x0, 0x2, {&(0x7f0000000140)=[{0x0, 0x7, {&(0x7f0000000240)}, 0x100001f}, {0x5cf, 0xec3, {&(0x7f0000000100)}, 0x8000}]}, 0x3ded, 0x0, r3})

00:36:02 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88b65581ddb8a6c39cd926dbe17f005bed00"})

00:36:02 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xdd, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})

00:36:02 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x81, 0x6a6, 0x9, 0x80, 0x1, 0x3, '\x00', 0x0, r0, 0x5, 0x5, 0x2}, 0x48) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40086602, &(0x7f0000000080)=0x8) (async)
syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x2) (async)
clock_gettime(0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, 0x0) (async)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r5, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000240)={0x0, 0x400, 0x8001, 0x80})
symlinkat(&(0x7f00000001c0)='./file0\x00', r5, &(0x7f0000000200)='./file0\x00')
ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000140)=@multiplanar_mmap={0x1ff, 0x1, 0x4, 0x70000, 0x3, {r2, r3/1000+10000}, {0x1, 0x5, 0x0, 0x9, 0x80, 0xff, "9dafe412"}, 0xf49, 0x1, {&(0x7f00000000c0)=[{0x1, 0x9, {0x8876}, 0x2000000}, {0xfffffc00, 0x3, {0x6}, 0x3f}]}, 0xc621, 0x0, r4})

00:36:02 executing program 5:
shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2000) (async, rerun: 32)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (rerun: 32)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:02 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x2, "69558100", 0x4745504d})
clock_gettime(0x0, &(0x7f0000000080)={<r1=>0x0, <r2=>0x0}) (async)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_MAP_BUFS(r3, 0xc0186419, &(0x7f0000000840)={0x6, &(0x7f0000000280)=""/197, &(0x7f0000000780)=[{0x58, 0x86, 0x7, &(0x7f0000000380)=""/134}, {0x1000, 0xd2, 0x3f, &(0x7f0000000440)=""/210}, {0x5, 0x60, 0x1, &(0x7f0000000540)=""/96}, {0x80000000, 0x8a, 0x101, &(0x7f00000005c0)=""/138}, {0x988, 0xfc, 0x2, &(0x7f0000000680)=""/252}, {0x6, 0x28, 0x0, &(0x7f00000000c0)=""/40}]})
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000001c0)=@multiplanar_userptr={0x3f, 0x0, 0x4, 0x70000, 0x7f, {r1, r2/1000+60000}, {0x5, 0x0, 0x4, 0x7f, 0x4, 0x3}, 0x0, 0x2, {&(0x7f0000000140)=[{0x0, 0x7, {&(0x7f0000000240)}, 0x100001f}, {0x5cf, 0xec3, {&(0x7f0000000100)}, 0x8000}]}, 0x3ded, 0x0, r3})

00:36:02 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x0, 0x5, 0x4, 0x90880})
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x0, @pix_mp={0x3, 0x1, 0x30314742, 0xa77a1a584673d939, 0x0, [{0x28800000, 0xff}, {0xfffffffe, 0x4}, {}, {0x1000, 0x8}, {0x80000000, 0x9}, {0x5, 0xb63}, {0x6, 0x6}, {0x3, 0x7}], 0x2, 0x1, 0x1, 0x2, 0x2}})

00:36:02 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88b65581ddb8a6c39cd926dbe17f005bed00"}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88b65581ddb8a6c39cd926dbe17f005bed00"})

00:36:02 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000000)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b66681ddb8a6c39cd926dbe16f6b5bed", 0x3032344d})
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x6, 0x5})

00:36:02 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x2, "69558100", 0x4745504d})
clock_gettime(0x0, &(0x7f0000000080)={<r1=>0x0, <r2=>0x0}) (async)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0) (async, rerun: 64)
ioctl$DRM_IOCTL_MAP_BUFS(r3, 0xc0186419, &(0x7f0000000840)={0x6, &(0x7f0000000280)=""/197, &(0x7f0000000780)=[{0x58, 0x86, 0x7, &(0x7f0000000380)=""/134}, {0x1000, 0xd2, 0x3f, &(0x7f0000000440)=""/210}, {0x5, 0x60, 0x1, &(0x7f0000000540)=""/96}, {0x80000000, 0x8a, 0x101, &(0x7f00000005c0)=""/138}, {0x988, 0xfc, 0x2, &(0x7f0000000680)=""/252}, {0x6, 0x28, 0x0, &(0x7f00000000c0)=""/40}]}) (rerun: 64)
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000001c0)=@multiplanar_userptr={0x3f, 0x0, 0x4, 0x70000, 0x7f, {r1, r2/1000+60000}, {0x5, 0x0, 0x4, 0x7f, 0x4, 0x3}, 0x0, 0x2, {&(0x7f0000000140)=[{0x0, 0x7, {&(0x7f0000000240)}, 0x100001f}, {0x5cf, 0xec3, {&(0x7f0000000100)}, 0x8000}]}, 0x3ded, 0x0, r3})

00:36:02 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x81, 0x6a6, 0x9, 0x80, 0x1, 0x3, '\x00', 0x0, r0, 0x5, 0x5, 0x2}, 0x48) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40086602, &(0x7f0000000080)=0x8)
syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x2)
clock_gettime(0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0}) (async)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, 0x0) (async)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r5, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000240)={0x0, 0x400, 0x8001, 0x80})
symlinkat(&(0x7f00000001c0)='./file0\x00', r5, &(0x7f0000000200)='./file0\x00')
ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000140)=@multiplanar_mmap={0x1ff, 0x1, 0x4, 0x70000, 0x3, {r2, r3/1000+10000}, {0x1, 0x5, 0x0, 0x9, 0x80, 0xff, "9dafe412"}, 0xf49, 0x1, {&(0x7f00000000c0)=[{0x1, 0x9, {0x8876}, 0x2000000}, {0xfffffc00, 0x3, {0x6}, 0x3f}]}, 0xc621, 0x0, r4})

00:36:02 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x0, 0x5, 0x4, 0x90880})
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x0, @pix_mp={0x3, 0x1, 0x30314742, 0xa77a1a584673d939, 0x0, [{0x28800000, 0xff}, {0xfffffffe, 0x4}, {}, {0x1000, 0x8}, {0x80000000, 0x9}, {0x5, 0xb63}, {0x6, 0x6}, {0x3, 0x7}], 0x2, 0x1, 0x1, 0x2, 0x2}})
syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2) (async)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x0, 0x5, 0x4, 0x90880}) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x0, @pix_mp={0x3, 0x1, 0x30314742, 0xa77a1a584673d939, 0x0, [{0x28800000, 0xff}, {0xfffffffe, 0x4}, {}, {0x1000, 0x8}, {0x80000000, 0x9}, {0x5, 0xb63}, {0x6, 0x6}, {0x3, 0x7}], 0x2, 0x1, 0x1, 0x2, 0x2}}) (async)

00:36:02 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1200000000, 0x3)
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{<r1=>0x0}, {<r2=>0x0}, {}]})
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x0], 0x1, 0x800, 0x0, <r4=>0xffffffffffffffff})
ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, &(0x7f0000000400)={r2, &(0x7f00000003c0)=""/16})
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={0x0, <r7=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(r6, 0xc010640b, &(0x7f0000000080)={r7})
ioctl$DRM_IOCTL_GEM_OPEN(r5, 0xc010640b, &(0x7f0000000480)={r7})
ioctl$DRM_IOCTL_AGP_INFO(r3, 0x80386433, &(0x7f0000000280)=""/5)
ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000240)={r1, &(0x7f0000000140)=""/199})
r8 = syz_open_dev$dri(&(0x7f0000000040), 0x9, 0x90a40759ae00e4e6)
ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000004c0)={0x1, @pix={0xffffffff, 0x7, 0x20363159, 0x1, 0x3ff, 0x3, 0xc, 0x3, 0x0, 0x8, 0x0, 0x7}})
ioctl$DRM_IOCTL_MODESET_CTL(r8, 0x40086408, &(0x7f0000000300)={0x7f, 0x4})
r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r9, 0xc0189436, &(0x7f00000002c0)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:02 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0x4, 0x7fff})
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000100)={0x0, 0x2})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:02 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000000)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b66681ddb8a6c39cd926dbe16f6b5bed", 0x3032344d})
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x6, 0x5})
syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000000)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b66681ddb8a6c39cd926dbe16f6b5bed", 0x3032344d}) (async)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x6, 0x5}) (async)

00:36:02 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x60})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:02 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x10001}}, 0x10)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40086602, &(0x7f0000000040)=0xb)

00:36:03 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x0, 0x5, 0x4, 0x90880})
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x0, @pix_mp={0x3, 0x1, 0x30314742, 0xa77a1a584673d939, 0x0, [{0x28800000, 0xff}, {0xfffffffe, 0x4}, {}, {0x1000, 0x8}, {0x80000000, 0x9}, {0x5, 0xb63}, {0x6, 0x6}, {0x3, 0x7}], 0x2, 0x1, 0x1, 0x2, 0x2}})

00:36:03 executing program 5:
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0x4, 0x7fff}) (async)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0x4, 0x7fff})
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000100)={0x0, 0x2})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:03 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000000)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b66681ddb8a6c39cd926dbe16f6b5bed", 0x3032344d}) (async, rerun: 64)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x6, 0x5}) (rerun: 64)

00:36:03 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1200000000, 0x3) (async)
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{<r1=>0x0}, {<r2=>0x0}, {}]}) (async)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x0], 0x1, 0x800, 0x0, <r4=>0xffffffffffffffff})
ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, &(0x7f0000000400)={r2, &(0x7f00000003c0)=""/16})
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0) (async)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async)
r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) (async)
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={0x0, <r7=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(r6, 0xc010640b, &(0x7f0000000080)={r7}) (async)
ioctl$DRM_IOCTL_GEM_OPEN(r5, 0xc010640b, &(0x7f0000000480)={r7}) (async)
ioctl$DRM_IOCTL_AGP_INFO(r3, 0x80386433, &(0x7f0000000280)=""/5)
ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000240)={r1, &(0x7f0000000140)=""/199})
r8 = syz_open_dev$dri(&(0x7f0000000040), 0x9, 0x90a40759ae00e4e6)
ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000004c0)={0x1, @pix={0xffffffff, 0x7, 0x20363159, 0x1, 0x3ff, 0x3, 0xc, 0x3, 0x0, 0x8, 0x0, 0x7}}) (async)
ioctl$DRM_IOCTL_MODESET_CTL(r8, 0x40086408, &(0x7f0000000300)={0x7f, 0x4}) (async)
r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r9, 0xc0189436, &(0x7f00000002c0)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:03 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x10001}}, 0x10) (async, rerun: 32)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0) (async, rerun: 32)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40086602, &(0x7f0000000040)=0xb)

00:36:03 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x60})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:03 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x0, @vbi={0x0, 0x0, 0xfffffffc, 0x47314356, [0xffffffff, 0x2002], [0x9, 0x8]}})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000000)={0x0, 0x8, 0x2, 0x80000})

00:36:03 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1200000000, 0x3)
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{}, {}, {}]}) (async)
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{<r1=>0x0}, {<r2=>0x0}, {}]})
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x0], 0x1, 0x800}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x0], 0x1, 0x800, 0x0, <r4=>0xffffffffffffffff})
ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, &(0x7f0000000400)={r2, &(0x7f00000003c0)=""/16})
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) (async)
r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={0x0, <r7=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(r6, 0xc010640b, &(0x7f0000000080)={r7})
ioctl$DRM_IOCTL_GEM_OPEN(r5, 0xc010640b, &(0x7f0000000480)={r7})
ioctl$DRM_IOCTL_AGP_INFO(r3, 0x80386433, &(0x7f0000000280)=""/5)
ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000240)={r1, &(0x7f0000000140)=""/199})
r8 = syz_open_dev$dri(&(0x7f0000000040), 0x9, 0x90a40759ae00e4e6)
ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000004c0)={0x1, @pix={0xffffffff, 0x7, 0x20363159, 0x1, 0x3ff, 0x3, 0xc, 0x3, 0x0, 0x8, 0x0, 0x7}}) (async)
ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000004c0)={0x1, @pix={0xffffffff, 0x7, 0x20363159, 0x1, 0x3ff, 0x3, 0xc, 0x3, 0x0, 0x8, 0x0, 0x7}})
ioctl$DRM_IOCTL_MODESET_CTL(r8, 0x40086408, &(0x7f0000000300)={0x7f, 0x4})
r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r9, 0xc0189436, &(0x7f00000002c0)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r9, 0xc0189436, &(0x7f00000002c0)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:03 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0x4, 0x7fff}) (async)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0x4, 0x7fff})
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000100)={0x0, 0x2})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:03 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x40000000007, 0x2)
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000080), 0x8)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x4d, 0x6, 0x3, {0x1, @sliced={0xfff9, [0x2, 0x1000, 0x1, 0x4, 0x800, 0xc2, 0x9, 0x1, 0x8001, 0x2, 0x52d2, 0x8, 0x400, 0x7, 0xd4, 0x9, 0xfff7, 0x2, 0x4, 0x5, 0x797, 0x3, 0x5, 0x5, 0x1, 0x800, 0x2, 0x1, 0x5, 0xffff, 0x7, 0x4b5, 0x401, 0x5, 0x800, 0x7fff, 0xfae, 0x2, 0x8dd, 0x9, 0x81fc, 0x9, 0x40, 0x6, 0x7, 0x6, 0xfffd, 0x6581], 0x2}}, 0x5})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb9fea4c711a254173521589c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:03 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x10001}}, 0x10)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40086602, &(0x7f0000000040)=0xb)

00:36:03 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x60})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:03 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x0, @vbi={0x0, 0x0, 0xfffffffc, 0x47314356, [0xffffffff, 0x2002], [0x9, 0x8]}}) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000000)={0x0, 0x8, 0x2, 0x80000})

00:36:03 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000100)=@multiplanar_mmap={0xffffcb75, 0x2, 0x4, 0x100000, 0x3, {}, {0x2, 0x0, 0x20, 0x3, 0x1, 0xd1, "911e4892"}, 0x3, 0x1, {&(0x7f0000000080)=[{0x80, 0x0, {0x5}, 0x4f}, {0x0, 0x5561c94, {0xa98e}, 0x7b7e9c45}]}, 0x8})

00:36:03 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x40000000007, 0x2)
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000080), 0x8) (async)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x4d, 0x6, 0x3, {0x1, @sliced={0xfff9, [0x2, 0x1000, 0x1, 0x4, 0x800, 0xc2, 0x9, 0x1, 0x8001, 0x2, 0x52d2, 0x8, 0x400, 0x7, 0xd4, 0x9, 0xfff7, 0x2, 0x4, 0x5, 0x797, 0x3, 0x5, 0x5, 0x1, 0x800, 0x2, 0x1, 0x5, 0xffff, 0x7, 0x4b5, 0x401, 0x5, 0x800, 0x7fff, 0xfae, 0x2, 0x8dd, 0x9, 0x81fc, 0x9, 0x40, 0x6, 0x7, 0x6, 0xfffd, 0x6581], 0x2}}, 0x5}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb9fea4c711a254173521589c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:03 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x0, @vbi={0x0, 0x0, 0xfffffffc, 0x47314356, [0xffffffff, 0x2002], [0x9, 0x8]}})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000000)={0x0, 0x8, 0x2, 0x80000})

00:36:03 executing program 4:
r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x400, 0x40)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f00000000c0), 0x4)
syz_open_dev$vim2m(&(0x7f0000000000), 0x101, 0x2)

00:36:03 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000100)=@multiplanar_mmap={0xffffcb75, 0x2, 0x4, 0x100000, 0x3, {}, {0x2, 0x0, 0x20, 0x3, 0x1, 0xd1, "911e4892"}, 0x3, 0x1, {&(0x7f0000000080)=[{0x80, 0x0, {0x5}, 0x4f}, {0x0, 0x5561c94, {0xa98e}, 0x7b7e9c45}]}, 0x8})
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000100)=@multiplanar_mmap={0xffffcb75, 0x2, 0x4, 0x100000, 0x3, {}, {0x2, 0x0, 0x20, 0x3, 0x1, 0xd1, "911e4892"}, 0x3, 0x1, {&(0x7f0000000080)=[{0x80, 0x0, {0x5}, 0x4f}, {0x0, 0x5561c94, {0xa98e}, 0x7b7e9c45}]}, 0x8}) (async)

00:36:03 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[0xffff, 0x4, 0x0, 0x0]})

00:36:03 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x0, @vbi={0x4, 0x793f, 0x100d1919, 0x32314d4e, [0x1, 0x9b], [0xeb5], 0x108}})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000180)={0x696, 0x3147504d, 0x2, @discrete={0x5, 0x3}})

00:36:03 executing program 4:
r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x400, 0x40)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async)
setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f00000000c0), 0x4) (async)
syz_open_dev$vim2m(&(0x7f0000000000), 0x101, 0x2)

00:36:03 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x40000000007, 0x2)
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000080), 0x8)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x4d, 0x6, 0x3, {0x1, @sliced={0xfff9, [0x2, 0x1000, 0x1, 0x4, 0x800, 0xc2, 0x9, 0x1, 0x8001, 0x2, 0x52d2, 0x8, 0x400, 0x7, 0xd4, 0x9, 0xfff7, 0x2, 0x4, 0x5, 0x797, 0x3, 0x5, 0x5, 0x1, 0x800, 0x2, 0x1, 0x5, 0xffff, 0x7, 0x4b5, 0x401, 0x5, 0x800, 0x7fff, 0xfae, 0x2, 0x8dd, 0x9, 0x81fc, 0x9, 0x40, 0x6, 0x7, 0x6, 0xfffd, 0x6581], 0x2}}, 0x5}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb9fea4c711a254173521589c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:03 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[0xffff, 0x4, 0x0, 0x0]})

00:36:03 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000100)=@multiplanar_mmap={0xffffcb75, 0x2, 0x4, 0x100000, 0x3, {}, {0x2, 0x0, 0x20, 0x3, 0x1, 0xd1, "911e4892"}, 0x3, 0x1, {&(0x7f0000000080)=[{0x80, 0x0, {0x5}, 0x4f}, {0x0, 0x5561c94, {0xa98e}, 0x7b7e9c45}]}, 0x8})
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000100)=@multiplanar_mmap={0xffffcb75, 0x2, 0x4, 0x100000, 0x3, {}, {0x2, 0x0, 0x20, 0x3, 0x1, 0xd1, "911e4892"}, 0x3, 0x1, {&(0x7f0000000080)=[{0x80, 0x0, {0x5}, 0x4f}, {0x0, 0x5561c94, {0xa98e}, 0x7b7e9c45}]}, 0x8}) (async)

00:36:03 executing program 1:
openat$smackfs_access(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/access\x00', 0x2, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix={0x5, 0x7, 0x33524742, 0x1, 0x1, 0xfffffffd, 0x3, 0x1, 0x1, 0x1, 0x1, 0x2}})
ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, &(0x7f0000000080)=""/76)
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)

00:36:03 executing program 4:
r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x400, 0x40)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async, rerun: 32)
setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f00000000c0), 0x4) (rerun: 32)
syz_open_dev$vim2m(&(0x7f0000000000), 0x101, 0x2)

00:36:03 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x0, @vbi={0x4, 0x793f, 0x100d1919, 0x32314d4e, [0x1, 0x9b], [0xeb5], 0x108}})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000180)={0x696, 0x3147504d, 0x2, @discrete={0x5, 0x3}})
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x0, @vbi={0x4, 0x793f, 0x100d1919, 0x32314d4e, [0x1, 0x9b], [0xeb5], 0x108}}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000180)={0x696, 0x3147504d, 0x2, @discrete={0x5, 0x3}}) (async)

00:36:03 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000140)=0x7)
clock_gettime(0x0, &(0x7f0000000080)={<r1=>0x0, <r2=>0x0})
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@overlay={0xffff, 0x0, 0x4, 0x20, 0xe, {r1, r2/1000+60000}, {0x2, 0xf308326cc2b2706b, 0x7, 0x23, 0x81, 0x81, "61c6b23a"}, 0x6})
clock_getres(0x7, &(0x7f0000000180))
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:03 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[0xffff, 0x4, 0x0, 0x0]})
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[0xffff, 0x4, 0x0, 0x0]}) (async)

00:36:03 executing program 1:
openat$smackfs_access(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/access\x00', 0x2, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix={0x5, 0x7, 0x33524742, 0x1, 0x1, 0xfffffffd, 0x3, 0x1, 0x1, 0x1, 0x1, 0x2}}) (async)
ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, &(0x7f0000000080)=""/76) (async)
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)

00:36:03 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x5, @sliced={0x3, [0x2, 0x400, 0x5, 0xfffb, 0x9, 0xffff, 0xd77, 0x5, 0x3f, 0x849, 0x7, 0x343d, 0x7, 0x6, 0x1, 0x101, 0x400, 0x1, 0xf857, 0x0, 0x7, 0xa6d6, 0x8, 0xde3, 0x6e, 0x50, 0x4, 0x97, 0x6, 0xeac, 0xffe1, 0x2, 0x8eae, 0x5, 0xfff7, 0x3, 0xfce9, 0x8, 0x0, 0x0, 0x3ff, 0x5be, 0x0, 0x1f80, 0x7ff, 0x7f, 0xffff, 0x1269], 0x1ff}})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:03 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1ff, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x1, @raw_data="6db8034aa3e73e8cbcf72b654154d4c5cd299be0872ffe8e9e54dab13fe8f12a3710f7de5217c0d1a6ea3bdd69c6ae84067b0d214fbda1635eab6c68c44767b2382b33839cdc354bed39a14864489fd9b003b15e695cc25adde944f0b0cbea27a3ba9b6c842ae43ed8aed9d36c58e64326b5120af1138107869612e7d773b8c5d95c7af99e890c75f65ee3a2ae40b2a2b9f9ea5ef7708545b5ceb22d0e22d8704fb1acd437462f336a67b2a0822777d762b4d70ce67fb9431f98b896f7be30ae45cdbea14160bd45"})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:03 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000140)=0x7)
clock_gettime(0x0, &(0x7f0000000080)={<r1=>0x0, <r2=>0x0})
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@overlay={0xffff, 0x0, 0x4, 0x20, 0xe, {r1, r2/1000+60000}, {0x2, 0xf308326cc2b2706b, 0x7, 0x23, 0x81, 0x81, "61c6b23a"}, 0x6}) (async)
clock_getres(0x7, &(0x7f0000000180))
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:03 executing program 0:
prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\x00')
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40086602, &(0x7f0000000080)=0x8)

00:36:03 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x0, @vbi={0x4, 0x793f, 0x100d1919, 0x32314d4e, [0x1, 0x9b], [0xeb5], 0x108}}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000180)={0x696, 0x3147504d, 0x2, @discrete={0x5, 0x3}})

00:36:03 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000140)=0x7)
clock_gettime(0x0, &(0x7f0000000080)={<r1=>0x0, <r2=>0x0})
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@overlay={0xffff, 0x0, 0x4, 0x20, 0xe, {r1, r2/1000+60000}, {0x2, 0xf308326cc2b2706b, 0x7, 0x23, 0x81, 0x81, "61c6b23a"}, 0x6})
clock_getres(0x7, &(0x7f0000000180)) (async)
clock_getres(0x7, &(0x7f0000000180))
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:03 executing program 1:
openat$smackfs_access(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/access\x00', 0x2, 0x0) (async)
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix={0x5, 0x7, 0x33524742, 0x1, 0x1, 0xfffffffd, 0x3, 0x1, 0x1, 0x1, 0x1, 0x2}}) (async)
ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, &(0x7f0000000080)=""/76)
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)

00:36:03 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x5, @sliced={0x3, [0x2, 0x400, 0x5, 0xfffb, 0x9, 0xffff, 0xd77, 0x5, 0x3f, 0x849, 0x7, 0x343d, 0x7, 0x6, 0x1, 0x101, 0x400, 0x1, 0xf857, 0x0, 0x7, 0xa6d6, 0x8, 0xde3, 0x6e, 0x50, 0x4, 0x97, 0x6, 0xeac, 0xffe1, 0x2, 0x8eae, 0x5, 0xfff7, 0x3, 0xfce9, 0x8, 0x0, 0x0, 0x3ff, 0x5be, 0x0, 0x1f80, 0x7ff, 0x7f, 0xffff, 0x1269], 0x1ff}}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:03 executing program 4:
syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2) (async)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1ff, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x1, @raw_data="6db8034aa3e73e8cbcf72b654154d4c5cd299be0872ffe8e9e54dab13fe8f12a3710f7de5217c0d1a6ea3bdd69c6ae84067b0d214fbda1635eab6c68c44767b2382b33839cdc354bed39a14864489fd9b003b15e695cc25adde944f0b0cbea27a3ba9b6c842ae43ed8aed9d36c58e64326b5120af1138107869612e7d773b8c5d95c7af99e890c75f65ee3a2ae40b2a2b9f9ea5ef7708545b5ceb22d0e22d8704fb1acd437462f336a67b2a0822777d762b4d70ce67fb9431f98b896f7be30ae45cdbea14160bd45"})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:03 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x9, 0x0, 0x0, {0x1, @sliced={0xd17, [0x1, 0x1f, 0x400, 0x7, 0x8, 0x1, 0xffff, 0x5c89, 0x1f, 0x3, 0x2, 0x1, 0x2, 0x3f, 0x2, 0x16fd, 0x800, 0x3, 0x9, 0x7fff, 0x4, 0x100, 0x1000, 0x0, 0x0, 0x9, 0x7f, 0x44d, 0xa623, 0x0, 0x4, 0xe3, 0x46, 0x6, 0x1d56, 0x101, 0xb3, 0xffc1, 0x9, 0xc3c, 0x3, 0x150, 0x8, 0x0, 0x400, 0x800, 0x4, 0x7]}}, 0x44})
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})

00:36:03 executing program 3:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4, 0x2)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x3, 0xb0ea, 0x8001, 0x880})

00:36:03 executing program 0:
prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\x00')
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40086602, &(0x7f0000000080)=0x8)

00:36:03 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x5, @sliced={0x3, [0x2, 0x400, 0x5, 0xfffb, 0x9, 0xffff, 0xd77, 0x5, 0x3f, 0x849, 0x7, 0x343d, 0x7, 0x6, 0x1, 0x101, 0x400, 0x1, 0xf857, 0x0, 0x7, 0xa6d6, 0x8, 0xde3, 0x6e, 0x50, 0x4, 0x97, 0x6, 0xeac, 0xffe1, 0x2, 0x8eae, 0x5, 0xfff7, 0x3, 0xfce9, 0x8, 0x0, 0x0, 0x3ff, 0x5be, 0x0, 0x1f80, 0x7ff, 0x7f, 0xffff, 0x1269], 0x1ff}})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:03 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2) (async)
r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1ff, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x1, @raw_data="6db8034aa3e73e8cbcf72b654154d4c5cd299be0872ffe8e9e54dab13fe8f12a3710f7de5217c0d1a6ea3bdd69c6ae84067b0d214fbda1635eab6c68c44767b2382b33839cdc354bed39a14864489fd9b003b15e695cc25adde944f0b0cbea27a3ba9b6c842ae43ed8aed9d36c58e64326b5120af1138107869612e7d773b8c5d95c7af99e890c75f65ee3a2ae40b2a2b9f9ea5ef7708545b5ceb22d0e22d8704fb1acd437462f336a67b2a0822777d762b4d70ce67fb9431f98b896f7be30ae45cdbea14160bd45"}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:03 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x400001, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080), 0x0, 0x0, 0x0, <r2=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000100)={0x6, 0x5})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x8000, 0x1, 0x2, "69eb88ea5d711a254173c7038926a0e4b65581ddb8a606b00400dbe16f6b5bed", 0x55595659})

00:36:03 executing program 3:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async, rerun: 64)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4, 0x2) (rerun: 64)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x3, 0xb0ea, 0x8001, 0x880})

00:36:03 executing program 0:
prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\x00')
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40086602, &(0x7f0000000080)=0x8)

00:36:03 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x9, 0x0, 0x0, {0x1, @sliced={0xd17, [0x1, 0x1f, 0x400, 0x7, 0x8, 0x1, 0xffff, 0x5c89, 0x1f, 0x3, 0x2, 0x1, 0x2, 0x3f, 0x2, 0x16fd, 0x800, 0x3, 0x9, 0x7fff, 0x4, 0x100, 0x1000, 0x0, 0x0, 0x9, 0x7f, 0x44d, 0xa623, 0x0, 0x4, 0xe3, 0x46, 0x6, 0x1d56, 0x101, 0xb3, 0xffc1, 0x9, 0xc3c, 0x3, 0x150, 0x8, 0x0, 0x400, 0x800, 0x4, 0x7]}}, 0x44}) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})

00:36:03 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)=@multiplanar_mmap={0x6, 0x3, 0x4, 0x2, 0xfffffffe, {0x0, 0xea60}, {0x4, 0xc, 0x0, 0x20, 0x8, 0x3, "38c10ab4"}, 0xe51, 0x1, {&(0x7f0000000080)=[{0x2, 0x85, {0x1ff}, 0x7f}, {0x4, 0x5, {0x200}, 0x7}]}, 0x1ff})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:03 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x400001, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080), 0x0, 0x0, 0x0, <r2=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000100)={0x6, 0x5}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x8000, 0x1, 0x2, "69eb88ea5d711a254173c7038926a0e4b65581ddb8a606b00400dbe16f6b5bed", 0x55595659})

00:36:03 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0)
r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x2c, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "c70389c0a0e4b65581ddb8a6c39c0000000000000000000400"})

00:36:03 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x9, 0x0, 0x0, {0x1, @sliced={0xd17, [0x1, 0x1f, 0x400, 0x7, 0x8, 0x1, 0xffff, 0x5c89, 0x1f, 0x3, 0x2, 0x1, 0x2, 0x3f, 0x2, 0x16fd, 0x800, 0x3, 0x9, 0x7fff, 0x4, 0x100, 0x1000, 0x0, 0x0, 0x9, 0x7f, 0x44d, 0xa623, 0x0, 0x4, 0xe3, 0x46, 0x6, 0x1d56, 0x101, 0xb3, 0xffc1, 0x9, 0xc3c, 0x3, 0x150, 0x8, 0x0, 0x400, 0x800, 0x4, 0x7]}}, 0x44})
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2) (async)
syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) (async)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x9, 0x0, 0x0, {0x1, @sliced={0xd17, [0x1, 0x1f, 0x400, 0x7, 0x8, 0x1, 0xffff, 0x5c89, 0x1f, 0x3, 0x2, 0x1, 0x2, 0x3f, 0x2, 0x16fd, 0x800, 0x3, 0x9, 0x7fff, 0x4, 0x100, 0x1000, 0x0, 0x0, 0x9, 0x7f, 0x44d, 0xa623, 0x0, 0x4, 0xe3, 0x46, 0x6, 0x1d56, 0x101, 0xb3, 0xffc1, 0x9, 0xc3c, 0x3, 0x150, 0x8, 0x0, 0x400, 0x800, 0x4, 0x7]}}, 0x44}) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}}) (async)

00:36:03 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)=@multiplanar_mmap={0x6, 0x3, 0x4, 0x2, 0xfffffffe, {0x0, 0xea60}, {0x4, 0xc, 0x0, 0x20, 0x8, 0x3, "38c10ab4"}, 0xe51, 0x1, {&(0x7f0000000080)=[{0x2, 0x85, {0x1ff}, 0x7f}, {0x4, 0x5, {0x200}, 0x7}]}, 0x1ff}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:03 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x0)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100004a38506cb68bf195c9a95f0000cd9b", @ANYRES32=r4, @ANYBLOB='\f'], 0x28}}, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r1, 0x308ebe9524c517ab, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x20, 0x2c, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x81)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', <r5=>0x0})
sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8005}, 0x40000)
r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40086602, &(0x7f0000000080)=0x8)

00:36:03 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x400001, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080), 0x0, 0x0, 0x0, <r2=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000100)={0x6, 0x5})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x8000, 0x1, 0x2, "69eb88ea5d711a254173c7038926a0e4b65581ddb8a606b00400dbe16f6b5bed", 0x55595659}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x8000, 0x1, 0x2, "69eb88ea5d711a254173c7038926a0e4b65581ddb8a606b00400dbe16f6b5bed", 0x55595659})

00:36:03 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0)
r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x2c, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "c70389c0a0e4b65581ddb8a6c39c0000000000000000000400"})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) (async)
syz_open_dev$vim2m(&(0x7f00000000c0), 0x2c, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "c70389c0a0e4b65581ddb8a6c39c0000000000000000000400"}) (async)

00:36:03 executing program 3:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async, rerun: 64)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4, 0x2) (rerun: 64)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x3, 0xb0ea, 0x8001, 0x880})

00:36:03 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)=@multiplanar_mmap={0x6, 0x3, 0x4, 0x2, 0xfffffffe, {0x0, 0xea60}, {0x4, 0xc, 0x0, 0x20, 0x8, 0x3, "38c10ab4"}, 0xe51, 0x1, {&(0x7f0000000080)=[{0x2, 0x85, {0x1ff}, 0x7f}, {0x4, 0x5, {0x200}, 0x7}]}, 0x1ff})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:03 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x0)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100004a38506cb68bf195c9a95f0000cd9b", @ANYRES32=r4, @ANYBLOB='\f'], 0x28}}, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r1, 0x308ebe9524c517ab, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x20, 0x2c, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x81) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', <r5=>0x0})
sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8005}, 0x40000) (async)
r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40086602, &(0x7f0000000080)=0x8)

00:36:03 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x1, 0x2, 0x1f9a91f2, 0x80000})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000400)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000, 0x0, <r2=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000440)={0x7, 0x2, 0x4})
shmctl$SHM_UNLOCK(0x0, 0xc)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0)
r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001400), 0x2)
ioctl$UDMABUF_CREATE_LIST(r4, 0x401c5820, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, <r5=>0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x8, 0x9, 0x7})
ioctl$DRM_IOCTL_MODE_SETGAMMA(r3, 0xc02064a5, &(0x7f00000003c0)={r5, 0x1, &(0x7f0000000200)=[0x3], &(0x7f0000000340), &(0x7f0000000380)=[0x6, 0x5, 0x9b, 0x1, 0x1, 0x4, 0x3, 0x6, 0x101]})

00:36:03 executing program 2:
ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000080)={0x0, 0x4, 0x1, 0x101, 0x1, [<r0=>0x0], [0x6, 0x8, 0x6, 0x40], [0x80000001, 0x34, 0x5, 0x75f9], [0x3ff, 0x80, 0x67, 0x3f]})
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000100)={r0})
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:03 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x0) (async)
sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) (async)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100004a38506cb68bf195c9a95f0000cd9b", @ANYRES32=r4, @ANYBLOB='\f'], 0x28}}, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r1, 0x308ebe9524c517ab, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x20, 0x2c, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x81)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', <r5=>0x0})
sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8005}, 0x40000) (async)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8005}, 0x40000)
r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40086602, &(0x7f0000000080)=0x8)

00:36:03 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0)
r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x2c, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "c70389c0a0e4b65581ddb8a6c39c0000000000000000000400"})

00:36:03 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x2, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39c662265826f6b5bcd", 0x20323159})

00:36:03 executing program 2:
ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000080)={0x0, 0x4, 0x1, 0x101, 0x1, [<r0=>0x0], [0x6, 0x8, 0x6, 0x40], [0x80000001, 0x34, 0x5, 0x75f9], [0x3ff, 0x80, 0x67, 0x3f]})
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000100)={r0}) (async)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:03 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x0, 0x80)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x1, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x0, @sliced={0x5, [0x9, 0x100, 0x1, 0x9, 0x9, 0xff, 0x0, 0xff, 0x7, 0xd374, 0x6, 0x8000, 0x81, 0xffff, 0xd53, 0x0, 0x1, 0x91ec, 0x3, 0x1, 0x3, 0x4, 0x1, 0x1, 0xfffe, 0x1, 0x4, 0x6, 0x7, 0x2, 0xac0, 0x3, 0x0, 0x0, 0x3f, 0xb58, 0x2d7, 0x7, 0x7, 0x3, 0xcfa, 0x5, 0x7, 0x5, 0x401, 0x167a, 0xc5], 0x7}})

00:36:03 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}}) (async)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x1, 0x2, 0x1f9a91f2, 0x80000}) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000400)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000, 0x0, <r2=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000440)={0x7, 0x2, 0x4}) (async)
shmctl$SHM_UNLOCK(0x0, 0xc) (async)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0) (async)
r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001400), 0x2)
ioctl$UDMABUF_CREATE_LIST(r4, 0x401c5820, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, <r5=>0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x8, 0x9, 0x7})
ioctl$DRM_IOCTL_MODE_SETGAMMA(r3, 0xc02064a5, &(0x7f00000003c0)={r5, 0x1, &(0x7f0000000200)=[0x3], &(0x7f0000000340), &(0x7f0000000380)=[0x6, 0x5, 0x9b, 0x1, 0x1, 0x4, 0x3, 0x6, 0x101]})

00:36:03 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x2, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39c662265826f6b5bcd", 0x20323159})

00:36:03 executing program 2:
ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000080)={0x0, 0x4, 0x1, 0x101, 0x1, [<r0=>0x0], [0x6, 0x8, 0x6, 0x40], [0x80000001, 0x34, 0x5, 0x75f9], [0x3ff, 0x80, 0x67, 0x3f]})
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000100)={r0}) (async)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:03 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x0, 0x80)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x1, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async, rerun: 32)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x0, @sliced={0x5, [0x9, 0x100, 0x1, 0x9, 0x9, 0xff, 0x0, 0xff, 0x7, 0xd374, 0x6, 0x8000, 0x81, 0xffff, 0xd53, 0x0, 0x1, 0x91ec, 0x3, 0x1, 0x3, 0x4, 0x1, 0x1, 0xfffe, 0x1, 0x4, 0x6, 0x7, 0x2, 0xac0, 0x3, 0x0, 0x0, 0x3f, 0xb58, 0x2d7, 0x7, 0x7, 0x3, 0xcfa, 0x5, 0x7, 0x5, 0x401, 0x167a, 0xc5], 0x7}}) (rerun: 32)

00:36:03 executing program 0:
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8})
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000ac0), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000b00))
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40086602, &(0x7f0000000080)=0x8)

00:36:03 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x2, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39c662265826f6b5bcd", 0x20323159})
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x2, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39c662265826f6b5bcd", 0x20323159}) (async)

00:36:03 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}}) (async)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x1, 0x2, 0x1f9a91f2, 0x80000})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000400)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000, 0x0, <r2=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000440)={0x7, 0x2, 0x4}) (async)
shmctl$SHM_UNLOCK(0x0, 0xc)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0)
r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001400), 0x2)
ioctl$UDMABUF_CREATE_LIST(r4, 0x401c5820, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, <r5=>0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x8, 0x9, 0x7})
ioctl$DRM_IOCTL_MODE_SETGAMMA(r3, 0xc02064a5, &(0x7f00000003c0)={r5, 0x1, &(0x7f0000000200)=[0x3], &(0x7f0000000340), &(0x7f0000000380)=[0x6, 0x5, 0x9b, 0x1, 0x1, 0x4, 0x3, 0x6, 0x101]})

00:36:03 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x0, 0x80)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x1, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x0, @sliced={0x5, [0x9, 0x100, 0x1, 0x9, 0x9, 0xff, 0x0, 0xff, 0x7, 0xd374, 0x6, 0x8000, 0x81, 0xffff, 0xd53, 0x0, 0x1, 0x91ec, 0x3, 0x1, 0x3, 0x4, 0x1, 0x1, 0xfffe, 0x1, 0x4, 0x6, 0x7, 0x2, 0xac0, 0x3, 0x0, 0x0, 0x3f, 0xb58, 0x2d7, 0x7, 0x7, 0x3, 0xcfa, 0x5, 0x7, 0x5, 0x401, 0x167a, 0xc5], 0x7}})
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x0, 0x80) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x1, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x0, @sliced={0x5, [0x9, 0x100, 0x1, 0x9, 0x9, 0xff, 0x0, 0xff, 0x7, 0xd374, 0x6, 0x8000, 0x81, 0xffff, 0xd53, 0x0, 0x1, 0x91ec, 0x3, 0x1, 0x3, 0x4, 0x1, 0x1, 0xfffe, 0x1, 0x4, 0x6, 0x7, 0x2, 0xac0, 0x3, 0x0, 0x0, 0x3f, 0xb58, 0x2d7, 0x7, 0x7, 0x3, 0xcfa, 0x5, 0x7, 0x5, 0x401, 0x167a, 0xc5], 0x7}}) (async)

00:36:03 executing program 4:
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c305d940dbe16f6b5bed", 0x34324142})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000200)={0x0, &(0x7f0000000140)=""/157})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14}, 0x14}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r4)
sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5}]}, 0x1c}}, 0x0)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r8=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r8, @ANYBLOB='\f'], 0x28}}, 0x0)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r11=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r11, @ANYBLOB='\f'], 0x28}}, 0x0)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40010)
r12 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x204000, 0xb0)
ioctl$vim2m_VIDIOC_EXPBUF(r12, 0xc0405610, &(0x7f00000000c0)={0x0, 0x5000000, 0xfffffffb, 0x880})

00:36:04 executing program 0:
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8})
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
r1 = syz_open_dev$vim2m(&(0x7f0000000ac0), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000b00))
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40086602, &(0x7f0000000080)=0x8)

00:36:04 executing program 2:
r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x420000, 0x81)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)=@multiplanar_overlay={0x100, 0x2, 0x4, 0x20, 0x1000, {0x77359400}, {0x4, 0x0, 0x7, 0x79, 0x5, 0xff, "1a3a3543"}, 0xffffffff, 0x3, {&(0x7f00000000c0)=[{0x4, 0x400, {0x3}, 0x81}, {0x2, 0x800, {0x1}, 0x9}]}, 0x100, 0x0, r1})
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0205647, &(0x7f0000000080)={0x0, 0x0, 0x1, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
clock_gettime(0x0, &(0x7f0000000200)={<r3=>0x0, <r4=>0x0})
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r5, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000240)=@mmap={0x3, 0x3, 0x4, 0x1, 0x7, {r3, r4/1000+10000}, {0x1, 0xf, 0x40, 0x6, 0x9c, 0x40, "1e8ae473"}, 0x3, 0x1, {}, 0xfd, 0x0, r5})
openat$udambuf(0xffffffffffffff9c, &(0x7f00000002c0), 0x2)

00:36:04 executing program 1:
syz_open_dev$vim2m(&(0x7f0000000080), 0x801000, 0x2)
r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x400800, 0x0)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix={0x9557, 0x6, 0x34325258, 0x9, 0x5, 0x20, 0x2, 0x400, 0x1, 0x3, 0x1, 0x6}})

00:36:04 executing program 4:
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1) (async, rerun: 32)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2) (rerun: 32)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c305d940dbe16f6b5bed", 0x34324142}) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async, rerun: 32)
ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000200)={0x0, &(0x7f0000000140)=""/157}) (async, rerun: 32)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14}, 0x14}}, 0x0) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r4)
sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5}]}, 0x1c}}, 0x0)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) (async, rerun: 64)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r8=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r8, @ANYBLOB='\f'], 0x28}}, 0x0)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) (async, rerun: 32)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r11=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r11, @ANYBLOB='\f'], 0x28}}, 0x0) (async, rerun: 32)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40010) (async, rerun: 32)
r12 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x204000, 0xb0)
ioctl$vim2m_VIDIOC_EXPBUF(r12, 0xc0405610, &(0x7f00000000c0)={0x0, 0x5000000, 0xfffffffb, 0x880})

00:36:04 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3, 0x40000})
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000140), 0x4)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000180)={0x3, 0x1, 0x4})

00:36:04 executing program 0:
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8})
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000ac0), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000b00))
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40086602, &(0x7f0000000080)=0x8)
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
syz_open_dev$vim2m(&(0x7f0000000ac0), 0x401, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000b00)) (async)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40086602, &(0x7f0000000080)=0x8) (async)

00:36:04 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x7, 0x1, {0x3, @sliced={0x81, [0x80, 0x81, 0xcd6d, 0x7, 0x2400, 0x0, 0x1, 0x6c74, 0x6, 0x101, 0x4, 0x1000, 0x9, 0x5, 0x5, 0x9, 0x5, 0x7, 0x1, 0x5c6f, 0x2, 0x9, 0x3, 0x9, 0x101, 0x7f, 0x7, 0x8, 0x1, 0x6, 0x7f, 0x1ff, 0xffff, 0x4, 0x7ff, 0x401, 0x4, 0x7, 0x0, 0x7, 0x7, 0x0, 0x4, 0x4, 0x93, 0x100, 0x4197, 0x9], 0x6}}, 0x9})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
syz_open_dev$vim2m(&(0x7f0000000080), 0x8000000000000001, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000240)={&(0x7f00000001c0)="155fe7887090bb703aa65ed6bae24aa8a6fd8a24d6e0f059d0c94326591051df3e6739926ed82ddd4959c88238b17f34991d8ba5d337e0c4383a31c73908737daddd849d6dae3cad87ceab81ad939f7174e8075cc2b292397490959aaf635322de7babe56d73f74bd36d8bcd728f9a53d6c1faded9274539", 0x78})

00:36:04 executing program 2:
r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x420000, 0x81)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)=@multiplanar_overlay={0x100, 0x2, 0x4, 0x20, 0x1000, {0x77359400}, {0x4, 0x0, 0x7, 0x79, 0x5, 0xff, "1a3a3543"}, 0xffffffff, 0x3, {&(0x7f00000000c0)=[{0x4, 0x400, {0x3}, 0x81}, {0x2, 0x800, {0x1}, 0x9}]}, 0x100, 0x0, r1})
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0205647, &(0x7f0000000080)={0x0, 0x0, 0x1, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
clock_gettime(0x0, &(0x7f0000000200)={<r3=>0x0, <r4=>0x0}) (async)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r5, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000240)=@mmap={0x3, 0x3, 0x4, 0x1, 0x7, {r3, r4/1000+10000}, {0x1, 0xf, 0x40, 0x6, 0x9c, 0x40, "1e8ae473"}, 0x3, 0x1, {}, 0xfd, 0x0, r5})
openat$udambuf(0xffffffffffffff9c, &(0x7f00000002c0), 0x2)

00:36:04 executing program 1:
syz_open_dev$vim2m(&(0x7f0000000080), 0x801000, 0x2) (async)
r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x400800, 0x0)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix={0x9557, 0x6, 0x34325258, 0x9, 0x5, 0x20, 0x2, 0x400, 0x1, 0x3, 0x1, 0x6}})

00:36:04 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3, 0x40000}) (async)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000140), 0x4)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000180)={0x3, 0x1, 0x4})

00:36:04 executing program 0:
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c305d940dbe16f6b5bed", 0x34324142})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000200)={0x0, &(0x7f0000000140)=""/157})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14}, 0x14}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r4)
sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5}]}, 0x1c}}, 0x0)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r8=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r8, @ANYBLOB='\f'], 0x28}}, 0x0)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r11=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r11, @ANYBLOB='\f'], 0x28}}, 0x0)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40010)
r12 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x204000, 0xb0)
ioctl$vim2m_VIDIOC_EXPBUF(r12, 0xc0405610, &(0x7f00000000c0)={0x0, 0x5000000, 0xfffffffb, 0x880})

00:36:04 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x7, 0x1, {0x3, @sliced={0x81, [0x80, 0x81, 0xcd6d, 0x7, 0x2400, 0x0, 0x1, 0x6c74, 0x6, 0x101, 0x4, 0x1000, 0x9, 0x5, 0x5, 0x9, 0x5, 0x7, 0x1, 0x5c6f, 0x2, 0x9, 0x3, 0x9, 0x101, 0x7f, 0x7, 0x8, 0x1, 0x6, 0x7f, 0x1ff, 0xffff, 0x4, 0x7ff, 0x401, 0x4, 0x7, 0x0, 0x7, 0x7, 0x0, 0x4, 0x4, 0x93, 0x100, 0x4197, 0x9], 0x6}}, 0x9}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
syz_open_dev$vim2m(&(0x7f0000000080), 0x8000000000000001, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000240)={&(0x7f00000001c0)="155fe7887090bb703aa65ed6bae24aa8a6fd8a24d6e0f059d0c94326591051df3e6739926ed82ddd4959c88238b17f34991d8ba5d337e0c4383a31c73908737daddd849d6dae3cad87ceab81ad939f7174e8075cc2b292397490959aaf635322de7babe56d73f74bd36d8bcd728f9a53d6c1faded9274539", 0x78})

00:36:04 executing program 1:
syz_open_dev$vim2m(&(0x7f0000000080), 0x801000, 0x2)
r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x400800, 0x0)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix={0x9557, 0x6, 0x34325258, 0x9, 0x5, 0x20, 0x2, 0x400, 0x1, 0x3, 0x1, 0x6}})
syz_open_dev$vim2m(&(0x7f0000000080), 0x801000, 0x2) (async)
openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x400800, 0x0) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix={0x9557, 0x6, 0x34325258, 0x9, 0x5, 0x20, 0x2, 0x400, 0x1, 0x3, 0x1, 0x6}}) (async)

00:36:04 executing program 4:
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c305d940dbe16f6b5bed", 0x34324142}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c305d940dbe16f6b5bed", 0x34324142})
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000200)={0x0, &(0x7f0000000140)=""/157})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14}, 0x14}}, 0x0) (async)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14}, 0x14}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r4)
sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5}]}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) (async)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r8=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r8, @ANYBLOB='\f'], 0x28}}, 0x0)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r11=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r11, @ANYBLOB='\f'], 0x28}}, 0x0)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40010)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x204000, 0xb0) (async)
r12 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x204000, 0xb0)
ioctl$vim2m_VIDIOC_EXPBUF(r12, 0xc0405610, &(0x7f00000000c0)={0x0, 0x5000000, 0xfffffffb, 0x880}) (async)
ioctl$vim2m_VIDIOC_EXPBUF(r12, 0xc0405610, &(0x7f00000000c0)={0x0, 0x5000000, 0xfffffffb, 0x880})

00:36:04 executing program 2:
r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x420000, 0x81)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)=@multiplanar_overlay={0x100, 0x2, 0x4, 0x20, 0x1000, {0x77359400}, {0x4, 0x0, 0x7, 0x79, 0x5, 0xff, "1a3a3543"}, 0xffffffff, 0x3, {&(0x7f00000000c0)=[{0x4, 0x400, {0x3}, 0x81}, {0x2, 0x800, {0x1}, 0x9}]}, 0x100, 0x0, r1})
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0205647, &(0x7f0000000080)={0x0, 0x0, 0x1, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
clock_gettime(0x0, &(0x7f0000000200)={<r3=>0x0, <r4=>0x0})
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r5, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r5, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000240)=@mmap={0x3, 0x3, 0x4, 0x1, 0x7, {r3, r4/1000+10000}, {0x1, 0xf, 0x40, 0x6, 0x9c, 0x40, "1e8ae473"}, 0x3, 0x1, {}, 0xfd, 0x0, r5})
openat$udambuf(0xffffffffffffff9c, &(0x7f00000002c0), 0x2) (async)
openat$udambuf(0xffffffffffffff9c, &(0x7f00000002c0), 0x2)

00:36:04 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3, 0x40000}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3, 0x40000})
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000140), 0x4)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000180)={0x3, 0x1, 0x4})

00:36:04 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x7, 0x1, {0x3, @sliced={0x81, [0x80, 0x81, 0xcd6d, 0x7, 0x2400, 0x0, 0x1, 0x6c74, 0x6, 0x101, 0x4, 0x1000, 0x9, 0x5, 0x5, 0x9, 0x5, 0x7, 0x1, 0x5c6f, 0x2, 0x9, 0x3, 0x9, 0x101, 0x7f, 0x7, 0x8, 0x1, 0x6, 0x7f, 0x1ff, 0xffff, 0x4, 0x7ff, 0x401, 0x4, 0x7, 0x0, 0x7, 0x7, 0x0, 0x4, 0x4, 0x93, 0x100, 0x4197, 0x9], 0x6}}, 0x9})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
syz_open_dev$vim2m(&(0x7f0000000080), 0x8000000000000001, 0x2) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000240)={&(0x7f00000001c0)="155fe7887090bb703aa65ed6bae24aa8a6fd8a24d6e0f059d0c94326591051df3e6739926ed82ddd4959c88238b17f34991d8ba5d337e0c4383a31c73908737daddd849d6dae3cad87ceab81ad939f7174e8075cc2b292397490959aaf635322de7babe56d73f74bd36d8bcd728f9a53d6c1faded9274539", 0x78})

00:36:04 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x5}, 0x8)

00:36:04 executing program 0:
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c305d940dbe16f6b5bed", 0x34324142})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000200)={0x0, &(0x7f0000000140)=""/157})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14}, 0x14}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r4)
sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5}]}, 0x1c}}, 0x0)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r8=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r8, @ANYBLOB='\f'], 0x28}}, 0x0)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r11=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r11, @ANYBLOB='\f'], 0x28}}, 0x0)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40010)
r12 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x204000, 0xb0)
ioctl$vim2m_VIDIOC_EXPBUF(r12, 0xc0405610, &(0x7f00000000c0)={0x0, 0x5000000, 0xfffffffb, 0x880})

00:36:04 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000000006, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x20363059})

00:36:04 executing program 4:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb885f711a254173c70389ddb8a6c39cd926dbe16f6b5bed00"})
ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, &(0x7f0000000000)={0x7ff, 0x3, 0xffff673c, 0x7, 0x9, 0xfff})

00:36:04 executing program 5:
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0xa, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {<r0=>0x0}, {}, {}, {}, {}]})
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={r0})
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000140))

00:36:04 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x5}, 0x8)

00:36:04 executing program 4:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb885f711a254173c70389ddb8a6c39cd926dbe16f6b5bed00"}) (async)
ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, &(0x7f0000000000)={0x7ff, 0x3, 0xffff673c, 0x7, 0x9, 0xfff})

00:36:04 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000000006, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x20363059})

00:36:04 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb4, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x2, "69eb88eb5f8c1a254173c70389c0a0e4b65581ddb8a6c39cd90edbe16f6b5bed", 0x32314d59})

00:36:04 executing program 0:
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c305d940dbe16f6b5bed", 0x34324142})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000200)={0x0, &(0x7f0000000140)=""/157})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14}, 0x14}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r4)
sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5}]}, 0x1c}}, 0x0)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r8=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r8, @ANYBLOB='\f'], 0x28}}, 0x0)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r11=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r11, @ANYBLOB='\f'], 0x28}}, 0x0)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40010)
r12 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x204000, 0xb0)
ioctl$vim2m_VIDIOC_EXPBUF(r12, 0xc0405610, &(0x7f00000000c0)={0x0, 0x5000000, 0xfffffffb, 0x880})

00:36:04 executing program 5:
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0xa, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {<r0=>0x0}, {}, {}, {}, {}]})
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={r0})
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000140)) (async)
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000140))

00:36:04 executing program 2:
syz_open_dev$vim2m(&(0x7f0000000080), 0x10000000006, 0x2) (async)
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000000006, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x20363059})

00:36:04 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x5}, 0x8)
syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}}) (async)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x5}, 0x8) (async)

00:36:04 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb4, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x2, "69eb88eb5f8c1a254173c70389c0a0e4b65581ddb8a6c39cd90edbe16f6b5bed", 0x32314d59})

00:36:04 executing program 5:
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0xa, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {<r0=>0x0}, {}, {}, {}, {}]})
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={r0})
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000140))

00:36:04 executing program 4:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb885f711a254173c70389ddb8a6c39cd926dbe16f6b5bed00"})
ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, &(0x7f0000000000)={0x7ff, 0x3, 0xffff673c, 0x7, 0x9, 0xfff})
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb885f711a254173c70389ddb8a6c39cd926dbe16f6b5bed00"}) (async)
ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, &(0x7f0000000000)={0x7ff, 0x3, 0xffff673c, 0x7, 0x9, 0xfff}) (async)

00:36:04 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb4, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x2, "69eb88eb5f8c1a254173c70389c0a0e4b65581ddb8a6c39cd90edbe16f6b5bed", 0x32314d59})

00:36:04 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x32314d4e, [], [0x101, 0x8]}})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000080)=0x1)
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0xfffffffffffffffb, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000340)={0x0, 0xc8, 0x3, {0x1, @raw_data="43a1628c5978207d58fd311d5476df784d38578e914601e6d551478010d2fdc483a739ff161d93bff7fc2431098441a76c697e5d13617f4ba43a162c7945679572938d29e704808afb2c03819e1ed24f89efd8668b6df7bca62b87d2f120bf12557186f446ac62f00567a6416ce28c749be7adc31a7e3c28cc4e1c3cda9d2531f505fef9d9a8bfaf94893fcc87ff2887d20c7d88c644a9f09608e67c2df2ab48550e062c5745a330a4de46eb8245d1d85c94e92360eb4c481d4d63d6e6cc8350a31eb5630a645dde"}, 0xffff})
ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000140)={0x3f, 0x3, 0x1, {0x2, @sdr={0x5a3b5f50, 0x4}}, 0x7fff})

00:36:04 executing program 5:
syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)

00:36:04 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000140)=@multiplanar_overlay={0x8, 0x2, 0x4, 0x2100, 0x0, {0x77359400}, {0x5, 0x1, 0x5, 0xf, 0x8, 0x5, "79d49b94"}, 0x1, 0x3, {&(0x7f00000000c0)=[{0x7, 0x3f, {0x2}, 0xfffff001}, {0x7, 0x7fff, {0x2670}, 0x7ff}]}, 0x3})
ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000240)={0x40, 0x6, 0x1, {0x2, @win={{0x1, 0x3, 0x20, 0x2}, 0x9, 0x2, &(0x7f00000001c0)={{0x8, 0x4, 0x4}}, 0x1000, &(0x7f0000000200)="188d65c17f69852bb6539a", 0x8c}}, 0x7})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:04 executing program 0:
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c305d940dbe16f6b5bed", 0x34324142})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000200)={0x0, &(0x7f0000000140)=""/157})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14}, 0x14}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r4)
sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5}]}, 0x1c}}, 0x0)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r8=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r8, @ANYBLOB='\f'], 0x28}}, 0x0)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r11=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r11, @ANYBLOB='\f'], 0x28}}, 0x0)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40010)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x204000, 0xb0)

00:36:04 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x100, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x3, @raw_data="0e2714356e7fec5b21e0d48d4e41cb77fa8de1d40257f15b8b4e4cb46c989aad877b19aad66543e848ccd528379a7c2e2df12680b5c4c51dab0804124d9527eeb7af533b1268646ab3e31724339ab18dc2ab8d7828e6a8e7846506b9be92369d10b61d8ac92b5f7f86dc0100f105c0f4909a9d0c456956a9eb30e8346afc2884c6735278daabcfe7af9b2cd41f0ec3d9e6f141eef180bf925a3363ae700fae754d796ce3e64d769cbf36a56971f6a20355bbaf6d81ed26d7430c710ef8a4cca294a1ae8657509cb4"})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:04 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000080)={0x4008, 0x0, 0x3, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x20385655})

00:36:04 executing program 5:
syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)

00:36:04 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000140)=@multiplanar_overlay={0x8, 0x2, 0x4, 0x2100, 0x0, {0x77359400}, {0x5, 0x1, 0x5, 0xf, 0x8, 0x5, "79d49b94"}, 0x1, 0x3, {&(0x7f00000000c0)=[{0x7, 0x3f, {0x2}, 0xfffff001}, {0x7, 0x7fff, {0x2670}, 0x7ff}]}, 0x3})
ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000240)={0x40, 0x6, 0x1, {0x2, @win={{0x1, 0x3, 0x20, 0x2}, 0x9, 0x2, &(0x7f00000001c0)={{0x8, 0x4, 0x4}}, 0x1000, &(0x7f0000000200)="188d65c17f69852bb6539a", 0x8c}}, 0x7})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) (async)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000140)=@multiplanar_overlay={0x8, 0x2, 0x4, 0x2100, 0x0, {0x77359400}, {0x5, 0x1, 0x5, 0xf, 0x8, 0x5, "79d49b94"}, 0x1, 0x3, {&(0x7f00000000c0)=[{0x7, 0x3f, {0x2}, 0xfffff001}, {0x7, 0x7fff, {0x2670}, 0x7ff}]}, 0x3}) (async)
ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000240)={0x40, 0x6, 0x1, {0x2, @win={{0x1, 0x3, 0x20, 0x2}, 0x9, 0x2, &(0x7f00000001c0)={{0x8, 0x4, 0x4}}, 0x1000, &(0x7f0000000200)="188d65c17f69852bb6539a", 0x8c}}, 0x7}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)

00:36:04 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x32314d4e, [], [0x101, 0x8]}})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000080)=0x1)
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0xfffffffffffffffb, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000340)={0x0, 0xc8, 0x3, {0x1, @raw_data="43a1628c5978207d58fd311d5476df784d38578e914601e6d551478010d2fdc483a739ff161d93bff7fc2431098441a76c697e5d13617f4ba43a162c7945679572938d29e704808afb2c03819e1ed24f89efd8668b6df7bca62b87d2f120bf12557186f446ac62f00567a6416ce28c749be7adc31a7e3c28cc4e1c3cda9d2531f505fef9d9a8bfaf94893fcc87ff2887d20c7d88c644a9f09608e67c2df2ab48550e062c5745a330a4de46eb8245d1d85c94e92360eb4c481d4d63d6e6cc8350a31eb5630a645dde"}, 0xffff})
ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000140)={0x3f, 0x3, 0x1, {0x2, @sdr={0x5a3b5f50, 0x4}}, 0x7fff})
syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x32314d4e, [], [0x101, 0x8]}}) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000080)=0x1) (async)
syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2) (async)
syz_open_dev$vim2m(&(0x7f0000000040), 0xfffffffffffffffb, 0x2) (async)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000340)={0x0, 0xc8, 0x3, {0x1, @raw_data="43a1628c5978207d58fd311d5476df784d38578e914601e6d551478010d2fdc483a739ff161d93bff7fc2431098441a76c697e5d13617f4ba43a162c7945679572938d29e704808afb2c03819e1ed24f89efd8668b6df7bca62b87d2f120bf12557186f446ac62f00567a6416ce28c749be7adc31a7e3c28cc4e1c3cda9d2531f505fef9d9a8bfaf94893fcc87ff2887d20c7d88c644a9f09608e67c2df2ab48550e062c5745a330a4de46eb8245d1d85c94e92360eb4c481d4d63d6e6cc8350a31eb5630a645dde"}, 0xffff}) (async)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000140)={0x3f, 0x3, 0x1, {0x2, @sdr={0x5a3b5f50, 0x4}}, 0x7fff}) (async)

00:36:04 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x100, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x3, @raw_data="0e2714356e7fec5b21e0d48d4e41cb77fa8de1d40257f15b8b4e4cb46c989aad877b19aad66543e848ccd528379a7c2e2df12680b5c4c51dab0804124d9527eeb7af533b1268646ab3e31724339ab18dc2ab8d7828e6a8e7846506b9be92369d10b61d8ac92b5f7f86dc0100f105c0f4909a9d0c456956a9eb30e8346afc2884c6735278daabcfe7af9b2cd41f0ec3d9e6f141eef180bf925a3363ae700fae754d796ce3e64d769cbf36a56971f6a20355bbaf6d81ed26d7430c710ef8a4cca294a1ae8657509cb4"})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2) (async)
syz_open_dev$vim2m(&(0x7f0000000080), 0x100, 0x2) (async)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x3, @raw_data="0e2714356e7fec5b21e0d48d4e41cb77fa8de1d40257f15b8b4e4cb46c989aad877b19aad66543e848ccd528379a7c2e2df12680b5c4c51dab0804124d9527eeb7af533b1268646ab3e31724339ab18dc2ab8d7828e6a8e7846506b9be92369d10b61d8ac92b5f7f86dc0100f105c0f4909a9d0c456956a9eb30e8346afc2884c6735278daabcfe7af9b2cd41f0ec3d9e6f141eef180bf925a3363ae700fae754d796ce3e64d769cbf36a56971f6a20355bbaf6d81ed26d7430c710ef8a4cca294a1ae8657509cb4"}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)

00:36:04 executing program 0:
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c305d940dbe16f6b5bed", 0x34324142})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000200)={0x0, &(0x7f0000000140)=""/157})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14}, 0x14}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r4)
sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5}]}, 0x1c}}, 0x0)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r8=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r8, @ANYBLOB='\f'], 0x28}}, 0x0)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r11=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r11, @ANYBLOB='\f'], 0x28}}, 0x0)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:04 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000080)={0x4008, 0x0, 0x3, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x20385655})
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000080)={0x4008, 0x0, 0x3, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x20385655}) (async)

00:36:04 executing program 5:
syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) (async)

00:36:04 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000140)=@multiplanar_overlay={0x8, 0x2, 0x4, 0x2100, 0x0, {0x77359400}, {0x5, 0x1, 0x5, 0xf, 0x8, 0x5, "79d49b94"}, 0x1, 0x3, {&(0x7f00000000c0)=[{0x7, 0x3f, {0x2}, 0xfffff001}, {0x7, 0x7fff, {0x2670}, 0x7ff}]}, 0x3}) (async)
ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000240)={0x40, 0x6, 0x1, {0x2, @win={{0x1, 0x3, 0x20, 0x2}, 0x9, 0x2, &(0x7f00000001c0)={{0x8, 0x4, 0x4}}, 0x1000, &(0x7f0000000200)="188d65c17f69852bb6539a", 0x8c}}, 0x7})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:04 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2) (async)
r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x100, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x3, @raw_data="0e2714356e7fec5b21e0d48d4e41cb77fa8de1d40257f15b8b4e4cb46c989aad877b19aad66543e848ccd528379a7c2e2df12680b5c4c51dab0804124d9527eeb7af533b1268646ab3e31724339ab18dc2ab8d7828e6a8e7846506b9be92369d10b61d8ac92b5f7f86dc0100f105c0f4909a9d0c456956a9eb30e8346afc2884c6735278daabcfe7af9b2cd41f0ec3d9e6f141eef180bf925a3363ae700fae754d796ce3e64d769cbf36a56971f6a20355bbaf6d81ed26d7430c710ef8a4cca294a1ae8657509cb4"}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:04 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@userptr={0x16921c1, 0x0, 0x4, 0x1000, 0x6, {0x0, 0x2710}, {0x4, 0x0, 0x4d, 0x1f, 0x9, 0x20, "8a8703d7"}, 0x9, 0x2, {&(0x7f0000000100)}, 0xdb, 0x0, r1})
syz_open_dev$vim2m(&(0x7f0000000140), 0x76, 0x2)

00:36:04 executing program 0:
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c305d940dbe16f6b5bed", 0x34324142})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000200)={0x0, &(0x7f0000000140)=""/157})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14}, 0x14}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r4)
sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5}]}, 0x1c}}, 0x0)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r8=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r8, @ANYBLOB='\f'], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r10=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:04 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x32314d4e, [], [0x101, 0x8]}})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000080)=0x1) (async)
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0xfffffffffffffffb, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000340)={0x0, 0xc8, 0x3, {0x1, @raw_data="43a1628c5978207d58fd311d5476df784d38578e914601e6d551478010d2fdc483a739ff161d93bff7fc2431098441a76c697e5d13617f4ba43a162c7945679572938d29e704808afb2c03819e1ed24f89efd8668b6df7bca62b87d2f120bf12557186f446ac62f00567a6416ce28c749be7adc31a7e3c28cc4e1c3cda9d2531f505fef9d9a8bfaf94893fcc87ff2887d20c7d88c644a9f09608e67c2df2ab48550e062c5745a330a4de46eb8245d1d85c94e92360eb4c481d4d63d6e6cc8350a31eb5630a645dde"}, 0xffff}) (async)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000140)={0x3f, 0x3, 0x1, {0x2, @sdr={0x5a3b5f50, 0x4}}, 0x7fff})

00:36:04 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000080)={0x4008, 0x0, 0x3, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x20385655})

00:36:04 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@userptr={0x16921c1, 0x0, 0x4, 0x1000, 0x6, {0x0, 0x2710}, {0x4, 0x0, 0x4d, 0x1f, 0x9, 0x20, "8a8703d7"}, 0x9, 0x2, {&(0x7f0000000100)}, 0xdb, 0x0, r1})
syz_open_dev$vim2m(&(0x7f0000000140), 0x76, 0x2)
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080)) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@userptr={0x16921c1, 0x0, 0x4, 0x1000, 0x6, {0x0, 0x2710}, {0x4, 0x0, 0x4d, 0x1f, 0x9, 0x20, "8a8703d7"}, 0x9, 0x2, {&(0x7f0000000100)}, 0xdb, 0x0, r1}) (async)
syz_open_dev$vim2m(&(0x7f0000000140), 0x76, 0x2) (async)

00:36:04 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0xb5315258})

00:36:04 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0xfd5, 0x200000)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[{}, {}, {}, {}], &(0x7f00000000c0)=[0x0, <r1=>0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x4, 0x2, 0x7})
ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000200)={&(0x7f0000000040)=[0x0], &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}], r1, 0x0, '\x00', 0x1, 0x7})
r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})

00:36:04 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000080)={0x0, 0x1, 0x1, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x39565559})

00:36:04 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0)
sendmsg$can_raw(r0, &(0x7f0000000180)={&(0x7f0000000080), 0x10, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x4, 0x0, 0x1}, 0x3e, 0x3, 0x0, 0x0, "ef652028b0b5fe841d5c31fb2a67d3711b1c336da53026332bbba4aef528bad7225c975a4394db86959cf760be0d9423498c78a8a3d8ccd40e1906a3432eb722"}, 0x48}, 0x1, 0x0, 0x0, 0xc080}, 0x80)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:04 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0xb5315258}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0xb5315258})

00:36:04 executing program 0:
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c305d940dbe16f6b5bed", 0x34324142})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000200)={0x0, &(0x7f0000000140)=""/157})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14}, 0x14}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r4)
sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5}]}, 0x1c}}, 0x0)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r8=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r8, @ANYBLOB='\f'], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:04 executing program 4:
syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2) (async)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000080)={0x0, 0x1, 0x1, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x39565559})

00:36:04 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0xfd5, 0x200000)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[{}, {}, {}, {}], &(0x7f00000000c0)=[0x0, <r1=>0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x4, 0x2, 0x7})
ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000200)={&(0x7f0000000040)=[0x0], &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}], r1, 0x0, '\x00', 0x1, 0x7})
r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
syz_open_dev$dri(&(0x7f0000000000), 0xfd5, 0x200000) (async)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[{}, {}, {}, {}], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x4, 0x2, 0x7}) (async)
ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000200)={&(0x7f0000000040)=[0x0], &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}], r1, 0x0, '\x00', 0x1, 0x7}) (async)
syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}}) (async)

00:36:04 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080)) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@userptr={0x16921c1, 0x0, 0x4, 0x1000, 0x6, {0x0, 0x2710}, {0x4, 0x0, 0x4d, 0x1f, 0x9, 0x20, "8a8703d7"}, 0x9, 0x2, {&(0x7f0000000100)}, 0xdb, 0x0, r1}) (async)
syz_open_dev$vim2m(&(0x7f0000000140), 0x76, 0x2)

00:36:04 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0)
sendmsg$can_raw(r0, &(0x7f0000000180)={&(0x7f0000000080), 0x10, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x4, 0x0, 0x1}, 0x3e, 0x3, 0x0, 0x0, "ef652028b0b5fe841d5c31fb2a67d3711b1c336da53026332bbba4aef528bad7225c975a4394db86959cf760be0d9423498c78a8a3d8ccd40e1906a3432eb722"}, 0x48}, 0x1, 0x0, 0x0, 0xc080}, 0x80) (async)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:04 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0xb5315258})

00:36:04 executing program 0:
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c305d940dbe16f6b5bed", 0x34324142})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000200)={0x0, &(0x7f0000000140)=""/157})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14}, 0x14}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r4)
sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5}]}, 0x1c}}, 0x0)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r8=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r8, @ANYBLOB='\f'], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:04 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0xfd5, 0x200000) (async, rerun: 64)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[{}, {}, {}, {}], &(0x7f00000000c0)=[0x0, <r1=>0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x4, 0x2, 0x7}) (rerun: 64)
ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000200)={&(0x7f0000000040)=[0x0], &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}], r1, 0x0, '\x00', 0x1, 0x7})
r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})

00:36:04 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000080)={0x0, 0x1, 0x1, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x39565559})

00:36:04 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
clock_gettime(0x0, &(0x7f0000000080)={<r1=>0x0, <r2=>0x0})
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000140)=@multiplanar_fd={0x6, 0x2, 0x4, 0x100, 0x3f, {r1, r2/1000+10000}, {0x5, 0x1, 0x20, 0x9, 0x7, 0x0, "88a3c1c5"}, 0x1, 0x4, {&(0x7f00000000c0)=[{0x80000000, 0x7, {}, 0xfff}, {0xe4ca, 0xd65, {}, 0x5}]}, 0x2, 0x0, r0})
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f00000002c0))
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000240)=@multiplanar_overlay={0x7fff, 0x3, 0x4, 0x4, 0x9, {0x0, 0xea60}, {0x3, 0xc, 0x5, 0xff, 0xf7, 0xff, "4884cb7b"}, 0x10001, 0x3, {&(0x7f00000001c0)=[{0x5, 0x3, {0x80000001}, 0xedb9}, {0x2, 0x6, {0x6e9}, 0x100}]}, 0xffffffff, 0x0, r3})

00:36:04 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0) (async)
sendmsg$can_raw(r0, &(0x7f0000000180)={&(0x7f0000000080), 0x10, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x4, 0x0, 0x1}, 0x3e, 0x3, 0x0, 0x0, "ef652028b0b5fe841d5c31fb2a67d3711b1c336da53026332bbba4aef528bad7225c975a4394db86959cf760be0d9423498c78a8a3d8ccd40e1906a3432eb722"}, 0x48}, 0x1, 0x0, 0x0, 0xc080}, 0x80)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:04 executing program 2:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0xca07, <r1=>0x0, 0x10000})
ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000080)={0x0, r1})
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000100))
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:04 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x3, @pix_mp={0x9, 0x4, 0x38414762, 0x0, 0x5, [{0x0, 0x7}, {0x2, 0x8000}, {0x3, 0x2}, {0x3, 0x9}, {0x1, 0x6}, {0x101, 0x4416}, {0x3}, {0x1, 0x6}], 0x6, 0x7, 0xe, 0x1, 0x4}})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0x0, <r1=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x2, @sliced={0x200, [0x3, 0x8, 0x200, 0x8, 0x200, 0x1f, 0x3, 0x7, 0xfffe, 0x3ff, 0x1000, 0x0, 0x7, 0x200, 0x400, 0x1, 0x280c, 0x3, 0x2, 0x7fff, 0x1f, 0x1, 0x698, 0x9, 0xfff7, 0x6, 0x4, 0x4, 0xffff, 0x20, 0x7f, 0xfffe, 0x4, 0xfff, 0x100, 0xdfe, 0x401, 0x1, 0xcde, 0x1, 0x9768, 0x0, 0xc762, 0x5, 0x6, 0x9, 0x2, 0xead7], 0x5}})

00:36:04 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
clock_gettime(0x0, &(0x7f0000000080)={<r1=>0x0, <r2=>0x0})
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000140)=@multiplanar_fd={0x6, 0x2, 0x4, 0x100, 0x3f, {r1, r2/1000+10000}, {0x5, 0x1, 0x20, 0x9, 0x7, 0x0, "88a3c1c5"}, 0x1, 0x4, {&(0x7f00000000c0)=[{0x80000000, 0x7, {}, 0xfff}, {0xe4ca, 0xd65, {}, 0x5}]}, 0x2, 0x0, r0})
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f00000002c0)) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000240)=@multiplanar_overlay={0x7fff, 0x3, 0x4, 0x4, 0x9, {0x0, 0xea60}, {0x3, 0xc, 0x5, 0xff, 0xf7, 0xff, "4884cb7b"}, 0x10001, 0x3, {&(0x7f00000001c0)=[{0x5, 0x3, {0x80000001}, 0xedb9}, {0x2, 0x6, {0x6e9}, 0x100}]}, 0xffffffff, 0x0, r3})

00:36:05 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x8ff82723e52a9d82, "69eba0e4b6558102bfcaab9cd926dbe16f6b5bed005c89f70600"})
socketpair(0x22, 0xa, 0x0, &(0x7f0000000080))
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f00000000c0))
ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0)
getpgid(r1)

00:36:05 executing program 0:
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c305d940dbe16f6b5bed", 0x34324142})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000200)={0x0, &(0x7f0000000140)=""/157})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14}, 0x14}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r4)
sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5}]}, 0x1c}}, 0x0)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r8=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r8, @ANYBLOB='\f'], 0x28}}, 0x0)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:05 executing program 2:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0xca07, <r1=>0x0, 0x10000})
ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000080)={0x0, r1}) (async)
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000100))
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:05 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x180000, 0x0, <r1=>0xffffffffffffffff})
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000240))
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080))
ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000100)={0x2, @pix_mp={0x10000, 0x5, 0x32314d4e, 0x4, 0x6, [{0x4, 0xfffffc01}, {0x7c, 0x3}, {0x8, 0x9}, {0x3, 0x10001}, {0x7ff, 0x3}, {0x100, 0x77}, {0x5, 0x800}, {0xffffff1b, 0x7}], 0x6, 0x4, 0xe, 0x0, 0x2}})
ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000300)={0x0, 0x3})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:05 executing program 1:
syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2) (async)
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x3, @pix_mp={0x9, 0x4, 0x38414762, 0x0, 0x5, [{0x0, 0x7}, {0x2, 0x8000}, {0x3, 0x2}, {0x3, 0x9}, {0x1, 0x6}, {0x101, 0x4416}, {0x3}, {0x1, 0x6}], 0x6, 0x7, 0xe, 0x1, 0x4}})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0x0, <r1=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x2, @sliced={0x200, [0x3, 0x8, 0x200, 0x8, 0x200, 0x1f, 0x3, 0x7, 0xfffe, 0x3ff, 0x1000, 0x0, 0x7, 0x200, 0x400, 0x1, 0x280c, 0x3, 0x2, 0x7fff, 0x1f, 0x1, 0x698, 0x9, 0xfff7, 0x6, 0x4, 0x4, 0xffff, 0x20, 0x7f, 0xfffe, 0x4, 0xfff, 0x100, 0xdfe, 0x401, 0x1, 0xcde, 0x1, 0x9768, 0x0, 0xc762, 0x5, 0x6, 0x9, 0x2, 0xead7], 0x5}})

00:36:05 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
clock_gettime(0x0, &(0x7f0000000080)={<r1=>0x0, <r2=>0x0})
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000140)=@multiplanar_fd={0x6, 0x2, 0x4, 0x100, 0x3f, {r1, r2/1000+10000}, {0x5, 0x1, 0x20, 0x9, 0x7, 0x0, "88a3c1c5"}, 0x1, 0x4, {&(0x7f00000000c0)=[{0x80000000, 0x7, {}, 0xfff}, {0xe4ca, 0xd65, {}, 0x5}]}, 0x2, 0x0, r0})
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f00000002c0))
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000240)=@multiplanar_overlay={0x7fff, 0x3, 0x4, 0x4, 0x9, {0x0, 0xea60}, {0x3, 0xc, 0x5, 0xff, 0xf7, 0xff, "4884cb7b"}, 0x10001, 0x3, {&(0x7f00000001c0)=[{0x5, 0x3, {0x80000001}, 0xedb9}, {0x2, 0x6, {0x6e9}, 0x100}]}, 0xffffffff, 0x0, r3})
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
clock_gettime(0x0, &(0x7f0000000080)) (async)
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000140)=@multiplanar_fd={0x6, 0x2, 0x4, 0x100, 0x3f, {r1, r2/1000+10000}, {0x5, 0x1, 0x20, 0x9, 0x7, 0x0, "88a3c1c5"}, 0x1, 0x4, {&(0x7f00000000c0)=[{0x80000000, 0x7, {}, 0xfff}, {0xe4ca, 0xd65, {}, 0x5}]}, 0x2, 0x0, r0}) (async)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f00000002c0)) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000240)=@multiplanar_overlay={0x7fff, 0x3, 0x4, 0x4, 0x9, {0x0, 0xea60}, {0x3, 0xc, 0x5, 0xff, 0xf7, 0xff, "4884cb7b"}, 0x10001, 0x3, {&(0x7f00000001c0)=[{0x5, 0x3, {0x80000001}, 0xedb9}, {0x2, 0x6, {0x6e9}, 0x100}]}, 0xffffffff, 0x0, r3}) (async)

00:36:05 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x8ff82723e52a9d82, "69eba0e4b6558102bfcaab9cd926dbe16f6b5bed005c89f70600"})
socketpair(0x22, 0xa, 0x0, &(0x7f0000000080))
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f00000000c0)) (async, rerun: 64)
ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0) (async, rerun: 64)
getpgid(r1)

00:36:05 executing program 0:
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c305d940dbe16f6b5bed", 0x34324142})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000200)={0x0, &(0x7f0000000140)=""/157})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14}, 0x14}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r4)
sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5}]}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r7=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:05 executing program 2:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0xca07, <r1=>0x0, 0x10000})
ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000080)={0x0, r1})
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000100))
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0xca07, 0x0, 0x10000}) (async)
ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000080)={0x0, r1}) (async)
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000100)) (async)
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)

00:36:05 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x3, @pix_mp={0x9, 0x4, 0x38414762, 0x0, 0x5, [{0x0, 0x7}, {0x2, 0x8000}, {0x3, 0x2}, {0x3, 0x9}, {0x1, 0x6}, {0x101, 0x4416}, {0x3}, {0x1, 0x6}], 0x6, 0x7, 0xe, 0x1, 0x4}}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0x0, <r1=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x2, @sliced={0x200, [0x3, 0x8, 0x200, 0x8, 0x200, 0x1f, 0x3, 0x7, 0xfffe, 0x3ff, 0x1000, 0x0, 0x7, 0x200, 0x400, 0x1, 0x280c, 0x3, 0x2, 0x7fff, 0x1f, 0x1, 0x698, 0x9, 0xfff7, 0x6, 0x4, 0x4, 0xffff, 0x20, 0x7f, 0xfffe, 0x4, 0xfff, 0x100, 0xdfe, 0x401, 0x1, 0xcde, 0x1, 0x9768, 0x0, 0xc762, 0x5, 0x6, 0x9, 0x2, 0xead7], 0x5}})

00:36:05 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x180000, 0x0, <r1=>0xffffffffffffffff}) (async)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0) (async, rerun: 64)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000240)) (async, rerun: 64)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000100)={0x2, @pix_mp={0x10000, 0x5, 0x32314d4e, 0x4, 0x6, [{0x4, 0xfffffc01}, {0x7c, 0x3}, {0x8, 0x9}, {0x3, 0x10001}, {0x7ff, 0x3}, {0x100, 0x77}, {0x5, 0x800}, {0xffffff1b, 0x7}], 0x6, 0x4, 0xe, 0x0, 0x2}})
ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000300)={0x0, 0x3})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:05 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x800, 0x112)
clock_gettime(0x2, &(0x7f0000000140)={<r2=>0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80800, 0x0, <r4=>0xffffffffffffffff})
socket$igmp(0x2, 0x3, 0x2)
ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f00000000c0)=@multiplanar_fd={0x5, 0x1, 0x4, 0x100, 0x6, {r2, r3/1000+60000}, {0x4, 0x1, 0x0, 0x0, 0x9f, 0xf5, "255244e8"}, 0x158e, 0x4, {&(0x7f0000000200)=[{0x4, 0x8001, {}, 0x7}, {0x77d7, 0xe8c6, {r4}, 0x4}]}, 0xfff, 0x0, r1})
socket$igmp(0x2, 0x3, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:05 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x80000, 0x0, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000000080)=[0x0, <r2=>0x0]})
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000200)={&(0x7f0000000140)="27995b9385c9a7c295e75b78d111dacd2c5dbf2bbf8386aa2a61f194e05a701c9b294f3f15bac926d1f22d43d49d9665bae34ea6b81cb8421ad08a3acf96b4499ca5c33a8c844fa1d458cc8af5d937414ce631780c2529dca5eb67e8fbab3923acbd953bea2dda36c06e2ac7ae1539ef34c339a5aacd3c6492e6356175a944d2c94717139ac51c43d99bbbf53dd2a67ce7fff07b94a52ec9c141857b", 0x9c, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[r2, 0x0, r3], 0x3, 0x80000})
syz_open_dev$vim2m(&(0x7f00000003c0), 0x0, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})

00:36:05 executing program 0:
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c305d940dbe16f6b5bed", 0x34324142})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000200)={0x0, &(0x7f0000000140)=""/157})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14}, 0x14}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r4)
sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5}]}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:05 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), 0xffffffffffffffff, 0x67d0}}, 0x18)

00:36:05 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x8ff82723e52a9d82, "69eba0e4b6558102bfcaab9cd926dbe16f6b5bed005c89f70600"}) (async)
socketpair(0x22, 0xa, 0x0, &(0x7f0000000080)) (async)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f00000000c0)) (async)
ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0) (async)
getpgid(r1)

00:36:05 executing program 3:
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x180000, 0x0, <r1=>0xffffffffffffffff})
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000240))
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)) (async)
ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080))
ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000100)={0x2, @pix_mp={0x10000, 0x5, 0x32314d4e, 0x4, 0x6, [{0x4, 0xfffffc01}, {0x7c, 0x3}, {0x8, 0x9}, {0x3, 0x10001}, {0x7ff, 0x3}, {0x100, 0x77}, {0x5, 0x800}, {0xffffff1b, 0x7}], 0x6, 0x4, 0xe, 0x0, 0x2}})
ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000300)={0x0, 0x3})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:05 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x800, 0x112)
clock_gettime(0x2, &(0x7f0000000140)={<r2=>0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80800, 0x0, <r4=>0xffffffffffffffff}) (async)
socket$igmp(0x2, 0x3, 0x2)
ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f00000000c0)=@multiplanar_fd={0x5, 0x1, 0x4, 0x100, 0x6, {r2, r3/1000+60000}, {0x4, 0x1, 0x0, 0x0, 0x9f, 0xf5, "255244e8"}, 0x158e, 0x4, {&(0x7f0000000200)=[{0x4, 0x8001, {}, 0x7}, {0x77d7, 0xe8c6, {r4}, 0x4}]}, 0xfff, 0x0, r1})
socket$igmp(0x2, 0x3, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:05 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), 0xffffffffffffffff, 0x67d0}}, 0x18)
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), 0xffffffffffffffff, 0x67d0}}, 0x18) (async)

00:36:05 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x80000, 0x0, <r1=>0xffffffffffffffff}) (async)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000000080)=[0x0, <r2=>0x0]}) (async)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000200)={&(0x7f0000000140)="27995b9385c9a7c295e75b78d111dacd2c5dbf2bbf8386aa2a61f194e05a701c9b294f3f15bac926d1f22d43d49d9665bae34ea6b81cb8421ad08a3acf96b4499ca5c33a8c844fa1d458cc8af5d937414ce631780c2529dca5eb67e8fbab3923acbd953bea2dda36c06e2ac7ae1539ef34c339a5aacd3c6492e6356175a944d2c94717139ac51c43d99bbbf53dd2a67ce7fff07b94a52ec9c141857b", 0x9c, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[r2, 0x0, r3], 0x3, 0x80000}) (async)
syz_open_dev$vim2m(&(0x7f00000003c0), 0x0, 0x2) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})

00:36:05 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x3fd, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88c026dbe16f6b5bed00"})
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sliced={0x4905, [0xf4, 0x6, 0x3, 0x40, 0x4, 0x6, 0x3, 0xffff, 0x79e, 0x1ff, 0x3, 0x1, 0xffff, 0x1000, 0x8001, 0x3, 0x4, 0x7fff, 0x200, 0x4, 0x4, 0xba26, 0x5, 0x6, 0x5ec9, 0x8, 0x1f, 0x3, 0xfb, 0x8, 0x4, 0x3f, 0x9, 0x7, 0xffff, 0xfc00, 0x9, 0x996a, 0x5, 0x1, 0x0, 0x8001, 0x401, 0x1f, 0x4, 0x4, 0x9, 0x1], 0x3ff}})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000180)={0x2, 0x50323234, 0x3, @discrete={0x8, 0xc20f}})
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000200))

00:36:05 executing program 0:
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c305d940dbe16f6b5bed", 0x34324142})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000200)={0x0, &(0x7f0000000140)=""/157})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14}, 0x14}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r4)
sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5}]}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:05 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0], 0x2, 0x0, 0x0, <r2=>0xffffffffffffffff})
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r5, 0xc0106403, 0x0)
ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000180)={0x1, 0x7, [{0xffffffffffffffff, 0x0, 0x1000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x1000000000000, 0x1000000}, {r2, 0x0, 0xfffffffffffff000, 0x4000}, {r3, 0x0, 0x1000000, 0x300000000}, {r4, 0x0, 0x1000000, 0x4000}, {r5, 0x0, 0x10000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x1000, 0xfffffffffffff000}]})

00:36:05 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x800, 0x112)
clock_gettime(0x2, &(0x7f0000000140)={<r2=>0x0, <r3=>0x0}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80800, 0x0, <r4=>0xffffffffffffffff}) (async)
socket$igmp(0x2, 0x3, 0x2)
ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f00000000c0)=@multiplanar_fd={0x5, 0x1, 0x4, 0x100, 0x6, {r2, r3/1000+60000}, {0x4, 0x1, 0x0, 0x0, 0x9f, 0xf5, "255244e8"}, 0x158e, 0x4, {&(0x7f0000000200)=[{0x4, 0x8001, {}, 0x7}, {0x77d7, 0xe8c6, {r4}, 0x4}]}, 0xfff, 0x0, r1})
socket$igmp(0x2, 0x3, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:05 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x80000, 0x0, <r1=>0xffffffffffffffff}) (async)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000000080)=[0x0, <r2=>0x0]}) (async)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000200)={&(0x7f0000000140)="27995b9385c9a7c295e75b78d111dacd2c5dbf2bbf8386aa2a61f194e05a701c9b294f3f15bac926d1f22d43d49d9665bae34ea6b81cb8421ad08a3acf96b4499ca5c33a8c844fa1d458cc8af5d937414ce631780c2529dca5eb67e8fbab3923acbd953bea2dda36c06e2ac7ae1539ef34c339a5aacd3c6492e6356175a944d2c94717139ac51c43d99bbbf53dd2a67ce7fff07b94a52ec9c141857b", 0x9c, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[r2, 0x0, r3], 0x3, 0x80000}) (async)
syz_open_dev$vim2m(&(0x7f00000003c0), 0x0, 0x2) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})

00:36:05 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), 0xffffffffffffffff, 0x67d0}}, 0x18)

00:36:05 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0], 0x2, 0x0, 0x0, <r2=>0xffffffffffffffff}) (async)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0) (async)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r5, 0xc0106403, 0x0) (async, rerun: 64)
ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000180)={0x1, 0x7, [{0xffffffffffffffff, 0x0, 0x1000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x1000000000000, 0x1000000}, {r2, 0x0, 0xfffffffffffff000, 0x4000}, {r3, 0x0, 0x1000000, 0x300000000}, {r4, 0x0, 0x1000000, 0x4000}, {r5, 0x0, 0x10000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x1000, 0xfffffffffffff000}]}) (rerun: 64)

00:36:05 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x3fd, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88c026dbe16f6b5bed00"})
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sliced={0x4905, [0xf4, 0x6, 0x3, 0x40, 0x4, 0x6, 0x3, 0xffff, 0x79e, 0x1ff, 0x3, 0x1, 0xffff, 0x1000, 0x8001, 0x3, 0x4, 0x7fff, 0x200, 0x4, 0x4, 0xba26, 0x5, 0x6, 0x5ec9, 0x8, 0x1f, 0x3, 0xfb, 0x8, 0x4, 0x3f, 0x9, 0x7, 0xffff, 0xfc00, 0x9, 0x996a, 0x5, 0x1, 0x0, 0x8001, 0x401, 0x1f, 0x4, 0x4, 0x9, 0x1], 0x3ff}})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000180)={0x2, 0x50323234, 0x3, @discrete={0x8, 0xc20f}})
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000200))
syz_open_dev$vim2m(&(0x7f00000001c0), 0x3fd, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88c026dbe16f6b5bed00"}) (async)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sliced={0x4905, [0xf4, 0x6, 0x3, 0x40, 0x4, 0x6, 0x3, 0xffff, 0x79e, 0x1ff, 0x3, 0x1, 0xffff, 0x1000, 0x8001, 0x3, 0x4, 0x7fff, 0x200, 0x4, 0x4, 0xba26, 0x5, 0x6, 0x5ec9, 0x8, 0x1f, 0x3, 0xfb, 0x8, 0x4, 0x3f, 0x9, 0x7, 0xffff, 0xfc00, 0x9, 0x996a, 0x5, 0x1, 0x0, 0x8001, 0x401, 0x1f, 0x4, 0x4, 0x9, 0x1], 0x3ff}}) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000180)={0x2, 0x50323234, 0x3, @discrete={0x8, 0xc20f}}) (async)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000200)) (async)

00:36:05 executing program 0:
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c305d940dbe16f6b5bed", 0x34324142})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000200)={0x0, &(0x7f0000000140)=""/157})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14}, 0x14}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r4)
sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5}]}, 0x1c}}, 0x0)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:05 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000001c0)={0x3, 0x9, 0x3, {0x3, @win={{0x7, 0x4, 0xc4, 0x7}, 0x4, 0x8, &(0x7f0000000100)={{0x8000, 0x99b, 0x3, 0xffffffff}, &(0x7f00000000c0)={{0x401, 0x2, 0x6, 0x800}, &(0x7f0000000080)={{0x3ff, 0x0, 0x9, 0x8001}}}}, 0x5, &(0x7f0000000140)="dc4a99e82f71f920049eafc673c6183395e187d7863e977b0a63829af5f91d4926c986c2ff69dee52f31f94e418c22099cfeb460733dcc4a1d9e0e16cad9ea8c8a2c1c9ff0f8330acaa2d5a08c7acadd580ffd5a458bc623c52f180e606410695e7f9a1aa3011051d7", 0x5}}, 0x48})

00:36:05 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x48524742})

00:36:05 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x103400, 0x8)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000340)=""/4096)
ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x3, 0x1, 0x10001, 0x10080})

00:36:05 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async, rerun: 32)
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) (async, rerun: 32)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0], 0x2, 0x0, 0x0, <r2=>0xffffffffffffffff})
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0) (async)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r5, 0xc0106403, 0x0)
ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000180)={0x1, 0x7, [{0xffffffffffffffff, 0x0, 0x1000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x1000000000000, 0x1000000}, {r2, 0x0, 0xfffffffffffff000, 0x4000}, {r3, 0x0, 0x1000000, 0x300000000}, {r4, 0x0, 0x1000000, 0x4000}, {r5, 0x0, 0x10000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x1000, 0xfffffffffffff000}]})

00:36:05 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x3fd, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88c026dbe16f6b5bed00"})
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sliced={0x4905, [0xf4, 0x6, 0x3, 0x40, 0x4, 0x6, 0x3, 0xffff, 0x79e, 0x1ff, 0x3, 0x1, 0xffff, 0x1000, 0x8001, 0x3, 0x4, 0x7fff, 0x200, 0x4, 0x4, 0xba26, 0x5, 0x6, 0x5ec9, 0x8, 0x1f, 0x3, 0xfb, 0x8, 0x4, 0x3f, 0x9, 0x7, 0xffff, 0xfc00, 0x9, 0x996a, 0x5, 0x1, 0x0, 0x8001, 0x401, 0x1f, 0x4, 0x4, 0x9, 0x1], 0x3ff}})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000180)={0x2, 0x50323234, 0x3, @discrete={0x8, 0xc20f}})
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000200))
syz_open_dev$vim2m(&(0x7f00000001c0), 0x3fd, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88c026dbe16f6b5bed00"}) (async)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sliced={0x4905, [0xf4, 0x6, 0x3, 0x40, 0x4, 0x6, 0x3, 0xffff, 0x79e, 0x1ff, 0x3, 0x1, 0xffff, 0x1000, 0x8001, 0x3, 0x4, 0x7fff, 0x200, 0x4, 0x4, 0xba26, 0x5, 0x6, 0x5ec9, 0x8, 0x1f, 0x3, 0xfb, 0x8, 0x4, 0x3f, 0x9, 0x7, 0xffff, 0xfc00, 0x9, 0x996a, 0x5, 0x1, 0x0, 0x8001, 0x401, 0x1f, 0x4, 0x4, 0x9, 0x1], 0x3ff}}) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000180)={0x2, 0x50323234, 0x3, @discrete={0x8, 0xc20f}}) (async)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000200)) (async)

00:36:05 executing program 0:
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c305d940dbe16f6b5bed", 0x34324142})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000200)={0x0, &(0x7f0000000140)=""/157})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14}, 0x14}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r3)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r4, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:05 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000001c0)={0x3, 0x9, 0x3, {0x3, @win={{0x7, 0x4, 0xc4, 0x7}, 0x4, 0x8, &(0x7f0000000100)={{0x8000, 0x99b, 0x3, 0xffffffff}, &(0x7f00000000c0)={{0x401, 0x2, 0x6, 0x800}, &(0x7f0000000080)={{0x3ff, 0x0, 0x9, 0x8001}}}}, 0x5, &(0x7f0000000140)="dc4a99e82f71f920049eafc673c6183395e187d7863e977b0a63829af5f91d4926c986c2ff69dee52f31f94e418c22099cfeb460733dcc4a1d9e0e16cad9ea8c8a2c1c9ff0f8330acaa2d5a08c7acadd580ffd5a458bc623c52f180e606410695e7f9a1aa3011051d7", 0x5}}, 0x48})
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000001c0)={0x3, 0x9, 0x3, {0x3, @win={{0x7, 0x4, 0xc4, 0x7}, 0x4, 0x8, &(0x7f0000000100)={{0x8000, 0x99b, 0x3, 0xffffffff}, &(0x7f00000000c0)={{0x401, 0x2, 0x6, 0x800}, &(0x7f0000000080)={{0x3ff, 0x0, 0x9, 0x8001}}}}, 0x5, &(0x7f0000000140)="dc4a99e82f71f920049eafc673c6183395e187d7863e977b0a63829af5f91d4926c986c2ff69dee52f31f94e418c22099cfeb460733dcc4a1d9e0e16cad9ea8c8a2c1c9ff0f8330acaa2d5a08c7acadd580ffd5a458bc623c52f180e606410695e7f9a1aa3011051d7", 0x5}}, 0x48}) (async)

00:36:05 executing program 2:
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x48524742})

00:36:05 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}}) (async)
r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x103400, 0x8)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000340)=""/4096) (async)
ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x3, 0x1, 0x10001, 0x10080})

00:36:05 executing program 2:
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x48524742})

00:36:05 executing program 0:
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c305d940dbe16f6b5bed", 0x34324142})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000200)={0x0, &(0x7f0000000140)=""/157})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14}, 0x14}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:05 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x107c00, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000180)={<r3=>0x0, 0x1, r1})
ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f00000001c0)={0x0, r3, 0x6, 0x10001, 0x4})
ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f0000000100)={&(0x7f00000000c0)})
r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x8000000000000000, 0x44000)
ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, &(0x7f0000000140))
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, <r5=>0xffffffffffffffff})
ioctl$DRM_IOCTL_AGP_RELEASE(r5, 0x6431)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:05 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000001c0)={0x3, 0x9, 0x3, {0x3, @win={{0x7, 0x4, 0xc4, 0x7}, 0x4, 0x8, &(0x7f0000000100)={{0x8000, 0x99b, 0x3, 0xffffffff}, &(0x7f00000000c0)={{0x401, 0x2, 0x6, 0x800}, &(0x7f0000000080)={{0x3ff, 0x0, 0x9, 0x8001}}}}, 0x5, &(0x7f0000000140)="dc4a99e82f71f920049eafc673c6183395e187d7863e977b0a63829af5f91d4926c986c2ff69dee52f31f94e418c22099cfeb460733dcc4a1d9e0e16cad9ea8c8a2c1c9ff0f8330acaa2d5a08c7acadd580ffd5a458bc623c52f180e606410695e7f9a1aa3011051d7", 0x5}}, 0x48})

00:36:05 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f00000002c0)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[{}, {}, {}, {}, {}], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x5, 0x1})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000600))
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_FREE_BUFS(r3, 0x4010641a, &(0x7f00000005c0)={0x3, &(0x7f0000000580)=[0xfff, 0x0, 0x3]})
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000480)={0x9, 0x1, 0x2})
clock_gettime(0x0, &(0x7f00000004c0)={<r4=>0x0, <r5=>0x0})
ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000500)=@fd={0x302, 0x2, 0x4, 0x10, 0x7, {r4, r5/1000+10000}, {0x5, 0x8, 0x3, 0x4, 0x5, 0x6d, "32fcd4cd"}, 0x5ffc0000, 0x4, {}, 0xe62})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000440)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], 0x7, 0x2, 0x4, 0x3})

00:36:05 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x103400, 0x8)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000340)=""/4096) (async)
ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x3, 0x1, 0x10001, 0x10080})

00:36:05 executing program 2:
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00'})
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:05 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x107c00, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000180)={<r3=>0x0, 0x1, r1})
ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f00000001c0)={0x0, r3, 0x6, 0x10001, 0x4})
ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f0000000100)={&(0x7f00000000c0)})
r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x8000000000000000, 0x44000)
ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, &(0x7f0000000140))
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, <r5=>0xffffffffffffffff})
ioctl$DRM_IOCTL_AGP_RELEASE(r5, 0x6431)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x107c00, 0x0) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000180)={0x0, 0x1, r1}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f00000001c0)={0x0, r3, 0x6, 0x10001, 0x4}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f0000000100)={&(0x7f00000000c0)}) (async)
syz_open_dev$dri(&(0x7f00000000c0), 0x8000000000000000, 0x44000) (async)
ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, &(0x7f0000000140)) (async)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000200)) (async)
ioctl$DRM_IOCTL_AGP_RELEASE(r5, 0x6431) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)

00:36:05 executing program 0:
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c305d940dbe16f6b5bed", 0x34324142})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000200)={0x0, &(0x7f0000000140)=""/157})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14}, 0x14}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:05 executing program 5:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, &(0x7f0000000a00)={0x0, 0x0, 0x7, 0x0, 0x4})
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000a80)={0x0, 0x1, r2})
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f00000000c0)={0x0, <r3=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000100)={r3, <r4=>0x0})
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r4, 0x0, <r5=>0xffffffffffffffff})
r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r6, 0x40106614, &(0x7f0000000ac0))
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000380)=[0x0], 0x1, 0x81000, 0x0, <r7=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000980)={&(0x7f0000000900)=[0x0, 0x0, 0x0, <r8=>0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0], 0x5})
ioctl$DRM_IOCTL_MODE_GETPROPERTY(r7, 0xc04064aa, &(0x7f00000009c0)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880), r8, 0x0, '\x00', 0x6})
ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000880)=@mmap={0xb1, 0x1, 0x4, 0x8, 0x2b0, {}, {0x2, 0x0, 0x1, 0x9, 0x3, 0x8, "e820bdec"}, 0x1, 0x1, {}, 0x5, 0x0, r7})
ioctl$DRM_IOCTL_MAP_BUFS(r5, 0xc0186419, &(0x7f0000000000)={0x7, &(0x7f0000000180)=""/9, &(0x7f00000007c0)=[{0x7, 0x1e, 0x0, &(0x7f00000001c0)=""/30}, {0x81, 0x73, 0x3, &(0x7f0000000200)=""/115}, {0x4, 0xdd, 0x1, &(0x7f0000000280)=""/221}, {0x9, 0xae, 0x8a84, &(0x7f0000000600)=""/174}, {0xffffffff, 0x91, 0x3, &(0x7f0000000440)=""/145}, {0x81, 0xe9, 0x0, &(0x7f0000000500)=""/233}, {0x2, 0xc1, 0x5, &(0x7f00000006c0)=""/193}]})

00:36:05 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f00000002c0)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[{}, {}, {}, {}, {}], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x5, 0x1}) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000600)) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_FREE_BUFS(r3, 0x4010641a, &(0x7f00000005c0)={0x3, &(0x7f0000000580)=[0xfff, 0x0, 0x3]}) (async)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000480)={0x9, 0x1, 0x2})
clock_gettime(0x0, &(0x7f00000004c0)={<r4=>0x0, <r5=>0x0})
ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000500)=@fd={0x302, 0x2, 0x4, 0x10, 0x7, {r4, r5/1000+10000}, {0x5, 0x8, 0x3, 0x4, 0x5, 0x6d, "32fcd4cd"}, 0x5ffc0000, 0x4, {}, 0xe62})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000440)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], 0x7, 0x2, 0x4, 0x3})

00:36:05 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000000)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0x10)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x97, 0x0, 0x0, 0x0, [], [0x9]}})

00:36:05 executing program 2:
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00'})
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:05 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f00000002c0)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[{}, {}, {}, {}, {}], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x5, 0x1}) (async)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f00000002c0)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[{}, {}, {}, {}, {}], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x5, 0x1})
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000600))
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_FREE_BUFS(r3, 0x4010641a, &(0x7f00000005c0)={0x3, &(0x7f0000000580)=[0xfff, 0x0, 0x3]}) (async)
ioctl$DRM_IOCTL_FREE_BUFS(r3, 0x4010641a, &(0x7f00000005c0)={0x3, &(0x7f0000000580)=[0xfff, 0x0, 0x3]})
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000480)={0x9, 0x1, 0x2})
clock_gettime(0x0, &(0x7f00000004c0)={<r4=>0x0, <r5=>0x0})
ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000500)=@fd={0x302, 0x2, 0x4, 0x10, 0x7, {r4, r5/1000+10000}, {0x5, 0x8, 0x3, 0x4, 0x5, 0x6d, "32fcd4cd"}, 0x5ffc0000, 0x4, {}, 0xe62})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000440)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], 0x7, 0x2, 0x4, 0x3})

00:36:05 executing program 5:
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0) (async)
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, &(0x7f0000000a00)={0x0, 0x0, 0x7, 0x0, 0x4})
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000a80)={0x0, 0x1, r2})
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f00000000c0)={0x0, <r3=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000100)={r3}) (async)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000100)={r3, <r4=>0x0})
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r4}) (async)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r4, 0x0, <r5=>0xffffffffffffffff})
r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r6, 0x40106614, &(0x7f0000000ac0))
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000380)=[0x0], 0x1, 0x81000, 0x0, <r7=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000980)={&(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0], 0x5}) (async)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000980)={&(0x7f0000000900)=[0x0, 0x0, 0x0, <r8=>0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0], 0x5})
ioctl$DRM_IOCTL_MODE_GETPROPERTY(r7, 0xc04064aa, &(0x7f00000009c0)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880), r8, 0x0, '\x00', 0x6})
ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000880)=@mmap={0xb1, 0x1, 0x4, 0x8, 0x2b0, {}, {0x2, 0x0, 0x1, 0x9, 0x3, 0x8, "e820bdec"}, 0x1, 0x1, {}, 0x5, 0x0, r7})
ioctl$DRM_IOCTL_MAP_BUFS(r5, 0xc0186419, &(0x7f0000000000)={0x7, &(0x7f0000000180)=""/9, &(0x7f00000007c0)=[{0x7, 0x1e, 0x0, &(0x7f00000001c0)=""/30}, {0x81, 0x73, 0x3, &(0x7f0000000200)=""/115}, {0x4, 0xdd, 0x1, &(0x7f0000000280)=""/221}, {0x9, 0xae, 0x8a84, &(0x7f0000000600)=""/174}, {0xffffffff, 0x91, 0x3, &(0x7f0000000440)=""/145}, {0x81, 0xe9, 0x0, &(0x7f0000000500)=""/233}, {0x2, 0xc1, 0x5, &(0x7f00000006c0)=""/193}]})

00:36:05 executing program 0:
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c305d940dbe16f6b5bed", 0x34324142})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000200)={0x0, &(0x7f0000000140)=""/157})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14}, 0x14}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:05 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x107c00, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000180)={<r3=>0x0, 0x1, r1})
ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f00000001c0)={0x0, r3, 0x6, 0x10001, 0x4}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f0000000100)={&(0x7f00000000c0)})
r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x8000000000000000, 0x44000)
ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, &(0x7f0000000140))
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, <r5=>0xffffffffffffffff})
ioctl$DRM_IOCTL_AGP_RELEASE(r5, 0x6431) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:05 executing program 5:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, &(0x7f0000000a00)={0x0, 0x0, 0x7, 0x0, 0x4}) (async)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000a80)={0x0, 0x1, r2}) (async, rerun: 64)
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f00000000c0)={0x0, <r3=>0x0}) (rerun: 64)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000100)={r3, <r4=>0x0})
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async, rerun: 32)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r4, 0x0, <r5=>0xffffffffffffffff}) (async, rerun: 32)
r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r6, 0x40106614, &(0x7f0000000ac0))
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000380)=[0x0], 0x1, 0x81000, 0x0, <r7=>0xffffffffffffffff}) (async, rerun: 64)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000980)={&(0x7f0000000900)=[0x0, 0x0, 0x0, <r8=>0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0], 0x5}) (rerun: 64)
ioctl$DRM_IOCTL_MODE_GETPROPERTY(r7, 0xc04064aa, &(0x7f00000009c0)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880), r8, 0x0, '\x00', 0x6})
ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000880)=@mmap={0xb1, 0x1, 0x4, 0x8, 0x2b0, {}, {0x2, 0x0, 0x1, 0x9, 0x3, 0x8, "e820bdec"}, 0x1, 0x1, {}, 0x5, 0x0, r7}) (async, rerun: 64)
ioctl$DRM_IOCTL_MAP_BUFS(r5, 0xc0186419, &(0x7f0000000000)={0x7, &(0x7f0000000180)=""/9, &(0x7f00000007c0)=[{0x7, 0x1e, 0x0, &(0x7f00000001c0)=""/30}, {0x81, 0x73, 0x3, &(0x7f0000000200)=""/115}, {0x4, 0xdd, 0x1, &(0x7f0000000280)=""/221}, {0x9, 0xae, 0x8a84, &(0x7f0000000600)=""/174}, {0xffffffff, 0x91, 0x3, &(0x7f0000000440)=""/145}, {0x81, 0xe9, 0x0, &(0x7f0000000500)=""/233}, {0x2, 0xc1, 0x5, &(0x7f00000006c0)=""/193}]}) (rerun: 64)

00:36:05 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x4, 0x2)
ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000100)={0x2, 0x2, 0x3, 0x10000})
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x3)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000140)={0x2, 0x80000000})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:05 executing program 2:
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00'})
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00'}) (async)
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)

00:36:05 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000000)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0x10) (async)
write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000000)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0x10)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x97, 0x0, 0x0, 0x0, [], [0x9]}})

00:36:05 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))

00:36:05 executing program 0:
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c305d940dbe16f6b5bed", 0x34324142})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000200)={0x0, &(0x7f0000000140)=""/157})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14}, 0x14}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:05 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x4, 0x2)
ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000100)={0x2, 0x2, 0x3, 0x10000})
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x3)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0) (async, rerun: 64)
ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000140)={0x2, 0x80000000}) (rerun: 64)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:05 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2) (async, rerun: 32)
write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000000)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0x10) (rerun: 32)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x97, 0x0, 0x0, 0x0, [], [0x9]}})

00:36:05 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x4000000, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x31364d59})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, 0xffffffffffffffff)
r2 = openat$incfs(r1, &(0x7f0000000080)='.log\x00', 0x103000, 0x14)
openat$smackfs_access(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/fs/smackfs/access2\x00', 0x2, 0x0)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, &(0x7f0000000300)=0xfff)
ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000240)=@multiplanar_fd={0x101, 0x2, 0x4, 0x0, 0xff, {}, {0x2, 0x1, 0x6, 0x9, 0x81, 0x8, "c966cbe8"}, 0x7f, 0x4, {&(0x7f00000001c0)=[{0x6, 0x3, {r4}, 0x8}, {0x7fffffff, 0x3, {r1}, 0x80}]}, 0x6, 0x0, r1})
ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x3, @pix_mp={0x200, 0x5, 0x4f565559, 0x3, 0x7, [{0x40, 0x4}, {0x1, 0x3}, {0x8, 0x1}, {0x0, 0x81}, {0xfff, 0x8001}, {0x1ff, 0x1000}, {0x0, 0x8}, {0x4, 0x8b76}], 0x81, 0x1, 0x8, 0x2, 0x4}})

00:36:05 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))

00:36:05 executing program 5:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280)={<r1=>0xffffffffffffffff}, 0x111, 0x5}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {&(0x7f0000000080), r1, 0x2}}, 0x18)
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x38415262})

00:36:05 executing program 0:
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c305d940dbe16f6b5bed", 0x34324142})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000200)={0x0, &(0x7f0000000140)=""/157})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14}, 0x14}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:05 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x4000000, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x31364d59}) (async, rerun: 64)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (rerun: 64)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, 0xffffffffffffffff)
r2 = openat$incfs(r1, &(0x7f0000000080)='.log\x00', 0x103000, 0x14) (async, rerun: 64)
openat$smackfs_access(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/fs/smackfs/access2\x00', 0x2, 0x0) (async, rerun: 64)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, &(0x7f0000000300)=0xfff) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000240)=@multiplanar_fd={0x101, 0x2, 0x4, 0x0, 0xff, {}, {0x2, 0x1, 0x6, 0x9, 0x81, 0x8, "c966cbe8"}, 0x7f, 0x4, {&(0x7f00000001c0)=[{0x6, 0x3, {r4}, 0x8}, {0x7fffffff, 0x3, {r1}, 0x80}]}, 0x6, 0x0, r1}) (async, rerun: 32)
ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x3, @pix_mp={0x200, 0x5, 0x4f565559, 0x3, 0x7, [{0x40, 0x4}, {0x1, 0x3}, {0x8, 0x1}, {0x0, 0x81}, {0xfff, 0x8001}, {0x1ff, 0x1000}, {0x0, 0x8}, {0x4, 0x8b76}], 0x81, 0x1, 0x8, 0x2, 0x4}}) (rerun: 32)

00:36:06 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0x1, @sdr={0x32344d59}})
ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0x6, 0x0, 0x3, {0x1, @win={{0x401, 0x5, 0x9}, 0x5, 0xe61, &(0x7f0000000340)={{0x9, 0x2, 0x81, 0x20}, &(0x7f0000000300)={{0x7, 0x6, 0xa0000000, 0xffff0000}, &(0x7f00000002c0)={{0xb08, 0x101, 0x8, 0x6}}}}, 0x8, &(0x7f0000000380)="0fa43c", 0x4a}}, 0x3})
setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000640)=0x1, 0x4)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000140)={0x8001, 0x8001})
r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000200)='.pending_reads\x00', 0x408840, 0x156)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000240)=@multiplanar_overlay={0x4, 0x1, 0x4, 0x1, 0x0, {}, {0x1, 0x2, 0x1, 0x7f, 0x0, 0x9, "530f58b7"}, 0xfff, 0x3, {&(0x7f0000000180)=[{0xffff, 0x2, {0x3}, 0x9}, {0x6, 0x4d, {0xffffffff}, 0xb750f798}]}, 0x40, 0x0, r1})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan3\x00', <r2=>0x0})
syz_open_dev$vim2m(&(0x7f0000000680), 0x3, 0x2)
ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000740)=@mmap={0x4, 0x3, 0x4, 0x400, 0x2, {0x0, 0xea60}, {0x5, 0x2, 0x82, 0x7, 0x4, 0x3f}, 0x10000, 0x1, {}, 0x2400})
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="c5af6400ed9daccc861940947aaf9e131016d77b1a0e34b6ccad84bd7f52231e9ebb8c92de383ac32a33f62484dca667afedbef6bf2fcd343198803bd623ff72fbd075828ff6bb9dcf0ced24ca1cb11e6e8200986d8b4862ae1373d29776d3b77d62d9cc82978a9b273f86bd5bc060947caef8cde49b1d15c2d99a9eb5d133e8aeea9ac3e9820c9148d38460019751e000c49287d0f7da87e49dfc020586ef04ce2e7210ec35fac25755", @ANYRES16=0x0, @ANYBLOB="08002bbd7000ffdbdf251000000008000300", @ANYRES32=r2, @ANYBLOB="050011008100000005001100010000000c000600000000000100000005001100040000000c0006000000000000000000050010003c0000000500100000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x200600c0}, 0x4040)

00:36:06 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x4, 0x2)
ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000100)={0x2, 0x2, 0x3, 0x10000})
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x3)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000140)={0x2, 0x80000000})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
syz_open_dev$vim2m(&(0x7f00000000c0), 0x4, 0x2) (async)
ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000100)={0x2, 0x2, 0x3, 0x10000}) (async)
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x3) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000140)={0x2, 0x80000000}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)

00:36:06 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080)) (async)

00:36:06 executing program 5:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280)={<r1=>0xffffffffffffffff}, 0x111, 0x5}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {&(0x7f0000000080), r1, 0x2}}, 0x18)
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x38415262})
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280), 0x111, 0x5}}, 0x20) (async)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {&(0x7f0000000080), r1, 0x2}}, 0x18) (async)
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x38415262}) (async)

00:36:06 executing program 0:
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c305d940dbe16f6b5bed", 0x34324142})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000200)={0x0, &(0x7f0000000140)=""/157})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14}, 0x14}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:06 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
clock_gettime(0x0, &(0x7f0000000000)={<r1=>0x0, <r2=>0x0})
r3 = openat$incfs(0xffffffffffffff9c, &(0x7f00000001c0)='.pending_reads\x00', 0x60000, 0x15)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000200)={0x0, 0x80000})
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@multiplanar_overlay={0x64e8, 0x3, 0x4, 0x10000, 0x2, {r1, r2/1000+10000}, {0x5, 0xc, 0xb, 0x0, 0x7, 0x1f, "7b019ea2"}, 0x3, 0x3, {&(0x7f00000000c0)=[{0x5, 0x3, {0x10000}, 0xe6}, {0x20, 0x0, {0xdb}, 0x3}]}, 0x1ff})

00:36:06 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0x1, @sdr={0x32344d59}})
ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0x6, 0x0, 0x3, {0x1, @win={{0x401, 0x5, 0x9}, 0x5, 0xe61, &(0x7f0000000340)={{0x9, 0x2, 0x81, 0x20}, &(0x7f0000000300)={{0x7, 0x6, 0xa0000000, 0xffff0000}, &(0x7f00000002c0)={{0xb08, 0x101, 0x8, 0x6}}}}, 0x8, &(0x7f0000000380)="0fa43c", 0x4a}}, 0x3}) (async)
setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000640)=0x1, 0x4) (async)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000140)={0x8001, 0x8001})
r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000200)='.pending_reads\x00', 0x408840, 0x156)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000240)=@multiplanar_overlay={0x4, 0x1, 0x4, 0x1, 0x0, {}, {0x1, 0x2, 0x1, 0x7f, 0x0, 0x9, "530f58b7"}, 0xfff, 0x3, {&(0x7f0000000180)=[{0xffff, 0x2, {0x3}, 0x9}, {0x6, 0x4d, {0xffffffff}, 0xb750f798}]}, 0x40, 0x0, r1})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan3\x00', <r2=>0x0})
syz_open_dev$vim2m(&(0x7f0000000680), 0x3, 0x2) (async)
ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000740)=@mmap={0x4, 0x3, 0x4, 0x400, 0x2, {0x0, 0xea60}, {0x5, 0x2, 0x82, 0x7, 0x4, 0x3f}, 0x10000, 0x1, {}, 0x2400}) (async)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="c5af6400ed9daccc861940947aaf9e131016d77b1a0e34b6ccad84bd7f52231e9ebb8c92de383ac32a33f62484dca667afedbef6bf2fcd343198803bd623ff72fbd075828ff6bb9dcf0ced24ca1cb11e6e8200986d8b4862ae1373d29776d3b77d62d9cc82978a9b273f86bd5bc060947caef8cde49b1d15c2d99a9eb5d133e8aeea9ac3e9820c9148d38460019751e000c49287d0f7da87e49dfc020586ef04ce2e7210ec35fac25755", @ANYRES16=0x0, @ANYBLOB="08002bbd7000ffdbdf251000000008000300", @ANYRES32=r2, @ANYBLOB="050011008100000005001100010000000c000600000000000100000005001100040000000c0006000000000000000000050010003c0000000500100000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x200600c0}, 0x4040)

00:36:06 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2)
ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f0000000080)='\x00')
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x7, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x3147504d})

00:36:06 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x4000000, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x31364d59})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, 0xffffffffffffffff)
r2 = openat$incfs(r1, &(0x7f0000000080)='.log\x00', 0x103000, 0x14)
openat$smackfs_access(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/fs/smackfs/access2\x00', 0x2, 0x0)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, &(0x7f0000000300)=0xfff)
ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000240)=@multiplanar_fd={0x101, 0x2, 0x4, 0x0, 0xff, {}, {0x2, 0x1, 0x6, 0x9, 0x81, 0x8, "c966cbe8"}, 0x7f, 0x4, {&(0x7f00000001c0)=[{0x6, 0x3, {r4}, 0x8}, {0x7fffffff, 0x3, {r1}, 0x80}]}, 0x6, 0x0, r1})
ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x3, @pix_mp={0x200, 0x5, 0x4f565559, 0x3, 0x7, [{0x40, 0x4}, {0x1, 0x3}, {0x8, 0x1}, {0x0, 0x81}, {0xfff, 0x8001}, {0x1ff, 0x1000}, {0x0, 0x8}, {0x4, 0x8b76}], 0x81, 0x1, 0x8, 0x2, 0x4}})
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x4000000, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x31364d59}) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, 0xffffffffffffffff) (async)
openat$incfs(r1, &(0x7f0000000080)='.log\x00', 0x103000, 0x14) (async)
openat$smackfs_access(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/fs/smackfs/access2\x00', 0x2, 0x0) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, &(0x7f0000000300)=0xfff) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000240)=@multiplanar_fd={0x101, 0x2, 0x4, 0x0, 0xff, {}, {0x2, 0x1, 0x6, 0x9, 0x81, 0x8, "c966cbe8"}, 0x7f, 0x4, {&(0x7f00000001c0)=[{0x6, 0x3, {r4}, 0x8}, {0x7fffffff, 0x3, {r1}, 0x80}]}, 0x6, 0x0, r1}) (async)
ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x3, @pix_mp={0x200, 0x5, 0x4f565559, 0x3, 0x7, [{0x40, 0x4}, {0x1, 0x3}, {0x8, 0x1}, {0x0, 0x81}, {0xfff, 0x8001}, {0x1ff, 0x1000}, {0x0, 0x8}, {0x4, 0x8b76}], 0x81, 0x1, 0x8, 0x2, 0x4}}) (async)

00:36:06 executing program 5:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280)={<r1=>0xffffffffffffffff}, 0x111, 0x5}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {&(0x7f0000000080), r1, 0x2}}, 0x18) (async)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {&(0x7f0000000080), r1, 0x2}}, 0x18)
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x38415262})

00:36:06 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) (async)
ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f0000000080)='\x00')
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x7, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x3147504d})

00:36:06 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
clock_gettime(0x0, &(0x7f0000000000)={<r1=>0x0, <r2=>0x0})
r3 = openat$incfs(0xffffffffffffff9c, &(0x7f00000001c0)='.pending_reads\x00', 0x60000, 0x15)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000200)={0x0, 0x80000})
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@multiplanar_overlay={0x64e8, 0x3, 0x4, 0x10000, 0x2, {r1, r2/1000+10000}, {0x5, 0xc, 0xb, 0x0, 0x7, 0x1f, "7b019ea2"}, 0x3, 0x3, {&(0x7f00000000c0)=[{0x5, 0x3, {0x10000}, 0xe6}, {0x20, 0x0, {0xdb}, 0x3}]}, 0x1ff})

00:36:06 executing program 0:
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c305d940dbe16f6b5bed", 0x34324142})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000200)={0x0, &(0x7f0000000140)=""/157})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14}, 0x14}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r3)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r4, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:06 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr={0x3432564e, 0x10000}})

00:36:06 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0x1, @sdr={0x32344d59}})
ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0x6, 0x0, 0x3, {0x1, @win={{0x401, 0x5, 0x9}, 0x5, 0xe61, &(0x7f0000000340)={{0x9, 0x2, 0x81, 0x20}, &(0x7f0000000300)={{0x7, 0x6, 0xa0000000, 0xffff0000}, &(0x7f00000002c0)={{0xb08, 0x101, 0x8, 0x6}}}}, 0x8, &(0x7f0000000380)="0fa43c", 0x4a}}, 0x3})
setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000640)=0x1, 0x4)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000140)={0x8001, 0x8001})
r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000200)='.pending_reads\x00', 0x408840, 0x156)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000240)=@multiplanar_overlay={0x4, 0x1, 0x4, 0x1, 0x0, {}, {0x1, 0x2, 0x1, 0x7f, 0x0, 0x9, "530f58b7"}, 0xfff, 0x3, {&(0x7f0000000180)=[{0xffff, 0x2, {0x3}, 0x9}, {0x6, 0x4d, {0xffffffff}, 0xb750f798}]}, 0x40, 0x0, r1})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan3\x00', <r2=>0x0})
syz_open_dev$vim2m(&(0x7f0000000680), 0x3, 0x2)
ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000740)=@mmap={0x4, 0x3, 0x4, 0x400, 0x2, {0x0, 0xea60}, {0x5, 0x2, 0x82, 0x7, 0x4, 0x3f}, 0x10000, 0x1, {}, 0x2400})
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="c5af6400ed9daccc861940947aaf9e131016d77b1a0e34b6ccad84bd7f52231e9ebb8c92de383ac32a33f62484dca667afedbef6bf2fcd343198803bd623ff72fbd075828ff6bb9dcf0ced24ca1cb11e6e8200986d8b4862ae1373d29776d3b77d62d9cc82978a9b273f86bd5bc060947caef8cde49b1d15c2d99a9eb5d133e8aeea9ac3e9820c9148d38460019751e000c49287d0f7da87e49dfc020586ef04ce2e7210ec35fac25755", @ANYRES16=0x0, @ANYBLOB="08002bbd7000ffdbdf251000000008000300", @ANYRES32=r2, @ANYBLOB="050011008100000005001100010000000c000600000000000100000005001100040000000c0006000000000000000000050010003c0000000500100000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x200600c0}, 0x4040)
syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0x1, @sdr={0x32344d59}}) (async)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0x6, 0x0, 0x3, {0x1, @win={{0x401, 0x5, 0x9}, 0x5, 0xe61, &(0x7f0000000340)={{0x9, 0x2, 0x81, 0x20}, &(0x7f0000000300)={{0x7, 0x6, 0xa0000000, 0xffff0000}, &(0x7f00000002c0)={{0xb08, 0x101, 0x8, 0x6}}}}, 0x8, &(0x7f0000000380)="0fa43c", 0x4a}}, 0x3}) (async)
setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000640)=0x1, 0x4) (async)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000140)={0x8001, 0x8001}) (async)
openat$incfs(0xffffffffffffffff, &(0x7f0000000200)='.pending_reads\x00', 0x408840, 0x156) (async)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000240)=@multiplanar_overlay={0x4, 0x1, 0x4, 0x1, 0x0, {}, {0x1, 0x2, 0x1, 0x7f, 0x0, 0x9, "530f58b7"}, 0xfff, 0x3, {&(0x7f0000000180)=[{0xffff, 0x2, {0x3}, 0x9}, {0x6, 0x4d, {0xffffffff}, 0xb750f798}]}, 0x40, 0x0, r1}) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan3\x00'}) (async)
syz_open_dev$vim2m(&(0x7f0000000680), 0x3, 0x2) (async)
ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000740)=@mmap={0x4, 0x3, 0x4, 0x400, 0x2, {0x0, 0xea60}, {0x5, 0x2, 0x82, 0x7, 0x4, 0x3f}, 0x10000, 0x1, {}, 0x2400}) (async)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="c5af6400ed9daccc861940947aaf9e131016d77b1a0e34b6ccad84bd7f52231e9ebb8c92de383ac32a33f62484dca667afedbef6bf2fcd343198803bd623ff72fbd075828ff6bb9dcf0ced24ca1cb11e6e8200986d8b4862ae1373d29776d3b77d62d9cc82978a9b273f86bd5bc060947caef8cde49b1d15c2d99a9eb5d133e8aeea9ac3e9820c9148d38460019751e000c49287d0f7da87e49dfc020586ef04ce2e7210ec35fac25755", @ANYRES16=0x0, @ANYBLOB="08002bbd7000ffdbdf251000000008000300", @ANYRES32=r2, @ANYBLOB="050011008100000005001100010000000c000600000000000100000005001100040000000c0006000000000000000000050010003c0000000500100000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x200600c0}, 0x4040) (async)

00:36:06 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2)
ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f0000000080)='\x00') (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x7, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x3147504d})

00:36:06 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
clock_gettime(0x0, &(0x7f0000000000)={<r1=>0x0, <r2=>0x0})
r3 = openat$incfs(0xffffffffffffff9c, &(0x7f00000001c0)='.pending_reads\x00', 0x60000, 0x15)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000200)={0x0, 0x80000}) (async)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@multiplanar_overlay={0x64e8, 0x3, 0x4, 0x10000, 0x2, {r1, r2/1000+10000}, {0x5, 0xc, 0xb, 0x0, 0x7, 0x1f, "7b019ea2"}, 0x3, 0x3, {&(0x7f00000000c0)=[{0x5, 0x3, {0x10000}, 0xe6}, {0x20, 0x0, {0xdb}, 0x3}]}, 0x1ff})

00:36:06 executing program 0:
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c305d940dbe16f6b5bed", 0x34324142})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000200)={0x0, &(0x7f0000000140)=""/157})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r3)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r4, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:06 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x3f, 0x10001})
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x2, @pix={0x10000, 0x2, 0x32314d54, 0x5, 0x6, 0x40000000, 0x3, 0x9, 0x0, 0x1, 0x2, 0x6}})
ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000180)={0x3, @raw_data="b9b5709811f46c32edee197b6c2ab6bc62095e50560aff6bc92f1113b3d787f23085a2e39944a422b440b569d5e7ddf23c930f9d744dec8dba6e14668103bf733c222a173d8863c1e923c29f96bc1bab50a00b48b63a3ade8633b060ed7f9865caaf1051e91e7c748deb1529d0f73de92ae6777a398f8294aa3d1661c845d3e288b26d5fbde298ba8ab03b07928f4025aca340fa5372f434eb65cafb2499280df9c50fc52e440577e260d9b3f831d4fc52746549ed017c5e47f05b0c3c350e3acd3480b043242245"})

00:36:06 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr={0x3432564e, 0x10000}})

00:36:06 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000340)={0x1, @pix={0x9, 0x4, 0x32314247, 0x9, 0x7, 0x25a, 0x5, 0x6, 0x0, 0x1, 0x1, 0x1}})
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@multiplanar_userptr={0x8, 0x2, 0x4, 0x800, 0x5, {}, {0x4, 0x2, 0x40, 0x0, 0x0, 0x81, "20ac9991"}, 0x1ff, 0x2, {&(0x7f0000000080)=[{0x9, 0x4, {}, 0x6}, {0x3, 0x7, {&(0x7f0000000040)}, 0x8}]}, 0x7})
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f00000001c0)=0x2)
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000440)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6})

00:36:06 executing program 4:
ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000080)={0x7f, 0xffffffff, 0x3, {0x2, @vbi={0x8, 0xfffffff9, 0xffffffff, 0x34324d59, [0x2, 0x1], [0x4, 0x766b], 0x1}}, 0xe174})
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:06 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr={0x3432564e, 0x10000}}) (async)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr={0x3432564e, 0x10000}})

00:36:06 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x3f, 0x10001})
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x2, @pix={0x10000, 0x2, 0x32314d54, 0x5, 0x6, 0x40000000, 0x3, 0x9, 0x0, 0x1, 0x2, 0x6}})
ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000180)={0x3, @raw_data="b9b5709811f46c32edee197b6c2ab6bc62095e50560aff6bc92f1113b3d787f23085a2e39944a422b440b569d5e7ddf23c930f9d744dec8dba6e14668103bf733c222a173d8863c1e923c29f96bc1bab50a00b48b63a3ade8633b060ed7f9865caaf1051e91e7c748deb1529d0f73de92ae6777a398f8294aa3d1661c845d3e288b26d5fbde298ba8ab03b07928f4025aca340fa5372f434eb65cafb2499280df9c50fc52e440577e260d9b3f831d4fc52746549ed017c5e47f05b0c3c350e3acd3480b043242245"})

00:36:06 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0xe42e, 0x2, 0x1, 0x0, 0x2})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:06 executing program 0:
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c305d940dbe16f6b5bed", 0x34324142})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000200)={0x0, &(0x7f0000000140)=""/157})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r2)
sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:06 executing program 4:
ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000080)={0x7f, 0xffffffff, 0x3, {0x2, @vbi={0x8, 0xfffffff9, 0xffffffff, 0x34324d59, [0x2, 0x1], [0x4, 0x766b], 0x1}}, 0xe174})
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:06 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000340)={0x1, @pix={0x9, 0x4, 0x32314247, 0x9, 0x7, 0x25a, 0x5, 0x6, 0x0, 0x1, 0x1, 0x1}})
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@multiplanar_userptr={0x8, 0x2, 0x4, 0x800, 0x5, {}, {0x4, 0x2, 0x40, 0x0, 0x0, 0x81, "20ac9991"}, 0x1ff, 0x2, {&(0x7f0000000080)=[{0x9, 0x4, {}, 0x6}, {0x3, 0x7, {&(0x7f0000000040)}, 0x8}]}, 0x7})
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f00000001c0)=0x2) (async)
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000440)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6})

00:36:06 executing program 0:
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c305d940dbe16f6b5bed", 0x34324142})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000200)={0x0, &(0x7f0000000140)=""/157})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r2)
sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:06 executing program 4:
ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000080)={0x7f, 0xffffffff, 0x3, {0x2, @vbi={0x8, 0xfffffff9, 0xffffffff, 0x34324d59, [0x2, 0x1], [0x4, 0x766b], 0x1}}, 0xe174})
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000080)={0x7f, 0xffffffff, 0x3, {0x2, @vbi={0x8, 0xfffffff9, 0xffffffff, 0x34324d59, [0x2, 0x1], [0x4, 0x766b], 0x1}}, 0xe174}) (async)
syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)

00:36:06 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000340)={0x1, @pix={0x9, 0x4, 0x32314247, 0x9, 0x7, 0x25a, 0x5, 0x6, 0x0, 0x1, 0x1, 0x1}}) (async)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000340)={0x1, @pix={0x9, 0x4, 0x32314247, 0x9, 0x7, 0x25a, 0x5, 0x6, 0x0, 0x1, 0x1, 0x1}})
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@multiplanar_userptr={0x8, 0x2, 0x4, 0x800, 0x5, {}, {0x4, 0x2, 0x40, 0x0, 0x0, 0x81, "20ac9991"}, 0x1ff, 0x2, {&(0x7f0000000080)=[{0x9, 0x4, {}, 0x6}, {0x3, 0x7, {&(0x7f0000000040)}, 0x8}]}, 0x7}) (async)
ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@multiplanar_userptr={0x8, 0x2, 0x4, 0x800, 0x5, {}, {0x4, 0x2, 0x40, 0x0, 0x0, 0x81, "20ac9991"}, 0x1ff, 0x2, {&(0x7f0000000080)=[{0x9, 0x4, {}, 0x6}, {0x3, 0x7, {&(0x7f0000000040)}, 0x8}]}, 0x7})
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f00000001c0)=0x2) (async)
ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f00000001c0)=0x2)
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000440)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6})

00:36:06 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x3f, 0x10001})
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x2, @pix={0x10000, 0x2, 0x32314d54, 0x5, 0x6, 0x40000000, 0x3, 0x9, 0x0, 0x1, 0x2, 0x6}})
ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000180)={0x3, @raw_data="b9b5709811f46c32edee197b6c2ab6bc62095e50560aff6bc92f1113b3d787f23085a2e39944a422b440b569d5e7ddf23c930f9d744dec8dba6e14668103bf733c222a173d8863c1e923c29f96bc1bab50a00b48b63a3ade8633b060ed7f9865caaf1051e91e7c748deb1529d0f73de92ae6777a398f8294aa3d1661c845d3e288b26d5fbde298ba8ab03b07928f4025aca340fa5372f434eb65cafb2499280df9c50fc52e440577e260d9b3f831d4fc52746549ed017c5e47f05b0c3c350e3acd3480b043242245"})

00:36:06 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080))
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x4040, 0x0)
ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000200)={0x8, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[{}, {}, {}, {<r2=>0x0}, {}]})
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000180)={r2, 0x2})

00:36:06 executing program 0:
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c305d940dbe16f6b5bed", 0x34324142})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000200)={0x0, &(0x7f0000000140)=""/157})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r2)
sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:06 executing program 1:
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, <r0=>0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000140)={0x0, 0x0, r0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0]})
r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x43353039, [], [0x7]}})
read$smackfs_access(0xffffffffffffffff, &(0x7f0000000000), 0x14)

00:36:06 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={<r2=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000100)={<r3=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000140)={<r4=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, r2, r3, 0x0, r4, 0x0, 0x0, 0x0], 0x8})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000080)={0x9, 0x1, 0x1, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0xb0324c4a})
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000200)={0x7, 0x2})

00:36:06 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0xe42e, 0x2, 0x1, 0x0, 0x2})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:06 executing program 0:
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c305d940dbe16f6b5bed", 0x34324142})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r3)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r4, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:06 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={<r2=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000100)={<r3=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000140)={<r4=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, r2, r3, 0x0, r4, 0x0, 0x0, 0x0], 0x8})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000080)={0x9, 0x1, 0x1, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0xb0324c4a})
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000200)={0x7, 0x2})
syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000100)) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000140)) (async)
ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, r2, r3, 0x0, r4, 0x0, 0x0, 0x0], 0x8}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000080)={0x9, 0x1, 0x1, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0xb0324c4a}) (async)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000200)={0x7, 0x2}) (async)

00:36:06 executing program 1:
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, <r0=>0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000140)={0x0, 0x0, r0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0]})
r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x43353039, [], [0x7]}}) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x43353039, [], [0x7]}})
read$smackfs_access(0xffffffffffffffff, &(0x7f0000000000), 0x14)

00:36:06 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080))
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x4040, 0x0)
ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000200)={0x8, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}]}) (async)
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[{}, {}, {}, {<r2=>0x0}, {}]})
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000180)={r2, 0x2})

00:36:06 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x80000001, 0x0, 0x2, "20b3f7856ba00d7ed61f64b63c8ea2b716dac90126dbad03e953e80d740407cc", 0x3432564e})

00:36:06 executing program 1:
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, <r0=>0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000140)={0x0, 0x0, r0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0]})
r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x43353039, [], [0x7]}}) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x43353039, [], [0x7]}})
read$smackfs_access(0xffffffffffffffff, &(0x7f0000000000), 0x14)

00:36:06 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x4040, 0x0)
ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000200)={0x8, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[{}, {}, {}, {<r2=>0x0}, {}]})
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000180)={r2, 0x2})

00:36:06 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={<r2=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000100)={<r3=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000140)={<r4=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, r2, r3, 0x0, r4, 0x0, 0x0, 0x0], 0x8})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000080)={0x9, 0x1, 0x1, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0xb0324c4a})
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000200)={0x7, 0x2})
syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000100)) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000140)) (async)
ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, r2, r3, 0x0, r4, 0x0, 0x0, 0x0], 0x8}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000080)={0x9, 0x1, 0x1, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0xb0324c4a}) (async)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000200)={0x7, 0x2}) (async)

00:36:06 executing program 0:
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c305d940dbe16f6b5bed", 0x34324142})
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r2)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:06 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x80000001, 0x0, 0x2, "20b3f7856ba00d7ed61f64b63c8ea2b716dac90126dbad03e953e80d740407cc", 0x3432564e})

00:36:06 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000000)=@mmap={0xf04, 0x2, 0x4, 0x8, 0x101, {}, {0x4, 0x1, 0x40, 0x6, 0x8, 0x80, "fa800544"}, 0x0, 0x1, {}, 0x80000000})

00:36:06 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0xe42e, 0x2, 0x1, 0x0, 0x2})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:06 executing program 0:
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c305d940dbe16f6b5bed", 0x34324142})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r2)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:06 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000000c0)={0x1, @pix={0x6, 0xfffffffd, 0x38414761, 0x3, 0xe0a3, 0x189, 0x4, 0xfffffffc, 0x1, 0x0, 0x0, 0x2}})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000080)={0x2, 0x31424752, 0xc9d8d5cabf92447, @discrete={0x7fff, 0x401}})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:06 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000000)=@mmap={0xf04, 0x2, 0x4, 0x8, 0x101, {}, {0x4, 0x1, 0x40, 0x6, 0x8, 0x80, "fa800544"}, 0x0, 0x1, {}, 0x80000000})
syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}}) (async)
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000000)=@mmap={0xf04, 0x2, 0x4, 0x8, 0x101, {}, {0x4, 0x1, 0x40, 0x6, 0x8, 0x80, "fa800544"}, 0x0, 0x1, {}, 0x80000000}) (async)

00:36:06 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x80000001, 0x0, 0x2, "20b3f7856ba00d7ed61f64b63c8ea2b716dac90126dbad03e953e80d740407cc", 0x3432564e})

00:36:06 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x80000, 0x1, 0x1, "69eb88ea65ddb8a69601672ddbe16f6b5bed00003f00"})

00:36:06 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x4, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:06 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000000c0)={0x1, @pix={0x6, 0xfffffffd, 0x38414761, 0x3, 0xe0a3, 0x189, 0x4, 0xfffffffc, 0x1, 0x0, 0x0, 0x2}})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000080)={0x2, 0x31424752, 0xc9d8d5cabf92447, @discrete={0x7fff, 0x401}})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:06 executing program 0:
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1)
syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:06 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}}) (async)
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000000)=@mmap={0xf04, 0x2, 0x4, 0x8, 0x101, {}, {0x4, 0x1, 0x40, 0x6, 0x8, 0x80, "fa800544"}, 0x0, 0x1, {}, 0x80000000})

00:36:06 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000000c0)={0x1, @pix={0x6, 0xfffffffd, 0x38414761, 0x3, 0xe0a3, 0x189, 0x4, 0xfffffffc, 0x1, 0x0, 0x0, 0x2}}) (async, rerun: 64)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (rerun: 64)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async, rerun: 64)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000080)={0x2, 0x31424752, 0xc9d8d5cabf92447, @discrete={0x7fff, 0x401}}) (async, rerun: 64)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:06 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x4, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:07 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x2, @pix={0xfffffff9, 0x5, 0x38414261, 0x1, 0xfff, 0xffffffff, 0x6, 0x800000, 0x0, 0x3, 0x0, 0x7}})
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000180)={0x3, @pix_mp={0xd3ed, 0x8, 0x34524742, 0x9, 0x4, [{0x7f, 0x3}, {0x2, 0x2}, {0x0, 0x7}, {0x8, 0xf43}, {0xc1, 0x7ff}, {0x7fff, 0x9}, {0x9, 0x2}, {0xffffffff, 0x10001}], 0x2, 0xfd, 0x8, 0x2, 0x4}})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:07 executing program 0:
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:07 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})

00:36:07 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x4, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:07 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2)
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000100)=0x5)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080))
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0xfd, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:07 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x80000, 0x1, 0x1, "69eb88ea65ddb8a69601672ddbe16f6b5bed00003f00"})

00:36:07 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2)
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000100)=0x5)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080))
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0xfd, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0xfd, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:07 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:07 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async, rerun: 64)
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x2) (async, rerun: 64)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})

00:36:07 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x80000, 0x1, 0x1, "69eb88ea65ddb8a69601672ddbe16f6b5bed00003f00"})

00:36:07 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x80000001, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
connect$can_bcm(r1, &(0x7f00000000c0), 0x10)
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000180)=0x1)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x100, 0x3247504d, 0x2, @stepwise={0x401, 0x20, 0x3, 0xfffffff9, 0x800, 0x238}})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x200800, 0x0)
ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000140)=0xffffffff)

00:36:07 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x2, @pix={0xfffffff9, 0x5, 0x38414261, 0x1, 0xfff, 0xffffffff, 0x6, 0x800000, 0x0, 0x3, 0x0, 0x7}}) (async)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000180)={0x3, @pix_mp={0xd3ed, 0x8, 0x34524742, 0x9, 0x4, [{0x7f, 0x3}, {0x2, 0x2}, {0x0, 0x7}, {0x8, 0xf43}, {0xc1, 0x7ff}, {0x7fff, 0x9}, {0x9, 0x2}, {0xffffffff, 0x10001}], 0x2, 0xfd, 0x8, 0x2, 0x4}}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:07 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2)
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000100)=0x5)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080))
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0xfd, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2) (async)
syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async)
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000100)=0x5) (async)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0xfd, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)

00:36:07 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(0x0, r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:07 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)=@fd={0x5, 0x1, 0x4, 0x2, 0x7f, {}, {0x3, 0x8, 0x1, 0x5, 0x4, 0xce, "70997d9c"}, 0x22f, 0x4, {}, 0x101, 0x0, r1})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:07 executing program 2:
syz_open_dev$vim2m(&(0x7f0000000000), 0x80000001, 0x2) (async)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x80000001, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
connect$can_bcm(r1, &(0x7f00000000c0), 0x10)
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000180)=0x1) (async)
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000180)=0x1)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x100, 0x3247504d, 0x2, @stepwise={0x401, 0x20, 0x3, 0xfffffff9, 0x800, 0x238}}) (async)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x100, 0x3247504d, 0x2, @stepwise={0x401, 0x20, 0x3, 0xfffffff9, 0x800, 0x238}})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x200800, 0x0)
ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000140)=0xffffffff)

00:36:07 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)=@fd={0x5, 0x1, 0x4, 0x2, 0x7f, {}, {0x3, 0x8, 0x1, 0x5, 0x4, 0xce, "70997d9c"}, 0x22f, 0x4, {}, 0x101, 0x0, r1})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:07 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x2) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})

00:36:07 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x2, @pix={0xfffffff9, 0x5, 0x38414261, 0x1, 0xfff, 0xffffffff, 0x6, 0x800000, 0x0, 0x3, 0x0, 0x7}})
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000180)={0x3, @pix_mp={0xd3ed, 0x8, 0x34524742, 0x9, 0x4, [{0x7f, 0x3}, {0x2, 0x2}, {0x0, 0x7}, {0x8, 0xf43}, {0xc1, 0x7ff}, {0x7fff, 0x9}, {0x9, 0x2}, {0xffffffff, 0x10001}], 0x2, 0xfd, 0x8, 0x2, 0x4}}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:07 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(0x0, r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:07 executing program 4:
timer_create(0x1, &(0x7f0000000180)={0x0, 0xd, 0x1, @thr={&(0x7f00000000c0)="6911153effd01dce2333339a06c81317cd86bd7144cc1b3aa125b302697973ec35815bfd9c", &(0x7f0000000100)="1f517912e7bea2f458233f86c5f0fdce38b362330ca554b61ca9f4d09f6119037de72fe5c8878a41024561f204118f8b50fa9eb4e1c6f5c80c2aff4d3e25a9bb5b57bd424f188ffae0840079e2dad8953a0bea2292b7f60ab04984a3e771a15ccedce5fa73ad411cbecf04c5c174c1842b75563285c34244a1daa34e06dbd8"}}, &(0x7f00000001c0))
syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x4, 0x2, 0x2, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c392d926dbe16f6b5bed", 0x59565955})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000200))

00:36:07 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x80000001, 0x2) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
connect$can_bcm(r1, &(0x7f00000000c0), 0x10)
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000180)=0x1)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x100, 0x3247504d, 0x2, @stepwise={0x401, 0x20, 0x3, 0xfffffff9, 0x800, 0x238}})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async, rerun: 64)
r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x200800, 0x0) (rerun: 64)
ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000140)=0xffffffff)

00:36:07 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:07 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)=@fd={0x5, 0x1, 0x4, 0x2, 0x7f, {}, {0x3, 0x8, 0x1, 0x5, 0x4, 0xce, "70997d9c"}, 0x22f, 0x4, {}, 0x101, 0x0, r1})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:07 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0x1, @sliced={0x6c2, [0x200, 0x40, 0x4, 0x100, 0x6, 0x4, 0xc611, 0x7, 0xb36, 0x7, 0x7, 0x5, 0x8e4, 0x9, 0x3f, 0xd22, 0xfff, 0x5, 0x8, 0x7, 0xfffc, 0x4, 0x20, 0x6, 0x4d0, 0xfade, 0x8, 0x2, 0x1f, 0x3, 0x8b, 0x5, 0x4, 0xd3, 0x3f, 0xffff, 0xe5f9, 0x60, 0x800, 0xc30f, 0xf4cf, 0x2, 0x7, 0x3, 0x2, 0x0, 0x8, 0xaf93], 0x6}})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x6, 0x0, 0x0, "55dde22db7bd4e022e33773fb8d9128188974f76b29c8ddad109e9469aae0689", 0x59555956})

00:36:07 executing program 4:
timer_create(0x1, &(0x7f0000000180)={0x0, 0xd, 0x1, @thr={&(0x7f00000000c0)="6911153effd01dce2333339a06c81317cd86bd7144cc1b3aa125b302697973ec35815bfd9c", &(0x7f0000000100)="1f517912e7bea2f458233f86c5f0fdce38b362330ca554b61ca9f4d09f6119037de72fe5c8878a41024561f204118f8b50fa9eb4e1c6f5c80c2aff4d3e25a9bb5b57bd424f188ffae0840079e2dad8953a0bea2292b7f60ab04984a3e771a15ccedce5fa73ad411cbecf04c5c174c1842b75563285c34244a1daa34e06dbd8"}}, &(0x7f00000001c0))
syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2) (async, rerun: 32)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (rerun: 32)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x4, 0x2, 0x2, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c392d926dbe16f6b5bed", 0x59565955}) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000200))

00:36:07 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(0x0, r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:07 executing program 2:
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b655815bed00"})

00:36:07 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)

00:36:07 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}}) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0x1, @sliced={0x6c2, [0x200, 0x40, 0x4, 0x100, 0x6, 0x4, 0xc611, 0x7, 0xb36, 0x7, 0x7, 0x5, 0x8e4, 0x9, 0x3f, 0xd22, 0xfff, 0x5, 0x8, 0x7, 0xfffc, 0x4, 0x20, 0x6, 0x4d0, 0xfade, 0x8, 0x2, 0x1f, 0x3, 0x8b, 0x5, 0x4, 0xd3, 0x3f, 0xffff, 0xe5f9, 0x60, 0x800, 0xc30f, 0xf4cf, 0x2, 0x7, 0x3, 0x2, 0x0, 0x8, 0xaf93], 0x6}}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x6, 0x0, 0x0, "55dde22db7bd4e022e33773fb8d9128188974f76b29c8ddad109e9469aae0689", 0x59555956})

00:36:07 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:07 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000001c0)={0x2, @win={{0x5, 0x4438, 0x80000001, 0x6}, 0x6, 0x4, &(0x7f0000000100)={{0x8001, 0xd861, 0x7fffffff, 0x5}, &(0x7f00000000c0)={{0x9, 0x1f, 0x305, 0x3f}, &(0x7f0000000080)={{0x8001, 0x8, 0x10000, 0x7}}}}, 0xb6d, &(0x7f0000000140)="9c3cccab522fda200ead90cf72563fbcd9b7e7bb9efcf17d240aced096c68b645212bf317b3d480e8eea84f8fcc99b5452e0c8ebebb89e97958bb452058d20caf5a804c561e4206c72789948cc5bdf5df418541040240fd696d73aeca677cfd7693965fdc9eb1086b85ee31399aa0745ae35b7a2200166833b8a509a2fb1", 0x6}})

00:36:07 executing program 2:
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b655815bed00"})

00:36:07 executing program 4:
timer_create(0x1, &(0x7f0000000180)={0x0, 0xd, 0x1, @thr={&(0x7f00000000c0)="6911153effd01dce2333339a06c81317cd86bd7144cc1b3aa125b302697973ec35815bfd9c", &(0x7f0000000100)="1f517912e7bea2f458233f86c5f0fdce38b362330ca554b61ca9f4d09f6119037de72fe5c8878a41024561f204118f8b50fa9eb4e1c6f5c80c2aff4d3e25a9bb5b57bd424f188ffae0840079e2dad8953a0bea2292b7f60ab04984a3e771a15ccedce5fa73ad411cbecf04c5c174c1842b75563285c34244a1daa34e06dbd8"}}, &(0x7f00000001c0))
syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x4, 0x2, 0x2, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c392d926dbe16f6b5bed", 0x59565955}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x4, 0x2, 0x2, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c392d926dbe16f6b5bed", 0x59565955})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000200))

00:36:07 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}}) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0x1, @sliced={0x6c2, [0x200, 0x40, 0x4, 0x100, 0x6, 0x4, 0xc611, 0x7, 0xb36, 0x7, 0x7, 0x5, 0x8e4, 0x9, 0x3f, 0xd22, 0xfff, 0x5, 0x8, 0x7, 0xfffc, 0x4, 0x20, 0x6, 0x4d0, 0xfade, 0x8, 0x2, 0x1f, 0x3, 0x8b, 0x5, 0x4, 0xd3, 0x3f, 0xffff, 0xe5f9, 0x60, 0x800, 0xc30f, 0xf4cf, 0x2, 0x7, 0x3, 0x2, 0x0, 0x8, 0xaf93], 0x6}}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x6, 0x0, 0x0, "55dde22db7bd4e022e33773fb8d9128188974f76b29c8ddad109e9469aae0689", 0x59555956})

00:36:07 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:07 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000001c0)={0x2, @win={{0x5, 0x4438, 0x80000001, 0x6}, 0x6, 0x4, &(0x7f0000000100)={{0x8001, 0xd861, 0x7fffffff, 0x5}, &(0x7f00000000c0)={{0x9, 0x1f, 0x305, 0x3f}, &(0x7f0000000080)={{0x8001, 0x8, 0x10000, 0x7}}}}, 0xb6d, &(0x7f0000000140)="9c3cccab522fda200ead90cf72563fbcd9b7e7bb9efcf17d240aced096c68b645212bf317b3d480e8eea84f8fcc99b5452e0c8ebebb89e97958bb452058d20caf5a804c561e4206c72789948cc5bdf5df418541040240fd696d73aeca677cfd7693965fdc9eb1086b85ee31399aa0745ae35b7a2200166833b8a509a2fb1", 0x6}}) (async)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000001c0)={0x2, @win={{0x5, 0x4438, 0x80000001, 0x6}, 0x6, 0x4, &(0x7f0000000100)={{0x8001, 0xd861, 0x7fffffff, 0x5}, &(0x7f00000000c0)={{0x9, 0x1f, 0x305, 0x3f}, &(0x7f0000000080)={{0x8001, 0x8, 0x10000, 0x7}}}}, 0xb6d, &(0x7f0000000140)="9c3cccab522fda200ead90cf72563fbcd9b7e7bb9efcf17d240aced096c68b645212bf317b3d480e8eea84f8fcc99b5452e0c8ebebb89e97958bb452058d20caf5a804c561e4206c72789948cc5bdf5df418541040240fd696d73aeca677cfd7693965fdc9eb1086b85ee31399aa0745ae35b7a2200166833b8a509a2fb1", 0x6}})

00:36:07 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:07 executing program 2:
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b655815bed00"})
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b655815bed00"}) (async)

00:36:07 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', <r1=>0x0})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14}, 0x14}}, 0x0)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='A\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200025bd7000fbdbdf252400000008000200", @ANYRES32=0x0, @ANYBLOB='\x00', @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="0a0001007770616e3300000008000200", @ANYRES64=r2, @ANYBLOB="6e98f47880d7595ec36a88b3aa3240baeb38000000000000000000000000000000361e5b950fb0fef8503fec7b53049104af38d2bfc4a2d0e343d254ca3821fd19e938e4e3aad5bad5d189b5a178c1fd4e92afeec2036ea9bc390a93d067d27348480e24189d40aabdc64cc3f0b35ed3666c678bda93ea4a47209702184ddd5487d50e0c2f4cb56442b91cf454769d9d9eee389da89f8070a5f2e38e8086b030ea5994a66fbecee560d3417900e3fca60672bdc6"], 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x4000000)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r4)

00:36:07 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0xfffffffd, 0x0, [], [0x9]}})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000000))
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000140)=@userptr={0x6, 0x0, 0x4, 0x2000, 0x8, {0x77359400}, {0x1, 0x1, 0x80, 0x9, 0x1, 0x1, "913608c1"}, 0x5, 0x2, {&(0x7f0000000080)}, 0x4, 0x0, r1})

00:36:07 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000001c0)={0x2, @win={{0x5, 0x4438, 0x80000001, 0x6}, 0x6, 0x4, &(0x7f0000000100)={{0x8001, 0xd861, 0x7fffffff, 0x5}, &(0x7f00000000c0)={{0x9, 0x1f, 0x305, 0x3f}, &(0x7f0000000080)={{0x8001, 0x8, 0x10000, 0x7}}}}, 0xb6d, &(0x7f0000000140)="9c3cccab522fda200ead90cf72563fbcd9b7e7bb9efcf17d240aced096c68b645212bf317b3d480e8eea84f8fcc99b5452e0c8ebebb89e97958bb452058d20caf5a804c561e4206c72789948cc5bdf5df418541040240fd696d73aeca677cfd7693965fdc9eb1086b85ee31399aa0745ae35b7a2200166833b8a509a2fb1", 0x6}})

00:36:07 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000140))
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000200)={'wpan4\x00'})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x9, 0xafb555b12a66cf3e, 0x2, "a527a259a629a5816a7ae9e3e1f8666e940758760e5aae5571719d12488f304a", 0x3231564e})
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)=@userptr={0x5, 0x1, 0x4, 0x20, 0x7, {}, {0x4, 0x1, 0x3, 0x3, 0xc4, 0x1f, "c62ebcad"}, 0x8be, 0x2, {&(0x7f0000000080)}, 0x10000})

00:36:07 executing program 2:
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x80800, 0x0, <r0=>0xffffffffffffffff})
ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000180)={0x1, 0x4, [{r0, 0x0, 0xfffffffffffff000, 0x100000000}, {r0, 0x0, 0x4000, 0x1000000}, {r0, 0x0, 0x1000000, 0x1000000000000}, {r0, 0x0, 0x1000000000000, 0xfffff000}]})
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r2 = openat$incfs(r0, &(0x7f0000000100)='.pending_reads\x00', 0x4c003, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x0, 0xa4})
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:07 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:07 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', <r1=>0x0})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14}, 0x14}}, 0x0)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='A\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200025bd7000fbdbdf252400000008000200", @ANYRES32=0x0, @ANYBLOB='\x00', @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="0a0001007770616e3300000008000200", @ANYRES64=r2, @ANYBLOB="6e98f47880d7595ec36a88b3aa3240baeb38000000000000000000000000000000361e5b950fb0fef8503fec7b53049104af38d2bfc4a2d0e343d254ca3821fd19e938e4e3aad5bad5d189b5a178c1fd4e92afeec2036ea9bc390a93d067d27348480e24189d40aabdc64cc3f0b35ed3666c678bda93ea4a47209702184ddd5487d50e0c2f4cb56442b91cf454769d9d9eee389da89f8070a5f2e38e8086b030ea5994a66fbecee560d3417900e3fca60672bdc6"], 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x4000000)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r4)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14}, 0x14}}, 0x0) (async)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='A\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200025bd7000fbdbdf252400000008000200", @ANYRES32=0x0, @ANYBLOB='\x00', @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="0a0001007770616e3300000008000200", @ANYRES64=r2, @ANYBLOB="6e98f47880d7595ec36a88b3aa3240baeb38000000000000000000000000000000361e5b950fb0fef8503fec7b53049104af38d2bfc4a2d0e343d254ca3821fd19e938e4e3aad5bad5d189b5a178c1fd4e92afeec2036ea9bc390a93d067d27348480e24189d40aabdc64cc3f0b35ed3666c678bda93ea4a47209702184ddd5487d50e0c2f4cb56442b91cf454769d9d9eee389da89f8070a5f2e38e8086b030ea5994a66fbecee560d3417900e3fca60672bdc6"], 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x4000000) (async)
syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r4) (async)

00:36:07 executing program 5:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000080), 0x4)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:07 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0xfffffffd, 0x0, [], [0x9]}})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000000))
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000140)=@userptr={0x6, 0x0, 0x4, 0x2000, 0x8, {0x77359400}, {0x1, 0x1, 0x80, 0x9, 0x1, 0x1, "913608c1"}, 0x5, 0x2, {&(0x7f0000000080)}, 0x4, 0x0, r1})
syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0xfffffffd, 0x0, [], [0x9]}}) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000000)) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000140)=@userptr={0x6, 0x0, 0x4, 0x2000, 0x8, {0x77359400}, {0x1, 0x1, 0x80, 0x9, 0x1, 0x1, "913608c1"}, 0x5, 0x2, {&(0x7f0000000080)}, 0x4, 0x0, r1}) (async)

00:36:07 executing program 2:
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x80800, 0x0, <r0=>0xffffffffffffffff})
ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000180)={0x1, 0x4, [{r0, 0x0, 0xfffffffffffff000, 0x100000000}, {r0, 0x0, 0x4000, 0x1000000}, {r0, 0x0, 0x1000000, 0x1000000000000}, {r0, 0x0, 0x1000000000000, 0xfffff000}]}) (async)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
r2 = openat$incfs(r0, &(0x7f0000000100)='.pending_reads\x00', 0x4c003, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x0, 0xa4})
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:07 executing program 0:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0)
sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:07 executing program 5:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000080), 0x4)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
socket$can_raw(0x1d, 0x3, 0x1) (async)
setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000080), 0x4) (async)
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)

00:36:07 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000140)) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000200)={'wpan4\x00'}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x9, 0xafb555b12a66cf3e, 0x2, "a527a259a629a5816a7ae9e3e1f8666e940758760e5aae5571719d12488f304a", 0x3231564e}) (async)
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)=@userptr={0x5, 0x1, 0x4, 0x20, 0x7, {}, {0x4, 0x1, 0x3, 0x3, 0xc4, 0x1f, "c62ebcad"}, 0x8be, 0x2, {&(0x7f0000000080)}, 0x10000})

00:36:07 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0xfffffffd, 0x0, [], [0x9]}}) (async, rerun: 64)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (rerun: 64)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000000)) (async)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000140)=@userptr={0x6, 0x0, 0x4, 0x2000, 0x8, {0x77359400}, {0x1, 0x1, 0x80, 0x9, 0x1, 0x1, "913608c1"}, 0x5, 0x2, {&(0x7f0000000080)}, 0x4, 0x0, r1})

00:36:07 executing program 2:
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x80800, 0x0, <r0=>0xffffffffffffffff})
ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000180)={0x1, 0x4, [{r0, 0x0, 0xfffffffffffff000, 0x100000000}, {r0, 0x0, 0x4000, 0x1000000}, {r0, 0x0, 0x1000000, 0x1000000000000}, {r0, 0x0, 0x1000000000000, 0xfffff000}]})
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r2 = openat$incfs(r0, &(0x7f0000000100)='.pending_reads\x00', 0x4c003, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x0, 0xa4})
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x80800}) (async)
ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000180)={0x1, 0x4, [{r0, 0x0, 0xfffffffffffff000, 0x100000000}, {r0, 0x0, 0x4000, 0x1000000}, {r0, 0x0, 0x1000000, 0x1000000000000}, {r0, 0x0, 0x1000000000000, 0xfffff000}]}) (async)
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
openat$incfs(r0, &(0x7f0000000100)='.pending_reads\x00', 0x4c003, 0x0) (async)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x0, 0xa4}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)

00:36:07 executing program 0:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0)
sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:07 executing program 4:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', <r1=>0x0})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14}, 0x14}}, 0x0)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='A\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200025bd7000fbdbdf252400000008000200", @ANYRES32=0x0, @ANYBLOB='\x00', @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="0a0001007770616e3300000008000200", @ANYRES64=r2, @ANYBLOB="6e98f47880d7595ec36a88b3aa3240baeb38000000000000000000000000000000361e5b950fb0fef8503fec7b53049104af38d2bfc4a2d0e343d254ca3821fd19e938e4e3aad5bad5d189b5a178c1fd4e92afeec2036ea9bc390a93d067d27348480e24189d40aabdc64cc3f0b35ed3666c678bda93ea4a47209702184ddd5487d50e0c2f4cb56442b91cf454769d9d9eee389da89f8070a5f2e38e8086b030ea5994a66fbecee560d3417900e3fca60672bdc6"], 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x4000000)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r4) (async)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r4)

00:36:07 executing program 5:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000080), 0x4) (async)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:07 executing program 2:
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)

00:36:07 executing program 0:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0)
sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:07 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000200)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x30323953})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000080)=0x3)
r2 = openat$incfs(r1, &(0x7f00000002c0)='.pending_reads\x00', 0x20080, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000100)={0x0, @vbi={0x2, 0x7, 0x4, 0x34343459, [0x5], [0x9, 0x9], 0x1}})
read$smackfs_access(r2, &(0x7f0000000040), 0x14)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000280)={0x2, 0x0, &(0x7f0000000240)=[0x0, 0x0]})

00:36:07 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, <r0=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)=[{0x3, 0xff00, 0x0, 0xfff8}, {0x0, 0x7, 0xfff8, 0x100}, {0x7e, 0x9, 0x20, 0x9}, {0x100, 0x8, 0x200, 0x3}]})
syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)

00:36:07 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x1, @raw_data="cc912e7b52621972efb7a0ccdcaf8ab5a8c2b6307d018ddf48d9be759a0b61bef033c4b596898df146a493c750937a88e62d98046885054d0a760606238bccb531b69147ccfc1f72f91d3eb4bd06f85123f2961732a7cc2b2d15df1b78403220d3c7ad643f3f47bad71af187ec111f4878918bc753101a5a8532d2de31ac9ae283b41c6f95b2f17e008bc5a0086a128181efbd00aea453442a0e9e3edc49acd106fe79cf963cf7605bd3f4a9fff0dbfe54c3cfba2b519e263248dd6d19aeec6fb92e6dab5613c563"})

00:36:07 executing program 2:
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)

00:36:08 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000140)) (async, rerun: 32)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000200)={'wpan4\x00'}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x9, 0xafb555b12a66cf3e, 0x2, "a527a259a629a5816a7ae9e3e1f8666e940758760e5aae5571719d12488f304a", 0x3231564e})
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)=@userptr={0x5, 0x1, 0x4, 0x20, 0x7, {}, {0x4, 0x1, 0x3, 0x3, 0xc4, 0x1f, "c62ebcad"}, 0x8be, 0x2, {&(0x7f0000000080)}, 0x10000})

00:36:08 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000200)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x30323953})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000080)=0x3) (async)
r2 = openat$incfs(r1, &(0x7f00000002c0)='.pending_reads\x00', 0x20080, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000100)={0x0, @vbi={0x2, 0x7, 0x4, 0x34343459, [0x5], [0x9, 0x9], 0x1}}) (async)
read$smackfs_access(r2, &(0x7f0000000040), 0x14)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000280)={0x2, 0x0, &(0x7f0000000240)=[0x0, 0x0]})

00:36:08 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, 0x0, 0x40010)

00:36:08 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x1, @raw_data="cc912e7b52621972efb7a0ccdcaf8ab5a8c2b6307d018ddf48d9be759a0b61bef033c4b596898df146a493c750937a88e62d98046885054d0a760606238bccb531b69147ccfc1f72f91d3eb4bd06f85123f2961732a7cc2b2d15df1b78403220d3c7ad643f3f47bad71af187ec111f4878918bc753101a5a8532d2de31ac9ae283b41c6f95b2f17e008bc5a0086a128181efbd00aea453442a0e9e3edc49acd106fe79cf963cf7605bd3f4a9fff0dbfe54c3cfba2b519e263248dd6d19aeec6fb92e6dab5613c563"}) (async)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x1, @raw_data="cc912e7b52621972efb7a0ccdcaf8ab5a8c2b6307d018ddf48d9be759a0b61bef033c4b596898df146a493c750937a88e62d98046885054d0a760606238bccb531b69147ccfc1f72f91d3eb4bd06f85123f2961732a7cc2b2d15df1b78403220d3c7ad643f3f47bad71af187ec111f4878918bc753101a5a8532d2de31ac9ae283b41c6f95b2f17e008bc5a0086a128181efbd00aea453442a0e9e3edc49acd106fe79cf963cf7605bd3f4a9fff0dbfe54c3cfba2b519e263248dd6d19aeec6fb92e6dab5613c563"})

00:36:08 executing program 2:
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)

00:36:08 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, <r0=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)=[{0x3, 0xff00, 0x0, 0xfff8}, {0x0, 0x7, 0xfff8, 0x100}, {0x7e, 0x9, 0x20, 0x9}, {0x100, 0x8, 0x200, 0x3}]})
syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)

00:36:08 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000200)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x30323953})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000080)=0x3)
r2 = openat$incfs(r1, &(0x7f00000002c0)='.pending_reads\x00', 0x20080, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000100)={0x0, @vbi={0x2, 0x7, 0x4, 0x34343459, [0x5], [0x9, 0x9], 0x1}})
read$smackfs_access(r2, &(0x7f0000000040), 0x14)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000280)={0x2, 0x0, &(0x7f0000000240)=[0x0, 0x0]})
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000200)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x30323953}) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000080)=0x3) (async)
openat$incfs(r1, &(0x7f00000002c0)='.pending_reads\x00', 0x20080, 0x0) (async)
ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000100)={0x0, @vbi={0x2, 0x7, 0x4, 0x34343459, [0x5], [0x9, 0x9], 0x1}}) (async)
read$smackfs_access(r2, &(0x7f0000000040), 0x14) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000280)={0x2, 0x0, &(0x7f0000000240)=[0x0, 0x0]}) (async)

00:36:08 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @pix_mp={0x6, 0x7, 0x32314247, 0x7, 0x1, [{0x7, 0xfffffff9}, {0x400, 0xfff}, {0x200, 0x7f}, {0x1, 0x8}, {0xfffffffa, 0x9}, {0x8, 0x10000}, {0x0, 0x10000}, {0x0, 0x6}], 0x39, 0x8, 0x0, 0x2}})

00:36:08 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, 0x0, 0x40010)

00:36:08 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, <r0=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)=[{0x3, 0xff00, 0x0, 0xfff8}, {0x0, 0x7, 0xfff8, 0x100}, {0x7e, 0x9, 0x20, 0x9}, {0x100, 0x8, 0x200, 0x3}]}) (async)
syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)

00:36:08 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}}) (async)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x1, @raw_data="cc912e7b52621972efb7a0ccdcaf8ab5a8c2b6307d018ddf48d9be759a0b61bef033c4b596898df146a493c750937a88e62d98046885054d0a760606238bccb531b69147ccfc1f72f91d3eb4bd06f85123f2961732a7cc2b2d15df1b78403220d3c7ad643f3f47bad71af187ec111f4878918bc753101a5a8532d2de31ac9ae283b41c6f95b2f17e008bc5a0086a128181efbd00aea453442a0e9e3edc49acd106fe79cf963cf7605bd3f4a9fff0dbfe54c3cfba2b519e263248dd6d19aeec6fb92e6dab5613c563"})

00:36:08 executing program 3:
keyctl$get_persistent(0x16, 0xffffffffffffffff, 0xffffffffffffffff)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9)
r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, r1)
keyctl$search(0xa, r0, &(0x7f00000000c0)='rxrpc_s\x00', &(0x7f0000000100)={'syz', 0x2}, r1)

00:36:08 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @pix_mp={0x6, 0x7, 0x32314247, 0x7, 0x1, [{0x7, 0xfffffff9}, {0x400, 0xfff}, {0x200, 0x7f}, {0x1, 0x8}, {0xfffffffa, 0x9}, {0x8, 0x10000}, {0x0, 0x10000}, {0x0, 0x6}], 0x39, 0x8, 0x0, 0x2}})

00:36:08 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, 0x0, 0x40010)

00:36:08 executing program 4:
syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)

00:36:08 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @pix_mp={0x6, 0x7, 0x32314247, 0x7, 0x1, [{0x7, 0xfffffff9}, {0x400, 0xfff}, {0x200, 0x7f}, {0x1, 0x8}, {0xfffffffa, 0x9}, {0x8, 0x10000}, {0x0, 0x10000}, {0x0, 0x6}], 0x39, 0x8, 0x0, 0x2}})

00:36:08 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={<r1=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f00000000c0)={r1, 0x0, 0xffffffffffffffc0, 0x1})
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000100)={0x0, 0x7fffffff, 0x7fff, 0x10000})

00:36:08 executing program 3:
keyctl$get_persistent(0x16, 0xffffffffffffffff, 0xffffffffffffffff)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9)
add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0x0) (async)
r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, r1) (async)
add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, r1)
keyctl$search(0xa, r0, &(0x7f00000000c0)='rxrpc_s\x00', &(0x7f0000000100)={'syz', 0x2}, r1)

00:36:08 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0xffffffff, 0x0, 0x0, 0x41416770, [], [0x9]}})

00:36:08 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000240)={0x2, 0x1, 0x1, "69eb88ea5f711a254173c70389c0a0e4b65d81ddb8b6c39cd926dbe16f6b50ed", 0xba92cce2})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r2 = openat$incfs(r1, &(0x7f00000000c0)='.pending_reads\x00', 0x2202, 0xa0)
ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000300)=@multiplanar_overlay={0x0, 0x0, 0x4, 0x2000, 0x0, {}, {0x5, 0x0, 0x2, 0x9, 0x0, 0x7, "9e8796ee"}, 0x10000, 0x3, {&(0x7f0000000100)=[{0x599, 0x4, {0x7}, 0xe8}, {0x5, 0x0, {0x1}, 0x7}]}, 0x1, 0x0, r1})
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000180)=@multiplanar_userptr={0x7f, 0x3, 0x4, 0x20, 0x89, {0x0, 0x2710}, {0x1, 0x0, 0x1, 0xe0, 0x4, 0xff, "040d8854"}, 0xfffffffe, 0x2, {&(0x7f0000000280)=[{0x7, 0xfffffffa, {&(0x7f0000000080)}, 0xffffffff}, {0xfffffffe, 0x3, {&(0x7f0000000040)}, 0x1}]}, 0x8})
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000200)={0x6, 0x3, 0x3, 0x0, 0x40})

00:36:08 executing program 4:
syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)

00:36:08 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:08 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0xffffffff, 0x0, 0x0, 0x41416770, [], [0x9]}})

00:36:08 executing program 3:
keyctl$get_persistent(0x16, 0xffffffffffffffff, 0xffffffffffffffff)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9)
r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, r1) (async)
add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, r1)
keyctl$search(0xa, r0, &(0x7f00000000c0)='rxrpc_s\x00', &(0x7f0000000100)={'syz', 0x2}, r1) (async)
keyctl$search(0xa, r0, &(0x7f00000000c0)='rxrpc_s\x00', &(0x7f0000000100)={'syz', 0x2}, r1)

00:36:08 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={<r1=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f00000000c0)={r1, 0x0, 0xffffffffffffffc0, 0x1})
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000100)={0x0, 0x7fffffff, 0x7fff, 0x10000})
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)) (async)
ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f00000000c0)={r1, 0x0, 0xffffffffffffffc0, 0x1}) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000100)={0x0, 0x7fffffff, 0x7fff, 0x10000}) (async)

00:36:08 executing program 2:
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000240)={0x2, 0x1, 0x1, "69eb88ea5f711a254173c70389c0a0e4b65d81ddb8b6c39cd926dbe16f6b50ed", 0xba92cce2})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
openat$incfs(r1, &(0x7f00000000c0)='.pending_reads\x00', 0x2202, 0xa0) (async)
r2 = openat$incfs(r1, &(0x7f00000000c0)='.pending_reads\x00', 0x2202, 0xa0)
ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000300)=@multiplanar_overlay={0x0, 0x0, 0x4, 0x2000, 0x0, {}, {0x5, 0x0, 0x2, 0x9, 0x0, 0x7, "9e8796ee"}, 0x10000, 0x3, {&(0x7f0000000100)=[{0x599, 0x4, {0x7}, 0xe8}, {0x5, 0x0, {0x1}, 0x7}]}, 0x1, 0x0, r1})
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000180)=@multiplanar_userptr={0x7f, 0x3, 0x4, 0x20, 0x89, {0x0, 0x2710}, {0x1, 0x0, 0x1, 0xe0, 0x4, 0xff, "040d8854"}, 0xfffffffe, 0x2, {&(0x7f0000000280)=[{0x7, 0xfffffffa, {&(0x7f0000000080)}, 0xffffffff}, {0xfffffffe, 0x3, {&(0x7f0000000040)}, 0x1}]}, 0x8})
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000200)={0x6, 0x3, 0x3, 0x0, 0x40}) (async)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000200)={0x6, 0x3, 0x3, 0x0, 0x40})

00:36:08 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0xffffffff, 0x0, 0x0, 0x41416770, [], [0x9]}})

00:36:08 executing program 4:
syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)

00:36:08 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:08 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000140)={0x3, @sliced={0x1, [0xf999, 0x1, 0x999c, 0x72, 0x8001, 0x5, 0x1000, 0x100, 0x8, 0x7ff, 0xff, 0x4, 0x6, 0x1, 0x3, 0x8, 0x0, 0x0, 0xad9, 0x24, 0x40, 0x101, 0x40, 0x1ff, 0x7ff, 0xfff9, 0x6, 0xfffb, 0x3f, 0x7ff, 0x5c, 0x5152, 0xb5b5, 0x0, 0xffc0, 0x4, 0x6, 0x1, 0x9, 0xbcf7, 0x0, 0x8, 0x2, 0x7, 0x1ff, 0x1, 0xf538, 0xffff], 0x1}})
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000040))
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0xaf2, 0x2, 0x3, "18d8bbb9b20bae118ec3bb6f5f1f8cc1b2f8fdb79b5b2906017a83f689964343", 0x32315258})

00:36:08 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000300)={0x0, 0x1, 0x5, 0x3ff, 0x0, [], [0x132c, 0x50, 0x0, 0x5], [0x6, 0x6, 0x5], [0xff, 0x0, 0x2, 0x4]})
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000080)=""/228)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000001c0)={0x4, 0x7ff, 0x2, {0x2, @pix={0x57, 0x0, 0x59455247, 0x4, 0x6, 0x5, 0xb, 0x2, 0x0, 0x8, 0x1, 0x5}}, 0x7fffffff})
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0189436, &(0x7f0000000040)={0x0, 0x2, 0x0, "69eb88ea5f711a254173c7030800000000040000b8a6c39cd926dbe16f6b5bed"})
ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f00000002c0)={0x0, 0x8, 0xffff, 0x10800})
ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000180)={0x1, 0xffffffff, 0xf77c, 0x10800})

00:36:08 executing program 4:
syz_usb_connect$printer(0x4, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x60, 0x40, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x7, 0x1, 0x3, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x4e, 0x3f, 0x4}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x55964f59c0c8f68f, 0xd7, 0x7, 0x7f, 0x8, 0x40}, 0x39, &(0x7f0000000140)={0x5, 0xf, 0x39, 0x3, [@ssp_cap={0x20, 0x10, 0xa, 0x8, 0x5, 0xba, 0xf000, 0x7fff, [0xf, 0xa31f7102600b50d1, 0x3fc0, 0xc000, 0xff20d0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x8, 0xe, 0xae}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x9, 0x81, 0x1f}]}, 0x2, [{0xa0, &(0x7f0000000180)=@string={0xa0, 0x3, "272413b0290f12362dcd94020bcb05c1b1fd0e16d75ed2edb805b236d75f6b5737921ea0343dbe7c255025a15dc70b5bb120f3d1a648b77d60fa0dc08bbfd11b8ddff235a28d199a192c1981f0240527e7826dacac5cfdcc0366f4dedeab557f1d0b6872da63cc3cd0324d6bbc7c36d068df1077361b0b39c62f90c6c72b8ca2bd6d8e874db14c25475e0fc308697ed82670ddb39e4fe7aadb22b2284c3b"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x437}}]})
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0xc38, 0x2, 0x3, "69eb88ea5f711a253f73c70388c5ebf5b65581ddb8a6c3bcd126dbe16f6b5bed", 0x7664770e})
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x3, 0x7})

00:36:08 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={<r1=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f00000000c0)={r1, 0x0, 0xffffffffffffffc0, 0x1})
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000100)={0x0, 0x7fffffff, 0x7fff, 0x10000})
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)) (async)
ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f00000000c0)={r1, 0x0, 0xffffffffffffffc0, 0x1}) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000100)={0x0, 0x7fffffff, 0x7fff, 0x10000}) (async)

00:36:08 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:08 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000240)={0x2, 0x1, 0x1, "69eb88ea5f711a254173c70389c0a0e4b65d81ddb8b6c39cd926dbe16f6b50ed", 0xba92cce2})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r2 = openat$incfs(r1, &(0x7f00000000c0)='.pending_reads\x00', 0x2202, 0xa0)
ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000300)=@multiplanar_overlay={0x0, 0x0, 0x4, 0x2000, 0x0, {}, {0x5, 0x0, 0x2, 0x9, 0x0, 0x7, "9e8796ee"}, 0x10000, 0x3, {&(0x7f0000000100)=[{0x599, 0x4, {0x7}, 0xe8}, {0x5, 0x0, {0x1}, 0x7}]}, 0x1, 0x0, r1}) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000180)=@multiplanar_userptr={0x7f, 0x3, 0x4, 0x20, 0x89, {0x0, 0x2710}, {0x1, 0x0, 0x1, 0xe0, 0x4, 0xff, "040d8854"}, 0xfffffffe, 0x2, {&(0x7f0000000280)=[{0x7, 0xfffffffa, {&(0x7f0000000080)}, 0xffffffff}, {0xfffffffe, 0x3, {&(0x7f0000000040)}, 0x1}]}, 0x8})
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000200)={0x6, 0x3, 0x3, 0x0, 0x40})

00:36:08 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000300)={0x0, 0x1, 0x5, 0x3ff, 0x0, [], [0x132c, 0x50, 0x0, 0x5], [0x6, 0x6, 0x5], [0xff, 0x0, 0x2, 0x4]})
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000080)=""/228)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000001c0)={0x4, 0x7ff, 0x2, {0x2, @pix={0x57, 0x0, 0x59455247, 0x4, 0x6, 0x5, 0xb, 0x2, 0x0, 0x8, 0x1, 0x5}}, 0x7fffffff})
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0189436, &(0x7f0000000040)={0x0, 0x2, 0x0, "69eb88ea5f711a254173c7030800000000040000b8a6c39cd926dbe16f6b5bed"})
ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f00000002c0)={0x0, 0x8, 0xffff, 0x10800})
ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000180)={0x1, 0xffffffff, 0xf77c, 0x10800})
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000300)={0x0, 0x1, 0x5, 0x3ff, 0x0, [], [0x132c, 0x50, 0x0, 0x5], [0x6, 0x6, 0x5], [0xff, 0x0, 0x2, 0x4]}) (async)
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000080)=""/228) (async)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000001c0)={0x4, 0x7ff, 0x2, {0x2, @pix={0x57, 0x0, 0x59455247, 0x4, 0x6, 0x5, 0xb, 0x2, 0x0, 0x8, 0x1, 0x5}}, 0x7fffffff}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0189436, &(0x7f0000000040)={0x0, 0x2, 0x0, "69eb88ea5f711a254173c7030800000000040000b8a6c39cd926dbe16f6b5bed"}) (async)
ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f00000002c0)={0x0, 0x8, 0xffff, 0x10800}) (async)
ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000180)={0x1, 0xffffffff, 0xf77c, 0x10800}) (async)

00:36:08 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000140)={0x3, @sliced={0x1, [0xf999, 0x1, 0x999c, 0x72, 0x8001, 0x5, 0x1000, 0x100, 0x8, 0x7ff, 0xff, 0x4, 0x6, 0x1, 0x3, 0x8, 0x0, 0x0, 0xad9, 0x24, 0x40, 0x101, 0x40, 0x1ff, 0x7ff, 0xfff9, 0x6, 0xfffb, 0x3f, 0x7ff, 0x5c, 0x5152, 0xb5b5, 0x0, 0xffc0, 0x4, 0x6, 0x1, 0x9, 0xbcf7, 0x0, 0x8, 0x2, 0x7, 0x1ff, 0x1, 0xf538, 0xffff], 0x1}}) (async)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000040)) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0xaf2, 0x2, 0x3, "18d8bbb9b20bae118ec3bb6f5f1f8cc1b2f8fdb79b5b2906017a83f689964343", 0x32315258})

00:36:08 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x418400, 0x0)
ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431)

00:36:08 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:08 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000140)={0x3, @sliced={0x1, [0xf999, 0x1, 0x999c, 0x72, 0x8001, 0x5, 0x1000, 0x100, 0x8, 0x7ff, 0xff, 0x4, 0x6, 0x1, 0x3, 0x8, 0x0, 0x0, 0xad9, 0x24, 0x40, 0x101, 0x40, 0x1ff, 0x7ff, 0xfff9, 0x6, 0xfffb, 0x3f, 0x7ff, 0x5c, 0x5152, 0xb5b5, 0x0, 0xffc0, 0x4, 0x6, 0x1, 0x9, 0xbcf7, 0x0, 0x8, 0x2, 0x7, 0x1ff, 0x1, 0xf538, 0xffff], 0x1}})
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000040))
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0xaf2, 0x2, 0x3, "18d8bbb9b20bae118ec3bb6f5f1f8cc1b2f8fdb79b5b2906017a83f689964343", 0x32315258})
syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}}) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000140)={0x3, @sliced={0x1, [0xf999, 0x1, 0x999c, 0x72, 0x8001, 0x5, 0x1000, 0x100, 0x8, 0x7ff, 0xff, 0x4, 0x6, 0x1, 0x3, 0x8, 0x0, 0x0, 0xad9, 0x24, 0x40, 0x101, 0x40, 0x1ff, 0x7ff, 0xfff9, 0x6, 0xfffb, 0x3f, 0x7ff, 0x5c, 0x5152, 0xb5b5, 0x0, 0xffc0, 0x4, 0x6, 0x1, 0x9, 0xbcf7, 0x0, 0x8, 0x2, 0x7, 0x1ff, 0x1, 0xf538, 0xffff], 0x1}}) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000040)) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0xaf2, 0x2, 0x3, "18d8bbb9b20bae118ec3bb6f5f1f8cc1b2f8fdb79b5b2906017a83f689964343", 0x32315258}) (async)

00:36:08 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x3, 0x0, "69eb88ea5f711a254173c7509cd926dbe16f6b5bed00"})

00:36:08 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:08 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000300)={0x0, 0x1, 0x5, 0x3ff, 0x0, [], [0x132c, 0x50, 0x0, 0x5], [0x6, 0x6, 0x5], [0xff, 0x0, 0x2, 0x4]}) (async, rerun: 32)
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async, rerun: 32)
shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000080)=""/228)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000001c0)={0x4, 0x7ff, 0x2, {0x2, @pix={0x57, 0x0, 0x59455247, 0x4, 0x6, 0x5, 0xb, 0x2, 0x0, 0x8, 0x1, 0x5}}, 0x7fffffff}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0189436, &(0x7f0000000040)={0x0, 0x2, 0x0, "69eb88ea5f711a254173c7030800000000040000b8a6c39cd926dbe16f6b5bed"}) (async, rerun: 32)
ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f00000002c0)={0x0, 0x8, 0xffff, 0x10800}) (rerun: 32)
ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000180)={0x1, 0xffffffff, 0xf77c, 0x10800})

00:36:09 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x3, 0x0, "69eb88ea5f711a254173c7509cd926dbe16f6b5bed00"})

00:36:09 executing program 4:
syz_usb_connect$printer(0x4, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x60, 0x40, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x7, 0x1, 0x3, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x4e, 0x3f, 0x4}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x55964f59c0c8f68f, 0xd7, 0x7, 0x7f, 0x8, 0x40}, 0x39, &(0x7f0000000140)={0x5, 0xf, 0x39, 0x3, [@ssp_cap={0x20, 0x10, 0xa, 0x8, 0x5, 0xba, 0xf000, 0x7fff, [0xf, 0xa31f7102600b50d1, 0x3fc0, 0xc000, 0xff20d0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x8, 0xe, 0xae}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x9, 0x81, 0x1f}]}, 0x2, [{0xa0, &(0x7f0000000180)=@string={0xa0, 0x3, "272413b0290f12362dcd94020bcb05c1b1fd0e16d75ed2edb805b236d75f6b5737921ea0343dbe7c255025a15dc70b5bb120f3d1a648b77d60fa0dc08bbfd11b8ddff235a28d199a192c1981f0240527e7826dacac5cfdcc0366f4dedeab557f1d0b6872da63cc3cd0324d6bbc7c36d068df1077361b0b39c62f90c6c72b8ca2bd6d8e874db14c25475e0fc308697ed82670ddb39e4fe7aadb22b2284c3b"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x437}}]})
syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2) (async)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0xc38, 0x2, 0x3, "69eb88ea5f711a253f73c70388c5ebf5b65581ddb8a6c3bcd126dbe16f6b5bed", 0x7664770e})
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x3, 0x7})

00:36:09 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x418400, 0x0)
ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431)

00:36:09 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:09 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x4, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000000c0)={0x1, @pix_mp={0x2, 0x2, 0x59455247, 0x6, 0x7, [{0x7, 0x24}, {0x6, 0xff}, {0x3, 0xf7b}, {0x0, 0x87}, {0xfd, 0x5}, {0x0, 0x7}, {0x0, 0x200}, {0xdf, 0x10001}], 0x80, 0x40, 0x1, 0x1, 0x7}})

00:36:09 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @raw_data="478481c13bb1b55ad89224e28b97200db205980e2ed339c7de7a1bc90d6a6342a4cc2a451e9973a836783aa0567db6c212798b3fad492e31a9919f0cbcf37ed47d5688909c3c02cf60faaf81d31941011160c2e133b12dd0ff7f8bf74c0dfcf15a5ce0729bc7870101306abb2da9ea2eeb2eaba95cd0e5f202fce537e79f75dfb01fdfb9b75211051011d3b4962e971393da7e4f9a9e9e3e4ce08d3bf51eef08e5bc294a36d38e7d64e5401b3270b422dc4be70572f275ec445bb744e40e7093f32fab238b7d50cb"})
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})

00:36:09 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x4, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000000c0)={0x1, @pix_mp={0x2, 0x2, 0x59455247, 0x6, 0x7, [{0x7, 0x24}, {0x6, 0xff}, {0x3, 0xf7b}, {0x0, 0x87}, {0xfd, 0x5}, {0x0, 0x7}, {0x0, 0x200}, {0xdf, 0x10001}], 0x80, 0x40, 0x1, 0x1, 0x7}})
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
syz_open_dev$vim2m(&(0x7f0000000080), 0x4, 0x2) (async)
ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000000c0)={0x1, @pix_mp={0x2, 0x2, 0x59455247, 0x6, 0x7, [{0x7, 0x24}, {0x6, 0xff}, {0x3, 0xf7b}, {0x0, 0x87}, {0xfd, 0x5}, {0x0, 0x7}, {0x0, 0x200}, {0xdf, 0x10001}], 0x80, 0x40, 0x1, 0x1, 0x7}}) (async)

00:36:09 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x3, 0x0, "69eb88ea5f711a254173c7509cd926dbe16f6b5bed00"})
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x3, 0x0, "69eb88ea5f711a254173c7509cd926dbe16f6b5bed00"}) (async)

00:36:09 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:09 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @raw_data="478481c13bb1b55ad89224e28b97200db205980e2ed339c7de7a1bc90d6a6342a4cc2a451e9973a836783aa0567db6c212798b3fad492e31a9919f0cbcf37ed47d5688909c3c02cf60faaf81d31941011160c2e133b12dd0ff7f8bf74c0dfcf15a5ce0729bc7870101306abb2da9ea2eeb2eaba95cd0e5f202fce537e79f75dfb01fdfb9b75211051011d3b4962e971393da7e4f9a9e9e3e4ce08d3bf51eef08e5bc294a36d38e7d64e5401b3270b422dc4be70572f275ec445bb744e40e7093f32fab238b7d50cb"}) (async, rerun: 64)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}}) (rerun: 64)

00:36:09 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x418400, 0x0)
ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431)

00:36:09 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f00000000c0)=0x3)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, 0x5, 0x4, 0xa2})

00:36:09 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async, rerun: 64)
r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x4, 0x2) (rerun: 64)
ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000000c0)={0x1, @pix_mp={0x2, 0x2, 0x59455247, 0x6, 0x7, [{0x7, 0x24}, {0x6, 0xff}, {0x3, 0xf7b}, {0x0, 0x87}, {0xfd, 0x5}, {0x0, 0x7}, {0x0, 0x200}, {0xdf, 0x10001}], 0x80, 0x40, 0x1, 0x1, 0x7}})

00:36:09 executing program 2:
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x0, 0x0, <r0=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x3, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x33424752})

00:36:09 executing program 4:
syz_usb_connect$printer(0x4, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x60, 0x40, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x7, 0x1, 0x3, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x4e, 0x3f, 0x4}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x55964f59c0c8f68f, 0xd7, 0x7, 0x7f, 0x8, 0x40}, 0x39, &(0x7f0000000140)={0x5, 0xf, 0x39, 0x3, [@ssp_cap={0x20, 0x10, 0xa, 0x8, 0x5, 0xba, 0xf000, 0x7fff, [0xf, 0xa31f7102600b50d1, 0x3fc0, 0xc000, 0xff20d0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x8, 0xe, 0xae}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x9, 0x81, 0x1f}]}, 0x2, [{0xa0, &(0x7f0000000180)=@string={0xa0, 0x3, "272413b0290f12362dcd94020bcb05c1b1fd0e16d75ed2edb805b236d75f6b5737921ea0343dbe7c255025a15dc70b5bb120f3d1a648b77d60fa0dc08bbfd11b8ddff235a28d199a192c1981f0240527e7826dacac5cfdcc0366f4dedeab557f1d0b6872da63cc3cd0324d6bbc7c36d068df1077361b0b39c62f90c6c72b8ca2bd6d8e874db14c25475e0fc308697ed82670ddb39e4fe7aadb22b2284c3b"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x437}}]})
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0xc38, 0x2, 0x3, "69eb88ea5f711a253f73c70388c5ebf5b65581ddb8a6c3bcd126dbe16f6b5bed", 0x7664770e}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0xc38, 0x2, 0x3, "69eb88ea5f711a253f73c70388c5ebf5b65581ddb8a6c3bcd126dbe16f6b5bed", 0x7664770e})
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x3, 0x7})

00:36:09 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:09 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @raw_data="478481c13bb1b55ad89224e28b97200db205980e2ed339c7de7a1bc90d6a6342a4cc2a451e9973a836783aa0567db6c212798b3fad492e31a9919f0cbcf37ed47d5688909c3c02cf60faaf81d31941011160c2e133b12dd0ff7f8bf74c0dfcf15a5ce0729bc7870101306abb2da9ea2eeb2eaba95cd0e5f202fce537e79f75dfb01fdfb9b75211051011d3b4962e971393da7e4f9a9e9e3e4ce08d3bf51eef08e5bc294a36d38e7d64e5401b3270b422dc4be70572f275ec445bb744e40e7093f32fab238b7d50cb"})
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2) (async)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @raw_data="478481c13bb1b55ad89224e28b97200db205980e2ed339c7de7a1bc90d6a6342a4cc2a451e9973a836783aa0567db6c212798b3fad492e31a9919f0cbcf37ed47d5688909c3c02cf60faaf81d31941011160c2e133b12dd0ff7f8bf74c0dfcf15a5ce0729bc7870101306abb2da9ea2eeb2eaba95cd0e5f202fce537e79f75dfb01fdfb9b75211051011d3b4962e971393da7e4f9a9e9e3e4ce08d3bf51eef08e5bc294a36d38e7d64e5401b3270b422dc4be70572f275ec445bb744e40e7093f32fab238b7d50cb"}) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}}) (async)

00:36:09 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f00000000c0)=0x3)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, 0x5, 0x4, 0xa2})

00:36:09 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8)
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000180))
keyctl$unlink(0x9, r1, r2)

00:36:09 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8)
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000180)) (async)
keyctl$unlink(0x9, r1, r2)

00:36:09 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:09 executing program 2:
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x0, 0x0, <r0=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x3, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x33424752})

00:36:09 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x7f, 0x2)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, 0x0)
r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x181000, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r5, 0xc0106403, 0x0)
r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r6, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000080)=@multiplanar_mmap={0x5, 0x0, 0x4, 0x100, 0x6, {0x77359400}, {0x3, 0x8, 0x9, 0x6, 0x1f, 0x6, "b4709421"}, 0x8, 0x1, {&(0x7f0000000000)=[{0x416, 0x20, {0x2}, 0x8001}, {0x1, 0x1000, {0x200}, 0x7}]}, 0x7, 0x0, r6})
r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r7, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_AGP_ENABLE(r7, 0x40086432, &(0x7f0000000140)=0x400)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x9, <r8=>0x0, 0x2})
ioctl$DRM_IOCTL_AGP_BIND(r4, 0x40106436, &(0x7f0000000340)={r8, 0x9})

00:36:09 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f00000000c0)=0x3)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, 0x5, 0x4, 0xa2})
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f00000000c0)=0x3) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, 0x5, 0x4, 0xa2}) (async)

00:36:09 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:10 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0xfffffffc, 0x0, 0x1, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x47504a4d})

00:36:10 executing program 2:
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x0, 0x0, <r0=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x3, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x33424752})

00:36:10 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x9, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:10 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8)
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000180))
keyctl$unlink(0x9, r1, r2)
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) (async)
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000180)) (async)
keyctl$unlink(0x9, r1, r2) (async)

00:36:10 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async, rerun: 32)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (rerun: 32)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x7f, 0x2) (async)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, 0x0)
r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x181000, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r5, 0xc0106403, 0x0) (async, rerun: 64)
r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (rerun: 64)
ioctl$DRM_IOCTL_IRQ_BUSID(r6, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000080)=@multiplanar_mmap={0x5, 0x0, 0x4, 0x100, 0x6, {0x77359400}, {0x3, 0x8, 0x9, 0x6, 0x1f, 0x6, "b4709421"}, 0x8, 0x1, {&(0x7f0000000000)=[{0x416, 0x20, {0x2}, 0x8001}, {0x1, 0x1000, {0x200}, 0x7}]}, 0x7, 0x0, r6}) (async)
r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r7, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_AGP_ENABLE(r7, 0x40086432, &(0x7f0000000140)=0x400) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}}) (async)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x9, <r8=>0x0, 0x2})
ioctl$DRM_IOCTL_AGP_BIND(r4, 0x40106436, &(0x7f0000000340)={r8, 0x9})

00:36:10 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r2, 0x0, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:10 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0x3, 0x401})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:10 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r2, 0x0, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:10 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, <r0=>0xffffffffffffffff})
ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000100)={0x9, &(0x7f00000000c0)=[0x2, 0x5, 0x8, 0x1c000000, 0xe7f, 0x0, 0x7ff, 0x55ea, 0xfffffff7]})
r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000140)={0x1, @raw_data="123e84166ecef2ff04ebb4c2a559f442fb8be913c3e017dadf1ae6fa4b683238e055644dd8b2b9e80c6d7e9e3b041f6ba946e98c273471ac408cb101479687f3be7f79ad94e3c0530b4dfc408eed57e537d832eacf2bdaaacbdb093298360b978c1398baee1d81afa120aed3d6ad065a2e07a22d86bb831b22d2150c7be0b62d15d6d34f0f6d8e642391e35e6f5149636d337de07c64978f432cafac48feb101e5248e032a5d877a0f82ea789becc1e6a26f1b309ceda54e8f1e0baa47668244e073d32c8e18a759"})
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:10 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x9, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x9, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)

00:36:10 executing program 4:
syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2) (async)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0xfffffffc, 0x0, 0x1, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x47504a4d})

00:36:10 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0x3, 0x401}) (async, rerun: 32)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (rerun: 32)

00:36:10 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r2, 0x0, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:10 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000}) (async)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, <r0=>0xffffffffffffffff})
ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000100)={0x9, &(0x7f00000000c0)=[0x2, 0x5, 0x8, 0x1c000000, 0xe7f, 0x0, 0x7ff, 0x55ea, 0xfffffff7]})
syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) (async)
r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000140)={0x1, @raw_data="123e84166ecef2ff04ebb4c2a559f442fb8be913c3e017dadf1ae6fa4b683238e055644dd8b2b9e80c6d7e9e3b041f6ba946e98c273471ac408cb101479687f3be7f79ad94e3c0530b4dfc408eed57e537d832eacf2bdaaacbdb093298360b978c1398baee1d81afa120aed3d6ad065a2e07a22d86bb831b22d2150c7be0b62d15d6d34f0f6d8e642391e35e6f5149636d337de07c64978f432cafac48feb101e5248e032a5d877a0f82ea789becc1e6a26f1b309ceda54e8f1e0baa47668244e073d32c8e18a759"})
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:10 executing program 4:
syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2) (async)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0xfffffffc, 0x0, 0x1, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x47504a4d})

00:36:10 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x9, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:10 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x7f, 0x2)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, 0x0) (async)
r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x181000, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r5, 0xc0106403, 0x0)
r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r6, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000080)=@multiplanar_mmap={0x5, 0x0, 0x4, 0x100, 0x6, {0x77359400}, {0x3, 0x8, 0x9, 0x6, 0x1f, 0x6, "b4709421"}, 0x8, 0x1, {&(0x7f0000000000)=[{0x416, 0x20, {0x2}, 0x8001}, {0x1, 0x1000, {0x200}, 0x7}]}, 0x7, 0x0, r6}) (async)
r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r7, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_AGP_ENABLE(r7, 0x40086432, &(0x7f0000000140)=0x400)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x9, <r8=>0x0, 0x2})
ioctl$DRM_IOCTL_AGP_BIND(r4, 0x40106436, &(0x7f0000000340)={r8, 0x9})

00:36:10 executing program 2:
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0x3, 0x401})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:10 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r2, 0x1, 0x0, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:10 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f00000002c0)={r2, 0x80, 0x1, 0x4, 0x3, [], [0x1, 0xffff, 0x8, 0x2], [0x3ff, 0x800, 0x9, 0x7], [0x6, 0x393, 0x0, 0x3]})
r3 = openat$incfs(r1, &(0x7f00000000c0)='.pending_reads\x00', 0x111041, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000100)={0x3, @pix_mp={0xacf5, 0x7fff, 0x31303453, 0x0, 0x7, [{0x3, 0x10001}, {0x8, 0x3}, {0xfffffff8, 0x7663b7ae}, {0x4, 0x401}, {0x3, 0x2}, {0xfff, 0xdb87}, {0x80, 0x7}, {0x1, 0x9}], 0x0, 0x20, 0x2, 0x1}})
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x1, 0x2, 0x1, "25ed7d164008e4389726519a48edefc0532b0709b3d1c673fc5c278385d75486"})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:10 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)=@multiplanar_mmap={0x3ff, 0x2, 0x4, 0x1000, 0x0, {0x0, 0xea60}, {0x5, 0x8, 0xfb, 0x0, 0x2, 0x80, "8da7d2cc"}, 0xfffffff8, 0x1, {&(0x7f0000000080)=[{0x3, 0x3, {0x8}, 0x81}, {0x40, 0xfffffffe, {0x7}, 0x9}]}, 0xffff0000})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:10 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:10 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000}) (async)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, <r0=>0xffffffffffffffff})
ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000100)={0x9, &(0x7f00000000c0)=[0x2, 0x5, 0x8, 0x1c000000, 0xe7f, 0x0, 0x7ff, 0x55ea, 0xfffffff7]})
syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) (async)
r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000140)={0x1, @raw_data="123e84166ecef2ff04ebb4c2a559f442fb8be913c3e017dadf1ae6fa4b683238e055644dd8b2b9e80c6d7e9e3b041f6ba946e98c273471ac408cb101479687f3be7f79ad94e3c0530b4dfc408eed57e537d832eacf2bdaaacbdb093298360b978c1398baee1d81afa120aed3d6ad065a2e07a22d86bb831b22d2150c7be0b62d15d6d34f0f6d8e642391e35e6f5149636d337de07c64978f432cafac48feb101e5248e032a5d877a0f82ea789becc1e6a26f1b309ceda54e8f1e0baa47668244e073d32c8e18a759"})
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:10 executing program 2:
sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002bbd7000ffdbdf250d00000008de5b45000c000600000008000d000700000008000d0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4040090}, 0x4c800)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:10 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14}, 0x14}}, 0x0)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x44040}, 0x20000000)
r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})

00:36:10 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f00000002c0)={r2, 0x80, 0x1, 0x4, 0x3, [], [0x1, 0xffff, 0x8, 0x2], [0x3ff, 0x800, 0x9, 0x7], [0x6, 0x393, 0x0, 0x3]})
r3 = openat$incfs(r1, &(0x7f00000000c0)='.pending_reads\x00', 0x111041, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000100)={0x3, @pix_mp={0xacf5, 0x7fff, 0x31303453, 0x0, 0x7, [{0x3, 0x10001}, {0x8, 0x3}, {0xfffffff8, 0x7663b7ae}, {0x4, 0x401}, {0x3, 0x2}, {0xfff, 0xdb87}, {0x80, 0x7}, {0x1, 0x9}], 0x0, 0x20, 0x2, 0x1}})
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x1, 0x2, 0x1, "25ed7d164008e4389726519a48edefc0532b0709b3d1c673fc5c278385d75486"})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}) (async)
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f00000002c0)={r2, 0x80, 0x1, 0x4, 0x3, [], [0x1, 0xffff, 0x8, 0x2], [0x3ff, 0x800, 0x9, 0x7], [0x6, 0x393, 0x0, 0x3]}) (async)
openat$incfs(r1, &(0x7f00000000c0)='.pending_reads\x00', 0x111041, 0x2) (async)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000100)={0x3, @pix_mp={0xacf5, 0x7fff, 0x31303453, 0x0, 0x7, [{0x3, 0x10001}, {0x8, 0x3}, {0xfffffff8, 0x7663b7ae}, {0x4, 0x401}, {0x3, 0x2}, {0xfff, 0xdb87}, {0x80, 0x7}, {0x1, 0x9}], 0x0, 0x20, 0x2, 0x1}}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x1, 0x2, 0x1, "25ed7d164008e4389726519a48edefc0532b0709b3d1c673fc5c278385d75486"}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)

00:36:10 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)=@multiplanar_mmap={0x3ff, 0x2, 0x4, 0x1000, 0x0, {0x0, 0xea60}, {0x5, 0x8, 0xfb, 0x0, 0x2, 0x80, "8da7d2cc"}, 0xfffffff8, 0x1, {&(0x7f0000000080)=[{0x3, 0x3, {0x8}, 0x81}, {0x40, 0xfffffffe, {0x7}, 0x9}]}, 0xffff0000})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:10 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x2, 0x2, 0x2, "0977aac390df2d426a2d4d19030a88cb8477e88bb1a740005970ad4d8ff56a19", 0x38415262})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0, 0x0, <r2=>0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x0, 0xfbfbfbfb})
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000180)={0x2, r2, 0x0, 0xb0b0b0b0})

00:36:10 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14}, 0x14}}, 0x0) (async, rerun: 32)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x44040}, 0x20000000) (rerun: 32)
r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})

00:36:10 executing program 2:
sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002bbd7000ffdbdf250d00000008de5b45000c000600000008000d000700000008000d0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4040090}, 0x4c800)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002bbd7000ffdbdf250d00000008de5b45000c000600000008000d000700000008000d0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4040090}, 0x4c800) (async)
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)

00:36:10 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:10 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)=@multiplanar_mmap={0x3ff, 0x2, 0x4, 0x1000, 0x0, {0x0, 0xea60}, {0x5, 0x8, 0xfb, 0x0, 0x2, 0x80, "8da7d2cc"}, 0xfffffff8, 0x1, {&(0x7f0000000080)=[{0x3, 0x3, {0x8}, 0x81}, {0x40, 0xfffffffe, {0x7}, 0x9}]}, 0xffff0000})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:10 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x2, 0x2, 0x2, "0977aac390df2d426a2d4d19030a88cb8477e88bb1a740005970ad4d8ff56a19", 0x38415262}) (async)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0, 0x0, <r2=>0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x0, 0xfbfbfbfb})
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000180)={0x2, r2, 0x0, 0xb0b0b0b0})

00:36:10 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f00000002c0)={r2, 0x80, 0x1, 0x4, 0x3, [], [0x1, 0xffff, 0x8, 0x2], [0x3ff, 0x800, 0x9, 0x7], [0x6, 0x393, 0x0, 0x3]})
r3 = openat$incfs(r1, &(0x7f00000000c0)='.pending_reads\x00', 0x111041, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000100)={0x3, @pix_mp={0xacf5, 0x7fff, 0x31303453, 0x0, 0x7, [{0x3, 0x10001}, {0x8, 0x3}, {0xfffffff8, 0x7663b7ae}, {0x4, 0x401}, {0x3, 0x2}, {0xfff, 0xdb87}, {0x80, 0x7}, {0x1, 0x9}], 0x0, 0x20, 0x2, 0x1}})
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x1, 0x2, 0x1, "25ed7d164008e4389726519a48edefc0532b0709b3d1c673fc5c278385d75486"})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}) (async)
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f00000002c0)={r2, 0x80, 0x1, 0x4, 0x3, [], [0x1, 0xffff, 0x8, 0x2], [0x3ff, 0x800, 0x9, 0x7], [0x6, 0x393, 0x0, 0x3]}) (async)
openat$incfs(r1, &(0x7f00000000c0)='.pending_reads\x00', 0x111041, 0x2) (async)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000100)={0x3, @pix_mp={0xacf5, 0x7fff, 0x31303453, 0x0, 0x7, [{0x3, 0x10001}, {0x8, 0x3}, {0xfffffff8, 0x7663b7ae}, {0x4, 0x401}, {0x3, 0x2}, {0xfff, 0xdb87}, {0x80, 0x7}, {0x1, 0x9}], 0x0, 0x20, 0x2, 0x1}}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x1, 0x2, 0x1, "25ed7d164008e4389726519a48edefc0532b0709b3d1c673fc5c278385d75486"}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)

00:36:10 executing program 2:
sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002bbd7000ffdbdf250d00000008de5b45000c000600000008000d000700000008000d0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4040090}, 0x4c800) (async)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:10 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
setsockopt$MRT_DEL_MFC(0xffffffffffffffff, 0x0, 0xcd, &(0x7f00000000c0)={@local, @loopback, 0x1, "bd7bce7850d04b5ce12de1d76a34973c3420d2f8cf2068499b9dc59156baf227", 0xffff8001, 0x3ff, 0x4, 0x8}, 0x3c)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000080))

00:36:10 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14}, 0x14}}, 0x0) (async)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x44040}, 0x20000000)
r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})

00:36:10 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x2, 0x2, 0x2, "0977aac390df2d426a2d4d19030a88cb8477e88bb1a740005970ad4d8ff56a19", 0x38415262})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0, 0x0, <r2=>0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x0, 0xfbfbfbfb})
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000180)={0x2, r2, 0x0, 0xb0b0b0b0})
syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x2, 0x2, 0x2, "0977aac390df2d426a2d4d19030a88cb8477e88bb1a740005970ad4d8ff56a19", 0x38415262}) (async)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x0, 0xfbfbfbfb}) (async)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000180)={0x2, r2, 0x0, 0xb0b0b0b0}) (async)

00:36:10 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:10 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2)

00:36:10 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x2, 0x7841ea398d68e754, 0x2, "69eb88ea5f711a254173c70389c0a0e4b6050000000000000026dbe16b6b5bed", 0x3031334d})

00:36:10 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x40000, 0x1)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x77, 0x2})

00:36:10 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
setsockopt$MRT_DEL_MFC(0xffffffffffffffff, 0x0, 0xcd, &(0x7f00000000c0)={@local, @loopback, 0x1, "bd7bce7850d04b5ce12de1d76a34973c3420d2f8cf2068499b9dc59156baf227", 0xffff8001, 0x3ff, 0x4, 0x8}, 0x3c) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000080))

00:36:10 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:10 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2)

00:36:10 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0xf817, 0x34325842, 0x2, @discrete={0x4, 0x1000}})

00:36:10 executing program 5:
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
setsockopt$MRT_DEL_MFC(0xffffffffffffffff, 0x0, 0xcd, &(0x7f00000000c0)={@local, @loopback, 0x1, "bd7bce7850d04b5ce12de1d76a34973c3420d2f8cf2068499b9dc59156baf227", 0xffff8001, 0x3ff, 0x4, 0x8}, 0x3c)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000080))

00:36:10 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x2, 0x7841ea398d68e754, 0x2, "69eb88ea5f711a254173c70389c0a0e4b6050000000000000026dbe16b6b5bed", 0x3031334d})

00:36:10 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:10 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x40000, 0x1)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x77, 0x2}) (async)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x77, 0x2})

00:36:10 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0xf817, 0x34325842, 0x2, @discrete={0x4, 0x1000}})

00:36:10 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:10 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2)

00:36:10 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r4=>0x0})
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r5, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14}, 0x14}}, 0x0)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r5)
sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r4, @ANYBLOB='\f'], 0x28}}, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, r1, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVICE={0x3c, 0x2c, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x4000}, @NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x7}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x2}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xfff3}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
write$smackfs_access(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB=': /\x00'], 0x12)
ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000000c0)={0x1, @vbi={0xffffff00, 0x100, 0xffffffff, 0x3231564e, [0x7, 0xffffffff], [0x800, 0x6], 0x1}})
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r3)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan3\x00', <r8=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xd0, r7, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_KEY={0x40, 0x2e, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "9356147442d1b14c205088c59cd554d2"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "057c6ac2e421b565d9047e4e44791afa"}, @NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_KEY={0x3c, 0x2e, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8b96fea154d7578fdfda16ed8952a591"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "29b10a8b2d571d636da366e751c988c4783c7afc7949dd99650b0864f4e13e4e"}]}]}, 0xd0}}, 0x10)

00:36:10 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x2, 0x7841ea398d68e754, 0x2, "69eb88ea5f711a254173c70389c0a0e4b6050000000000000026dbe16b6b5bed", 0x3031334d})

00:36:10 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x40000, 0x1) (async)
r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x40000, 0x1)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x77, 0x2})

00:36:10 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:10 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0xf817, 0x34325842, 0x2, @discrete={0x4, 0x1000}})

00:36:10 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.log\x00', 0x41, 0x80)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000140)=@overlay={0x8, 0x2, 0x4, 0x10000, 0x14000, {}, {0x2, 0x1, 0x53, 0xff, 0x7, 0x9, "b2813cc1"}, 0x4, 0x3, {}, 0x2e, 0x0, r2})
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000080)={0x41, 0x3, 0x5})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:10 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:10 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080))
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f00000000c0)={0x0, 0x1})

00:36:10 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:10 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x800, 0x0, <r1=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x0, @sdr={0x797c0e09, 0x7}})

00:36:11 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)) (async, rerun: 64)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (rerun: 64)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async, rerun: 32)
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f00000000c0)={0x0, 0x1}) (rerun: 32)

00:36:11 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.log\x00', 0x41, 0x80)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000140)=@overlay={0x8, 0x2, 0x4, 0x10000, 0x14000, {}, {0x2, 0x1, 0x53, 0xff, 0x7, 0x9, "b2813cc1"}, 0x4, 0x3, {}, 0x2e, 0x0, r2})
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000080)={0x41, 0x3, 0x5}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:11 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (async)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r4=>0x0}) (async)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r5, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14}, 0x14}}, 0x0) (async)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r5) (async)
sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r4, @ANYBLOB='\f'], 0x28}}, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, r1, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVICE={0x3c, 0x2c, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x4000}, @NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x7}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x2}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xfff3}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async)
r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
write$smackfs_access(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB=': /\x00'], 0x12)
ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000000c0)={0x1, @vbi={0xffffff00, 0x100, 0xffffffff, 0x3231564e, [0x7, 0xffffffff], [0x800, 0x6], 0x1}}) (async)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r3)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan3\x00', <r8=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xd0, r7, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_KEY={0x40, 0x2e, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "9356147442d1b14c205088c59cd554d2"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "057c6ac2e421b565d9047e4e44791afa"}, @NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_KEY={0x3c, 0x2e, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8b96fea154d7578fdfda16ed8952a591"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "29b10a8b2d571d636da366e751c988c4783c7afc7949dd99650b0864f4e13e4e"}]}]}, 0xd0}}, 0x10)

00:36:11 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:11 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080)) (async, rerun: 64)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (rerun: 64)

00:36:11 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}}) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x800, 0x0, <r1=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x0, @sdr={0x797c0e09, 0x7}})

00:36:11 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.log\x00', 0x41, 0x80)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000140)=@overlay={0x8, 0x2, 0x4, 0x10000, 0x14000, {}, {0x2, 0x1, 0x53, 0xff, 0x7, 0x9, "b2813cc1"}, 0x4, 0x3, {}, 0x2e, 0x0, r2})
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000080)={0x41, 0x3, 0x5}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:11 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:11 executing program 5:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r4=>0x0})
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r5, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14}, 0x14}}, 0x0) (async)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r5, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14}, 0x14}}, 0x0)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r5)
sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r4, @ANYBLOB='\f'], 0x28}}, 0x0) (async)
sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r4, @ANYBLOB='\f'], 0x28}}, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, r1, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVICE={0x3c, 0x2c, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x4000}, @NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x7}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x2}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xfff3}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
write$smackfs_access(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB=': /\x00'], 0x12)
ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000000c0)={0x1, @vbi={0xffffff00, 0x100, 0xffffffff, 0x3231564e, [0x7, 0xffffffff], [0x800, 0x6], 0x1}})
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r3)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan3\x00', <r8=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xd0, r7, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_KEY={0x40, 0x2e, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "9356147442d1b14c205088c59cd554d2"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "057c6ac2e421b565d9047e4e44791afa"}, @NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_KEY={0x3c, 0x2e, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8b96fea154d7578fdfda16ed8952a591"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "29b10a8b2d571d636da366e751c988c4783c7afc7949dd99650b0864f4e13e4e"}]}]}, 0xd0}}, 0x10)

00:36:11 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x800, 0x0, <r1=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x0, @sdr={0x797c0e09, 0x7}})

00:36:11 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80800, 0x0, <r1=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000200))
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0, <r2=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000100))
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000280)={0x3, @vbi={0x1000, 0x7, 0x200, 0x80c0505, [0x80000000, 0x1f], [0x1, 0xffffffff], 0x1}})

00:36:11 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)) (async)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f00000000c0)={0x0, 0x1})

00:36:11 executing program 2:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205647, &(0x7f0000000040)={0x0, 0x0, 0x3, "69eb88ea5f7100254900", 0x47524247})
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0)
bind$can_raw(r0, &(0x7f0000000000), 0x10)
ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f0000000080)=0x6)

00:36:11 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0x9, 0x7fffffff})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1)

00:36:11 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:11 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80800, 0x0, <r1=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000200)) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0, <r2=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000100)) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000280)={0x3, @vbi={0x1000, 0x7, 0x200, 0x80c0505, [0x80000000, 0x1f], [0x1, 0xffffffff], 0x1}})

00:36:11 executing program 2:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205647, &(0x7f0000000040)={0x0, 0x0, 0x3, "69eb88ea5f7100254900", 0x47524247}) (async, rerun: 32)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (rerun: 32)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0)
bind$can_raw(r0, &(0x7f0000000000), 0x10) (async)
ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f0000000080)=0x6)

00:36:11 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80800, 0x0, <r1=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000200))
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0, <r2=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000100))
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000280)={0x3, @vbi={0x1000, 0x7, 0x200, 0x80c0505, [0x80000000, 0x1f], [0x1, 0xffffffff], 0x1}})

00:36:11 executing program 3:
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
mlockall(0x6)

00:36:11 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}}) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0x9, 0x7fffffff}) (async, rerun: 64)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) (rerun: 64)

00:36:11 executing program 5:
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x0, 0x0, <r0=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140), &(0x7f0000000180)=[<r2=>0x0, <r3=>0x0, <r4=>0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, 0x4, 0x9})
ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f0000000240)=0x2)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r5, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_FREE_BUFS(r5, 0x4010641a, &(0x7f0000000100)={0x6, &(0x7f0000000300)=[0x7fffffff, 0x40000006, 0x140000, 0x7fffffff, 0x3, 0x3]})
r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[r4, r1, r3, r2], 0x4, 0x80800, 0x0, <r7=>0xffffffffffffffff})
ioctl$DRM_IOCTL_AGP_RELEASE(r7, 0x6431)
ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:11 executing program 2:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205647, &(0x7f0000000040)={0x0, 0x0, 0x3, "69eb88ea5f7100254900", 0x47524247})
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0)
bind$can_raw(r0, &(0x7f0000000000), 0x10)
ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f0000000080)=0x6)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205647, &(0x7f0000000040)={0x0, 0x0, 0x3, "69eb88ea5f7100254900", 0x47524247}) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0) (async)
bind$can_raw(r0, &(0x7f0000000000), 0x10) (async)
ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f0000000080)=0x6) (async)

00:36:11 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:11 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}}) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0x9, 0x7fffffff}) (async)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1)

00:36:11 executing program 4:
syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x5, 0x0, 0x3, "69eb88ea5f711a254173c70389c0a0e4b65581ddb804000000000000006b5bed", 0x56544943})

00:36:11 executing program 3:
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
mlockall(0x6)

00:36:11 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x541402, 0x70)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0xf4, 0x2, 0x3, 0x1, 0xffffffffffffffff, 0x9, '\x00', 0x0, r1, 0x2, 0x3, 0x1, 0xe}, 0x48)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})

00:36:11 executing program 5:
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x0, 0x0, <r0=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140), &(0x7f0000000180)=[<r2=>0x0, <r3=>0x0, <r4=>0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, 0x4, 0x9})
ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f0000000240)=0x2)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r5, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_FREE_BUFS(r5, 0x4010641a, &(0x7f0000000100)={0x6, &(0x7f0000000300)=[0x7fffffff, 0x40000006, 0x140000, 0x7fffffff, 0x3, 0x3]})
r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[r4, r1, r3, r2], 0x4, 0x80800, 0x0, <r7=>0xffffffffffffffff})
ioctl$DRM_IOCTL_AGP_RELEASE(r7, 0x6431)
ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1}) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140), &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, 0x4, 0x9}) (async)
ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f0000000240)=0x2) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r5, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_FREE_BUFS(r5, 0x4010641a, &(0x7f0000000100)={0x6, &(0x7f0000000300)=[0x7fffffff, 0x40000006, 0x140000, 0x7fffffff, 0x3, 0x3]}) (async)
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[r4, r1, r3, r2], 0x4, 0x80800}) (async)
ioctl$DRM_IOCTL_AGP_RELEASE(r7, 0x6431) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)

00:36:11 executing program 3:
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
mlockall(0x6)
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
mlockall(0x6) (async)

00:36:11 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2)
ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000000c0)=@overlay={0xb33, 0x0, 0x4, 0x0, 0x80, {}, {0x5, 0xc, 0x5, 0x8, 0x6, 0xc1, "03c6d03e"}, 0x7ff, 0x3, {}, 0xefa})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:11 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x2c}}, 0x40010)

00:36:11 executing program 4:
syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x5, 0x0, 0x3, "69eb88ea5f711a254173c70389c0a0e4b65581ddb804000000000000006b5bed", 0x56544943})
syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x5, 0x0, 0x3, "69eb88ea5f711a254173c70389c0a0e4b65581ddb804000000000000006b5bed", 0x56544943}) (async)

00:36:11 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x541402, 0x70)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0xf4, 0x2, 0x3, 0x1, 0xffffffffffffffff, 0x9, '\x00', 0x0, r1, 0x2, 0x3, 0x1, 0xe}, 0x48)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2) (async)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x541402, 0x70) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0xf4, 0x2, 0x3, 0x1, 0xffffffffffffffff, 0x9, '\x00', 0x0, r1, 0x2, 0x3, 0x1, 0xe}, 0x48) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}}) (async)

00:36:11 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2)
ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000000c0)=@overlay={0xb33, 0x0, 0x4, 0x0, 0x80, {}, {0x5, 0xc, 0x5, 0x8, 0x6, 0xc1, "03c6d03e"}, 0x7ff, 0x3, {}, 0xefa})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:11 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x2c}}, 0x0)

00:36:11 executing program 5:
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x0, 0x0, <r0=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140), &(0x7f0000000180)=[<r2=>0x0, <r3=>0x0, <r4=>0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, 0x4, 0x9}) (async)
ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f0000000240)=0x2) (async)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r5, 0xc0106403, 0x0) (async, rerun: 32)
ioctl$DRM_IOCTL_FREE_BUFS(r5, 0x4010641a, &(0x7f0000000100)={0x6, &(0x7f0000000300)=[0x7fffffff, 0x40000006, 0x140000, 0x7fffffff, 0x3, 0x3]}) (async, rerun: 32)
r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[r4, r1, r3, r2], 0x4, 0x80800, 0x0, <r7=>0xffffffffffffffff})
ioctl$DRM_IOCTL_AGP_RELEASE(r7, 0x6431) (async, rerun: 64)
ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (rerun: 64)

00:36:11 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
openat$incfs(r0, &(0x7f0000000100)='.pending_reads\x00', 0xc4280, 0x4)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f00000000c0)={0x0, 0xdf3b, 0x4, 0x403b})
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:11 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2) (async)
r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x541402, 0x70)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0xf4, 0x2, 0x3, 0x1, 0xffffffffffffffff, 0x9, '\x00', 0x0, r1, 0x2, 0x3, 0x1, 0xe}, 0x48) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})

00:36:11 executing program 4:
syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x5, 0x0, 0x3, "69eb88ea5f711a254173c70389c0a0e4b65581ddb804000000000000006b5bed", 0x56544943})

00:36:11 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) (async)
r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2)
ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000000c0)=@overlay={0xb33, 0x0, 0x4, 0x0, 0x80, {}, {0x5, 0xc, 0x5, 0x8, 0x6, 0xc1, "03c6d03e"}, 0x7ff, 0x3, {}, 0xefa})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:11 executing program 0:
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
mlockall(0x6)

00:36:11 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8ad, 0x2)
clock_gettime(0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000080)=@mmap={0xfffffffa, 0x2, 0x4, 0x70000, 0x3, {r2, r3/1000+10000}, {0x2, 0x8, 0x40, 0x2, 0x3f, 0x38, "b030c071"}, 0x72, 0x1, {}, 0x40, 0x0, r4})

00:36:11 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
openat$incfs(r0, &(0x7f0000000100)='.pending_reads\x00', 0xc4280, 0x4) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f00000000c0)={0x0, 0xdf3b, 0x4, 0x403b}) (async)
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:11 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:11 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000000080)=@alg, 0x80, &(0x7f0000001440)=[{&(0x7f0000000100)=""/199, 0xc7}, {&(0x7f0000000200)=""/202, 0xca}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/164, 0xa4}, {&(0x7f00000013c0)=""/78, 0x4e}], 0x5, &(0x7f00000014c0)=""/216, 0xd8}, 0x2021)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000001640)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x80800, 0x0, <r1=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000001680)={0x5, 0xe4, 0x1, 0x1480})

00:36:11 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x4, 0x4, 0x55c, {}, {0x3, 0x2, 0xc0, 0xfb, 0x1f, 0x2, "a69d5575"}, 0x2764, 0x2, {&(0x7f0000000080)}, 0x5ac0})
r2 = openat$incfs(r1, &(0x7f0000000140)='.log\x00', 0xc0240, 0xb0)
openat$incfs(r2, &(0x7f0000000180)='.pending_reads\x00', 0x80, 0x42)

00:36:11 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
openat$incfs(r0, &(0x7f0000000100)='.pending_reads\x00', 0xc4280, 0x4) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f00000000c0)={0x0, 0xdf3b, 0x4, 0x403b}) (async)
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:11 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
syz_open_dev$vim2m(&(0x7f0000000000), 0x8ad, 0x2) (async)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8ad, 0x2)
clock_gettime(0x0, &(0x7f0000000040)) (async)
clock_gettime(0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000080)=@mmap={0xfffffffa, 0x2, 0x4, 0x70000, 0x3, {r2, r3/1000+10000}, {0x2, 0x8, 0x40, 0x2, 0x3f, 0x38, "b030c071"}, 0x72, 0x1, {}, 0x40, 0x0, r4})

00:36:11 executing program 0:
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
mlockall(0x6)

00:36:11 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000000080)=@alg, 0x80, &(0x7f0000001440)=[{&(0x7f0000000100)=""/199, 0xc7}, {&(0x7f0000000200)=""/202, 0xca}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/164, 0xa4}, {&(0x7f00000013c0)=""/78, 0x4e}], 0x5, &(0x7f00000014c0)=""/216, 0xd8}, 0x2021)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000001640)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x80800, 0x0, <r1=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000001680)={0x5, 0xe4, 0x1, 0x1480})

00:36:11 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x4, 0x4, 0x55c, {}, {0x3, 0x2, 0xc0, 0xfb, 0x1f, 0x2, "a69d5575"}, 0x2764, 0x2, {&(0x7f0000000080)}, 0x5ac0}) (async)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x4, 0x4, 0x55c, {}, {0x3, 0x2, 0xc0, 0xfb, 0x1f, 0x2, "a69d5575"}, 0x2764, 0x2, {&(0x7f0000000080)}, 0x5ac0})
openat$incfs(r1, &(0x7f0000000140)='.log\x00', 0xc0240, 0xb0) (async)
r2 = openat$incfs(r1, &(0x7f0000000140)='.log\x00', 0xc0240, 0xb0)
openat$incfs(r2, &(0x7f0000000180)='.pending_reads\x00', 0x80, 0x42)

00:36:11 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:11 executing program 0:
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
mlockall(0x6)

00:36:11 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000280)=@multiplanar_overlay={0x0, 0x5, 0x4, 0x10000, 0x6, {0x77359400}, {0x4, 0x0, 0x5d, 0xe9, 0x2c, 0x40, "a08bd284"}, 0x4, 0x3, {&(0x7f0000000200)=[{0x389, 0x3f, {0x3}, 0x100}, {0x5, 0x0, {0x7e}, 0x4}]}, 0x7fff})
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)=@multiplanar_userptr={0x16, 0x3, 0x4, 0x1000, 0x7fff, {0x77359400}, {0x5, 0x2, 0xfc, 0x7, 0xf8, 0x3f, "488b6f00"}, 0x3, 0x2, {&(0x7f0000000100)=[{0xfff, 0x9, {&(0x7f0000000080)}, 0x5}, {0xfffffffe, 0x8, {&(0x7f00000000c0)}, 0x3}]}, 0xffff})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000440)={0x75, 0x3, 0x3, 0x0, 0x2})
ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000003c0)=@multiplanar_overlay={0x7, 0x2, 0x4, 0x4000, 0xc0, {0x77359400}, {0x3, 0xc, 0x4, 0x6, 0x5, 0x7f, "e4962530"}, 0x3aa8, 0x3, {&(0x7f0000000340)=[{0x4, 0x9, {0xcd50}, 0x800}, {0xdc, 0x3, {0x7f}, 0xffff}]}, 0x3, 0x0, r2})

00:36:11 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}}) (async)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8ad, 0x2)
clock_gettime(0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0}) (async)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000080)=@mmap={0xfffffffa, 0x2, 0x4, 0x70000, 0x3, {r2, r3/1000+10000}, {0x2, 0x8, 0x40, 0x2, 0x3f, 0x38, "b030c071"}, 0x72, 0x1, {}, 0x40, 0x0, r4})

00:36:11 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x4, 0x4, 0x55c, {}, {0x3, 0x2, 0xc0, 0xfb, 0x1f, 0x2, "a69d5575"}, 0x2764, 0x2, {&(0x7f0000000080)}, 0x5ac0})
r2 = openat$incfs(r1, &(0x7f0000000140)='.log\x00', 0xc0240, 0xb0)
openat$incfs(r2, &(0x7f0000000180)='.pending_reads\x00', 0x80, 0x42)
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x4, 0x4, 0x55c, {}, {0x3, 0x2, 0xc0, 0xfb, 0x1f, 0x2, "a69d5575"}, 0x2764, 0x2, {&(0x7f0000000080)}, 0x5ac0}) (async)
openat$incfs(r1, &(0x7f0000000140)='.log\x00', 0xc0240, 0xb0) (async)
openat$incfs(r2, &(0x7f0000000180)='.pending_reads\x00', 0x80, 0x42) (async)

00:36:11 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)

00:36:11 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000280)=@multiplanar_overlay={0x0, 0x5, 0x4, 0x10000, 0x6, {0x77359400}, {0x4, 0x0, 0x5d, 0xe9, 0x2c, 0x40, "a08bd284"}, 0x4, 0x3, {&(0x7f0000000200)=[{0x389, 0x3f, {0x3}, 0x100}, {0x5, 0x0, {0x7e}, 0x4}]}, 0x7fff}) (async)
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)=@multiplanar_userptr={0x16, 0x3, 0x4, 0x1000, 0x7fff, {0x77359400}, {0x5, 0x2, 0xfc, 0x7, 0xf8, 0x3f, "488b6f00"}, 0x3, 0x2, {&(0x7f0000000100)=[{0xfff, 0x9, {&(0x7f0000000080)}, 0x5}, {0xfffffffe, 0x8, {&(0x7f00000000c0)}, 0x3}]}, 0xffff}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async, rerun: 32)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async, rerun: 32)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000440)={0x75, 0x3, 0x3, 0x0, 0x2}) (async, rerun: 32)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000003c0)=@multiplanar_overlay={0x7, 0x2, 0x4, 0x4000, 0xc0, {0x77359400}, {0x3, 0xc, 0x4, 0x6, 0x5, 0x7f, "e4962530"}, 0x3aa8, 0x3, {&(0x7f0000000340)=[{0x4, 0x9, {0xcd50}, 0x800}, {0xdc, 0x3, {0x7f}, 0xffff}]}, 0x3, 0x0, r2}) (rerun: 32)

00:36:11 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000000080)=@alg, 0x80, &(0x7f0000001440)=[{&(0x7f0000000100)=""/199, 0xc7}, {&(0x7f0000000200)=""/202, 0xca}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/164, 0xa4}, {&(0x7f00000013c0)=""/78, 0x4e}], 0x5, &(0x7f00000014c0)=""/216, 0xd8}, 0x2021)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000001640)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x80800, 0x0, <r1=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000001680)={0x5, 0xe4, 0x1, 0x1480})
syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000000080)=@alg, 0x80, &(0x7f0000001440)=[{&(0x7f0000000100)=""/199, 0xc7}, {&(0x7f0000000200)=""/202, 0xca}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/164, 0xa4}, {&(0x7f00000013c0)=""/78, 0x4e}], 0x5, &(0x7f00000014c0)=""/216, 0xd8}, 0x2021) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000001640)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x80800}) (async)
ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000001680)={0x5, 0xe4, 0x1, 0x1480}) (async)

00:36:11 executing program 0:
mlockall(0x6)

00:36:11 executing program 5:
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)

00:36:11 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000000)=0x1)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x59565955, [0x101, 0x8], [0x9]}})
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000140)={<r2=>0x0, <r3=>0x0})
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)=@multiplanar_overlay={0xaab, 0xb42f24c0324b347a, 0x4, 0x70000, 0x9, {r2, r3/1000+10000}, {0x4, 0x8, 0x1, 0x7, 0xd1, 0x48}, 0x4, 0x3, {&(0x7f0000000340)=[{0x80000000, 0xaf, {0x5}, 0x3}, {0x69cf94aa, 0x3, {0x40000053}, 0x5e3}]}, 0x8, 0x0, r4})

00:36:11 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000280)=@multiplanar_overlay={0x0, 0x5, 0x4, 0x10000, 0x6, {0x77359400}, {0x4, 0x0, 0x5d, 0xe9, 0x2c, 0x40, "a08bd284"}, 0x4, 0x3, {&(0x7f0000000200)=[{0x389, 0x3f, {0x3}, 0x100}, {0x5, 0x0, {0x7e}, 0x4}]}, 0x7fff})
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)=@multiplanar_userptr={0x16, 0x3, 0x4, 0x1000, 0x7fff, {0x77359400}, {0x5, 0x2, 0xfc, 0x7, 0xf8, 0x3f, "488b6f00"}, 0x3, 0x2, {&(0x7f0000000100)=[{0xfff, 0x9, {&(0x7f0000000080)}, 0x5}, {0xfffffffe, 0x8, {&(0x7f00000000c0)}, 0x3}]}, 0xffff})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000440)={0x75, 0x3, 0x3, 0x0, 0x2})
ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000003c0)=@multiplanar_overlay={0x7, 0x2, 0x4, 0x4000, 0xc0, {0x77359400}, {0x3, 0xc, 0x4, 0x6, 0x5, 0x7f, "e4962530"}, 0x3aa8, 0x3, {&(0x7f0000000340)=[{0x4, 0x9, {0xcd50}, 0x800}, {0xdc, 0x3, {0x7f}, 0xffff}]}, 0x3, 0x0, r2})
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000280)=@multiplanar_overlay={0x0, 0x5, 0x4, 0x10000, 0x6, {0x77359400}, {0x4, 0x0, 0x5d, 0xe9, 0x2c, 0x40, "a08bd284"}, 0x4, 0x3, {&(0x7f0000000200)=[{0x389, 0x3f, {0x3}, 0x100}, {0x5, 0x0, {0x7e}, 0x4}]}, 0x7fff}) (async)
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)=@multiplanar_userptr={0x16, 0x3, 0x4, 0x1000, 0x7fff, {0x77359400}, {0x5, 0x2, 0xfc, 0x7, 0xf8, 0x3f, "488b6f00"}, 0x3, 0x2, {&(0x7f0000000100)=[{0xfff, 0x9, {&(0x7f0000000080)}, 0x5}, {0xfffffffe, 0x8, {&(0x7f00000000c0)}, 0x3}]}, 0xffff}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000440)={0x75, 0x3, 0x3, 0x0, 0x2}) (async)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000003c0)=@multiplanar_overlay={0x7, 0x2, 0x4, 0x4000, 0xc0, {0x77359400}, {0x3, 0xc, 0x4, 0x6, 0x5, 0x7f, "e4962530"}, 0x3aa8, 0x3, {&(0x7f0000000340)=[{0x4, 0x9, {0xcd50}, 0x800}, {0xdc, 0x3, {0x7f}, 0xffff}]}, 0x3, 0x0, r2}) (async)

00:36:11 executing program 0:
mlockall(0x0)

00:36:11 executing program 5:
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)

00:36:11 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))

00:36:11 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000000)=0x1) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x59565955, [0x101, 0x8], [0x9]}}) (async, rerun: 32)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async, rerun: 32)
clock_gettime(0x0, &(0x7f0000000140)={<r2=>0x0, <r3=>0x0}) (async)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)=@multiplanar_overlay={0xaab, 0xb42f24c0324b347a, 0x4, 0x70000, 0x9, {r2, r3/1000+10000}, {0x4, 0x8, 0x1, 0x7, 0xd1, 0x48}, 0x4, 0x3, {&(0x7f0000000340)=[{0x80000000, 0xaf, {0x5}, 0x3}, {0x69cf94aa, 0x3, {0x40000053}, 0x5e3}]}, 0x8, 0x0, r4})

00:36:11 executing program 5:
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)

00:36:11 executing program 0:
mlockall(0x0)

00:36:12 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))

00:36:12 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x40000000001, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x5, 0x9, 0x3, {0x1, @pix_mp={0x7ff, 0x78bf, 0x3131354f, 0x9, 0x6, [{0x8000, 0x76}, {0x3, 0x2a2a}, {0x400, 0x9}, {0x7fff, 0x5}, {0x9, 0x100}, {0x0, 0x2}, {0x8, 0x7}, {0xfffff001, 0x9}], 0x20, 0x5, 0x1, 0x1, 0x6}}, 0xbaf})
r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x6, 0x2)
ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000002c0)=@multiplanar_userptr={0x2, 0x1, 0x4, 0x40, 0x9ad6, {0x0, 0xea60}, {0x2, 0xc, 0x0, 0x8, 0x4, 0x60, "2e7591a9"}, 0x5, 0x2, {&(0x7f0000000240)=[{0x40000000, 0x10001, {&(0x7f00000001c0)}, 0xfffffc01}, {0xafb9, 0x20, {&(0x7f0000000200)}, 0x10001}]}, 0x1})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:12 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x3, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x13030522})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000080)=@overlay={0x0, 0x0, 0x4, 0x800, 0x8ee3, {0x0, 0xea60}, {0x1, 0xc, 0x80, 0x1, 0x1, 0x0, "4bad7ba3"}, 0x0, 0x3, {}, 0x8000, 0x0, <r3=>r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, <r4=>0xffffffffffffffff})
clock_gettime(0x0, &(0x7f0000000400)={<r5=>0x0, <r6=>0x0})
pselect6(0x40, &(0x7f00000005c0)={0x401, 0x53a9a345, 0x5, 0xd969, 0x6, 0x3ff, 0x9, 0x3}, &(0x7f0000000600)={0x1, 0x8, 0x100000000, 0x3, 0x8000000000000000, 0x6, 0x8, 0x5}, &(0x7f0000000640)={0x0, 0x8, 0x4, 0xffffffffffffffb2, 0x0, 0x4, 0xfffffffffffff6b3, 0xd3}, &(0x7f0000000680)={0x77359400}, &(0x7f0000000700)={&(0x7f00000006c0)={[0xff]}, 0x8})
ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000540)=@multiplanar_userptr={0x7, 0x3, 0x4, 0x40, 0x1, {r5, r6/1000+10000}, {0x4, 0x1, 0x0, 0x9, 0x7f, 0x1, "b8f2b9ce"}, 0x4, 0x2, {&(0x7f00000004c0)=[{0x1, 0x9, {&(0x7f0000000440)}, 0x10001}, {0xffffffff, 0x20, {&(0x7f0000000480)}, 0x3ff}]}, 0x2, 0x0, r3})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)=[0x0], 0x1, 0x80800, 0x0, <r7=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, &(0x7f00000002c0))
r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r8, 0xc0106403, 0x0)
clock_gettime(0x0, &(0x7f0000000340)={<r9=>0x0, <r10=>0x0})
r11 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r11, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_DQBUF(r7, 0xc0585611, &(0x7f0000000380)=@overlay={0x97d, 0x1, 0x4, 0x4560, 0x0, {r9, r10/1000+60000}, {0x2, 0x1, 0x2, 0x40, 0x3, 0x1f, "c9249069"}, 0x78f4afa6, 0x3, {}, 0xd8, 0x0, r11})
ioctl$DRM_IOCTL_AGP_BIND(r8, 0x40106436, &(0x7f0000000300)={0x0, 0x7fffffffffffffff})
ioctl$vim2m_VIDIOC_EXPBUF(r7, 0xc0405610, &(0x7f0000000280)={0x2, 0x2, 0x17, 0x80})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000140)={0x0, 0x40, 0x0, 0x1, 0x1, [0x0, 0x0, <r12=>0x0], [0x2, 0x400, 0x5, 0x2], [0xfa, 0x53f8d637, 0x7, 0x7a], [0x8, 0x5, 0x2, 0x7]})
ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f00000001c0)={r12})

00:36:12 executing program 1:
syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2) (async)
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000000)=0x1)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x59565955, [0x101, 0x8], [0x9]}}) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x59565955, [0x101, 0x8], [0x9]}})
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000140)={<r2=>0x0, <r3=>0x0})
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)=@multiplanar_overlay={0xaab, 0xb42f24c0324b347a, 0x4, 0x70000, 0x9, {r2, r3/1000+10000}, {0x4, 0x8, 0x1, 0x7, 0xd1, 0x48}, 0x4, 0x3, {&(0x7f0000000340)=[{0x80000000, 0xaf, {0x5}, 0x3}, {0x69cf94aa, 0x3, {0x40000053}, 0x5e3}]}, 0x8, 0x0, r4}) (async)
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)=@multiplanar_overlay={0xaab, 0xb42f24c0324b347a, 0x4, 0x70000, 0x9, {r2, r3/1000+10000}, {0x4, 0x8, 0x1, 0x7, 0xd1, 0x48}, 0x4, 0x3, {&(0x7f0000000340)=[{0x80000000, 0xaf, {0x5}, 0x3}, {0x69cf94aa, 0x3, {0x40000053}, 0x5e3}]}, 0x8, 0x0, r4})

00:36:12 executing program 5:
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
socket$inet_sctp(0x2, 0x1, 0x84)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', <r2=>0x0})
sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r1, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x5}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x44055}, 0x22000010)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "e9eb88ea5f711a254173df03a9c0e8e4b65581ddb8a6d79cd926dbe16f6b5bed"})

00:36:12 executing program 0:
mlockall(0x0)

00:36:12 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))

00:36:12 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x40000000001, 0x2)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x5, 0x9, 0x3, {0x1, @pix_mp={0x7ff, 0x78bf, 0x3131354f, 0x9, 0x6, [{0x8000, 0x76}, {0x3, 0x2a2a}, {0x400, 0x9}, {0x7fff, 0x5}, {0x9, 0x100}, {0x0, 0x2}, {0x8, 0x7}, {0xfffff001, 0x9}], 0x20, 0x5, 0x1, 0x1, 0x6}}, 0xbaf}) (async)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x5, 0x9, 0x3, {0x1, @pix_mp={0x7ff, 0x78bf, 0x3131354f, 0x9, 0x6, [{0x8000, 0x76}, {0x3, 0x2a2a}, {0x400, 0x9}, {0x7fff, 0x5}, {0x9, 0x100}, {0x0, 0x2}, {0x8, 0x7}, {0xfffff001, 0x9}], 0x20, 0x5, 0x1, 0x1, 0x6}}, 0xbaf})
r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x6, 0x2)
ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000002c0)=@multiplanar_userptr={0x2, 0x1, 0x4, 0x40, 0x9ad6, {0x0, 0xea60}, {0x2, 0xc, 0x0, 0x8, 0x4, 0x60, "2e7591a9"}, 0x5, 0x2, {&(0x7f0000000240)=[{0x40000000, 0x10001, {&(0x7f00000001c0)}, 0xfffffc01}, {0xafb9, 0x20, {&(0x7f0000000200)}, 0x10001}]}, 0x1})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:12 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x3, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x13030522}) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000080)=@overlay={0x0, 0x0, 0x4, 0x800, 0x8ee3, {0x0, 0xea60}, {0x1, 0xc, 0x80, 0x1, 0x1, 0x0, "4bad7ba3"}, 0x0, 0x3, {}, 0x8000, 0x0, <r3=>r2}) (async)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, <r4=>0xffffffffffffffff}) (async)
clock_gettime(0x0, &(0x7f0000000400)={<r5=>0x0, <r6=>0x0})
pselect6(0x40, &(0x7f00000005c0)={0x401, 0x53a9a345, 0x5, 0xd969, 0x6, 0x3ff, 0x9, 0x3}, &(0x7f0000000600)={0x1, 0x8, 0x100000000, 0x3, 0x8000000000000000, 0x6, 0x8, 0x5}, &(0x7f0000000640)={0x0, 0x8, 0x4, 0xffffffffffffffb2, 0x0, 0x4, 0xfffffffffffff6b3, 0xd3}, &(0x7f0000000680)={0x77359400}, &(0x7f0000000700)={&(0x7f00000006c0)={[0xff]}, 0x8}) (async)
ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000540)=@multiplanar_userptr={0x7, 0x3, 0x4, 0x40, 0x1, {r5, r6/1000+10000}, {0x4, 0x1, 0x0, 0x9, 0x7f, 0x1, "b8f2b9ce"}, 0x4, 0x2, {&(0x7f00000004c0)=[{0x1, 0x9, {&(0x7f0000000440)}, 0x10001}, {0xffffffff, 0x20, {&(0x7f0000000480)}, 0x3ff}]}, 0x2, 0x0, r3})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)=[0x0], 0x1, 0x80800, 0x0, <r7=>0xffffffffffffffff}) (async)
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, &(0x7f00000002c0)) (async)
r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r8, 0xc0106403, 0x0)
clock_gettime(0x0, &(0x7f0000000340)={<r9=>0x0, <r10=>0x0}) (async)
r11 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r11, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_DQBUF(r7, 0xc0585611, &(0x7f0000000380)=@overlay={0x97d, 0x1, 0x4, 0x4560, 0x0, {r9, r10/1000+60000}, {0x2, 0x1, 0x2, 0x40, 0x3, 0x1f, "c9249069"}, 0x78f4afa6, 0x3, {}, 0xd8, 0x0, r11}) (async)
ioctl$DRM_IOCTL_AGP_BIND(r8, 0x40106436, &(0x7f0000000300)={0x0, 0x7fffffffffffffff}) (async)
ioctl$vim2m_VIDIOC_EXPBUF(r7, 0xc0405610, &(0x7f0000000280)={0x2, 0x2, 0x17, 0x80}) (async)
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000140)={0x0, 0x40, 0x0, 0x1, 0x1, [0x0, 0x0, <r12=>0x0], [0x2, 0x400, 0x5, 0x2], [0xfa, 0x53f8d637, 0x7, 0x7a], [0x8, 0x5, 0x2, 0x7]})
ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f00000001c0)={r12})

00:36:12 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:12 executing program 5:
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
socket$inet_sctp(0x2, 0x1, 0x84)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', <r2=>0x0})
sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r1, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x5}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x44055}, 0x22000010) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "e9eb88ea5f711a254173df03a9c0e8e4b65581ddb8a6d79cd926dbe16f6b5bed"})

00:36:12 executing program 1:
ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})

00:36:12 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x40000000001, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x5, 0x9, 0x3, {0x1, @pix_mp={0x7ff, 0x78bf, 0x3131354f, 0x9, 0x6, [{0x8000, 0x76}, {0x3, 0x2a2a}, {0x400, 0x9}, {0x7fff, 0x5}, {0x9, 0x100}, {0x0, 0x2}, {0x8, 0x7}, {0xfffff001, 0x9}], 0x20, 0x5, 0x1, 0x1, 0x6}}, 0xbaf}) (async)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x5, 0x9, 0x3, {0x1, @pix_mp={0x7ff, 0x78bf, 0x3131354f, 0x9, 0x6, [{0x8000, 0x76}, {0x3, 0x2a2a}, {0x400, 0x9}, {0x7fff, 0x5}, {0x9, 0x100}, {0x0, 0x2}, {0x8, 0x7}, {0xfffff001, 0x9}], 0x20, 0x5, 0x1, 0x1, 0x6}}, 0xbaf})
r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x6, 0x2)
ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000002c0)=@multiplanar_userptr={0x2, 0x1, 0x4, 0x40, 0x9ad6, {0x0, 0xea60}, {0x2, 0xc, 0x0, 0x8, 0x4, 0x60, "2e7591a9"}, 0x5, 0x2, {&(0x7f0000000240)=[{0x40000000, 0x10001, {&(0x7f00000001c0)}, 0xfffffc01}, {0xafb9, 0x20, {&(0x7f0000000200)}, 0x10001}]}, 0x1}) (async)
ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000002c0)=@multiplanar_userptr={0x2, 0x1, 0x4, 0x40, 0x9ad6, {0x0, 0xea60}, {0x2, 0xc, 0x0, 0x8, 0x4, 0x60, "2e7591a9"}, 0x5, 0x2, {&(0x7f0000000240)=[{0x40000000, 0x10001, {&(0x7f00000001c0)}, 0xfffffc01}, {0xafb9, 0x20, {&(0x7f0000000200)}, 0x10001}]}, 0x1})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:12 executing program 4:
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xa3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x8080)
syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x4, 0x2)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r3)
sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5}]}, 0x1c}}, 0x0)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r7=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r7, @ANYBLOB='\f'], 0x28}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan3\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r11=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r11, @ANYBLOB='\f'], 0x28}}, 0x0)
r12 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r13, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r14=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r13, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r14, @ANYBLOB='\f'], 0x28}}, 0x0)
r15 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r1)
r16 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
r17 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r17, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r18=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r17, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r18, @ANYBLOB='\f'], 0x28}}, 0x0)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, r15, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r18}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c000)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan4\x00', <r19=>0x0})
sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x74, r4, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r19}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x4)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000001c0)={0x3, @sdr={0x59455247, 0x3}})

00:36:12 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x3, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x13030522})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000080)=@overlay={0x0, 0x0, 0x4, 0x800, 0x8ee3, {0x0, 0xea60}, {0x1, 0xc, 0x80, 0x1, 0x1, 0x0, "4bad7ba3"}, 0x0, 0x3, {}, 0x8000, 0x0, r2}) (async)
ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000080)=@overlay={0x0, 0x0, 0x4, 0x800, 0x8ee3, {0x0, 0xea60}, {0x1, 0xc, 0x80, 0x1, 0x1, 0x0, "4bad7ba3"}, 0x0, 0x3, {}, 0x8000, 0x0, <r3=>r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, <r4=>0xffffffffffffffff})
clock_gettime(0x0, &(0x7f0000000400)={<r5=>0x0, <r6=>0x0})
pselect6(0x40, &(0x7f00000005c0)={0x401, 0x53a9a345, 0x5, 0xd969, 0x6, 0x3ff, 0x9, 0x3}, &(0x7f0000000600)={0x1, 0x8, 0x100000000, 0x3, 0x8000000000000000, 0x6, 0x8, 0x5}, &(0x7f0000000640)={0x0, 0x8, 0x4, 0xffffffffffffffb2, 0x0, 0x4, 0xfffffffffffff6b3, 0xd3}, &(0x7f0000000680)={0x77359400}, &(0x7f0000000700)={&(0x7f00000006c0)={[0xff]}, 0x8}) (async)
pselect6(0x40, &(0x7f00000005c0)={0x401, 0x53a9a345, 0x5, 0xd969, 0x6, 0x3ff, 0x9, 0x3}, &(0x7f0000000600)={0x1, 0x8, 0x100000000, 0x3, 0x8000000000000000, 0x6, 0x8, 0x5}, &(0x7f0000000640)={0x0, 0x8, 0x4, 0xffffffffffffffb2, 0x0, 0x4, 0xfffffffffffff6b3, 0xd3}, &(0x7f0000000680)={0x77359400}, &(0x7f0000000700)={&(0x7f00000006c0)={[0xff]}, 0x8})
ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000540)=@multiplanar_userptr={0x7, 0x3, 0x4, 0x40, 0x1, {r5, r6/1000+10000}, {0x4, 0x1, 0x0, 0x9, 0x7f, 0x1, "b8f2b9ce"}, 0x4, 0x2, {&(0x7f00000004c0)=[{0x1, 0x9, {&(0x7f0000000440)}, 0x10001}, {0xffffffff, 0x20, {&(0x7f0000000480)}, 0x3ff}]}, 0x2, 0x0, r3}) (async)
ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000540)=@multiplanar_userptr={0x7, 0x3, 0x4, 0x40, 0x1, {r5, r6/1000+10000}, {0x4, 0x1, 0x0, 0x9, 0x7f, 0x1, "b8f2b9ce"}, 0x4, 0x2, {&(0x7f00000004c0)=[{0x1, 0x9, {&(0x7f0000000440)}, 0x10001}, {0xffffffff, 0x20, {&(0x7f0000000480)}, 0x3ff}]}, 0x2, 0x0, r3})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)=[0x0], 0x1, 0x80800, 0x0, <r7=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, &(0x7f00000002c0))
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r8, 0xc0106403, 0x0)
clock_gettime(0x0, &(0x7f0000000340)) (async)
clock_gettime(0x0, &(0x7f0000000340)={<r9=>0x0, <r10=>0x0})
r11 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r11, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r11, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_DQBUF(r7, 0xc0585611, &(0x7f0000000380)=@overlay={0x97d, 0x1, 0x4, 0x4560, 0x0, {r9, r10/1000+60000}, {0x2, 0x1, 0x2, 0x40, 0x3, 0x1f, "c9249069"}, 0x78f4afa6, 0x3, {}, 0xd8, 0x0, r11})
ioctl$DRM_IOCTL_AGP_BIND(r8, 0x40106436, &(0x7f0000000300)={0x0, 0x7fffffffffffffff})
ioctl$vim2m_VIDIOC_EXPBUF(r7, 0xc0405610, &(0x7f0000000280)={0x2, 0x2, 0x17, 0x80})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000140)={0x0, 0x40, 0x0, 0x1, 0x1, [0x0, 0x0, <r12=>0x0], [0x2, 0x400, 0x5, 0x2], [0xfa, 0x53f8d637, 0x7, 0x7a], [0x8, 0x5, 0x2, 0x7]})
ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f00000001c0)={r12})

00:36:12 executing program 5:
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
socket$inet_sctp(0x2, 0x1, 0x84)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', <r2=>0x0})
sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r1, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x5}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x44055}, 0x22000010) (async)
sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r1, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x5}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x44055}, 0x22000010)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "e9eb88ea5f711a254173df03a9c0e8e4b65581ddb8a6d79cd926dbe16f6b5bed"})

00:36:12 executing program 1:
ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})

00:36:12 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:12 executing program 3:
r0 = getuid()
getgroups(0x5, &(0x7f0000000180)=[0xee00, 0xffffffffffffffff, 0x0, 0x0, <r1=>0xffffffffffffffff])
r2 = getpgid(0x0)
shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x2, r0, r1, 0xee00, 0xee01, 0xf2, 0x81}, 0x8c2, 0x7, 0x4, 0x81, r2, 0x0, 0x164})
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000100)=@multiplanar_fd={0x6a, 0x0, 0x4, 0x40, 0xffff, {}, {0x2, 0x8, 0xff, 0x2c, 0x56, 0x3, "96d24d15"}, 0x7, 0x4, {&(0x7f0000000080)=[{0x9, 0x4, {}, 0x87}, {0x0, 0x800, {}, 0x9}]}, 0x8, 0x0, <r4=>0xffffffffffffffff})
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000240)={0xfffffffd, 0x80000000, {r2}, {<r5=>r0}, 0xffffffff7fffffff, 0x40})
ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000002c0)=@multiplanar_fd={0x3, 0x0, 0x4, 0x40, 0xa9, {0x77359400}, {0x3, 0x0, 0x1f, 0x5, 0x3f, 0x52, "c9bdb714"}, 0x3, 0x4, {0x0}, 0x7f, 0x0, r4})
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000280)={0x5, 0x200, {r2}, {r5}, 0x7ff})

00:36:12 executing program 4:
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xa3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x8080) (async)
syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x4, 0x2)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r3)
sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5}]}, 0x1c}}, 0x0)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) (async)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r7=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r7, @ANYBLOB='\f'], 0x28}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan3\x00', <r8=>0x0}) (async)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r11=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r11, @ANYBLOB='\f'], 0x28}}, 0x0) (async, rerun: 64)
r12 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) (async, rerun: 64)
r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r13, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r14=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r13, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r14, @ANYBLOB='\f'], 0x28}}, 0x0) (async)
r15 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r1)
r16 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) (async)
r17 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r17, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r18=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r17, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r18, @ANYBLOB='\f'], 0x28}}, 0x0) (async, rerun: 32)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, r15, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r18}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c000) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan4\x00', <r19=>0x0})
sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x74, r4, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r19}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x4) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000001c0)={0x3, @sdr={0x59455247, 0x3}})

00:36:12 executing program 1:
ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}}) (async)

00:36:12 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000180)={0x0, 0x3, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), 0xffffffffffffffff, 0x4}}, 0x18)

00:36:12 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000180)={0x3b, "4495a68b45332e937a7d9b812de93d9f81073514e84be6734c13de935334afec"})
r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x5, 0x2)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0], 0x1, 0x0, 0x0, <r3=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000240)={0x7fff, 0x0, 0x2, "0aa7ee0bfdc1932f8c40e77568fc827c989499ac4e3c97b0bebe81680c80a00e", 0x32314d56})
ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f00000000c0)=0x2)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000100)={0x0, 0x6, 0x5, 0x10800})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:12 executing program 3:
r0 = getuid() (async)
getgroups(0x5, &(0x7f0000000180)=[0xee00, 0xffffffffffffffff, 0x0, 0x0, <r1=>0xffffffffffffffff]) (async)
r2 = getpgid(0x0)
shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x2, r0, r1, 0xee00, 0xee01, 0xf2, 0x81}, 0x8c2, 0x7, 0x4, 0x81, r2, 0x0, 0x164}) (async, rerun: 64)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (rerun: 64)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000100)=@multiplanar_fd={0x6a, 0x0, 0x4, 0x40, 0xffff, {}, {0x2, 0x8, 0xff, 0x2c, 0x56, 0x3, "96d24d15"}, 0x7, 0x4, {&(0x7f0000000080)=[{0x9, 0x4, {}, 0x87}, {0x0, 0x800, {}, 0x9}]}, 0x8, 0x0, <r4=>0xffffffffffffffff}) (async)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000240)={0xfffffffd, 0x80000000, {r2}, {<r5=>r0}, 0xffffffff7fffffff, 0x40})
ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000002c0)=@multiplanar_fd={0x3, 0x0, 0x4, 0x40, 0xa9, {0x77359400}, {0x3, 0x0, 0x1f, 0x5, 0x3f, 0x52, "c9bdb714"}, 0x3, 0x4, {0x0}, 0x7f, 0x0, r4}) (async)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000280)={0x5, 0x200, {r2}, {r5}, 0x7ff})

00:36:12 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:12 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x28201, 0x104)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000440)={0x6, 0x5, 0x3, {0x1, @vbi={0x9, 0x8, 0x1000, 0x33524742, [0x6, 0x7], [0xfff, 0x4], 0x1}}, 0x3})
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x1, @win={{0x6, 0x7, 0x3, 0x967f}, 0x8, 0x6, &(0x7f0000000040)={{0x8, 0x7, 0xe38, 0x8c}, &(0x7f0000000000)={{0x36, 0xf0000000, 0x2, 0x3}}}, 0x3, &(0x7f0000000140)="14bc439f5eec3fc1c041ac69d9b6f6f4967d06608bb32bcf06b91bc4110bdbfd94d64cf7f93bdd60a6c5b24dc6bac1ae0458a015d73a6b849bcb9967d47b201282f166a9a5fac97745388713c2a4718f6e11b314241db0a2caaa1179d00ab880034c05113476020cce1290bdf954e8e3c91f8cddb391a169588f81d585d0809f9ad886fe0bef1b85d7f5fe9357565448e8e58cff20053349aed0147e342dbfb77e0ada11c42c1a59e764dd24a5a6e332e465b3cb278a45699376f987eeee2c0650265f54925f4aa09b545ac3c397c8570d8e4a2a333fbf0c3b5be682d6", 0xf8}})

00:36:12 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000180)={0x3b, "4495a68b45332e937a7d9b812de93d9f81073514e84be6734c13de935334afec"})
r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x5, 0x2)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0], 0x1, 0x0, 0x0, <r3=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000240)={0x7fff, 0x0, 0x2, "0aa7ee0bfdc1932f8c40e77568fc827c989499ac4e3c97b0bebe81680c80a00e", 0x32314d56})
ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f00000000c0)=0x2)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000100)={0x0, 0x6, 0x5, 0x10800})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000180)={0x3b, "4495a68b45332e937a7d9b812de93d9f81073514e84be6734c13de935334afec"}) (async)
syz_open_dev$vim2m(&(0x7f0000000080), 0x5, 0x2) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0], 0x1}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000240)={0x7fff, 0x0, 0x2, "0aa7ee0bfdc1932f8c40e77568fc827c989499ac4e3c97b0bebe81680c80a00e", 0x32314d56}) (async)
ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f00000000c0)=0x2) (async)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000100)={0x0, 0x6, 0x5, 0x10800}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)

00:36:12 executing program 4:
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xa3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x8080) (async)
syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x4, 0x2)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r3)
sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5}]}, 0x1c}}, 0x0) (async)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) (async)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r7=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r7, @ANYBLOB='\f'], 0x28}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan3\x00', <r8=>0x0}) (async)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r11=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r11, @ANYBLOB='\f'], 0x28}}, 0x0) (async)
r12 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r13, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r14=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r13, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r14, @ANYBLOB='\f'], 0x28}}, 0x0) (async)
r15 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r1) (async)
r16 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) (async, rerun: 32)
r17 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
ioctl$sock_SIOCGIFINDEX_802154(r17, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r18=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r17, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r18, @ANYBLOB='\f'], 0x28}}, 0x0) (async)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, r15, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r18}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c000) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan4\x00', <r19=>0x0})
sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x74, r4, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r19}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x4) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000001c0)={0x3, @sdr={0x59455247, 0x3}})

00:36:12 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000180)={0x0, 0x3, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000180)={0x0, 0x3, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), 0xffffffffffffffff, 0x4}}, 0x18)

00:36:12 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x28201, 0x104)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000440)={0x6, 0x5, 0x3, {0x1, @vbi={0x9, 0x8, 0x1000, 0x33524742, [0x6, 0x7], [0xfff, 0x4], 0x1}}, 0x3}) (async, rerun: 32)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x1, @win={{0x6, 0x7, 0x3, 0x967f}, 0x8, 0x6, &(0x7f0000000040)={{0x8, 0x7, 0xe38, 0x8c}, &(0x7f0000000000)={{0x36, 0xf0000000, 0x2, 0x3}}}, 0x3, &(0x7f0000000140)="14bc439f5eec3fc1c041ac69d9b6f6f4967d06608bb32bcf06b91bc4110bdbfd94d64cf7f93bdd60a6c5b24dc6bac1ae0458a015d73a6b849bcb9967d47b201282f166a9a5fac97745388713c2a4718f6e11b314241db0a2caaa1179d00ab880034c05113476020cce1290bdf954e8e3c91f8cddb391a169588f81d585d0809f9ad886fe0bef1b85d7f5fe9357565448e8e58cff20053349aed0147e342dbfb77e0ada11c42c1a59e764dd24a5a6e332e465b3cb278a45699376f987eeee2c0650265f54925f4aa09b545ac3c397c8570d8e4a2a333fbf0c3b5be682d6", 0xf8}}) (rerun: 32)

00:36:12 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:12 executing program 3:
r0 = getuid() (async)
getgroups(0x5, &(0x7f0000000180)=[0xee00, 0xffffffffffffffff, 0x0, 0x0, <r1=>0xffffffffffffffff]) (async, rerun: 64)
r2 = getpgid(0x0) (rerun: 64)
shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x2, r0, r1, 0xee00, 0xee01, 0xf2, 0x81}, 0x8c2, 0x7, 0x4, 0x81, r2, 0x0, 0x164})
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000100)=@multiplanar_fd={0x6a, 0x0, 0x4, 0x40, 0xffff, {}, {0x2, 0x8, 0xff, 0x2c, 0x56, 0x3, "96d24d15"}, 0x7, 0x4, {&(0x7f0000000080)=[{0x9, 0x4, {}, 0x87}, {0x0, 0x800, {}, 0x9}]}, 0x8, 0x0, <r4=>0xffffffffffffffff}) (async, rerun: 64)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000240)={0xfffffffd, 0x80000000, {r2}, {<r5=>r0}, 0xffffffff7fffffff, 0x40}) (rerun: 64)
ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000002c0)=@multiplanar_fd={0x3, 0x0, 0x4, 0x40, 0xa9, {0x77359400}, {0x3, 0x0, 0x1f, 0x5, 0x3f, 0x52, "c9bdb714"}, 0x3, 0x4, {0x0}, 0x7f, 0x0, r4})
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000280)={0x5, 0x200, {r2}, {r5}, 0x7ff})

00:36:12 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000180)={0x0, 0x3, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), 0xffffffffffffffff, 0x4}}, 0x18)

00:36:12 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000180)={0x3b, "4495a68b45332e937a7d9b812de93d9f81073514e84be6734c13de935334afec"})
r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x5, 0x2)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0], 0x1, 0x0, 0x0, <r3=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000240)={0x7fff, 0x0, 0x2, "0aa7ee0bfdc1932f8c40e77568fc827c989499ac4e3c97b0bebe81680c80a00e", 0x32314d56})
ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f00000000c0)=0x2)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000100)={0x0, 0x6, 0x5, 0x10800})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000180)={0x3b, "4495a68b45332e937a7d9b812de93d9f81073514e84be6734c13de935334afec"}) (async)
syz_open_dev$vim2m(&(0x7f0000000080), 0x5, 0x2) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0], 0x1}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000240)={0x7fff, 0x0, 0x2, "0aa7ee0bfdc1932f8c40e77568fc827c989499ac4e3c97b0bebe81680c80a00e", 0x32314d56}) (async)
ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f00000000c0)=0x2) (async)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000100)={0x0, 0x6, 0x5, 0x10800}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)

00:36:12 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:12 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffffff, 0x202880)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000140)={0x0, <r1=>0x0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r1, 0x80000, <r2=>0xffffffffffffffff})
ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f00000000c0)=0xe2)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0x400448c9, &(0x7f0000000040)={0x3, 0x0, 0x0, "69fb88ea5f711a254573c70389c0a0ecb65181ddb8c39cd92620006f6b5bed00", 0x32315659})

00:36:12 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x28201, 0x104)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000440)={0x6, 0x5, 0x3, {0x1, @vbi={0x9, 0x8, 0x1000, 0x33524742, [0x6, 0x7], [0xfff, 0x4], 0x1}}, 0x3})
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x1, @win={{0x6, 0x7, 0x3, 0x967f}, 0x8, 0x6, &(0x7f0000000040)={{0x8, 0x7, 0xe38, 0x8c}, &(0x7f0000000000)={{0x36, 0xf0000000, 0x2, 0x3}}}, 0x3, &(0x7f0000000140)="14bc439f5eec3fc1c041ac69d9b6f6f4967d06608bb32bcf06b91bc4110bdbfd94d64cf7f93bdd60a6c5b24dc6bac1ae0458a015d73a6b849bcb9967d47b201282f166a9a5fac97745388713c2a4718f6e11b314241db0a2caaa1179d00ab880034c05113476020cce1290bdf954e8e3c91f8cddb391a169588f81d585d0809f9ad886fe0bef1b85d7f5fe9357565448e8e58cff20053349aed0147e342dbfb77e0ada11c42c1a59e764dd24a5a6e332e465b3cb278a45699376f987eeee2c0650265f54925f4aa09b545ac3c397c8570d8e4a2a333fbf0c3b5be682d6", 0xf8}}) (async)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x1, @win={{0x6, 0x7, 0x3, 0x967f}, 0x8, 0x6, &(0x7f0000000040)={{0x8, 0x7, 0xe38, 0x8c}, &(0x7f0000000000)={{0x36, 0xf0000000, 0x2, 0x3}}}, 0x3, &(0x7f0000000140)="14bc439f5eec3fc1c041ac69d9b6f6f4967d06608bb32bcf06b91bc4110bdbfd94d64cf7f93bdd60a6c5b24dc6bac1ae0458a015d73a6b849bcb9967d47b201282f166a9a5fac97745388713c2a4718f6e11b314241db0a2caaa1179d00ab880034c05113476020cce1290bdf954e8e3c91f8cddb391a169588f81d585d0809f9ad886fe0bef1b85d7f5fe9357565448e8e58cff20053349aed0147e342dbfb77e0ada11c42c1a59e764dd24a5a6e332e465b3cb278a45699376f987eeee2c0650265f54925f4aa09b545ac3c397c8570d8e4a2a333fbf0c3b5be682d6", 0xf8}})

00:36:12 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000100)={0x1, @sdr={0x1071177a, 0x8}})
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000240)=@userptr={0x2, 0x1, 0x4, 0x100, 0x9, {}, {0x3, 0x9, 0x7, 0x80, 0xfc, 0x3b, "ef402ccb"}, 0xdde, 0x2, {&(0x7f0000000200)}, 0x1ff, 0x0, r2})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f00000000c0)={0x6, "7170d769f1914eedbf16c73020d2677506fb7400001f6594c186adb373d6ba45"})

00:36:12 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14}, 0x14}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_PAN_ID(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00', <r3=>0x0})
sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r2, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0xc8e0)
r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r5 = syz_open_dev$vim2m(&(0x7f0000001780), 0x4, 0x2)
ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000017c0)=@fd={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'iEtH'}})
ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r0)
sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r6, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x980da74400593511}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x8000)

00:36:12 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:12 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffffff, 0x202880)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000140)={0x0, <r1=>0x0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r1, 0x80000, <r2=>0xffffffffffffffff})
ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f00000000c0)=0xe2)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0x400448c9, &(0x7f0000000040)={0x3, 0x0, 0x0, "69fb88ea5f711a254573c70389c0a0ecb65181ddb8c39cd92620006f6b5bed00", 0x32315659})
syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffffff, 0x202880) (async)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000140)) (async)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r1, 0x80000}) (async)
ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f00000000c0)=0xe2) (async)
syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0x400448c9, &(0x7f0000000040)={0x3, 0x0, 0x0, "69fb88ea5f711a254573c70389c0a0ecb65181ddb8c39cd92620006f6b5bed00", 0x32315659}) (async)

00:36:12 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000000c0)={0x3, @pix_mp={0x1, 0x900000, 0x31424752, 0x4, 0xb, [{0xfff, 0x3}, {0x43, 0x7}, {0x1, 0x1}, {0xd5, 0x8}, {0x8eb3, 0xb4f}, {0x9, 0x20}, {0x2, 0x8}, {0xffff, 0x7}], 0x8, 0x40, 0x8, 0x2, 0x6}})

00:36:12 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4000000ffd, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})

00:36:12 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000100)={0x1, @sdr={0x1071177a, 0x8}}) (async)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000240)=@userptr={0x2, 0x1, 0x4, 0x100, 0x9, {}, {0x3, 0x9, 0x7, 0x80, 0xfc, 0x3b, "ef402ccb"}, 0xdde, 0x2, {&(0x7f0000000200)}, 0x1ff, 0x0, r2}) (async)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f00000000c0)={0x6, "7170d769f1914eedbf16c73020d2677506fb7400001f6594c186adb373d6ba45"})

00:36:12 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14}, 0x14}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_PAN_ID(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00', <r3=>0x0})
sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r2, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0xc8e0)
r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r5 = syz_open_dev$vim2m(&(0x7f0000001780), 0x4, 0x2)
ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000017c0)=@fd={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'iEtH'}})
ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r0)
sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r6, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x980da74400593511}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x8000)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14}, 0x14}}, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async)
sendmsg$NL802154_CMD_SET_PAN_ID(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00'}) (async)
sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r2, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0xc8e0) (async)
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
syz_open_dev$vim2m(&(0x7f0000001780), 0x4, 0x2) (async)
ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000017c0)=@fd={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'iEtH'}}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r0) (async)
sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r6, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x980da74400593511}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) (async)

00:36:12 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000000c0)={0x3, @pix_mp={0x1, 0x900000, 0x31424752, 0x4, 0xb, [{0xfff, 0x3}, {0x43, 0x7}, {0x1, 0x1}, {0xd5, 0x8}, {0x8eb3, 0xb4f}, {0x9, 0x20}, {0x2, 0x8}, {0xffff, 0x7}], 0x8, 0x40, 0x8, 0x2, 0x6}})
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000000c0)={0x3, @pix_mp={0x1, 0x900000, 0x31424752, 0x4, 0xb, [{0xfff, 0x3}, {0x43, 0x7}, {0x1, 0x1}, {0xd5, 0x8}, {0x8eb3, 0xb4f}, {0x9, 0x20}, {0x2, 0x8}, {0xffff, 0x7}], 0x8, 0x40, 0x8, 0x2, 0x6}}) (async)

00:36:12 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:12 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4000000ffd, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}}) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})

00:36:12 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffffff, 0x202880)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000140)={0x0, <r1=>0x0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r1, 0x80000, <r2=>0xffffffffffffffff})
ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f00000000c0)=0xe2)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0x400448c9, &(0x7f0000000040)={0x3, 0x0, 0x0, "69fb88ea5f711a254573c70389c0a0ecb65181ddb8c39cd92620006f6b5bed00", 0x32315659})
syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffffff, 0x202880) (async)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000140)) (async)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r1, 0x80000}) (async)
ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f00000000c0)=0xe2) (async)
syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0x400448c9, &(0x7f0000000040)={0x3, 0x0, 0x0, "69fb88ea5f711a254573c70389c0a0ecb65181ddb8c39cd92620006f6b5bed00", 0x32315659}) (async)

00:36:12 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000100)={0x1, @sdr={0x1071177a, 0x8}}) (async)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000240)=@userptr={0x2, 0x1, 0x4, 0x100, 0x9, {}, {0x3, 0x9, 0x7, 0x80, 0xfc, 0x3b, "ef402ccb"}, 0xdde, 0x2, {&(0x7f0000000200)}, 0x1ff, 0x0, r2}) (async)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f00000000c0)={0x6, "7170d769f1914eedbf16c73020d2677506fb7400001f6594c186adb373d6ba45"})

00:36:12 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:12 executing program 1:
syz_open_dev$vim2m(&(0x7f0000000000), 0x4000000ffd, 0x2) (async)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4000000ffd, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})

00:36:12 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000000c0)={0x3, @pix_mp={0x1, 0x900000, 0x31424752, 0x4, 0xb, [{0xfff, 0x3}, {0x43, 0x7}, {0x1, 0x1}, {0xd5, 0x8}, {0x8eb3, 0xb4f}, {0x9, 0x20}, {0x2, 0x8}, {0xffff, 0x7}], 0x8, 0x40, 0x8, 0x2, 0x6}})

00:36:12 executing program 4:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x9a080, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0], 0x1})
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:12 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x43564548})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000380)={0x0, @win={{0x9, 0x8, 0x1, 0x81}, 0x3, 0x7, &(0x7f0000000300)={{0x20, 0x3, 0xfc, 0x2}, &(0x7f00000002c0)={{0x2, 0x6, 0x7fffffff, 0x4}, &(0x7f0000000280)={{0x1, 0x7, 0x80, 0x83}}}}, 0x9, &(0x7f0000000340)='4){', 0x81}})
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000180)={0x1, @raw_data="b809dc4f857e5a9a5f1bdf8d77267fb24175df244f534dc19ff208393eacdd3e10a5ab37d6e4fe4b0f8507249b5f68bc10f6154b3a414206e3a7efa502226f48ba849852481df1498227d13c0ecb2f17cb3f865f41ed8563d19b3ddbffb22215b30fdc7153df4599bdf4b58f38c1b2a77f592e1e7950c81f89ec5b89c91db42c40e764b6d54df950be21d90ed30a22bf28847fc4ff2ce9041bbf30e992c8330334391cb48f05b7120dc92a6d7c37f401e1c01725c37c64ac7f9c5cdc0be88d9a9cbdd92fb8ca2436"})
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000080)={0x1, @sliced={0x40, [0x1, 0x5, 0x7ff, 0xf420, 0xfc00, 0x3, 0x4, 0x4, 0x952a, 0x6, 0x9, 0x7004, 0xfff9, 0x6, 0xfffb, 0x1ff, 0x8, 0x7f, 0x7f, 0xfcd9, 0x101, 0x0, 0x1, 0x7ff, 0x0, 0x6, 0xfff9, 0x6, 0x7, 0x401, 0x8000, 0x0, 0xf7b5, 0xe5eb, 0xc98, 0x7, 0x1, 0x0, 0x0, 0x7, 0x8, 0x0, 0x7, 0x8000, 0x5, 0x6, 0x1, 0xb1], 0x8356}})

00:36:12 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:12 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14}, 0x14}}, 0x0) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_PAN_ID(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x0) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00', <r3=>0x0}) (rerun: 32)
sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r2, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0xc8e0) (async, rerun: 32)
r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (rerun: 32)
r5 = syz_open_dev$vim2m(&(0x7f0000001780), 0x4, 0x2)
ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000017c0)=@fd={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'iEtH'}}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r0)
sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r6, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x980da74400593511}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x8000)

00:36:12 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
syz_open_dev$vim2m(&(0x7f0000000180), 0x8, 0x2)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x10000, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000000, 0x1, 0x4, 0x0, 0x6})
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x10800, 0xc)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000000c0), 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20)

00:36:12 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x200000, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:12 executing program 4:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x9a080, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0], 0x1}) (async, rerun: 32)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2) (rerun: 32)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:12 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x43564548})
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000380)={0x0, @win={{0x9, 0x8, 0x1, 0x81}, 0x3, 0x7, &(0x7f0000000300)={{0x20, 0x3, 0xfc, 0x2}, &(0x7f00000002c0)={{0x2, 0x6, 0x7fffffff, 0x4}, &(0x7f0000000280)={{0x1, 0x7, 0x80, 0x83}}}}, 0x9, &(0x7f0000000340)='4){', 0x81}})
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000180)={0x1, @raw_data="b809dc4f857e5a9a5f1bdf8d77267fb24175df244f534dc19ff208393eacdd3e10a5ab37d6e4fe4b0f8507249b5f68bc10f6154b3a414206e3a7efa502226f48ba849852481df1498227d13c0ecb2f17cb3f865f41ed8563d19b3ddbffb22215b30fdc7153df4599bdf4b58f38c1b2a77f592e1e7950c81f89ec5b89c91db42c40e764b6d54df950be21d90ed30a22bf28847fc4ff2ce9041bbf30e992c8330334391cb48f05b7120dc92a6d7c37f401e1c01725c37c64ac7f9c5cdc0be88d9a9cbdd92fb8ca2436"})
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000080)={0x1, @sliced={0x40, [0x1, 0x5, 0x7ff, 0xf420, 0xfc00, 0x3, 0x4, 0x4, 0x952a, 0x6, 0x9, 0x7004, 0xfff9, 0x6, 0xfffb, 0x1ff, 0x8, 0x7f, 0x7f, 0xfcd9, 0x101, 0x0, 0x1, 0x7ff, 0x0, 0x6, 0xfff9, 0x6, 0x7, 0x401, 0x8000, 0x0, 0xf7b5, 0xe5eb, 0xc98, 0x7, 0x1, 0x0, 0x0, 0x7, 0x8, 0x0, 0x7, 0x8000, 0x5, 0x6, 0x1, 0xb1], 0x8356}})

00:36:12 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0)
sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:12 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
syz_open_dev$vim2m(&(0x7f0000000180), 0x8, 0x2)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x10000, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000000, 0x1, 0x4, 0x0, 0x6}) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x10800, 0xc)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000000c0), 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20)

00:36:12 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x43564548}) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000380)={0x0, @win={{0x9, 0x8, 0x1, 0x81}, 0x3, 0x7, &(0x7f0000000300)={{0x20, 0x3, 0xfc, 0x2}, &(0x7f00000002c0)={{0x2, 0x6, 0x7fffffff, 0x4}, &(0x7f0000000280)={{0x1, 0x7, 0x80, 0x83}}}}, 0x9, &(0x7f0000000340)='4){', 0x81}}) (async)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000180)={0x1, @raw_data="b809dc4f857e5a9a5f1bdf8d77267fb24175df244f534dc19ff208393eacdd3e10a5ab37d6e4fe4b0f8507249b5f68bc10f6154b3a414206e3a7efa502226f48ba849852481df1498227d13c0ecb2f17cb3f865f41ed8563d19b3ddbffb22215b30fdc7153df4599bdf4b58f38c1b2a77f592e1e7950c81f89ec5b89c91db42c40e764b6d54df950be21d90ed30a22bf28847fc4ff2ce9041bbf30e992c8330334391cb48f05b7120dc92a6d7c37f401e1c01725c37c64ac7f9c5cdc0be88d9a9cbdd92fb8ca2436"}) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000080)={0x1, @sliced={0x40, [0x1, 0x5, 0x7ff, 0xf420, 0xfc00, 0x3, 0x4, 0x4, 0x952a, 0x6, 0x9, 0x7004, 0xfff9, 0x6, 0xfffb, 0x1ff, 0x8, 0x7f, 0x7f, 0xfcd9, 0x101, 0x0, 0x1, 0x7ff, 0x0, 0x6, 0xfff9, 0x6, 0x7, 0x401, 0x8000, 0x0, 0xf7b5, 0xe5eb, 0xc98, 0x7, 0x1, 0x0, 0x0, 0x7, 0x8, 0x0, 0x7, 0x8000, 0x5, 0x6, 0x1, 0xb1], 0x8356}})

00:36:12 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)=@multiplanar_mmap={0x6, 0x2, 0x4, 0x2000, 0x0, {0x77359400}, {0x2, 0x0, 0x7, 0x5, 0x7, 0x9, "17de38f1"}, 0x40, 0x1, {&(0x7f0000000080)=[{0x1, 0x10001, {0x5}, 0x7}, {0x1000, 0x3, {0x4}, 0x8}]}, 0xf92, 0x0, <r1=>0xffffffffffffffff})
clock_gettime(0x0, &(0x7f0000000400)={<r2=>0x0, <r3=>0x0})
ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000440)=@mmap={0xfffff800, 0x2, 0x4, 0x2, 0x4, {r2, r3/1000+60000}, {0x5, 0x0, 0xff, 0x1e, 0xf8, 0x80, "9044788f"}, 0x6, 0x1, {}, 0x80000001, 0x0, r1})
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f0000000380)=@multiplanar_overlay={0x1, 0x2, 0x4, 0x4, 0x101, {0x0, 0xea60}, {0x4, 0x0, 0x9, 0x24, 0x81, 0x80, "63c4183e"}, 0x6, 0x3, {&(0x7f0000000300)=[{0x3f, 0x7, {0x801}, 0x200}, {0x8, 0x6, {0x6}, 0x810c}]}, 0x3, 0x0, r1})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000180)={0x0, 0x9, 0x7ff, 0x880})
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r5, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_QUERYBUF(r5, 0xc0585609, &(0x7f0000000240)=@multiplanar_overlay={0x20, 0x3, 0x4, 0x100000, 0x9, {0x77359400}, {0x5, 0x2, 0x56, 0x5, 0x3, 0xf8, "00ddfec5"}, 0x8, 0x3, {&(0x7f00000001c0)=[{0x6, 0xc21a, {}, 0x7}, {0x7ff, 0xa036, {0xffff4d66}, 0xffff}]}, 0xffffff80})

00:36:12 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0)
sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:12 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x200000, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:12 executing program 4:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x9a080, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0], 0x1})
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:12 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
syz_open_dev$vim2m(&(0x7f0000000180), 0x8, 0x2) (async)
syz_open_dev$vim2m(&(0x7f0000000180), 0x8, 0x2)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x10000, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000000, 0x1, 0x4, 0x0, 0x6})
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x10800, 0xc)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000000c0), 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) (async)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000000c0), 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20)

00:36:12 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)=@multiplanar_mmap={0x6, 0x2, 0x4, 0x2000, 0x0, {0x77359400}, {0x2, 0x0, 0x7, 0x5, 0x7, 0x9, "17de38f1"}, 0x40, 0x1, {&(0x7f0000000080)=[{0x1, 0x10001, {0x5}, 0x7}, {0x1000, 0x3, {0x4}, 0x8}]}, 0xf92, 0x0, <r1=>0xffffffffffffffff})
clock_gettime(0x0, &(0x7f0000000400)={<r2=>0x0, <r3=>0x0})
ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000440)=@mmap={0xfffff800, 0x2, 0x4, 0x2, 0x4, {r2, r3/1000+60000}, {0x5, 0x0, 0xff, 0x1e, 0xf8, 0x80, "9044788f"}, 0x6, 0x1, {}, 0x80000001, 0x0, r1})
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f0000000380)=@multiplanar_overlay={0x1, 0x2, 0x4, 0x4, 0x101, {0x0, 0xea60}, {0x4, 0x0, 0x9, 0x24, 0x81, 0x80, "63c4183e"}, 0x6, 0x3, {&(0x7f0000000300)=[{0x3f, 0x7, {0x801}, 0x200}, {0x8, 0x6, {0x6}, 0x810c}]}, 0x3, 0x0, r1})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000180)={0x0, 0x9, 0x7ff, 0x880}) (async)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r5, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_QUERYBUF(r5, 0xc0585609, &(0x7f0000000240)=@multiplanar_overlay={0x20, 0x3, 0x4, 0x100000, 0x9, {0x77359400}, {0x5, 0x2, 0x56, 0x5, 0x3, 0xf8, "00ddfec5"}, 0x8, 0x3, {&(0x7f00000001c0)=[{0x6, 0xc21a, {}, 0x7}, {0x7ff, 0xa036, {0xffff4d66}, 0xffff}]}, 0xffffff80})

00:36:12 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x200000, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:12 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0)
sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:12 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000040)=@userptr={0x1, 0x1, 0x4, 0x0, 0x81, {}, {0x3, 0x2, 0x3, 0xde, 0x5, 0x3f, "84016436"}, 0x3, 0x2, {}, 0x2, 0x0, r2})
ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000001c0)=@multiplanar_overlay={0x9, 0x4, 0x4, 0x8, 0x1, {0x77359400}, {0x4, 0x0, 0x9, 0x2, 0x6, 0x7, "37e88f47"}, 0x1f, 0x3, {&(0x7f0000000140)=[{0x1, 0x401, {0x1}, 0x7ff}, {0x7, 0x8, {0x407}, 0x3}]}, 0x9})

00:36:13 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x3, 0x1, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:13 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
clock_gettime(0x0, &(0x7f00000000c0)={<r2=>0x0, <r3=>0x0})
sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x80, 0x20, {r2, r3/1000+10000}, {}, {0x1, 0x0, 0x1}, 0x1, @canfd={{0x2, 0x1}, 0x3b, 0x0, 0x0, 0x0, "0431221d19c43d228a3c712d50e027366b0c71c2f9cf760b6bb6a3f8ea0a55fabd9cf5c71d2ed0f2bff5a93a0919671e1c462a97297d671ff040aa08b047c8ec"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x80)

00:36:13 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x3, "69eb88ea5f71cb95264bc70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x30314442})

00:36:13 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)=@multiplanar_mmap={0x6, 0x2, 0x4, 0x2000, 0x0, {0x77359400}, {0x2, 0x0, 0x7, 0x5, 0x7, 0x9, "17de38f1"}, 0x40, 0x1, {&(0x7f0000000080)=[{0x1, 0x10001, {0x5}, 0x7}, {0x1000, 0x3, {0x4}, 0x8}]}, 0xf92, 0x0, <r1=>0xffffffffffffffff}) (async, rerun: 64)
clock_gettime(0x0, &(0x7f0000000400)={<r2=>0x0, <r3=>0x0}) (rerun: 64)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000440)=@mmap={0xfffff800, 0x2, 0x4, 0x2, 0x4, {r2, r3/1000+60000}, {0x5, 0x0, 0xff, 0x1e, 0xf8, 0x80, "9044788f"}, 0x6, 0x1, {}, 0x80000001, 0x0, r1}) (async)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f0000000380)=@multiplanar_overlay={0x1, 0x2, 0x4, 0x4, 0x101, {0x0, 0xea60}, {0x4, 0x0, 0x9, 0x24, 0x81, 0x80, "63c4183e"}, 0x6, 0x3, {&(0x7f0000000300)=[{0x3f, 0x7, {0x801}, 0x200}, {0x8, 0x6, {0x6}, 0x810c}]}, 0x3, 0x0, r1})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000180)={0x0, 0x9, 0x7ff, 0x880})
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r5, 0xc0106403, 0x0) (async, rerun: 64)
ioctl$vim2m_VIDIOC_QUERYBUF(r5, 0xc0585609, &(0x7f0000000240)=@multiplanar_overlay={0x20, 0x3, 0x4, 0x100000, 0x9, {0x77359400}, {0x5, 0x2, 0x56, 0x5, 0x3, 0xf8, "00ddfec5"}, 0x8, 0x3, {&(0x7f00000001c0)=[{0x6, 0xc21a, {}, 0x7}, {0x7ff, 0xa036, {0xffff4d66}, 0xffff}]}, 0xffffff80}) (rerun: 64)

00:36:13 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000040)=@userptr={0x1, 0x1, 0x4, 0x0, 0x81, {}, {0x3, 0x2, 0x3, 0xde, 0x5, 0x3f, "84016436"}, 0x3, 0x2, {}, 0x2, 0x0, r2})
ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000001c0)=@multiplanar_overlay={0x9, 0x4, 0x4, 0x8, 0x1, {0x77359400}, {0x4, 0x0, 0x9, 0x2, 0x6, 0x7, "37e88f47"}, 0x1f, 0x3, {&(0x7f0000000140)=[{0x1, 0x401, {0x1}, 0x7ff}, {0x7, 0x8, {0x407}, 0x3}]}, 0x9})

00:36:13 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(0x0, r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:13 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x3, 0x1, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:13 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x3, "69eb88ea5f71cb95264bc70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x30314442})

00:36:13 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
clock_gettime(0x0, &(0x7f00000000c0)={<r2=>0x0, <r3=>0x0})
sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x80, 0x20, {r2, r3/1000+10000}, {}, {0x1, 0x0, 0x1}, 0x1, @canfd={{0x2, 0x1}, 0x3b, 0x0, 0x0, 0x0, "0431221d19c43d228a3c712d50e027366b0c71c2f9cf760b6bb6a3f8ea0a55fabd9cf5c71d2ed0f2bff5a93a0919671e1c462a97297d671ff040aa08b047c8ec"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x80)

00:36:13 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(0x0, r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:13 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x3, 0x1, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x3, 0x1, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)

00:36:13 executing program 1:
syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2) (async)
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000040)=@userptr={0x1, 0x1, 0x4, 0x0, 0x81, {}, {0x3, 0x2, 0x3, 0xde, 0x5, 0x3f, "84016436"}, 0x3, 0x2, {}, 0x2, 0x0, r2})
ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000001c0)=@multiplanar_overlay={0x9, 0x4, 0x4, 0x8, 0x1, {0x77359400}, {0x4, 0x0, 0x9, 0x2, 0x6, 0x7, "37e88f47"}, 0x1f, 0x3, {&(0x7f0000000140)=[{0x1, 0x401, {0x1}, 0x7ff}, {0x7, 0x8, {0x407}, 0x3}]}, 0x9})

00:36:13 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x800, 0x0, <r1=>0xffffffffffffffff})
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000200)=@multiplanar_userptr={0xdf, 0x1, 0x4, 0x21, 0x3, {}, {0x4, 0x0, 0x3, 0x2, 0x81, 0x7f, "b1bc33b0"}, 0x6, 0x2, {&(0x7f0000000180)=[{0x8, 0x9, {&(0x7f0000000100)}, 0xae}, {0x9, 0x9, {&(0x7f0000000140)}, 0x4}]}, 0x7fffffff, 0x0, r2})

00:36:13 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x3, "69eb88ea5f71cb95264bc70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x30314442})

00:36:13 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x800, 0x0, <r1=>0xffffffffffffffff}) (async)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000200)=@multiplanar_userptr={0xdf, 0x1, 0x4, 0x21, 0x3, {}, {0x4, 0x0, 0x3, 0x2, 0x81, 0x7f, "b1bc33b0"}, 0x6, 0x2, {&(0x7f0000000180)=[{0x8, 0x9, {&(0x7f0000000100)}, 0xae}, {0x9, 0x9, {&(0x7f0000000140)}, 0x4}]}, 0x7fffffff, 0x0, r2})

00:36:13 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000180)=""/213)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000080)={0x1, @raw_data="eb0bb8d1236810bb308f9f92fa330fced4a413a8d98bd5266606c436582c62ca3da76d8c58f25a3d987db3e61eed73c0be70f886e3a6c248104d0f83ca333e2a93992a281442ac258a8d03f991c421d51d0000000000000000e5848c7ab5d0d8e68bbceb259448d2a86484cc7cac62d269262b46811750fe9e7877cdcc61cec99499e2692442ed086c0c42d2a44cabd324ab9fc912c221ca58bf6d661b6d33dcdd0ea3f0da3d35bbdb3b328330912fd4e9ded55a4a8dacf0fd01000000fdccd4c2eb4dfc65530762"})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000300))

00:36:13 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
clock_gettime(0x0, &(0x7f00000000c0)={<r2=>0x0, <r3=>0x0})
sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x80, 0x20, {r2, r3/1000+10000}, {}, {0x1, 0x0, 0x1}, 0x1, @canfd={{0x2, 0x1}, 0x3b, 0x0, 0x0, 0x0, "0431221d19c43d228a3c712d50e027366b0c71c2f9cf760b6bb6a3f8ea0a55fabd9cf5c71d2ed0f2bff5a93a0919671e1c462a97297d671ff040aa08b047c8ec"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x80)
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
clock_gettime(0x0, &(0x7f00000000c0)) (async)
sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x80, 0x20, {r2, r3/1000+10000}, {}, {0x1, 0x0, 0x1}, 0x1, @canfd={{0x2, 0x1}, 0x3b, 0x0, 0x0, 0x0, "0431221d19c43d228a3c712d50e027366b0c71c2f9cf760b6bb6a3f8ea0a55fabd9cf5c71d2ed0f2bff5a93a0919671e1c462a97297d671ff040aa08b047c8ec"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) (async)

00:36:13 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(0x0, r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:13 executing program 1:
ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430)
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)=@multiplanar_overlay={0xfffffff8, 0x2, 0x4, 0x400, 0x5, {}, {0x2, 0xc, 0xa, 0xff, 0x1f, 0x7f, "5ad861cc"}, 0x2, 0x3, {&(0x7f0000000000)=[{0x3ff, 0x80000001, {0x1c}, 0x6}, {0x5, 0x7f, {0x3c6}, 0x8}]}, 0x7ff})
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9], 0x1}})

00:36:13 executing program 1:
ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430)
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)=@multiplanar_overlay={0xfffffff8, 0x2, 0x4, 0x400, 0x5, {}, {0x2, 0xc, 0xa, 0xff, 0x1f, 0x7f, "5ad861cc"}, 0x2, 0x3, {&(0x7f0000000000)=[{0x3ff, 0x80000001, {0x1c}, 0x6}, {0x5, 0x7f, {0x3c6}, 0x8}]}, 0x7ff}) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9], 0x1}})

00:36:13 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00', <r1=>0x0})
sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044800}, 0x20000808)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:13 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000180)=""/213)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000080)={0x1, @raw_data="eb0bb8d1236810bb308f9f92fa330fced4a413a8d98bd5266606c436582c62ca3da76d8c58f25a3d987db3e61eed73c0be70f886e3a6c248104d0f83ca333e2a93992a281442ac258a8d03f991c421d51d0000000000000000e5848c7ab5d0d8e68bbceb259448d2a86484cc7cac62d269262b46811750fe9e7877cdcc61cec99499e2692442ed086c0c42d2a44cabd324ab9fc912c221ca58bf6d661b6d33dcdd0ea3f0da3d35bbdb3b328330912fd4e9ded55a4a8dacf0fd01000000fdccd4c2eb4dfc65530762"})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000300))
syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000180)=""/213) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0]}) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000080)={0x1, @raw_data="eb0bb8d1236810bb308f9f92fa330fced4a413a8d98bd5266606c436582c62ca3da76d8c58f25a3d987db3e61eed73c0be70f886e3a6c248104d0f83ca333e2a93992a281442ac258a8d03f991c421d51d0000000000000000e5848c7ab5d0d8e68bbceb259448d2a86484cc7cac62d269262b46811750fe9e7877cdcc61cec99499e2692442ed086c0c42d2a44cabd324ab9fc912c221ca58bf6d661b6d33dcdd0ea3f0da3d35bbdb3b328330912fd4e9ded55a4a8dacf0fd01000000fdccd4c2eb4dfc65530762"}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000300)) (async)

00:36:13 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:13 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x800, 0x0, <r1=>0xffffffffffffffff})
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000200)=@multiplanar_userptr={0xdf, 0x1, 0x4, 0x21, 0x3, {}, {0x4, 0x0, 0x3, 0x2, 0x81, 0x7f, "b1bc33b0"}, 0x6, 0x2, {&(0x7f0000000180)=[{0x8, 0x9, {&(0x7f0000000100)}, 0xae}, {0x9, 0x9, {&(0x7f0000000140)}, 0x4}]}, 0x7fffffff, 0x0, r2})
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x800}) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000200)=@multiplanar_userptr={0xdf, 0x1, 0x4, 0x21, 0x3, {}, {0x4, 0x0, 0x3, 0x2, 0x81, 0x7f, "b1bc33b0"}, 0x6, 0x2, {&(0x7f0000000180)=[{0x8, 0x9, {&(0x7f0000000100)}, 0xae}, {0x9, 0x9, {&(0x7f0000000140)}, 0x4}]}, 0x7fffffff, 0x0, r2}) (async)

00:36:13 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x0, 0x8000, 0x9, 0x90000})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x1000)
shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f00000000c0)=""/4096)

00:36:13 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00', <r1=>0x0})
sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044800}, 0x20000808) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:13 executing program 1:
ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430)
syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2) (async)
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)=@multiplanar_overlay={0xfffffff8, 0x2, 0x4, 0x400, 0x5, {}, {0x2, 0xc, 0xa, 0xff, 0x1f, 0x7f, "5ad861cc"}, 0x2, 0x3, {&(0x7f0000000000)=[{0x3ff, 0x80000001, {0x1c}, 0x6}, {0x5, 0x7f, {0x3c6}, 0x8}]}, 0x7ff})
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9], 0x1}})

00:36:13 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:13 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c700000080e4b65581ddb8a6c39cd926dbca6f6b5bed"})

00:36:13 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000180)=""/213)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000080)={0x1, @raw_data="eb0bb8d1236810bb308f9f92fa330fced4a413a8d98bd5266606c436582c62ca3da76d8c58f25a3d987db3e61eed73c0be70f886e3a6c248104d0f83ca333e2a93992a281442ac258a8d03f991c421d51d0000000000000000e5848c7ab5d0d8e68bbceb259448d2a86484cc7cac62d269262b46811750fe9e7877cdcc61cec99499e2692442ed086c0c42d2a44cabd324ab9fc912c221ca58bf6d661b6d33dcdd0ea3f0da3d35bbdb3b328330912fd4e9ded55a4a8dacf0fd01000000fdccd4c2eb4dfc65530762"}) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000080)={0x1, @raw_data="eb0bb8d1236810bb308f9f92fa330fced4a413a8d98bd5266606c436582c62ca3da76d8c58f25a3d987db3e61eed73c0be70f886e3a6c248104d0f83ca333e2a93992a281442ac258a8d03f991c421d51d0000000000000000e5848c7ab5d0d8e68bbceb259448d2a86484cc7cac62d269262b46811750fe9e7877cdcc61cec99499e2692442ed086c0c42d2a44cabd324ab9fc912c221ca58bf6d661b6d33dcdd0ea3f0da3d35bbdb3b328330912fd4e9ded55a4a8dacf0fd01000000fdccd4c2eb4dfc65530762"})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000300)) (async)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000300))

00:36:13 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x0, 0x8000, 0x9, 0x90000})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x1000) (async)
shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x1000)
shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f00000000c0)=""/4096)

00:36:13 executing program 1:
r0 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x20000, 0x60)
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000200))
r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000140)=@multiplanar_userptr={0x2, 0x2, 0x4, 0x10, 0xffff, {0x77359400}, {0x1, 0x2, 0x0, 0x20, 0x1, 0x7, "de19bf86"}, 0x1, 0x2, {&(0x7f0000000080)=[{0x0, 0x3, {}, 0x6}, {0x7, 0x8, {&(0x7f0000000040)}, 0x1}]}})
ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})

00:36:13 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c700000080e4b65581ddb8a6c39cd926dbca6f6b5bed"})

00:36:13 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00', <r1=>0x0})
sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044800}, 0x20000808)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:13 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:13 executing program 4:
getpgid(0xffffffffffffffff)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "784000ea5f711a254173e2109d5ee4e4b655816b5bed00", 0x30383653})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080))
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f00000000c0)={&(0x7f0000ffb000/0x4000)=nil, 0x10001, 0x0, 0x90})

00:36:13 executing program 1:
r0 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x20000, 0x60)
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000200)) (async)
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000200))
r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000140)=@multiplanar_userptr={0x2, 0x2, 0x4, 0x10, 0xffff, {0x77359400}, {0x1, 0x2, 0x0, 0x20, 0x1, 0x7, "de19bf86"}, 0x1, 0x2, {&(0x7f0000000080)=[{0x0, 0x3, {}, 0x6}, {0x7, 0x8, {&(0x7f0000000040)}, 0x1}]}})
ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})

00:36:13 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c700000080e4b65581ddb8a6c39cd926dbca6f6b5bed"})

00:36:13 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x0, @pix_mp={0x9, 0x5, 0x47504a50, 0x8, 0x4, [{0x4, 0x2}, {0x0, 0xff}, {0x57, 0x8}, {0x8, 0x3}, {0x6, 0x3ff}, {0x8, 0x1}, {0x8, 0x4}, {0x6, 0x51ec}], 0x4, 0x6, 0x2, 0x0, 0x5}})

00:36:13 executing program 3:
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x0, 0x8000, 0x9, 0x90000})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x1000)
shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f00000000c0)=""/4096)

00:36:13 executing program 0:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0)
sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:13 executing program 1:
r0 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x20000, 0x60)
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000200))
r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000140)=@multiplanar_userptr={0x2, 0x2, 0x4, 0x10, 0xffff, {0x77359400}, {0x1, 0x2, 0x0, 0x20, 0x1, 0x7, "de19bf86"}, 0x1, 0x2, {&(0x7f0000000080)=[{0x0, 0x3, {}, 0x6}, {0x7, 0x8, {&(0x7f0000000040)}, 0x1}]}})
ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x20000, 0x60) (async)
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000200)) (async)
syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2) (async)
ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000140)=@multiplanar_userptr={0x2, 0x2, 0x4, 0x10, 0xffff, {0x77359400}, {0x1, 0x2, 0x0, 0x20, 0x1, 0x7, "de19bf86"}, 0x1, 0x2, {&(0x7f0000000080)=[{0x0, 0x3, {}, 0x6}, {0x7, 0x8, {&(0x7f0000000040)}, 0x1}]}}) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}}) (async)

00:36:13 executing program 4:
getpgid(0xffffffffffffffff) (async)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "784000ea5f711a254173e2109d5ee4e4b655816b5bed00", 0x30383653})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080))
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f00000000c0)={&(0x7f0000ffb000/0x4000)=nil, 0x10001, 0x0, 0x90})

00:36:13 executing program 3:
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x1, @sliced={0x9, [0x9, 0x1f, 0x2, 0x4, 0x4, 0xfe01, 0x8, 0x4, 0x9, 0x4, 0x800, 0x5, 0x1, 0x38b, 0x52, 0x9, 0x6, 0x3f, 0xffff, 0x0, 0x80, 0x8, 0x7f, 0x785, 0x10, 0x9ac, 0x512, 0x7f, 0x57f6, 0x9, 0x7f, 0x3, 0x6, 0x9, 0x61, 0x4, 0x9, 0x27ea, 0x9, 0x1, 0x1, 0x2b, 0x3b33, 0x7ff, 0x7ff, 0x3800, 0x1, 0x2], 0x1}})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x4})

00:36:13 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x400000000005, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0xb78, 0x2)
clock_gettime(0x0, &(0x7f00000000c0)={<r2=>0x0, <r3=>0x0})
ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000140)=@userptr={0x9, 0x3, 0x4, 0x0, 0x7, {r2, r3/1000+60000}, {0x2, 0x2, 0x2, 0xff, 0xc1, 0x3, "4a9929fc"}, 0x6, 0x2, {&(0x7f0000000100)}, 0x8})

00:36:13 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x0, @pix_mp={0x9, 0x5, 0x47504a50, 0x8, 0x4, [{0x4, 0x2}, {0x0, 0xff}, {0x57, 0x8}, {0x8, 0x3}, {0x6, 0x3ff}, {0x8, 0x1}, {0x8, 0x4}, {0x6, 0x51ec}], 0x4, 0x6, 0x2, 0x0, 0x5}})

00:36:13 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x400000000005, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0xb78, 0x2)
clock_gettime(0x0, &(0x7f00000000c0)) (async)
clock_gettime(0x0, &(0x7f00000000c0)={<r2=>0x0, <r3=>0x0})
ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000140)=@userptr={0x9, 0x3, 0x4, 0x0, 0x7, {r2, r3/1000+60000}, {0x2, 0x2, 0x2, 0xff, 0xc1, 0x3, "4a9929fc"}, 0x6, 0x2, {&(0x7f0000000100)}, 0x8})

00:36:13 executing program 3:
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x1, @sliced={0x9, [0x9, 0x1f, 0x2, 0x4, 0x4, 0xfe01, 0x8, 0x4, 0x9, 0x4, 0x800, 0x5, 0x1, 0x38b, 0x52, 0x9, 0x6, 0x3f, 0xffff, 0x0, 0x80, 0x8, 0x7f, 0x785, 0x10, 0x9ac, 0x512, 0x7f, 0x57f6, 0x9, 0x7f, 0x3, 0x6, 0x9, 0x61, 0x4, 0x9, 0x27ea, 0x9, 0x1, 0x1, 0x2b, 0x3b33, 0x7ff, 0x7ff, 0x3800, 0x1, 0x2], 0x1}})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async, rerun: 64)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (rerun: 64)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x4})

00:36:13 executing program 1:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0)
symlinkat(&(0x7f0000000180)='./file0\x00', r0, &(0x7f00000001c0)='./file0\x00')
r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.log\x00', 0xc4001, 0xf)
ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000080)={0x2, 0x3, 0x6, 0x10000})
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0xffffffff, 0x4, 0x1, "d4af9e9bf2ff0aceffbae684bf625ffc390d8b2c5364572d5c4bdde630f55226", 0x38415262})
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2)

00:36:13 executing program 4:
getpgid(0xffffffffffffffff) (async)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "784000ea5f711a254173e2109d5ee4e4b655816b5bed00", 0x30383653})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f00000000c0)={&(0x7f0000ffb000/0x4000)=nil, 0x10001, 0x0, 0x90})

00:36:13 executing program 0:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0)
sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:13 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x0, @pix_mp={0x9, 0x5, 0x47504a50, 0x8, 0x4, [{0x4, 0x2}, {0x0, 0xff}, {0x57, 0x8}, {0x8, 0x3}, {0x6, 0x3ff}, {0x8, 0x1}, {0x8, 0x4}, {0x6, 0x51ec}], 0x4, 0x6, 0x2, 0x0, 0x5}})

00:36:13 executing program 4:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x800, 0x0, <r0=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0x1, 0xf48b})

00:36:13 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x400000000005, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0xb78, 0x2) (async)
clock_gettime(0x0, &(0x7f00000000c0)={<r2=>0x0, <r3=>0x0})
ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000140)=@userptr={0x9, 0x3, 0x4, 0x0, 0x7, {r2, r3/1000+60000}, {0x2, 0x2, 0x2, 0xff, 0xc1, 0x3, "4a9929fc"}, 0x6, 0x2, {&(0x7f0000000100)}, 0x8})

00:36:13 executing program 1:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0) (async)
symlinkat(&(0x7f0000000180)='./file0\x00', r0, &(0x7f00000001c0)='./file0\x00')
r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}}) (async)
r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.log\x00', 0xc4001, 0xf)
ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000080)={0x2, 0x3, 0x6, 0x10000}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0xffffffff, 0x4, 0x1, "d4af9e9bf2ff0aceffbae684bf625ffc390d8b2c5364572d5c4bdde630f55226", 0x38415262}) (async)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2)

00:36:13 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0xfffffffa, 0x2, 0x3, "316c02dac8c4f596e907451b4203bfdd839bf79f1846a38e9532dcec80a6bff9", 0x34324142})
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x8, 0x20})

00:36:13 executing program 0:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0)
sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:13 executing program 3:
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x1, @sliced={0x9, [0x9, 0x1f, 0x2, 0x4, 0x4, 0xfe01, 0x8, 0x4, 0x9, 0x4, 0x800, 0x5, 0x1, 0x38b, 0x52, 0x9, 0x6, 0x3f, 0xffff, 0x0, 0x80, 0x8, 0x7f, 0x785, 0x10, 0x9ac, 0x512, 0x7f, 0x57f6, 0x9, 0x7f, 0x3, 0x6, 0x9, 0x61, 0x4, 0x9, 0x27ea, 0x9, 0x1, 0x1, 0x2b, 0x3b33, 0x7ff, 0x7ff, 0x3800, 0x1, 0x2], 0x1}})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x4})

00:36:13 executing program 4:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x800, 0x0, <r0=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0x1, 0xf48b})

00:36:13 executing program 1:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0)
symlinkat(&(0x7f0000000180)='./file0\x00', r0, &(0x7f00000001c0)='./file0\x00')
r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.log\x00', 0xc4001, 0xf)
ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000080)={0x2, 0x3, 0x6, 0x10000})
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0xffffffff, 0x4, 0x1, "d4af9e9bf2ff0aceffbae684bf625ffc390d8b2c5364572d5c4bdde630f55226", 0x38415262})
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0) (async)
symlinkat(&(0x7f0000000180)='./file0\x00', r0, &(0x7f00000001c0)='./file0\x00') (async)
syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}}) (async)
openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.log\x00', 0xc4001, 0xf) (async)
ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000080)={0x2, 0x3, 0x6, 0x10000}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0xffffffff, 0x4, 0x1, "d4af9e9bf2ff0aceffbae684bf625ffc390d8b2c5364572d5c4bdde630f55226", 0x38415262}) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async)
ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) (async)

00:36:13 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x1, 0x3, 0x1, "22922ed7368c815b1dc07b16a2ae0c354a1be68c8eaa9c6b032e75e7b6610d5b", 0x34565559})

00:36:13 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, 0x0, 0x40010)

00:36:13 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0xfffffffa, 0x2, 0x3, "316c02dac8c4f596e907451b4203bfdd839bf79f1846a38e9532dcec80a6bff9", 0x34324142})
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x8, 0x20})
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0xfffffffa, 0x2, 0x3, "316c02dac8c4f596e907451b4203bfdd839bf79f1846a38e9532dcec80a6bff9", 0x34324142}) (async)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x8, 0x20}) (async)

00:36:13 executing program 3:
syz_open_dev$vim2m(&(0x7f0000000040), 0x2020080000000002, 0x2)

00:36:13 executing program 4:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x800, 0x0, <r0=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0x1, 0xf48b})

00:36:13 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x1, 0x3, 0x1, "22922ed7368c815b1dc07b16a2ae0c354a1be68c8eaa9c6b032e75e7b6610d5b", 0x34565559})

00:36:13 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x9, 0x7257e298af98e4cc, 0x2, @stepwise={0xf3c, 0x40010, 0x7, 0xffff, 0x0, 0xd93f}})
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x3, @pix={0x7f, 0xfffffc00, 0x38414262, 0x7, 0x2, 0xfb, 0xc, 0x9, 0x0, 0x8, 0x2, 0x5}})

00:36:13 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, 0x0, 0x40010)

00:36:13 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0xfffffffa, 0x2, 0x3, "316c02dac8c4f596e907451b4203bfdd839bf79f1846a38e9532dcec80a6bff9", 0x34324142})
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x8, 0x20})

00:36:13 executing program 3:
syz_open_dev$vim2m(&(0x7f0000000040), 0x2020080000000002, 0x2)

00:36:13 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000100))
r2 = openat$incfs(r1, &(0x7f0000000080)='.log\x00', 0x121080, 0x80)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000140)={0x4})
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000000c0)={0x0, 0x2, 0x1, "7e4564576763c4812eb791a6219687d21e1828372b13ccd239835b338f1788ad", 0x30314442})

00:36:13 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x1, 0x3, 0x1, "22922ed7368c815b1dc07b16a2ae0c354a1be68c8eaa9c6b032e75e7b6610d5b", 0x34565559})

00:36:13 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, 0x0, 0x40010)

00:36:13 executing program 3:
syz_open_dev$vim2m(&(0x7f0000000040), 0x2020080000000002, 0x2)

00:36:13 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x2, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:14 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x9, 0x7257e298af98e4cc, 0x2, @stepwise={0xf3c, 0x40010, 0x7, 0xffff, 0x0, 0xd93f}}) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x3, @pix={0x7f, 0xfffffc00, 0x38414262, 0x7, 0x2, 0xfb, 0xc, 0x9, 0x0, 0x8, 0x2, 0x5}})

00:36:14 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000100))
r2 = openat$incfs(r1, &(0x7f0000000080)='.log\x00', 0x121080, 0x80)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000140)={0x4})
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000000c0)={0x0, 0x2, 0x1, "7e4564576763c4812eb791a6219687d21e1828372b13ccd239835b338f1788ad", 0x30314442})
syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000100)) (async)
openat$incfs(r1, &(0x7f0000000080)='.log\x00', 0x121080, 0x80) (async)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000140)={0x4}) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000000c0)={0x0, 0x2, 0x1, "7e4564576763c4812eb791a6219687d21e1828372b13ccd239835b338f1788ad", 0x30314442}) (async)

00:36:14 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x2, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:14 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:14 executing program 3:
r0 = shmget(0x1, 0x1000, 0x200, &(0x7f0000ffd000/0x1000)=nil)
r1 = shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffa000/0x2000)=nil)
shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000180)=""/47)
shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x4000)
shmctl$SHM_UNLOCK(r0, 0xc)
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88e85f711a254173c70389c0a0e4b65581ddb84a0b9cd926dbe16f6b5bed"})

00:36:14 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x9, 0x7257e298af98e4cc, 0x2, @stepwise={0xf3c, 0x40010, 0x7, 0xffff, 0x0, 0xd93f}})
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x3, @pix={0x7f, 0xfffffc00, 0x38414262, 0x7, 0x2, 0xfb, 0xc, 0x9, 0x0, 0x8, 0x2, 0x5}}) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x3, @pix={0x7f, 0xfffffc00, 0x38414262, 0x7, 0x2, 0xfb, 0xc, 0x9, 0x0, 0x8, 0x2, 0x5}})

00:36:14 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x2, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x2, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:14 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:14 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000100)) (async)
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000100))
r2 = openat$incfs(r1, &(0x7f0000000080)='.log\x00', 0x121080, 0x80)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000140)={0x4}) (async)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000140)={0x4})
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000000c0)={0x0, 0x2, 0x1, "7e4564576763c4812eb791a6219687d21e1828372b13ccd239835b338f1788ad", 0x30314442}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000000c0)={0x0, 0x2, 0x1, "7e4564576763c4812eb791a6219687d21e1828372b13ccd239835b338f1788ad", 0x30314442})

00:36:14 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8000000000000000, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000340)={0x2, @pix_mp={0x0, 0x1, 0x38415261, 0x2, 0xb, [{0x2, 0x3f}, {0x0, 0x6}, {0x7, 0x144}, {0x81, 0xb6}, {0x1, 0x7}, {0x200, 0x9}, {0x40, 0x101}, {0x101, 0x40}], 0x81, 0x3f, 0x2, 0x0, 0x4}})
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f0000000500)={0x2, &(0x7f0000000180)=""/48, &(0x7f0000000200)=[{0x8c, 0xe, 0x4, &(0x7f00000001c0)=""/14}, {0x7, 0x82, 0x8e8, &(0x7f0000000440)=""/130}]})
ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x1, 0x32435750, [], [0x9], 0x1}})
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x2, @pix={0x23ae687e, 0x200, 0x31303453, 0x4, 0x1000, 0x4, 0x1, 0x3f, 0x1, 0x8, 0x1, 0x5}})

00:36:14 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x0)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan4\x00', <r5=>0x0})
sendmsg$NL802154_CMD_SET_LBT_MODE(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x44001}, 0x44000)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r6=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000083c29f8c1c7074d5524b", @ANYRES32=r6, @ANYBLOB='\f'], 0x28}}, 0x0)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x80, r1, 0x20, 0x70bd28, 0x27dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x5c, 0x29, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x894}, 0x20000000)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205647, &(0x7f0000000040)={0x4, 0x1, 0x0, "69eb88ea5f711a254173050389c0a0e4b65781ddb8a6c39cd926dbe16f6b5bed", 0x3132564e})

00:36:14 executing program 3:
r0 = shmget(0x1, 0x1000, 0x200, &(0x7f0000ffd000/0x1000)=nil)
r1 = shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffa000/0x2000)=nil)
shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000180)=""/47) (async)
shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x4000) (async)
shmctl$SHM_UNLOCK(r0, 0xc)
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88e85f711a254173c70389c0a0e4b65581ddb84a0b9cd926dbe16f6b5bed"})

00:36:14 executing program 5:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000100))
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0xed45, 0x2)
ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f00000000c0)=0x1)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:14 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:14 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)=@multiplanar_fd={0x2, 0x2, 0x4, 0x40, 0x3, {0x0, 0xea60}, {0x0, 0x3, 0x5, 0x6, 0x3, 0x1, "86c8e057"}, 0xffffffe0, 0x4, {&(0x7f0000000080)=[{0x40, 0x5, {}, 0x8e2}, {0x7fff, 0x2, {}, 0x7}]}, 0x3, 0x0, r1})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x4, 0x2, 0x1, "699f0a00000000000005000000000000005581ddb8a6c36d2b26dbe16f6b5bed", 0x34325842})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, <r2=>0xffffffffffffffff})
setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000240), 0x4)

00:36:14 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8000000000000000, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000340)={0x2, @pix_mp={0x0, 0x1, 0x38415261, 0x2, 0xb, [{0x2, 0x3f}, {0x0, 0x6}, {0x7, 0x144}, {0x81, 0xb6}, {0x1, 0x7}, {0x200, 0x9}, {0x40, 0x101}, {0x101, 0x40}], 0x81, 0x3f, 0x2, 0x0, 0x4}})
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async, rerun: 64)
ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f0000000500)={0x2, &(0x7f0000000180)=""/48, &(0x7f0000000200)=[{0x8c, 0xe, 0x4, &(0x7f00000001c0)=""/14}, {0x7, 0x82, 0x8e8, &(0x7f0000000440)=""/130}]}) (async, rerun: 64)
ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x1, 0x32435750, [], [0x9], 0x1}}) (async, rerun: 32)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x2, @pix={0x23ae687e, 0x200, 0x31303453, 0x4, 0x1000, 0x4, 0x1, 0x3f, 0x1, 0x8, 0x1, 0x5}}) (rerun: 32)

00:36:14 executing program 3:
r0 = shmget(0x1, 0x1000, 0x200, &(0x7f0000ffd000/0x1000)=nil)
r1 = shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffa000/0x2000)=nil)
shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000180)=""/47)
shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x4000)
shmctl$SHM_UNLOCK(r0, 0xc)
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88e85f711a254173c70389c0a0e4b65581ddb84a0b9cd926dbe16f6b5bed"})
shmget(0x1, 0x1000, 0x200, &(0x7f0000ffd000/0x1000)=nil) (async)
shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffa000/0x2000)=nil) (async)
shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000180)=""/47) (async)
shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x4000) (async)
shmctl$SHM_UNLOCK(r0, 0xc) (async)
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88e85f711a254173c70389c0a0e4b65581ddb84a0b9cd926dbe16f6b5bed"}) (async)

00:36:14 executing program 5:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000100)) (async)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0xed45, 0x2)
ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f00000000c0)=0x1) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:14 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:14 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)=@multiplanar_fd={0x2, 0x2, 0x4, 0x40, 0x3, {0x0, 0xea60}, {0x0, 0x3, 0x5, 0x6, 0x3, 0x1, "86c8e057"}, 0xffffffe0, 0x4, {&(0x7f0000000080)=[{0x40, 0x5, {}, 0x8e2}, {0x7fff, 0x2, {}, 0x7}]}, 0x3, 0x0, r1})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x4, 0x2, 0x1, "699f0a00000000000005000000000000005581ddb8a6c36d2b26dbe16f6b5bed", 0x34325842}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, <r2=>0xffffffffffffffff})
setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000240), 0x4)

00:36:14 executing program 5:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000100))
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0xed45, 0x2)
ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f00000000c0)=0x1)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:14 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:14 executing program 2:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) (async)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan4\x00', <r5=>0x0})
sendmsg$NL802154_CMD_SET_LBT_MODE(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x44001}, 0x44000)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r6=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000083c29f8c1c7074d5524b", @ANYRES32=r6, @ANYBLOB='\f'], 0x28}}, 0x0)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x80, r1, 0x20, 0x70bd28, 0x27dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x5c, 0x29, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x894}, 0x20000000) (async)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x80, r1, 0x20, 0x70bd28, 0x27dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x5c, 0x29, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x894}, 0x20000000)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205647, &(0x7f0000000040)={0x4, 0x1, 0x0, "69eb88ea5f711a254173050389c0a0e4b65781ddb8a6c39cd926dbe16f6b5bed", 0x3132564e})

00:36:14 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8000000000000000, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000340)={0x2, @pix_mp={0x0, 0x1, 0x38415261, 0x2, 0xb, [{0x2, 0x3f}, {0x0, 0x6}, {0x7, 0x144}, {0x81, 0xb6}, {0x1, 0x7}, {0x200, 0x9}, {0x40, 0x101}, {0x101, 0x40}], 0x81, 0x3f, 0x2, 0x0, 0x4}})
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f0000000500)={0x2, &(0x7f0000000180)=""/48, &(0x7f0000000200)=[{0x8c, 0xe, 0x4, &(0x7f00000001c0)=""/14}, {0x7, 0x82, 0x8e8, &(0x7f0000000440)=""/130}]}) (async)
ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f0000000500)={0x2, &(0x7f0000000180)=""/48, &(0x7f0000000200)=[{0x8c, 0xe, 0x4, &(0x7f00000001c0)=""/14}, {0x7, 0x82, 0x8e8, &(0x7f0000000440)=""/130}]})
ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x1, 0x32435750, [], [0x9], 0x1}})
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x2, @pix={0x23ae687e, 0x200, 0x31303453, 0x4, 0x1000, 0x4, 0x1, 0x3f, 0x1, 0x8, 0x1, 0x5}}) (async)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x2, @pix={0x23ae687e, 0x200, 0x31303453, 0x4, 0x1000, 0x4, 0x1, 0x3f, 0x1, 0x8, 0x1, 0x5}})

00:36:14 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)=@multiplanar_fd={0x2, 0x2, 0x4, 0x40, 0x3, {0x0, 0xea60}, {0x0, 0x3, 0x5, 0x6, 0x3, 0x1, "86c8e057"}, 0xffffffe0, 0x4, {&(0x7f0000000080)=[{0x40, 0x5, {}, 0x8e2}, {0x7fff, 0x2, {}, 0x7}]}, 0x3, 0x0, r1}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x4, 0x2, 0x1, "699f0a00000000000005000000000000005581ddb8a6c36d2b26dbe16f6b5bed", 0x34325842}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, <r2=>0xffffffffffffffff})
setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000240), 0x4)

00:36:14 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0x0, 0x81})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x3, 0x10001, 0x1, 0x9, 0x8d9, r1, 0xd24e, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:14 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:14 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000200)={0x7, 0x3831354f, 0x2, @discrete={0x1, 0x5}})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000240)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
getgid()
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={<r2=>0xffffffffffffffff}, 0x13f, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f00000001c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), r2}}, 0x18)

00:36:14 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0x0, 0x81})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x3, 0x10001, 0x1, 0x9, 0x8d9, r1, 0xd24e, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0x0, 0x81}) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x3, 0x10001, 0x1, 0x9, 0x8d9, r1, 0xd24e, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)

00:36:14 executing program 1:
sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40e410}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0xff}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x4}, @IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000001}, 0x24004010)
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x100000101000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
unlinkat(r1, &(0x7f0000000080)='./file0\x00', 0x200)

00:36:14 executing program 4:
syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={<r1=>0x0, 0x1, r0})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f00000000c0)={r1})
ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x14, 0x2, 0x1, "69eb88ea5f711a254173c70389c0a0e4a6c39cd926dbe16f6b5bed00", 0x3147504d})

00:36:14 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:14 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000200)={0x7, 0x3831354f, 0x2, @discrete={0x1, 0x5}})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000240)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
getgid()
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={<r2=>0xffffffffffffffff}, 0x13f, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f00000001c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), r2}}, 0x18)
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000200)={0x7, 0x3831354f, 0x2, @discrete={0x1, 0x5}}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000240)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
getgid() (async)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140), 0x13f, 0x2}}, 0x20) (async)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f00000001c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), r2}}, 0x18) (async)

00:36:14 executing program 1:
sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40e410}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0xff}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x4}, @IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000001}, 0x24004010)
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x100000101000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
unlinkat(r1, &(0x7f0000000080)='./file0\x00', 0x200)
sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40e410}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0xff}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x4}, @IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000001}, 0x24004010) (async)
syz_open_dev$vim2m(&(0x7f0000000100), 0x100000101000, 0x2) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}}) (async)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x2) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
unlinkat(r1, &(0x7f0000000080)='./file0\x00', 0x200) (async)

00:36:14 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x0)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan4\x00', <r5=>0x0})
sendmsg$NL802154_CMD_SET_LBT_MODE(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x44001}, 0x44000)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r6=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000083c29f8c1c7074d5524b", @ANYRES32=r6, @ANYBLOB='\f'], 0x28}}, 0x0)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x80, r1, 0x20, 0x70bd28, 0x27dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x5c, 0x29, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x894}, 0x20000000)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205647, &(0x7f0000000040)={0x4, 0x1, 0x0, "69eb88ea5f711a254173050389c0a0e4b65781ddb8a6c39cd926dbe16f6b5bed", 0x3132564e})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async)
sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x0) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan4\x00'}) (async)
sendmsg$NL802154_CMD_SET_LBT_MODE(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x44001}, 0x44000) (async)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) (async)
sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000083c29f8c1c7074d5524b", @ANYRES32=r6, @ANYBLOB='\f'], 0x28}}, 0x0) (async)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x80, r1, 0x20, 0x70bd28, 0x27dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x5c, 0x29, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x894}, 0x20000000) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205647, &(0x7f0000000040)={0x4, 0x1, 0x0, "69eb88ea5f711a254173050389c0a0e4b65781ddb8a6c39cd926dbe16f6b5bed", 0x3132564e}) (async)

00:36:14 executing program 4:
syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0) (async, rerun: 64)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={<r1=>0x0, 0x1, r0}) (rerun: 64)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f00000000c0)={r1}) (async)
ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x14, 0x2, 0x1, "69eb88ea5f711a254173c70389c0a0e4a6c39cd926dbe16f6b5bed00", 0x3147504d})

00:36:14 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0x0, 0x81}) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x3, 0x10001, 0x1, 0x9, 0x8d9, r1, 0xd24e, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:14 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:14 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000200)={0x7, 0x3831354f, 0x2, @discrete={0x1, 0x5}})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000240)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
getgid()
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={<r2=>0xffffffffffffffff}, 0x13f, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f00000001c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), r2}}, 0x18)
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000200)={0x7, 0x3831354f, 0x2, @discrete={0x1, 0x5}}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000240)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
getgid() (async)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140), 0x13f, 0x2}}, 0x20) (async)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f00000001c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), r2}}, 0x18) (async)

00:36:14 executing program 1:
sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40e410}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0xff}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x4}, @IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000001}, 0x24004010) (async)
sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40e410}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0xff}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x4}, @IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000001}, 0x24004010)
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x100000101000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x2) (async)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
unlinkat(r1, &(0x7f0000000080)='./file0\x00', 0x200)

00:36:14 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:14 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0x10, &(0x7f00000000c0)={&(0x7f0000000180)=@can={{0x4, 0x0, 0x1}, 0x2, 0x3, 0x0, 0x0, "8129b4f69eb800"}, 0x10}, 0x1, 0x0, 0x0, 0x40080f1}, 0x20000810)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
setsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000200)=0x1, 0x4)
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000240)=0x1)

00:36:14 executing program 4:
syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2) (async)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={<r1=>0x0, 0x1, r0})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f00000000c0)={r1}) (async)
ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x14, 0x2, 0x1, "69eb88ea5f711a254173c70389c0a0e4a6c39cd926dbe16f6b5bed00", 0x3147504d})

00:36:14 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
sync()
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})

00:36:14 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x0, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:14 executing program 5:
r0 = syz_clone(0x820000, &(0x7f0000000080)="b3f80d6ea1d50b2158779c8688aed0043214258371354b682d09961bc60c0d924f27470be4f712d80a8261a65c28901a82344be17caaa8a65cb61a3f6ba7ed8e369a766147f119101973985e2938429ff04962f6c63ab44dd3504f7cf36913b76c057b841a93f92fb2ba71596fdfcedb3af9630b9d2835af8a16913603937e5faa286ca69053f2cc549719bfd638d2f69e13cb16597751f9fb093c065f3b0a17397d3a76c7d2c436ba22b605d4a5d2fbe38dabcfe6a5f66b650c9e25df16ad3b14c80ed44f38e79a10c4ce7dea3774c9d01a", 0xd2, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="a2acb74dcab2f0841df6377b9de598bb376098cb6b03f082e16e0adc01a8d07fa0c6433b3a6a42ab7252176d54b094b51262233ba9bfd968ccef84fa9dac154384ca2d5b6dbc7c519d5047939704b836c0a2b60b04225e645773dec1a4c327f676")
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000280)={0x9, 0x8001, {r0}, {<r2=>0xffffffffffffffff}, 0x3, 0x6001})
r3 = getpgid(r0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_create(0x4, &(0x7f0000000480)={0x0, 0x3b, 0x4, @tid=0xffffffffffffffff}, &(0x7f00000004c0))
ptrace$cont(0xffffffffffffffff, r3, 0x0, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x800, 0x0, <r5=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000400)=@userptr={0x3, 0x2, 0x4, 0x20, 0xd7, {0x77359400}, {0x5, 0x8, 0x8, 0x0, 0x3, 0x80, "d6139576"}, 0x3, 0x2, {&(0x7f0000000340)}, 0x4080000, 0x0, r5})
shmctl$IPC_SET(0x0, 0x1, &(0x7f00000002c0)={{0x2, 0xee01, 0xffffffffffffffff, r2, 0xee01, 0x3, 0x6}, 0x1f, 0x5, 0xec0, 0x5, r3, r4, 0x3})

00:36:14 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3f, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x44495658})

00:36:14 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0x10, &(0x7f00000000c0)={&(0x7f0000000180)=@can={{0x4, 0x0, 0x1}, 0x2, 0x3, 0x0, 0x0, "8129b4f69eb800"}, 0x10}, 0x1, 0x0, 0x0, 0x40080f1}, 0x20000810) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async, rerun: 32)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (rerun: 32)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
setsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000200)=0x1, 0x4) (async)
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000240)=0x1)

00:36:14 executing program 1:
syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2) (async)
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
sync()
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})

00:36:14 executing program 4:
syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000900000008000100000000000c00060002000000020000007bbdd094887293770ca90c2861d92f5058a3db2eaefd1abccedd0083"], 0x28}}, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x5, 0x3, 0x3, 0x3})

00:36:14 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x0, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:14 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3f, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x44495658})

00:36:14 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
sync() (async, rerun: 64)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}}) (rerun: 64)

00:36:14 executing program 4:
syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) (async)
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000900000008000100000000000c00060002000000020000007bbdd094887293770ca90c2861d92f5058a3db2eaefd1abccedd0083"], 0x28}}, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x5, 0x3, 0x3, 0x3})

00:36:14 executing program 5:
r0 = syz_clone(0x820000, &(0x7f0000000080)="b3f80d6ea1d50b2158779c8688aed0043214258371354b682d09961bc60c0d924f27470be4f712d80a8261a65c28901a82344be17caaa8a65cb61a3f6ba7ed8e369a766147f119101973985e2938429ff04962f6c63ab44dd3504f7cf36913b76c057b841a93f92fb2ba71596fdfcedb3af9630b9d2835af8a16913603937e5faa286ca69053f2cc549719bfd638d2f69e13cb16597751f9fb093c065f3b0a17397d3a76c7d2c436ba22b605d4a5d2fbe38dabcfe6a5f66b650c9e25df16ad3b14c80ed44f38e79a10c4ce7dea3774c9d01a", 0xd2, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="a2acb74dcab2f0841df6377b9de598bb376098cb6b03f082e16e0adc01a8d07fa0c6433b3a6a42ab7252176d54b094b51262233ba9bfd968ccef84fa9dac154384ca2d5b6dbc7c519d5047939704b836c0a2b60b04225e645773dec1a4c327f676") (async)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000280)={0x9, 0x8001, {r0}, {<r2=>0xffffffffffffffff}, 0x3, 0x6001})
r3 = getpgid(r0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
timer_create(0x4, &(0x7f0000000480)={0x0, 0x3b, 0x4, @tid=0xffffffffffffffff}, &(0x7f00000004c0)) (async)
ptrace$cont(0xffffffffffffffff, r3, 0x0, 0x4) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x800, 0x0, <r5=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000400)=@userptr={0x3, 0x2, 0x4, 0x20, 0xd7, {0x77359400}, {0x5, 0x8, 0x8, 0x0, 0x3, 0x80, "d6139576"}, 0x3, 0x2, {&(0x7f0000000340)}, 0x4080000, 0x0, r5}) (async)
shmctl$IPC_SET(0x0, 0x1, &(0x7f00000002c0)={{0x2, 0xee01, 0xffffffffffffffff, r2, 0xee01, 0x3, 0x6}, 0x1f, 0x5, 0xec0, 0x5, r3, r4, 0x3})

00:36:14 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3f, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x44495658})

00:36:14 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0x10, &(0x7f00000000c0)={&(0x7f0000000180)=@can={{0x4, 0x0, 0x1}, 0x2, 0x3, 0x0, 0x0, "8129b4f69eb800"}, 0x10}, 0x1, 0x0, 0x0, 0x40080f1}, 0x20000810)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
setsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000200)=0x1, 0x4)
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000240)=0x1)
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0x10, &(0x7f00000000c0)={&(0x7f0000000180)=@can={{0x4, 0x0, 0x1}, 0x2, 0x3, 0x0, 0x0, "8129b4f69eb800"}, 0x10}, 0x1, 0x0, 0x0, 0x40080f1}, 0x20000810) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0) (async)
setsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000200)=0x1, 0x4) (async)
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000240)=0x1) (async)

00:36:14 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x0, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:14 executing program 4:
syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000900000008000100000000000c00060002000000020000007bbdd094887293770ca90c2861d92f5058a3db2eaefd1abccedd0083"], 0x28}}, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x5, 0x3, 0x3, 0x3})

00:36:14 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x9, 0x2, 0x0, "b9a5c7f076b661d7f1901cb4466d2e8edfd24737cf73a2c243b7521339aecd98", 0x20363059})

00:36:15 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, r2, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:15 executing program 3:
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000300)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6, 0x1, 0x9})
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:15 executing program 5:
r0 = syz_clone(0x820000, &(0x7f0000000080)="b3f80d6ea1d50b2158779c8688aed0043214258371354b682d09961bc60c0d924f27470be4f712d80a8261a65c28901a82344be17caaa8a65cb61a3f6ba7ed8e369a766147f119101973985e2938429ff04962f6c63ab44dd3504f7cf36913b76c057b841a93f92fb2ba71596fdfcedb3af9630b9d2835af8a16913603937e5faa286ca69053f2cc549719bfd638d2f69e13cb16597751f9fb093c065f3b0a17397d3a76c7d2c436ba22b605d4a5d2fbe38dabcfe6a5f66b650c9e25df16ad3b14c80ed44f38e79a10c4ce7dea3774c9d01a", 0xd2, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="a2acb74dcab2f0841df6377b9de598bb376098cb6b03f082e16e0adc01a8d07fa0c6433b3a6a42ab7252176d54b094b51262233ba9bfd968ccef84fa9dac154384ca2d5b6dbc7c519d5047939704b836c0a2b60b04225e645773dec1a4c327f676") (async)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async, rerun: 64)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000280)={0x9, 0x8001, {r0}, {<r2=>0xffffffffffffffff}, 0x3, 0x6001}) (rerun: 64)
r3 = getpgid(r0) (async)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
timer_create(0x4, &(0x7f0000000480)={0x0, 0x3b, 0x4, @tid=0xffffffffffffffff}, &(0x7f00000004c0))
ptrace$cont(0xffffffffffffffff, r3, 0x0, 0x4) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x800, 0x0, <r5=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000400)=@userptr={0x3, 0x2, 0x4, 0x20, 0xd7, {0x77359400}, {0x5, 0x8, 0x8, 0x0, 0x3, 0x80, "d6139576"}, 0x3, 0x2, {&(0x7f0000000340)}, 0x4080000, 0x0, r5}) (async)
shmctl$IPC_SET(0x0, 0x1, &(0x7f00000002c0)={{0x2, 0xee01, 0xffffffffffffffff, r2, 0xee01, 0x3, 0x6}, 0x1f, 0x5, 0xec0, 0x5, r3, r4, 0x3})

00:36:15 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x9, 0x2, 0x0, "b9a5c7f076b661d7f1901cb4466d2e8edfd24737cf73a2c243b7521339aecd98", 0x20363059})
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x9, 0x2, 0x0, "b9a5c7f076b661d7f1901cb4466d2e8edfd24737cf73a2c243b7521339aecd98", 0x20363059}) (async)

00:36:15 executing program 3:
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000300)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6, 0x1, 0x9}) (async, rerun: 32)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (rerun: 32)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:15 executing program 4:
syz_open_dev$vim2m(&(0x7f0000000080), 0x401, 0x2)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x37, 0xffffffff, 0x200, 0x0, r0, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1}, 0x48)
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x1)
r1 = syz_open_dev$vim2m(&(0x7f0000000300), 0x694, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000340)={0x2, 0x3, 0x4, 0x0, 0xfc})
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000440), 0x5, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x3, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x34324d59})
ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000200)={0x3, @win={{0x7fff, 0x10001, 0xfd2a, 0x3}, 0x2, 0x5, &(0x7f0000000140)={{0x2, 0x7ff, 0x4, 0x10000}, &(0x7f0000000100)={{0x10001, 0x8, 0x9, 0x3}, &(0x7f00000000c0)={{0x800, 0x4, 0x8, 0x8}}}}, 0x8, &(0x7f0000000180)="0ce9e37531724020e1a546d71e449b2e2496f14858619803e264925d2e48a98ebebfc86e34408370234de3558bbead799f05383abaf6d4d2651ab734e839bbd069e1f961f109faba01915b46b51d953f3af59365c63f737c508e5bdde170bd4d12a817abd3694937b7cbd990a7d50190c186ce9d5896", 0xbc}})

00:36:15 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, r2, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:15 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x9, 0x2, 0x0, "b9a5c7f076b661d7f1901cb4466d2e8edfd24737cf73a2c243b7521339aecd98", 0x20363059})

00:36:15 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x2, @raw_data="d1b14f28b38510b4a0c7fe76345994e0d8f29916787e1a736b87f84ea25ed6a2af04f47c97339bfe6a423a839c9e196408c272a00265f17ec5bf2adb9e2c3b771742f9ba35e5579b89f75ca8d75071a396fd1b9bf9230d99d170486e4f9e5d27a7ae318baad2a65115b959dc2e026354986bc7933037fe892a3ee077c1eeb4f1f64a9a7a111658375c04887894efc87b5d0d7520bc4b48e91318011c13fe4bdba7ac014feee17bcfedcf45cb1a25cefab1c6baaf74e9bc9f17471b39072c8ea8325349a3f7bf6303"})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:15 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000340)={0x8000, 0xc6f9, 0x1, {0x0, @win={{0x20, 0x5, 0x7, 0x1734}, 0x8, 0x9, &(0x7f0000000080)={{0x7ff, 0x58f, 0x5, 0x4}, &(0x7f0000000040)={{0x0, 0x1ff, 0x6, 0xbfd3}, &(0x7f0000000000)={{0x359c, 0x6, 0x7f, 0x1ff}}}}, 0x8001, &(0x7f0000000140)="72253f906a46b0b3754528f3a0a466dfc614c08ffbf6d25c8f29db675a26b1ada476e707e5b994a4135981aa921862c187ea1307dcf2ce64ff99ea37358b207f1668e597b84c0f9d6ed6598f4e6e4d1d5369147b44aca1e03390506b918c8dfb43dd2cc0e9e1082143c9e3aa2836f4a70f510a48bb1838033709eb61f8f970baaad7c234f9661625e3bf0bfb83a065d8ce316ee61393fc0e48d9cf6294e1e30472b068bec6946631df10d1f48dbbc4399961d52a6f3ab41a11e4d2edd01322a96a2c2d693ab60934d560b70b5dd28875fd0036a62a18ee68ffd0", 0x13}}, 0xb48f})
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_MODE_SETGAMMA(r2, 0xc02064a5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f00000000c0)=[0xfc00, 0xa7, 0x4, 0x3], &(0x7f0000000440)=[0x3ff, 0xfff, 0xb924, 0x401, 0x401, 0x38, 0x5, 0x8001, 0x9, 0x8], &(0x7f0000000480)=[0x3, 0x4000, 0x1ff, 0x8]})
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000500)={0x1, 0x1, 0x4, 0x90080})
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})

00:36:15 executing program 4:
syz_open_dev$vim2m(&(0x7f0000000080), 0x401, 0x2)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x37, 0xffffffff, 0x200, 0x0, r0, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1}, 0x48)
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x1)
r1 = syz_open_dev$vim2m(&(0x7f0000000300), 0x694, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000340)={0x2, 0x3, 0x4, 0x0, 0xfc})
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000440), 0x5, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x3, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x34324d59})
ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000200)={0x3, @win={{0x7fff, 0x10001, 0xfd2a, 0x3}, 0x2, 0x5, &(0x7f0000000140)={{0x2, 0x7ff, 0x4, 0x10000}, &(0x7f0000000100)={{0x10001, 0x8, 0x9, 0x3}, &(0x7f00000000c0)={{0x800, 0x4, 0x8, 0x8}}}}, 0x8, &(0x7f0000000180)="0ce9e37531724020e1a546d71e449b2e2496f14858619803e264925d2e48a98ebebfc86e34408370234de3558bbead799f05383abaf6d4d2651ab734e839bbd069e1f961f109faba01915b46b51d953f3af59365c63f737c508e5bdde170bd4d12a817abd3694937b7cbd990a7d50190c186ce9d5896", 0xbc}})
syz_open_dev$vim2m(&(0x7f0000000080), 0x401, 0x2) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x37, 0xffffffff, 0x200, 0x0, r0, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1}, 0x48) (async)
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x1) (async)
syz_open_dev$vim2m(&(0x7f0000000300), 0x694, 0x2) (async)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000340)={0x2, 0x3, 0x4, 0x0, 0xfc}) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0) (async)
syz_open_dev$vim2m(&(0x7f0000000440), 0x5, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x3, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x34324d59}) (async)
ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000200)={0x3, @win={{0x7fff, 0x10001, 0xfd2a, 0x3}, 0x2, 0x5, &(0x7f0000000140)={{0x2, 0x7ff, 0x4, 0x10000}, &(0x7f0000000100)={{0x10001, 0x8, 0x9, 0x3}, &(0x7f00000000c0)={{0x800, 0x4, 0x8, 0x8}}}}, 0x8, &(0x7f0000000180)="0ce9e37531724020e1a546d71e449b2e2496f14858619803e264925d2e48a98ebebfc86e34408370234de3558bbead799f05383abaf6d4d2651ab734e839bbd069e1f961f109faba01915b46b51d953f3af59365c63f737c508e5bdde170bd4d12a817abd3694937b7cbd990a7d50190c186ce9d5896", 0xbc}}) (async)

00:36:15 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, r2, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:15 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000080)=0x1)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000100)={0x5, 0x0, 0x0, 0xeeeeeeee})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:15 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x2, @raw_data="d1b14f28b38510b4a0c7fe76345994e0d8f29916787e1a736b87f84ea25ed6a2af04f47c97339bfe6a423a839c9e196408c272a00265f17ec5bf2adb9e2c3b771742f9ba35e5579b89f75ca8d75071a396fd1b9bf9230d99d170486e4f9e5d27a7ae318baad2a65115b959dc2e026354986bc7933037fe892a3ee077c1eeb4f1f64a9a7a111658375c04887894efc87b5d0d7520bc4b48e91318011c13fe4bdba7ac014feee17bcfedcf45cb1a25cefab1c6baaf74e9bc9f17471b39072c8ea8325349a3f7bf6303"}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:15 executing program 3:
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000300)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6, 0x1, 0x9})
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:15 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000340)={0x8000, 0xc6f9, 0x1, {0x0, @win={{0x20, 0x5, 0x7, 0x1734}, 0x8, 0x9, &(0x7f0000000080)={{0x7ff, 0x58f, 0x5, 0x4}, &(0x7f0000000040)={{0x0, 0x1ff, 0x6, 0xbfd3}, &(0x7f0000000000)={{0x359c, 0x6, 0x7f, 0x1ff}}}}, 0x8001, &(0x7f0000000140)="72253f906a46b0b3754528f3a0a466dfc614c08ffbf6d25c8f29db675a26b1ada476e707e5b994a4135981aa921862c187ea1307dcf2ce64ff99ea37358b207f1668e597b84c0f9d6ed6598f4e6e4d1d5369147b44aca1e03390506b918c8dfb43dd2cc0e9e1082143c9e3aa2836f4a70f510a48bb1838033709eb61f8f970baaad7c234f9661625e3bf0bfb83a065d8ce316ee61393fc0e48d9cf6294e1e30472b068bec6946631df10d1f48dbbc4399961d52a6f3ab41a11e4d2edd01322a96a2c2d693ab60934d560b70b5dd28875fd0036a62a18ee68ffd0", 0x13}}, 0xb48f}) (async)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000340)={0x8000, 0xc6f9, 0x1, {0x0, @win={{0x20, 0x5, 0x7, 0x1734}, 0x8, 0x9, &(0x7f0000000080)={{0x7ff, 0x58f, 0x5, 0x4}, &(0x7f0000000040)={{0x0, 0x1ff, 0x6, 0xbfd3}, &(0x7f0000000000)={{0x359c, 0x6, 0x7f, 0x1ff}}}}, 0x8001, &(0x7f0000000140)="72253f906a46b0b3754528f3a0a466dfc614c08ffbf6d25c8f29db675a26b1ada476e707e5b994a4135981aa921862c187ea1307dcf2ce64ff99ea37358b207f1668e597b84c0f9d6ed6598f4e6e4d1d5369147b44aca1e03390506b918c8dfb43dd2cc0e9e1082143c9e3aa2836f4a70f510a48bb1838033709eb61f8f970baaad7c234f9661625e3bf0bfb83a065d8ce316ee61393fc0e48d9cf6294e1e30472b068bec6946631df10d1f48dbbc4399961d52a6f3ab41a11e4d2edd01322a96a2c2d693ab60934d560b70b5dd28875fd0036a62a18ee68ffd0", 0x13}}, 0xb48f})
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_MODE_SETGAMMA(r2, 0xc02064a5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f00000000c0)=[0xfc00, 0xa7, 0x4, 0x3], &(0x7f0000000440)=[0x3ff, 0xfff, 0xb924, 0x401, 0x401, 0x38, 0x5, 0x8001, 0x9, 0x8], &(0x7f0000000480)=[0x3, 0x4000, 0x1ff, 0x8]})
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000500)={0x1, 0x1, 0x4, 0x90080})
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}}) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})

00:36:15 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000080)=0x1)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000100)={0x5, 0x0, 0x0, 0xeeeeeeee})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000080)=0x1) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000100)={0x5, 0x0, 0x0, 0xeeeeeeee}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)

00:36:15 executing program 3:
r0 = request_key(&(0x7f0000000080)='blacklist\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='\x00', 0xfffffffffffffffa)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
add_key(&(0x7f0000000240)='big_key\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)="118033cc1fc8112f512eb1392673c0fcbd78b492d49aa1a5613e7bcd3659064dd9bb901f12d6a1bb0636348feffba01e2c1a78fb98cf5af6e9796805a1fe54774fc9ddd255abc7640cd97db3908582dc61b49f435f4ab7791312e676fbd0458edf779960e1f9b31322c6351403830694567f782e0b3ea58541ee6ed8a14451edc5bbcd256b42769496e9d7770e91b3c4de81ba9709b847ce382ebeb6d67773c1f6a15e2ec7724059bde0c5b2b3f406b0020da7336379", 0xb6, r0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, r0)
add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r2)

00:36:15 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x40010)

00:36:15 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x2, @raw_data="d1b14f28b38510b4a0c7fe76345994e0d8f29916787e1a736b87f84ea25ed6a2af04f47c97339bfe6a423a839c9e196408c272a00265f17ec5bf2adb9e2c3b771742f9ba35e5579b89f75ca8d75071a396fd1b9bf9230d99d170486e4f9e5d27a7ae318baad2a65115b959dc2e026354986bc7933037fe892a3ee077c1eeb4f1f64a9a7a111658375c04887894efc87b5d0d7520bc4b48e91318011c13fe4bdba7ac014feee17bcfedcf45cb1a25cefab1c6baaf74e9bc9f17471b39072c8ea8325349a3f7bf6303"})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:15 executing program 4:
syz_open_dev$vim2m(&(0x7f0000000080), 0x401, 0x2)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x37, 0xffffffff, 0x200, 0x0, r0, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1}, 0x48)
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x1)
r1 = syz_open_dev$vim2m(&(0x7f0000000300), 0x694, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000340)={0x2, 0x3, 0x4, 0x0, 0xfc})
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000440), 0x5, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x3, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x34324d59})
ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000200)={0x3, @win={{0x7fff, 0x10001, 0xfd2a, 0x3}, 0x2, 0x5, &(0x7f0000000140)={{0x2, 0x7ff, 0x4, 0x10000}, &(0x7f0000000100)={{0x10001, 0x8, 0x9, 0x3}, &(0x7f00000000c0)={{0x800, 0x4, 0x8, 0x8}}}}, 0x8, &(0x7f0000000180)="0ce9e37531724020e1a546d71e449b2e2496f14858619803e264925d2e48a98ebebfc86e34408370234de3558bbead799f05383abaf6d4d2651ab734e839bbd069e1f961f109faba01915b46b51d953f3af59365c63f737c508e5bdde170bd4d12a817abd3694937b7cbd990a7d50190c186ce9d5896", 0xbc}})
syz_open_dev$vim2m(&(0x7f0000000080), 0x401, 0x2) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x37, 0xffffffff, 0x200, 0x0, r0, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1}, 0x48) (async)
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x1) (async)
syz_open_dev$vim2m(&(0x7f0000000300), 0x694, 0x2) (async)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000340)={0x2, 0x3, 0x4, 0x0, 0xfc}) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0) (async)
syz_open_dev$vim2m(&(0x7f0000000440), 0x5, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x3, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x34324d59}) (async)
ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000200)={0x3, @win={{0x7fff, 0x10001, 0xfd2a, 0x3}, 0x2, 0x5, &(0x7f0000000140)={{0x2, 0x7ff, 0x4, 0x10000}, &(0x7f0000000100)={{0x10001, 0x8, 0x9, 0x3}, &(0x7f00000000c0)={{0x800, 0x4, 0x8, 0x8}}}}, 0x8, &(0x7f0000000180)="0ce9e37531724020e1a546d71e449b2e2496f14858619803e264925d2e48a98ebebfc86e34408370234de3558bbead799f05383abaf6d4d2651ab734e839bbd069e1f961f109faba01915b46b51d953f3af59365c63f737c508e5bdde170bd4d12a817abd3694937b7cbd990a7d50190c186ce9d5896", 0xbc}}) (async)

00:36:15 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000340)={0x8000, 0xc6f9, 0x1, {0x0, @win={{0x20, 0x5, 0x7, 0x1734}, 0x8, 0x9, &(0x7f0000000080)={{0x7ff, 0x58f, 0x5, 0x4}, &(0x7f0000000040)={{0x0, 0x1ff, 0x6, 0xbfd3}, &(0x7f0000000000)={{0x359c, 0x6, 0x7f, 0x1ff}}}}, 0x8001, &(0x7f0000000140)="72253f906a46b0b3754528f3a0a466dfc614c08ffbf6d25c8f29db675a26b1ada476e707e5b994a4135981aa921862c187ea1307dcf2ce64ff99ea37358b207f1668e597b84c0f9d6ed6598f4e6e4d1d5369147b44aca1e03390506b918c8dfb43dd2cc0e9e1082143c9e3aa2836f4a70f510a48bb1838033709eb61f8f970baaad7c234f9661625e3bf0bfb83a065d8ce316ee61393fc0e48d9cf6294e1e30472b068bec6946631df10d1f48dbbc4399961d52a6f3ab41a11e4d2edd01322a96a2c2d693ab60934d560b70b5dd28875fd0036a62a18ee68ffd0", 0x13}}, 0xb48f}) (async)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000340)={0x8000, 0xc6f9, 0x1, {0x0, @win={{0x20, 0x5, 0x7, 0x1734}, 0x8, 0x9, &(0x7f0000000080)={{0x7ff, 0x58f, 0x5, 0x4}, &(0x7f0000000040)={{0x0, 0x1ff, 0x6, 0xbfd3}, &(0x7f0000000000)={{0x359c, 0x6, 0x7f, 0x1ff}}}}, 0x8001, &(0x7f0000000140)="72253f906a46b0b3754528f3a0a466dfc614c08ffbf6d25c8f29db675a26b1ada476e707e5b994a4135981aa921862c187ea1307dcf2ce64ff99ea37358b207f1668e597b84c0f9d6ed6598f4e6e4d1d5369147b44aca1e03390506b918c8dfb43dd2cc0e9e1082143c9e3aa2836f4a70f510a48bb1838033709eb61f8f970baaad7c234f9661625e3bf0bfb83a065d8ce316ee61393fc0e48d9cf6294e1e30472b068bec6946631df10d1f48dbbc4399961d52a6f3ab41a11e4d2edd01322a96a2c2d693ab60934d560b70b5dd28875fd0036a62a18ee68ffd0", 0x13}}, 0xb48f})
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_MODE_SETGAMMA(r2, 0xc02064a5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f00000000c0)=[0xfc00, 0xa7, 0x4, 0x3], &(0x7f0000000440)=[0x3ff, 0xfff, 0xb924, 0x401, 0x401, 0x38, 0x5, 0x8001, 0x9, 0x8], &(0x7f0000000480)=[0x3, 0x4000, 0x1ff, 0x8]})
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000500)={0x1, 0x1, 0x4, 0x90080})
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})

00:36:15 executing program 3:
r0 = request_key(&(0x7f0000000080)='blacklist\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='\x00', 0xfffffffffffffffa) (async)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
add_key(&(0x7f0000000240)='big_key\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)="118033cc1fc8112f512eb1392673c0fcbd78b492d49aa1a5613e7bcd3659064dd9bb901f12d6a1bb0636348feffba01e2c1a78fb98cf5af6e9796805a1fe54774fc9ddd255abc7640cd97db3908582dc61b49f435f4ab7791312e676fbd0458edf779960e1f9b31322c6351403830694567f782e0b3ea58541ee6ed8a14451edc5bbcd256b42769496e9d7770e91b3c4de81ba9709b847ce382ebeb6d67773c1f6a15e2ec7724059bde0c5b2b3f406b0020da7336379", 0xb6, r0) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, r0)
add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r2)

00:36:15 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0)

00:36:15 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000080)=0x1) (async)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000100)={0x5, 0x0, 0x0, 0xeeeeeeee}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:15 executing program 5:
ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[0x5]})
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x200000000000008, 0x2)
r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000100)='.pending_reads\x00', 0x109800, 0x1)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0], 0x2})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:15 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000240)=@mmap={0x9, 0x2, 0x4, 0x10000, 0x401, {0x0, 0x2710}, {0x3, 0xc, 0x6, 0x6, 0x3, 0x8, "974c11a6"}, 0x8, 0x1, {}, 0x1})
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x1, 0x2})
r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x1, 0x2)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_INFO_BUFS(r2, 0xc0106418, 0x0)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{}]})
ioctl$DMA_BUF_SET_NAME_A(r3, 0x40046201, &(0x7f00000002c0)='\x00')
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000180)=0x7)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0x3d55, 0x1})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000080)={0x3, 0x10001})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x0, <r4=>0xffffffffffffffff})
ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f0000000300)={0x8000000000000000})
ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f0000000200)={0x6, 0x9, 0x5, 0x10000, 0x6, 0x6cf})

00:36:15 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x0, 0x7fff, 0x1ff, 0x10000})
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x50565559, [], [0x9]}})

00:36:15 executing program 3:
r0 = request_key(&(0x7f0000000080)='blacklist\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='\x00', 0xfffffffffffffffa) (async)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
add_key(&(0x7f0000000240)='big_key\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)="118033cc1fc8112f512eb1392673c0fcbd78b492d49aa1a5613e7bcd3659064dd9bb901f12d6a1bb0636348feffba01e2c1a78fb98cf5af6e9796805a1fe54774fc9ddd255abc7640cd97db3908582dc61b49f435f4ab7791312e676fbd0458edf779960e1f9b31322c6351403830694567f782e0b3ea58541ee6ed8a14451edc5bbcd256b42769496e9d7770e91b3c4de81ba9709b847ce382ebeb6d67773c1f6a15e2ec7724059bde0c5b2b3f406b0020da7336379", 0xb6, r0) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, r0)
add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r2)

00:36:15 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, r2, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40010)

00:36:15 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x3, 0x2, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x32314752})
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000180)={0x3, 0x7fff, 0xe, 0x80000})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000080)={0x201, 0x56595559, 0x2, @stepwise={0x1, 0x1, 0x80000000, 0xffffffff, 0x7, 0xfff}})
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0x9, 0x1})
openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000200)={0x5, 0x4, 0x80000001, 0x800})
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000140))

00:36:15 executing program 5:
ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[0x5]}) (async)
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x200000000000008, 0x2)
r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000100)='.pending_reads\x00', 0x109800, 0x1)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0], 0x2}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:15 executing program 4:
syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2) (async)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000240)=@mmap={0x9, 0x2, 0x4, 0x10000, 0x401, {0x0, 0x2710}, {0x3, 0xc, 0x6, 0x6, 0x3, 0x8, "974c11a6"}, 0x8, 0x1, {}, 0x1})
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x1, 0x2}) (async)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x1, 0x2})
r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x1, 0x2)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_INFO_BUFS(r2, 0xc0106418, 0x0)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{}]})
ioctl$DMA_BUF_SET_NAME_A(r3, 0x40046201, &(0x7f00000002c0)='\x00') (async)
ioctl$DMA_BUF_SET_NAME_A(r3, 0x40046201, &(0x7f00000002c0)='\x00')
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000180)=0x7)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0x3d55, 0x1}) (async)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0x3d55, 0x1})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000080)={0x3, 0x10001})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x0, <r4=>0xffffffffffffffff})
ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f0000000300)={0x8000000000000000})
ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f0000000200)={0x6, 0x9, 0x5, 0x10000, 0x6, 0x6cf})

00:36:15 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x10000, 0x0, 0x0, "69eb88eaea001a25417300d926dbe16f6b5bed00"})
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000001c0)={0x0, @win={{0x4, 0x4, 0x8, 0x200}, 0x1, 0x20, &(0x7f00000000c0)={{0x7, 0x644, 0x81, 0x80000000}, &(0x7f0000000080)={{0x1a, 0x4bdc0, 0x20, 0x80000000}}}, 0x0, &(0x7f0000000100)="c7d29f23d951bdcf6b7226d29e2d9ff80fa902bf4614fb5e07cf76c0d5d197f43a80316dfe12c6cf637dab70659fb778d4f5b376b6a203ddd48fcebf682adf94475e112751379e6b619fea1a105ebd452c104fe27a039c5a28910b3dd2204684b65558e81ef8b0e50044a03d418dde9a9183ab3b94fcd43bb8ed99dd7aeb8c9de346dc8bab41e4", 0x1}})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x3, 0x800, 0x0, <r1=>0xffffffffffffffff})
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
r3 = openat$incfs(0xffffffffffffffff, &(0x7f00000003c0)='.log\x00', 0x200, 0x23)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000400)=@multiplanar_fd={0x3, 0x3, 0x4, 0x8, 0x12a, {0x77359400}, {0x3, 0x1, 0x17, 0x2, 0x7f, 0x20, "b538812a"}, 0x81, 0x4, {&(0x7f0000000340)=[{0x5, 0xfffffffb, {r1}, 0x13cd}, {0xffff, 0x7fff, {r2}, 0x7}]}, 0xffffffc0, 0x0, r3})

00:36:15 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x0, 0x7fff, 0x1ff, 0x10000})
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x50565559, [], [0x9]}}) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x50565559, [], [0x9]}})

00:36:15 executing program 0:
r0 = syz_clone(0x820000, &(0x7f0000000080)="b3f80d6ea1d50b2158779c8688aed0043214258371354b682d09961bc60c0d924f27470be4f712d80a8261a65c28901a82344be17caaa8a65cb61a3f6ba7ed8e369a766147f119101973985e2938429ff04962f6c63ab44dd3504f7cf36913b76c057b841a93f92fb2ba71596fdfcedb3af9630b9d2835af8a16913603937e5faa286ca69053f2cc549719bfd638d2f69e13cb16597751f9fb093c065f3b0a17397d3a76c7d2c436ba22b605d4a5d2fbe38dabcfe6a5f66b650c9e25df16ad3b14c80ed44f38e79a10c4ce7dea3774c9d01a", 0xd2, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="a2acb74dcab2f0841df6377b9de598bb376098cb6b03f082e16e0adc01a8d07fa0c6433b3a6a42ab7252176d54b094b51262233ba9bfd968ccef84fa9dac154384ca2d5b6dbc7c519d5047939704b836c0a2b60b04225e645773dec1a4c327f676")
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000280)={0x9, 0x8001, {r0}, {<r2=>0xffffffffffffffff}, 0x3, 0x6001})
r3 = getpgid(r0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_create(0x4, &(0x7f0000000480)={0x0, 0x3b, 0x4, @tid=0xffffffffffffffff}, &(0x7f00000004c0))
ptrace$cont(0xffffffffffffffff, r3, 0x0, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x800, 0x0, <r5=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000400)=@userptr={0x3, 0x2, 0x4, 0x20, 0xd7, {0x77359400}, {0x5, 0x8, 0x8, 0x0, 0x3, 0x80, "d6139576"}, 0x3, 0x2, {&(0x7f0000000340)}, 0x4080000, 0x0, r5})
shmctl$IPC_SET(0x0, 0x1, &(0x7f00000002c0)={{0x2, 0xee01, 0xffffffffffffffff, r2, 0xee01, 0x3, 0x6}, 0x1f, 0x5, 0xec0, 0x5, r3, r4, 0x3})

00:36:15 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x3, 0x2, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x32314752}) (async)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000180)={0x3, 0x7fff, 0xe, 0x80000})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000080)={0x201, 0x56595559, 0x2, @stepwise={0x1, 0x1, 0x80000000, 0xffffffff, 0x7, 0xfff}}) (async, rerun: 64)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0x9, 0x1}) (async, rerun: 64)
openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async)
ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000200)={0x5, 0x4, 0x80000001, 0x800}) (async)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000140))

00:36:15 executing program 5:
ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[0x5]}) (async, rerun: 64)
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x200000000000008, 0x2) (rerun: 64)
r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000100)='.pending_reads\x00', 0x109800, 0x1)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0], 0x2})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:15 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x10000, 0x0, 0x0, "69eb88eaea001a25417300d926dbe16f6b5bed00"})
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000001c0)={0x0, @win={{0x4, 0x4, 0x8, 0x200}, 0x1, 0x20, &(0x7f00000000c0)={{0x7, 0x644, 0x81, 0x80000000}, &(0x7f0000000080)={{0x1a, 0x4bdc0, 0x20, 0x80000000}}}, 0x0, &(0x7f0000000100)="c7d29f23d951bdcf6b7226d29e2d9ff80fa902bf4614fb5e07cf76c0d5d197f43a80316dfe12c6cf637dab70659fb778d4f5b376b6a203ddd48fcebf682adf94475e112751379e6b619fea1a105ebd452c104fe27a039c5a28910b3dd2204684b65558e81ef8b0e50044a03d418dde9a9183ab3b94fcd43bb8ed99dd7aeb8c9de346dc8bab41e4", 0x1}})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x3, 0x800, 0x0, <r1=>0xffffffffffffffff})
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
r3 = openat$incfs(0xffffffffffffffff, &(0x7f00000003c0)='.log\x00', 0x200, 0x23)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000400)=@multiplanar_fd={0x3, 0x3, 0x4, 0x8, 0x12a, {0x77359400}, {0x3, 0x1, 0x17, 0x2, 0x7f, 0x20, "b538812a"}, 0x81, 0x4, {&(0x7f0000000340)=[{0x5, 0xfffffffb, {r1}, 0x13cd}, {0xffff, 0x7fff, {r2}, 0x7}]}, 0xffffffc0, 0x0, r3})
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x10000, 0x0, 0x0, "69eb88eaea001a25417300d926dbe16f6b5bed00"}) (async)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000001c0)={0x0, @win={{0x4, 0x4, 0x8, 0x200}, 0x1, 0x20, &(0x7f00000000c0)={{0x7, 0x644, 0x81, 0x80000000}, &(0x7f0000000080)={{0x1a, 0x4bdc0, 0x20, 0x80000000}}}, 0x0, &(0x7f0000000100)="c7d29f23d951bdcf6b7226d29e2d9ff80fa902bf4614fb5e07cf76c0d5d197f43a80316dfe12c6cf637dab70659fb778d4f5b376b6a203ddd48fcebf682adf94475e112751379e6b619fea1a105ebd452c104fe27a039c5a28910b3dd2204684b65558e81ef8b0e50044a03d418dde9a9183ab3b94fcd43bb8ed99dd7aeb8c9de346dc8bab41e4", 0x1}}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x3, 0x800}) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0) (async)
openat$incfs(0xffffffffffffffff, &(0x7f00000003c0)='.log\x00', 0x200, 0x23) (async)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000400)=@multiplanar_fd={0x3, 0x3, 0x4, 0x8, 0x12a, {0x77359400}, {0x3, 0x1, 0x17, 0x2, 0x7f, 0x20, "b538812a"}, 0x81, 0x4, {&(0x7f0000000340)=[{0x5, 0xfffffffb, {r1}, 0x13cd}, {0xffff, 0x7fff, {r2}, 0x7}]}, 0xffffffc0, 0x0, r3}) (async)

00:36:15 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000240)=@mmap={0x9, 0x2, 0x4, 0x10000, 0x401, {0x0, 0x2710}, {0x3, 0xc, 0x6, 0x6, 0x3, 0x8, "974c11a6"}, 0x8, 0x1, {}, 0x1}) (async, rerun: 32)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x1, 0x2}) (async, rerun: 32)
r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x1, 0x2) (async, rerun: 64)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (rerun: 64)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_INFO_BUFS(r2, 0xc0106418, 0x0) (async)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{}]}) (async)
ioctl$DMA_BUF_SET_NAME_A(r3, 0x40046201, &(0x7f00000002c0)='\x00') (async)
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000180)=0x7) (async, rerun: 32)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0x3d55, 0x1}) (async, rerun: 32)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000080)={0x3, 0x10001}) (async)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x0, <r4=>0xffffffffffffffff})
ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f0000000300)={0x8000000000000000}) (async)
ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f0000000200)={0x6, 0x9, 0x5, 0x10000, 0x6, 0x6cf})

00:36:15 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x0, 0x7fff, 0x1ff, 0x10000}) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x50565559, [], [0x9]}})

00:36:15 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x3, 0x2, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x32314752}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x3, 0x2, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x32314752})
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000180)={0x3, 0x7fff, 0xe, 0x80000})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000080)={0x201, 0x56595559, 0x2, @stepwise={0x1, 0x1, 0x80000000, 0xffffffff, 0x7, 0xfff}}) (async)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000080)={0x201, 0x56595559, 0x2, @stepwise={0x1, 0x1, 0x80000000, 0xffffffff, 0x7, 0xfff}})
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0x9, 0x1})
openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000200)={0x5, 0x4, 0x80000001, 0x800}) (async)
ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000200)={0x5, 0x4, 0x80000001, 0x800})
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000140)) (async)
ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000140))

00:36:15 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x13f, 0xb}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000340)={0x7, 0x8, 0xfa00, {r1}}, 0x64)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), r1, 0x80000000}}, 0x18)
r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000000)={0x0, 0x96})
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffb000/0x2000)=nil, 0x8000000000000000, 0x5, 0xd})

00:36:15 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x10000, 0x0, 0x0, "69eb88eaea001a25417300d926dbe16f6b5bed00"})
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000001c0)={0x0, @win={{0x4, 0x4, 0x8, 0x200}, 0x1, 0x20, &(0x7f00000000c0)={{0x7, 0x644, 0x81, 0x80000000}, &(0x7f0000000080)={{0x1a, 0x4bdc0, 0x20, 0x80000000}}}, 0x0, &(0x7f0000000100)="c7d29f23d951bdcf6b7226d29e2d9ff80fa902bf4614fb5e07cf76c0d5d197f43a80316dfe12c6cf637dab70659fb778d4f5b376b6a203ddd48fcebf682adf94475e112751379e6b619fea1a105ebd452c104fe27a039c5a28910b3dd2204684b65558e81ef8b0e50044a03d418dde9a9183ab3b94fcd43bb8ed99dd7aeb8c9de346dc8bab41e4", 0x1}})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x3, 0x800, 0x0, <r1=>0xffffffffffffffff}) (async)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
r3 = openat$incfs(0xffffffffffffffff, &(0x7f00000003c0)='.log\x00', 0x200, 0x23)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000400)=@multiplanar_fd={0x3, 0x3, 0x4, 0x8, 0x12a, {0x77359400}, {0x3, 0x1, 0x17, 0x2, 0x7f, 0x20, "b538812a"}, 0x81, 0x4, {&(0x7f0000000340)=[{0x5, 0xfffffffb, {r1}, 0x13cd}, {0xffff, 0x7fff, {r2}, 0x7}]}, 0xffffffc0, 0x0, r3})

00:36:15 executing program 0:
r0 = syz_clone(0x820000, &(0x7f0000000080)="b3f80d6ea1d50b2158779c8688aed0043214258371354b682d09961bc60c0d924f27470be4f712d80a8261a65c28901a82344be17caaa8a65cb61a3f6ba7ed8e369a766147f119101973985e2938429ff04962f6c63ab44dd3504f7cf36913b76c057b841a93f92fb2ba71596fdfcedb3af9630b9d2835af8a16913603937e5faa286ca69053f2cc549719bfd638d2f69e13cb16597751f9fb093c065f3b0a17397d3a76c7d2c436ba22b605d4a5d2fbe38dabcfe6a5f66b650c9e25df16ad3b14c80ed44f38e79a10c4ce7dea3774c9d01a", 0xd2, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="a2acb74dcab2f0841df6377b9de598bb376098cb6b03f082e16e0adc01a8d07fa0c6433b3a6a42ab7252176d54b094b51262233ba9bfd968ccef84fa9dac154384ca2d5b6dbc7c519d5047939704b836c0a2b60b04225e645773dec1a4c327f676")
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000280)={0x9, 0x8001, {r0}, {<r2=>0xffffffffffffffff}, 0x3, 0x6001})
r3 = getpgid(r0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_create(0x4, &(0x7f0000000480)={0x0, 0x3b, 0x4, @tid=0xffffffffffffffff}, &(0x7f00000004c0))
ptrace$cont(0xffffffffffffffff, r3, 0x0, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x800, 0x0, <r5=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000400)=@userptr={0x3, 0x2, 0x4, 0x20, 0xd7, {0x77359400}, {0x5, 0x8, 0x8, 0x0, 0x3, 0x80, "d6139576"}, 0x3, 0x2, {&(0x7f0000000340)}, 0x4080000, 0x0, r5})
shmctl$IPC_SET(0x0, 0x1, &(0x7f00000002c0)={{0x2, 0xee01, 0xffffffffffffffff, r2, 0xee01, 0x3, 0x6}, 0x1f, 0x5, 0xec0, 0x5, r3, r4, 0x3})

00:36:15 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x6, 0x1, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x47425248})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f00000000c0))

00:36:15 executing program 1:
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x13f, 0xb}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000340)={0x7, 0x8, 0xfa00, {r1}}, 0x64)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), r1, 0x80000000}}, 0x18)
syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2) (async)
r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000000)={0x0, 0x96})
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffb000/0x2000)=nil, 0x8000000000000000, 0x5, 0xd}) (async)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffb000/0x2000)=nil, 0x8000000000000000, 0x5, 0xd})

00:36:15 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000000c0))
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f00000001c0)=@multiplanar_fd={0x101, 0x2, 0x4, 0xfbff66e5318dfb23, 0x5, {0x0, 0x2710}, {0x0, 0x0, 0x9, 0x20, 0x3, 0x6, "647fb900"}, 0x5, 0x4, {&(0x7f0000000140)=[{0x1, 0x1, {r3}}, {0x5, 0x100008, {r4}, 0x6}]}, 0x5, 0x0, r2})

00:36:15 executing program 4:
syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2) (async)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x6, 0x1, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x47425248})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f00000000c0))

00:36:15 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000080)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:15 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000140)=0x2)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000100)=0x3)
ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f00000000c0)={0x5cf5})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000200)={0x0, @pix={0x1, 0x0, 0x56595559, 0x3, 0x7, 0x2, 0x7, 0x3, 0x1, 0x3, 0x0, 0x7}})
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r5, 0x80685600, &(0x7f0000000340))
ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000080)={0x1, 0x3, 0x5, 0x90800})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000180))

00:36:15 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x13f, 0xb}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000340)={0x7, 0x8, 0xfa00, {r1}}, 0x64) (async)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), r1, 0x80000000}}, 0x18)
r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000000)={0x0, 0x96})
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffb000/0x2000)=nil, 0x8000000000000000, 0x5, 0xd})

00:36:15 executing program 1:
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={<r0=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, r0], 0x2})
r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})

00:36:15 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000140)=0x2)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000100)=0x3) (async)
ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f00000000c0)={0x5cf5})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000200)={0x0, @pix={0x1, 0x0, 0x56595559, 0x3, 0x7, 0x2, 0x7, 0x3, 0x1, 0x3, 0x0, 0x7}})
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r5, 0x80685600, &(0x7f0000000340)) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000080)={0x1, 0x3, 0x5, 0x90800}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000180))

00:36:15 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000080)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:15 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000000c0)) (async)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async, rerun: 32)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (rerun: 32)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0) (async)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f00000001c0)=@multiplanar_fd={0x101, 0x2, 0x4, 0xfbff66e5318dfb23, 0x5, {0x0, 0x2710}, {0x0, 0x0, 0x9, 0x20, 0x3, 0x6, "647fb900"}, 0x5, 0x4, {&(0x7f0000000140)=[{0x1, 0x1, {r3}}, {0x5, 0x100008, {r4}, 0x6}]}, 0x5, 0x0, r2})

00:36:15 executing program 0:
r0 = syz_clone(0x820000, &(0x7f0000000080)="b3f80d6ea1d50b2158779c8688aed0043214258371354b682d09961bc60c0d924f27470be4f712d80a8261a65c28901a82344be17caaa8a65cb61a3f6ba7ed8e369a766147f119101973985e2938429ff04962f6c63ab44dd3504f7cf36913b76c057b841a93f92fb2ba71596fdfcedb3af9630b9d2835af8a16913603937e5faa286ca69053f2cc549719bfd638d2f69e13cb16597751f9fb093c065f3b0a17397d3a76c7d2c436ba22b605d4a5d2fbe38dabcfe6a5f66b650c9e25df16ad3b14c80ed44f38e79a10c4ce7dea3774c9d01a", 0xd2, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="a2acb74dcab2f0841df6377b9de598bb376098cb6b03f082e16e0adc01a8d07fa0c6433b3a6a42ab7252176d54b094b51262233ba9bfd968ccef84fa9dac154384ca2d5b6dbc7c519d5047939704b836c0a2b60b04225e645773dec1a4c327f676")
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000280)={0x9, 0x8001, {r0}, {<r2=>0xffffffffffffffff}, 0x3, 0x6001})
r3 = getpgid(r0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_create(0x4, &(0x7f0000000480)={0x0, 0x3b, 0x4, @tid=0xffffffffffffffff}, &(0x7f00000004c0))
ptrace$cont(0xffffffffffffffff, r3, 0x0, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x800, 0x0, <r5=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000400)=@userptr={0x3, 0x2, 0x4, 0x20, 0xd7, {0x77359400}, {0x5, 0x8, 0x8, 0x0, 0x3, 0x80, "d6139576"}, 0x3, 0x2, {&(0x7f0000000340)}, 0x4080000, 0x0, r5})
shmctl$IPC_SET(0x0, 0x1, &(0x7f00000002c0)={{0x2, 0xee01, 0xffffffffffffffff, r2, 0xee01, 0x3, 0x6}, 0x1f, 0x5, 0xec0, 0x5, r3, r4, 0x3})

00:36:15 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x6, 0x1, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x47425248}) (async)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f00000000c0))

00:36:15 executing program 1:
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={<r0=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, r0], 0x2})
r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})

00:36:15 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000080)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:15 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000140)=0x2) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async, rerun: 32)
ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000100)=0x3) (async, rerun: 32)
ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f00000000c0)={0x5cf5}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000200)={0x0, @pix={0x1, 0x0, 0x56595559, 0x3, 0x7, 0x2, 0x7, 0x3, 0x1, 0x3, 0x0, 0x7}})
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r5, 0x80685600, &(0x7f0000000340))
ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000080)={0x1, 0x3, 0x5, 0x90800}) (async, rerun: 64)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000180)) (rerun: 64)

00:36:16 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000000c0))
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f00000001c0)=@multiplanar_fd={0x101, 0x2, 0x4, 0xfbff66e5318dfb23, 0x5, {0x0, 0x2710}, {0x0, 0x0, 0x9, 0x20, 0x3, 0x6, "647fb900"}, 0x5, 0x4, {&(0x7f0000000140)=[{0x1, 0x1, {r3}}, {0x5, 0x100008, {r4}, 0x6}]}, 0x5, 0x0, r2})

00:36:16 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x47504a4d})

00:36:16 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x100800, 0x0, <r1=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000400)={0x1, 0x1ff})
ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000200)={0x63a0, 0x6, 0x3, {0x3, @win={{0x6ff, 0x1000, 0x9, 0x64}, 0x1, 0x3, &(0x7f0000000140)={{0x4, 0x4, 0x8, 0x1}, &(0x7f0000000100)={{0x2, 0x3, 0x5, 0x1}}}, 0x1ff, &(0x7f0000000180)="45a613ab66c304aba67299987cb46d2082439582ec25e72cc98f175a8e3c911c7b71b4f2d98350090e7ea7c95e909f85ec83e3c990a95a9a22abef820767eb18e186b7d833689ea1dd795ec0f26ead352d2226b594a371ef48ef428a174a1a0b02e5", 0x22}}, 0xd4d})
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000380)=@userptr={0x9, 0x0, 0x4, 0x1000, 0x8, {0x0, 0xea60}, {0x5, 0x2, 0x9, 0x0, 0x80, 0x40, "cddd4193"}, 0x9, 0x2, {&(0x7f0000000340)}, 0x20, 0x0, r0})

00:36:16 executing program 1:
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={<r0=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, r0], 0x2})
r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)) (async)
ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, r0], 0x2}) (async)
syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}}) (async)

00:36:16 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)=@mmap={0xfff, 0x1, 0x4, 0x800, 0xfff, {0x77359400}, {0x1, 0x0, 0x80, 0x0, 0x7, 0x7f, "003349d6"}, 0x3f, 0x1, {}, 0xfffffdff})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000080)={0x2100000, 0x1, 0x0, "69eb88ea5f711a2541df0c0389c0a0e4b2ddb8a6c39cd926dbe16f6b5b473600", 0x33424752})

00:36:16 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x100800}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x100800, 0x0, <r1=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000400)={0x1, 0x1ff})
ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000200)={0x63a0, 0x6, 0x3, {0x3, @win={{0x6ff, 0x1000, 0x9, 0x64}, 0x1, 0x3, &(0x7f0000000140)={{0x4, 0x4, 0x8, 0x1}, &(0x7f0000000100)={{0x2, 0x3, 0x5, 0x1}}}, 0x1ff, &(0x7f0000000180)="45a613ab66c304aba67299987cb46d2082439582ec25e72cc98f175a8e3c911c7b71b4f2d98350090e7ea7c95e909f85ec83e3c990a95a9a22abef820767eb18e186b7d833689ea1dd795ec0f26ead352d2226b594a371ef48ef428a174a1a0b02e5", 0x22}}, 0xd4d})
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000380)=@userptr={0x9, 0x0, 0x4, 0x1000, 0x8, {0x0, 0xea60}, {0x5, 0x2, 0x9, 0x0, 0x80, 0x40, "cddd4193"}, 0x9, 0x2, {&(0x7f0000000340)}, 0x20, 0x0, r0})

00:36:16 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000100)={0x3, 0x1, 0x8, 0x80000})
setsockopt$MRT_DEL_MFC(0xffffffffffffffff, 0x0, 0xcd, &(0x7f0000000080)={@empty, @local, 0x1, "352edc5e0496cf02144aefac48643ab6bf6dcf09b67c0012a8815d8950748687", 0xdf8, 0x9, 0x2c954738, 0xdc22}, 0x3c)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, &(0x7f00000000c0)=""/19)

00:36:16 executing program 0:
r0 = syz_clone(0x820000, &(0x7f0000000080)="b3f80d6ea1d50b2158779c8688aed0043214258371354b682d09961bc60c0d924f27470be4f712d80a8261a65c28901a82344be17caaa8a65cb61a3f6ba7ed8e369a766147f119101973985e2938429ff04962f6c63ab44dd3504f7cf36913b76c057b841a93f92fb2ba71596fdfcedb3af9630b9d2835af8a16913603937e5faa286ca69053f2cc549719bfd638d2f69e13cb16597751f9fb093c065f3b0a17397d3a76c7d2c436ba22b605d4a5d2fbe38dabcfe6a5f66b650c9e25df16ad3b14c80ed44f38e79a10c4ce7dea3774c9d01a", 0xd2, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="a2acb74dcab2f0841df6377b9de598bb376098cb6b03f082e16e0adc01a8d07fa0c6433b3a6a42ab7252176d54b094b51262233ba9bfd968ccef84fa9dac154384ca2d5b6dbc7c519d5047939704b836c0a2b60b04225e645773dec1a4c327f676")
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000280)={0x9, 0x8001, {r0}, {0xffffffffffffffff}, 0x3, 0x6001})
r2 = getpgid(r0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_create(0x4, &(0x7f0000000480)={0x0, 0x3b, 0x4, @tid=0xffffffffffffffff}, &(0x7f00000004c0))
ptrace$cont(0xffffffffffffffff, r2, 0x0, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x800, 0x0, <r3=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000400)=@userptr={0x3, 0x2, 0x4, 0x20, 0xd7, {0x77359400}, {0x5, 0x8, 0x8, 0x0, 0x3, 0x80, "d6139576"}, 0x3, 0x2, {&(0x7f0000000340)}, 0x4080000, 0x0, r3})

00:36:16 executing program 3:
syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) (async)
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x47504a4d})

00:36:16 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000000c0)={0x2, 0x80000001, 0x0, 0x800})
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @win={{0x13, 0x3, 0x1ff, 0x7fd}, 0x5, 0x80, &(0x7f0000000080)={{0xd303, 0x9d, 0x5, 0x5}, &(0x7f0000000040)={{0x6, 0x0, 0x1, 0xfffffffd}, &(0x7f0000000000)={{0x3, 0x6, 0xecf, 0x10001}}}}, 0x0, &(0x7f0000000340)="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", 0x3}})

00:36:16 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)=@mmap={0xfff, 0x1, 0x4, 0x800, 0xfff, {0x77359400}, {0x1, 0x0, 0x80, 0x0, 0x7, 0x7f, "003349d6"}, 0x3f, 0x1, {}, 0xfffffdff}) (async)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)=@mmap={0xfff, 0x1, 0x4, 0x800, 0xfff, {0x77359400}, {0x1, 0x0, 0x80, 0x0, 0x7, 0x7f, "003349d6"}, 0x3f, 0x1, {}, 0xfffffdff})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000080)={0x2100000, 0x1, 0x0, "69eb88ea5f711a2541df0c0389c0a0e4b2ddb8a6c39cd926dbe16f6b5b473600", 0x33424752})

00:36:16 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000100)={0x3, 0x1, 0x8, 0x80000})
setsockopt$MRT_DEL_MFC(0xffffffffffffffff, 0x0, 0xcd, &(0x7f0000000080)={@empty, @local, 0x1, "352edc5e0496cf02144aefac48643ab6bf6dcf09b67c0012a8815d8950748687", 0xdf8, 0x9, 0x2c954738, 0xdc22}, 0x3c) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, &(0x7f00000000c0)=""/19)

00:36:16 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x100800, 0x0, <r1=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000400)={0x1, 0x1ff}) (async)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000200)={0x63a0, 0x6, 0x3, {0x3, @win={{0x6ff, 0x1000, 0x9, 0x64}, 0x1, 0x3, &(0x7f0000000140)={{0x4, 0x4, 0x8, 0x1}, &(0x7f0000000100)={{0x2, 0x3, 0x5, 0x1}}}, 0x1ff, &(0x7f0000000180)="45a613ab66c304aba67299987cb46d2082439582ec25e72cc98f175a8e3c911c7b71b4f2d98350090e7ea7c95e909f85ec83e3c990a95a9a22abef820767eb18e186b7d833689ea1dd795ec0f26ead352d2226b594a371ef48ef428a174a1a0b02e5", 0x22}}, 0xd4d}) (async)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000380)=@userptr={0x9, 0x0, 0x4, 0x1000, 0x8, {0x0, 0xea60}, {0x5, 0x2, 0x9, 0x0, 0x80, 0x40, "cddd4193"}, 0x9, 0x2, {&(0x7f0000000340)}, 0x20, 0x0, r0})

00:36:16 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000000c0)={0x2, 0x80000001, 0x0, 0x800}) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @win={{0x13, 0x3, 0x1ff, 0x7fd}, 0x5, 0x80, &(0x7f0000000080)={{0xd303, 0x9d, 0x5, 0x5}, &(0x7f0000000040)={{0x6, 0x0, 0x1, 0xfffffffd}, &(0x7f0000000000)={{0x3, 0x6, 0xecf, 0x10001}}}}, 0x0, &(0x7f0000000340)="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", 0x3}})

00:36:16 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x47504a4d})
syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x47504a4d}) (async)

00:36:16 executing program 5:
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)=@mmap={0xfff, 0x1, 0x4, 0x800, 0xfff, {0x77359400}, {0x1, 0x0, 0x80, 0x0, 0x7, 0x7f, "003349d6"}, 0x3f, 0x1, {}, 0xfffffdff})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000080)={0x2100000, 0x1, 0x0, "69eb88ea5f711a2541df0c0389c0a0e4b2ddb8a6c39cd926dbe16f6b5b473600", 0x33424752})

00:36:16 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800000000007, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:16 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000000c0)={0x2, 0x80000001, 0x0, 0x800}) (async)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000000c0)={0x2, 0x80000001, 0x0, 0x800})
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @win={{0x13, 0x3, 0x1ff, 0x7fd}, 0x5, 0x80, &(0x7f0000000080)={{0xd303, 0x9d, 0x5, 0x5}, &(0x7f0000000040)={{0x6, 0x0, 0x1, 0xfffffffd}, &(0x7f0000000000)={{0x3, 0x6, 0xecf, 0x10001}}}}, 0x0, &(0x7f0000000340)="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", 0x3}})

00:36:16 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x2, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:16 executing program 0:
r0 = syz_clone(0x820000, &(0x7f0000000080)="b3f80d6ea1d50b2158779c8688aed0043214258371354b682d09961bc60c0d924f27470be4f712d80a8261a65c28901a82344be17caaa8a65cb61a3f6ba7ed8e369a766147f119101973985e2938429ff04962f6c63ab44dd3504f7cf36913b76c057b841a93f92fb2ba71596fdfcedb3af9630b9d2835af8a16913603937e5faa286ca69053f2cc549719bfd638d2f69e13cb16597751f9fb093c065f3b0a17397d3a76c7d2c436ba22b605d4a5d2fbe38dabcfe6a5f66b650c9e25df16ad3b14c80ed44f38e79a10c4ce7dea3774c9d01a", 0xd2, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="a2acb74dcab2f0841df6377b9de598bb376098cb6b03f082e16e0adc01a8d07fa0c6433b3a6a42ab7252176d54b094b51262233ba9bfd968ccef84fa9dac154384ca2d5b6dbc7c519d5047939704b836c0a2b60b04225e645773dec1a4c327f676")
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000280)={0x9, 0x8001, {r0}, {0xffffffffffffffff}, 0x3, 0x6001})
r2 = getpgid(r0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_create(0x4, &(0x7f0000000480)={0x0, 0x3b, 0x4, @tid=0xffffffffffffffff}, &(0x7f00000004c0))
ptrace$cont(0xffffffffffffffff, r2, 0x0, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x800})

00:36:16 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000100)={0x3, 0x1, 0x8, 0x80000}) (async)
setsockopt$MRT_DEL_MFC(0xffffffffffffffff, 0x0, 0xcd, &(0x7f0000000080)={@empty, @local, 0x1, "352edc5e0496cf02144aefac48643ab6bf6dcf09b67c0012a8815d8950748687", 0xdf8, 0x9, 0x2c954738, 0xdc22}, 0x3c)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, &(0x7f00000000c0)=""/19)

00:36:16 executing program 5:
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000)
r0 = shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffc000/0x3000)=nil)
shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000180)=""/47)
shmctl$SHM_UNLOCK(r0, 0xc)

00:36:16 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800000000007, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:16 executing program 4:
syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2) (async)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x2, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:16 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e51089dd"}})
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})

00:36:16 executing program 5:
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000)
shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffc000/0x3000)=nil) (async)
r0 = shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffc000/0x3000)=nil)
shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000180)=""/47)
shmctl$SHM_UNLOCK(r0, 0xc)

00:36:16 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800000000007, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:16 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0xfffefffd, 0x0, 0x2, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x50565559})
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)=@overlay={0x4, 0x3, 0x4, 0x8, 0xad, {}, {0x1, 0xd, 0x1f, 0xc0, 0x9, 0x81, "94ba10c4"}, 0x9, 0x3, {}, 0x3, 0x0, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x5, 0x2)
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000280)={0x0, 0x0, <r3=>0x0, 0x0, 0x0, 0x5, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f00000002c0)={0x8000000000000001, 0x0, r3, 0xc0c0c0c0})
ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000140)={0x3, @pix_mp={0x3, 0x8000, 0x31363553, 0x2, 0x5, [{0x9}, {0x200, 0x1}, {0x4, 0x6}, {0x101, 0x7}, {0xe0, 0x5}, {0x0, 0x200}, {0xfff, 0x9fac}, {0x6, 0xc8}], 0x1, 0x29, 0x2, 0x2, 0x5}})
ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000400)=@multiplanar_userptr={0x2, 0x0, 0x4, 0x20, 0xffff, {0x0, 0xea60}, {0x5, 0xc, 0x20, 0xcc, 0x4, 0xd0, "7b10f209"}, 0x1, 0x2, {&(0x7f0000000380)=[{0x5, 0x9, {&(0x7f0000000300)}, 0x1ff}, {0x2, 0x7, {&(0x7f0000000340)}, 0x7f80}]}, 0x80000000, 0x0, r1})

00:36:16 executing program 0:
r0 = syz_clone(0x820000, &(0x7f0000000080)="b3f80d6ea1d50b2158779c8688aed0043214258371354b682d09961bc60c0d924f27470be4f712d80a8261a65c28901a82344be17caaa8a65cb61a3f6ba7ed8e369a766147f119101973985e2938429ff04962f6c63ab44dd3504f7cf36913b76c057b841a93f92fb2ba71596fdfcedb3af9630b9d2835af8a16913603937e5faa286ca69053f2cc549719bfd638d2f69e13cb16597751f9fb093c065f3b0a17397d3a76c7d2c436ba22b605d4a5d2fbe38dabcfe6a5f66b650c9e25df16ad3b14c80ed44f38e79a10c4ce7dea3774c9d01a", 0xd2, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="a2acb74dcab2f0841df6377b9de598bb376098cb6b03f082e16e0adc01a8d07fa0c6433b3a6a42ab7252176d54b094b51262233ba9bfd968ccef84fa9dac154384ca2d5b6dbc7c519d5047939704b836c0a2b60b04225e645773dec1a4c327f676")
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000280)={0x9, 0x8001, {r0}, {0xffffffffffffffff}, 0x3, 0x6001})
r2 = getpgid(r0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_create(0x4, &(0x7f0000000480)={0x0, 0x3b, 0x4, @tid=0xffffffffffffffff}, &(0x7f00000004c0))
ptrace$cont(0xffffffffffffffff, r2, 0x0, 0x4)

00:36:16 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0xfffefffd, 0x0, 0x2, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x50565559})
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)=@overlay={0x4, 0x3, 0x4, 0x8, 0xad, {}, {0x1, 0xd, 0x1f, 0xc0, 0x9, 0x81, "94ba10c4"}, 0x9, 0x3, {}, 0x3, 0x0, <r1=>0xffffffffffffffff}) (async)
r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x5, 0x2) (async)
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000280)={0x0, 0x0, <r3=>0x0, 0x0, 0x0, 0x5, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f00000002c0)={0x8000000000000001, 0x0, r3, 0xc0c0c0c0}) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000140)={0x3, @pix_mp={0x3, 0x8000, 0x31363553, 0x2, 0x5, [{0x9}, {0x200, 0x1}, {0x4, 0x6}, {0x101, 0x7}, {0xe0, 0x5}, {0x0, 0x200}, {0xfff, 0x9fac}, {0x6, 0xc8}], 0x1, 0x29, 0x2, 0x2, 0x5}})
ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000400)=@multiplanar_userptr={0x2, 0x0, 0x4, 0x20, 0xffff, {0x0, 0xea60}, {0x5, 0xc, 0x20, 0xcc, 0x4, 0xd0, "7b10f209"}, 0x1, 0x2, {&(0x7f0000000380)=[{0x5, 0x9, {&(0x7f0000000300)}, 0x1ff}, {0x2, 0x7, {&(0x7f0000000340)}, 0x7f80}]}, 0x80000000, 0x0, r1})

00:36:16 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x2, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x2, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:16 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e51089dd"}}) (async)
ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e51089dd"}})
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})

00:36:16 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0xfffffffffffffffe, 0x2)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = syz_open_dev$dri(&(0x7f0000000240), 0x4, 0x1)
ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f0000000280)={0x0, 0x9, 0x4f, 0xffffff00, 0x1, 0x1, 0xffffffe1})
fchmodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xa34b18ec1ef858f8)
sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x81000020}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000004025240000000a0001007770616e340000000a0001007770616e330000000a0001007770616e340000000a0001007770616e30000000"], 0x44}, 0x1, 0x0, 0x0, 0x40894}, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:16 executing program 5:
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000) (async)
r0 = shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffc000/0x3000)=nil)
shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000180)=""/47) (async)
shmctl$SHM_UNLOCK(r0, 0xc)

00:36:16 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0xfffefffd, 0x0, 0x2, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x50565559}) (async)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)=@overlay={0x4, 0x3, 0x4, 0x8, 0xad, {}, {0x1, 0xd, 0x1f, 0xc0, 0x9, 0x81, "94ba10c4"}, 0x9, 0x3, {}, 0x3, 0x0, <r1=>0xffffffffffffffff}) (async)
r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x5, 0x2) (async)
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000280)={0x0, 0x0, <r3=>0x0, 0x0, 0x0, 0x5, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f00000002c0)={0x8000000000000001, 0x0, r3, 0xc0c0c0c0})
ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000140)={0x3, @pix_mp={0x3, 0x8000, 0x31363553, 0x2, 0x5, [{0x9}, {0x200, 0x1}, {0x4, 0x6}, {0x101, 0x7}, {0xe0, 0x5}, {0x0, 0x200}, {0xfff, 0x9fac}, {0x6, 0xc8}], 0x1, 0x29, 0x2, 0x2, 0x5}}) (async)
ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000400)=@multiplanar_userptr={0x2, 0x0, 0x4, 0x20, 0xffff, {0x0, 0xea60}, {0x5, 0xc, 0x20, 0xcc, 0x4, 0xd0, "7b10f209"}, 0x1, 0x2, {&(0x7f0000000380)=[{0x5, 0x9, {&(0x7f0000000300)}, 0x1ff}, {0x2, 0x7, {&(0x7f0000000340)}, 0x7f80}]}, 0x80000000, 0x0, r1})

00:36:16 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2) (async)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e51089dd"}})
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})

00:36:16 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/233, 0xe9}, {&(0x7f0000000240)=""/207, 0xcf}, {&(0x7f0000000340)=""/157, 0x9d}, {&(0x7f0000000400)=""/153, 0x99}], 0x5}, 0x10040)

00:36:16 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0xfffffffffffffffe, 0x2)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = syz_open_dev$dri(&(0x7f0000000240), 0x4, 0x1)
ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f0000000280)={0x0, 0x9, 0x4f, 0xffffff00, 0x1, 0x1, 0xffffffe1})
fchmodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xa34b18ec1ef858f8)
sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x81000020}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000004025240000000a0001007770616e340000000a0001007770616e330000000a0001007770616e340000000a0001007770616e30000000"], 0x44}, 0x1, 0x0, 0x0, 0x40894}, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:16 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_PAN_ID(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_PAN_ID(r4, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x0)
sendmsg$NL802154_CMD_SET_PAN_ID(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r5, 0x601, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x20004000)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xb}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x888}, 0x3b0d94dd2c0052ab)
r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r1)
sendmsg$NL802154_CMD_SET_CCA_MODE(r7, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xffffff11, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r8, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x80c0}, 0x4004)
ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:16 executing program 0:
r0 = syz_clone(0x820000, &(0x7f0000000080)="b3f80d6ea1d50b2158779c8688aed0043214258371354b682d09961bc60c0d924f27470be4f712d80a8261a65c28901a82344be17caaa8a65cb61a3f6ba7ed8e369a766147f119101973985e2938429ff04962f6c63ab44dd3504f7cf36913b76c057b841a93f92fb2ba71596fdfcedb3af9630b9d2835af8a16913603937e5faa286ca69053f2cc549719bfd638d2f69e13cb16597751f9fb093c065f3b0a17397d3a76c7d2c436ba22b605d4a5d2fbe38dabcfe6a5f66b650c9e25df16ad3b14c80ed44f38e79a10c4ce7dea3774c9d01a", 0xd2, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="a2acb74dcab2f0841df6377b9de598bb376098cb6b03f082e16e0adc01a8d07fa0c6433b3a6a42ab7252176d54b094b51262233ba9bfd968ccef84fa9dac154384ca2d5b6dbc7c519d5047939704b836c0a2b60b04225e645773dec1a4c327f676")
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000280)={0x9, 0x8001, {r0}, {0xffffffffffffffff}, 0x3, 0x6001})
getpgid(r0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_create(0x4, &(0x7f0000000480)={0x0, 0x3b, 0x4, @tid=0xffffffffffffffff}, &(0x7f00000004c0))

00:36:16 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/233, 0xe9}, {&(0x7f0000000240)=""/207, 0xcf}, {&(0x7f0000000340)=""/157, 0x9d}, {&(0x7f0000000400)=""/153, 0x99}], 0x5}, 0x10040)

00:36:16 executing program 2:
clock_gettime(0x0, &(0x7f0000000080)={<r0=>0x0, <r1=>0x0})
r2 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x200042, 0x0)
ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000100)=@overlay={0xfff, 0x2, 0x4, 0x800, 0x3, {r0, r1/1000+60000}, {0x5, 0x8, 0x4, 0x1, 0x8, 0x4, "301491e3"}, 0xb5, 0x3, {}, 0x1, 0x0, r2})
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0xa83c31d81a454c9e, 0x0)
ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, &(0x7f00000001c0))

00:36:16 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0xfffffffffffffffe, 0x2) (async)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) (async)
r2 = syz_open_dev$dri(&(0x7f0000000240), 0x4, 0x1)
ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f0000000280)={0x0, 0x9, 0x4f, 0xffffff00, 0x1, 0x1, 0xffffffe1}) (async)
fchmodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xa34b18ec1ef858f8) (async)
sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x81000020}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000004025240000000a0001007770616e340000000a0001007770616e330000000a0001007770616e340000000a0001007770616e30000000"], 0x44}, 0x1, 0x0, 0x0, 0x40894}, 0x0) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:16 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.pending_reads\x00', 0x100, 0x19)
socketpair(0x23, 0x80000, 0x1000, &(0x7f0000000580)={<r2=>0xffffffffffffffff})
getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f00000005c0), &(0x7f0000000600)=0x4)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)=@mmap={0x3f0, 0x1, 0x4, 0x100000, 0x7, {}, {0x5, 0x2, 0x9, 0x80, 0x1b, 0x1, "3df541ea"}, 0x2, 0x1, {}, 0x7d, 0x0, r1})
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x42c00, 0x10)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000440)={&(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[<r5=>0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x3, 0x8, 0x5})
ioctl$DRM_IOCTL_MODE_SETGAMMA(r4, 0xc02064a5, &(0x7f0000000540)={r5, 0x5, &(0x7f0000000480)=[0xffff, 0x81, 0x6da, 0x1, 0x1], &(0x7f00000004c0)=[0x7ce], &(0x7f0000000500)=[0x3ff, 0x6a]})
ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000140)={0x0, @sliced={0xa5ce, [0x5, 0x5, 0x7, 0x3eb, 0x83ac, 0x1ff, 0x1, 0x6, 0xa844, 0x3, 0x7f, 0x9, 0x2, 0x9bd, 0x3, 0x80, 0x3, 0x5, 0x85f, 0xfffd, 0x9, 0x8, 0x2, 0x160, 0x4, 0x401, 0x3, 0x4, 0x857c, 0x3ff, 0x3ff, 0x9, 0x6, 0x8, 0xfc00, 0x1000, 0x6, 0x101, 0xf001, 0x1, 0x7ff, 0x9, 0x8, 0xb8, 0x5, 0x1000, 0x1, 0x6de], 0x80000001}})

00:36:16 executing program 5:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_PAN_ID(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x0) (async)
sendmsg$NL802154_CMD_SET_PAN_ID(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_PAN_ID(r4, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x0) (async)
sendmsg$NL802154_CMD_SET_PAN_ID(r4, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x0)
sendmsg$NL802154_CMD_SET_PAN_ID(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r5, 0x601, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x20004000)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xb}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x888}, 0x3b0d94dd2c0052ab)
r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r1)
sendmsg$NL802154_CMD_SET_CCA_MODE(r7, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xffffff11, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r8, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x80c0}, 0x4004) (async)
sendmsg$NL802154_CMD_SET_CCA_MODE(r7, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xffffff11, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r8, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x80c0}, 0x4004)
ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:16 executing program 2:
clock_gettime(0x0, &(0x7f0000000080)={<r0=>0x0, <r1=>0x0}) (async)
r2 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x200042, 0x0)
ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000100)=@overlay={0xfff, 0x2, 0x4, 0x800, 0x3, {r0, r1/1000+60000}, {0x5, 0x8, 0x4, 0x1, 0x8, 0x4, "301491e3"}, 0xb5, 0x3, {}, 0x1, 0x0, r2})
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0xa83c31d81a454c9e, 0x0)
ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, &(0x7f00000001c0))

00:36:16 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/233, 0xe9}, {&(0x7f0000000240)=""/207, 0xcf}, {&(0x7f0000000340)=""/157, 0x9d}, {&(0x7f0000000400)=""/153, 0x99}], 0x5}, 0x10040)

00:36:16 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000080)=0x1)
setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000000c0), 0x4)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0189436, &(0x7f0000000040)={0x0, 0x3, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
unlinkat(r2, &(0x7f0000000100)='./file0\x00', 0x200)

00:36:16 executing program 0:
r0 = syz_clone(0x820000, &(0x7f0000000080)="b3f80d6ea1d50b2158779c8688aed0043214258371354b682d09961bc60c0d924f27470be4f712d80a8261a65c28901a82344be17caaa8a65cb61a3f6ba7ed8e369a766147f119101973985e2938429ff04962f6c63ab44dd3504f7cf36913b76c057b841a93f92fb2ba71596fdfcedb3af9630b9d2835af8a16913603937e5faa286ca69053f2cc549719bfd638d2f69e13cb16597751f9fb093c065f3b0a17397d3a76c7d2c436ba22b605d4a5d2fbe38dabcfe6a5f66b650c9e25df16ad3b14c80ed44f38e79a10c4ce7dea3774c9d01a", 0xd2, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="a2acb74dcab2f0841df6377b9de598bb376098cb6b03f082e16e0adc01a8d07fa0c6433b3a6a42ab7252176d54b094b51262233ba9bfd968ccef84fa9dac154384ca2d5b6dbc7c519d5047939704b836c0a2b60b04225e645773dec1a4c327f676")
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000280)={0x9, 0x8001, {r0}, {0xffffffffffffffff}, 0x3, 0x6001})
getpgid(r0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

00:36:16 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x3, 0x0, 0x1, "4c4a7a0ba0ac5e3194732c6b3ace982b0c1083af37c4243b254e3afb11a361c2", 0x38415262})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000001c0)=@fd={0x7, 0x3, 0x4, 0x400, 0x0, {}, {0x1, 0x8, 0x3f, 0xcb, 0x7f, 0xc6, "9f9bc840"}, 0x8, 0x4, {}, 0x3f})
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x0, @vbi={0x1, 0x3f, 0x4cce, 0x32315241, [0x1f, 0x8], [0x101, 0x8], 0x108}})
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x0, @sdr={0x3231564e, 0x8}})

00:36:16 executing program 2:
clock_gettime(0x0, &(0x7f0000000080)={<r0=>0x0, <r1=>0x0})
r2 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x200042, 0x0)
ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000100)=@overlay={0xfff, 0x2, 0x4, 0x800, 0x3, {r0, r1/1000+60000}, {0x5, 0x8, 0x4, 0x1, 0x8, 0x4, "301491e3"}, 0xb5, 0x3, {}, 0x1, 0x0, r2})
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0xa83c31d81a454c9e, 0x0) (async)
r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0xa83c31d81a454c9e, 0x0)
ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, &(0x7f00000001c0)) (async)
ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, &(0x7f00000001c0))

00:36:16 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_PAN_ID(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64)
sendmsg$NL802154_CMD_SET_PAN_ID(r4, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x0) (async)
sendmsg$NL802154_CMD_SET_PAN_ID(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r5, 0x601, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x20004000) (async)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xb}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x888}, 0x3b0d94dd2c0052ab) (async)
r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r1)
sendmsg$NL802154_CMD_SET_CCA_MODE(r7, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xffffff11, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r8, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x80c0}, 0x4004)
ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:16 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.pending_reads\x00', 0x100, 0x19)
socketpair(0x23, 0x80000, 0x1000, &(0x7f0000000580)) (async)
socketpair(0x23, 0x80000, 0x1000, &(0x7f0000000580)={<r2=>0xffffffffffffffff})
getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f00000005c0), &(0x7f0000000600)=0x4)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)=@mmap={0x3f0, 0x1, 0x4, 0x100000, 0x7, {}, {0x5, 0x2, 0x9, 0x80, 0x1b, 0x1, "3df541ea"}, 0x2, 0x1, {}, 0x7d, 0x0, r1})
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x42c00, 0x10)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000440)={&(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[<r5=>0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x3, 0x8, 0x5})
ioctl$DRM_IOCTL_MODE_SETGAMMA(r4, 0xc02064a5, &(0x7f0000000540)={r5, 0x5, &(0x7f0000000480)=[0xffff, 0x81, 0x6da, 0x1, 0x1], &(0x7f00000004c0)=[0x7ce], &(0x7f0000000500)=[0x3ff, 0x6a]})
ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000140)={0x0, @sliced={0xa5ce, [0x5, 0x5, 0x7, 0x3eb, 0x83ac, 0x1ff, 0x1, 0x6, 0xa844, 0x3, 0x7f, 0x9, 0x2, 0x9bd, 0x3, 0x80, 0x3, 0x5, 0x85f, 0xfffd, 0x9, 0x8, 0x2, 0x160, 0x4, 0x401, 0x3, 0x4, 0x857c, 0x3ff, 0x3ff, 0x9, 0x6, 0x8, 0xfc00, 0x1000, 0x6, 0x101, 0xf001, 0x1, 0x7ff, 0x9, 0x8, 0xb8, 0x5, 0x1000, 0x1, 0x6de], 0x80000001}}) (async)
ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000140)={0x0, @sliced={0xa5ce, [0x5, 0x5, 0x7, 0x3eb, 0x83ac, 0x1ff, 0x1, 0x6, 0xa844, 0x3, 0x7f, 0x9, 0x2, 0x9bd, 0x3, 0x80, 0x3, 0x5, 0x85f, 0xfffd, 0x9, 0x8, 0x2, 0x160, 0x4, 0x401, 0x3, 0x4, 0x857c, 0x3ff, 0x3ff, 0x9, 0x6, 0x8, 0xfc00, 0x1000, 0x6, 0x101, 0xf001, 0x1, 0x7ff, 0x9, 0x8, 0xb8, 0x5, 0x1000, 0x1, 0x6de], 0x80000001}})

00:36:16 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000080)=0x1)
setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000000c0), 0x4)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0189436, &(0x7f0000000040)={0x0, 0x3, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
unlinkat(r2, &(0x7f0000000100)='./file0\x00', 0x200)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0) (async)
ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000080)=0x1) (async)
setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000000c0), 0x4) (async)
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0189436, &(0x7f0000000040)={0x0, 0x3, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0) (async)
unlinkat(r2, &(0x7f0000000100)='./file0\x00', 0x200) (async)

00:36:16 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000100)={0x8, 0x3231564e, 0x2, @discrete={0xcd, 0x98e8}})
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000080)=[0x0]})
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x34324142})

00:36:16 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x3, 0x0, 0x1, "4c4a7a0ba0ac5e3194732c6b3ace982b0c1083af37c4243b254e3afb11a361c2", 0x38415262}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000001c0)=@fd={0x7, 0x3, 0x4, 0x400, 0x0, {}, {0x1, 0x8, 0x3f, 0xcb, 0x7f, 0xc6, "9f9bc840"}, 0x8, 0x4, {}, 0x3f}) (async)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x0, @vbi={0x1, 0x3f, 0x4cce, 0x32315241, [0x1f, 0x8], [0x101, 0x8], 0x108}}) (async)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x0, @sdr={0x3231564e, 0x8}})

00:36:16 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000100)={0x8, 0x3231564e, 0x2, @discrete={0xcd, 0x98e8}})
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000080)=[0x0]}) (async, rerun: 64)
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4}) (async, rerun: 64)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x34324142})

00:36:16 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2) (async)
r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.pending_reads\x00', 0x100, 0x19)
socketpair(0x23, 0x80000, 0x1000, &(0x7f0000000580)={<r2=>0xffffffffffffffff})
getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f00000005c0), &(0x7f0000000600)=0x4) (async)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)=@mmap={0x3f0, 0x1, 0x4, 0x100000, 0x7, {}, {0x5, 0x2, 0x9, 0x80, 0x1b, 0x1, "3df541ea"}, 0x2, 0x1, {}, 0x7d, 0x0, r1})
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}}) (async)
r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x42c00, 0x10) (async)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000440)={&(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[<r5=>0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x3, 0x8, 0x5})
ioctl$DRM_IOCTL_MODE_SETGAMMA(r4, 0xc02064a5, &(0x7f0000000540)={r5, 0x5, &(0x7f0000000480)=[0xffff, 0x81, 0x6da, 0x1, 0x1], &(0x7f00000004c0)=[0x7ce], &(0x7f0000000500)=[0x3ff, 0x6a]})
ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000140)={0x0, @sliced={0xa5ce, [0x5, 0x5, 0x7, 0x3eb, 0x83ac, 0x1ff, 0x1, 0x6, 0xa844, 0x3, 0x7f, 0x9, 0x2, 0x9bd, 0x3, 0x80, 0x3, 0x5, 0x85f, 0xfffd, 0x9, 0x8, 0x2, 0x160, 0x4, 0x401, 0x3, 0x4, 0x857c, 0x3ff, 0x3ff, 0x9, 0x6, 0x8, 0xfc00, 0x1000, 0x6, 0x101, 0xf001, 0x1, 0x7ff, 0x9, 0x8, 0xb8, 0x5, 0x1000, 0x1, 0x6de], 0x80000001}})

00:36:16 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0) (async, rerun: 32)
ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000080)=0x1) (async, rerun: 32)
setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000000c0), 0x4) (async)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0189436, &(0x7f0000000040)={0x0, 0x3, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async, rerun: 32)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (rerun: 32)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0) (async)
unlinkat(r2, &(0x7f0000000100)='./file0\x00', 0x200)

00:36:16 executing program 0:
r0 = syz_clone(0x820000, &(0x7f0000000080)="b3f80d6ea1d50b2158779c8688aed0043214258371354b682d09961bc60c0d924f27470be4f712d80a8261a65c28901a82344be17caaa8a65cb61a3f6ba7ed8e369a766147f119101973985e2938429ff04962f6c63ab44dd3504f7cf36913b76c057b841a93f92fb2ba71596fdfcedb3af9630b9d2835af8a16913603937e5faa286ca69053f2cc549719bfd638d2f69e13cb16597751f9fb093c065f3b0a17397d3a76c7d2c436ba22b605d4a5d2fbe38dabcfe6a5f66b650c9e25df16ad3b14c80ed44f38e79a10c4ce7dea3774c9d01a", 0xd2, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="a2acb74dcab2f0841df6377b9de598bb376098cb6b03f082e16e0adc01a8d07fa0c6433b3a6a42ab7252176d54b094b51262233ba9bfd968ccef84fa9dac154384ca2d5b6dbc7c519d5047939704b836c0a2b60b04225e645773dec1a4c327f676")
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000280)={0x9, 0x8001, {r0}, {0xffffffffffffffff}, 0x3, 0x6001})
getpgid(r0)

00:36:16 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x3, 0x0, 0x1, "4c4a7a0ba0ac5e3194732c6b3ace982b0c1083af37c4243b254e3afb11a361c2", 0x38415262})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000001c0)=@fd={0x7, 0x3, 0x4, 0x400, 0x0, {}, {0x1, 0x8, 0x3f, 0xcb, 0x7f, 0xc6, "9f9bc840"}, 0x8, 0x4, {}, 0x3f}) (async)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x0, @vbi={0x1, 0x3f, 0x4cce, 0x32315241, [0x1f, 0x8], [0x101, 0x8], 0x108}})
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x0, @sdr={0x3231564e, 0x8}})

00:36:16 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000100)={0x8, 0x3231564e, 0x2, @discrete={0xcd, 0x98e8}})
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000080)=[0x0]}) (async)
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x34324142})

00:36:16 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000000c0)=@userptr={0x5, 0x3, 0x4, 0x8, 0x3ff, {0x0, 0x2710}, {0x5, 0x2, 0x8, 0x40, 0x5, 0x6, "20a84e40"}, 0x7, 0x2, {&(0x7f0000000080)}, 0x7})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000001c0)={0x2, @pix_mp={0x9, 0x5, 0x59565955, 0x3, 0xb, [{0x2, 0x7}, {0x1000, 0x8fda}, {0x401}, {0x7}, {0x81}, {0x800, 0x6}, {0x9, 0x7}, {0x7fffffff, 0x400}], 0x4, 0x4, 0x2, 0x1, 0x2}})
ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000180)={0x0, 0x2, 0xffff257d, 0x5, &(0x7f0000000140)=[{0x2, 0xc9, 0x4, 0x3887}, {0x7ff, 0xe7, 0x8, 0x6}, {0x2, 0x8, 0xfff9, 0xb1}, {0x1, 0x6, 0x3, 0x7bf6}, {0x1000, 0x100, 0x2, 0xfff}]})

00:36:16 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x8, 0x0, 0x1, "512ebbcebbcba6fb7ee33f32b9e256d16bef51ab3cdab4ec3dbd214fe49c34aa", 0x38415262})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69ec88ea5f7169f616d8c0a0e4b65594ddb8a607070026dbe16f6b5bed00"})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f00000000c0)=0x1)

00:36:16 executing program 0:
r0 = syz_clone(0x820000, &(0x7f0000000080)="b3f80d6ea1d50b2158779c8688aed0043214258371354b682d09961bc60c0d924f27470be4f712d80a8261a65c28901a82344be17caaa8a65cb61a3f6ba7ed8e369a766147f119101973985e2938429ff04962f6c63ab44dd3504f7cf36913b76c057b841a93f92fb2ba71596fdfcedb3af9630b9d2835af8a16913603937e5faa286ca69053f2cc549719bfd638d2f69e13cb16597751f9fb093c065f3b0a17397d3a76c7d2c436ba22b605d4a5d2fbe38dabcfe6a5f66b650c9e25df16ad3b14c80ed44f38e79a10c4ce7dea3774c9d01a", 0xd2, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="a2acb74dcab2f0841df6377b9de598bb376098cb6b03f082e16e0adc01a8d07fa0c6433b3a6a42ab7252176d54b094b51262233ba9bfd968ccef84fa9dac154384ca2d5b6dbc7c519d5047939704b836c0a2b60b04225e645773dec1a4c327f676")
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000280)={0x9, 0x8001, {r0}, {0xffffffffffffffff}, 0x3, 0x6001})

00:36:16 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x1, 0x1, 0x1, {0x0, @pix={0x8, 0x3ff, 0x30383653, 0x4, 0x6, 0xffffff81, 0x5, 0x0, 0x1, 0x3, 0x2, 0x545c21bb07a4ebf2}}, 0x80})
r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000180)='.log\x00', 0x80001, 0x10)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)=@overlay={0x10001, 0x2, 0x4, 0x1, 0xc7c, {0x77359400}, {0x2, 0x1, 0xb, 0x20, 0x1, 0x1, "b7c2fdba"}, 0xfffffffd, 0x3, {}, 0x7, 0x0, r2})

00:36:17 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @vbi={0x1000000, 0x1, 0x1, 0x4c47504a, [0xa7d, 0x3], [0xeaf8, 0xffffff81], 0x2}})
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})

00:36:17 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async, rerun: 32)
ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000000c0)=@userptr={0x5, 0x3, 0x4, 0x8, 0x3ff, {0x0, 0x2710}, {0x5, 0x2, 0x8, 0x40, 0x5, 0x6, "20a84e40"}, 0x7, 0x2, {&(0x7f0000000080)}, 0x7}) (async, rerun: 32)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000001c0)={0x2, @pix_mp={0x9, 0x5, 0x59565955, 0x3, 0xb, [{0x2, 0x7}, {0x1000, 0x8fda}, {0x401}, {0x7}, {0x81}, {0x800, 0x6}, {0x9, 0x7}, {0x7fffffff, 0x400}], 0x4, 0x4, 0x2, 0x1, 0x2}})
ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000180)={0x0, 0x2, 0xffff257d, 0x5, &(0x7f0000000140)=[{0x2, 0xc9, 0x4, 0x3887}, {0x7ff, 0xe7, 0x8, 0x6}, {0x2, 0x8, 0xfff9, 0xb1}, {0x1, 0x6, 0x3, 0x7bf6}, {0x1000, 0x100, 0x2, 0xfff}]})

00:36:17 executing program 2:
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
getitimer(0x0, &(0x7f0000000140))
r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x20002, 0x80)
r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil)
shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000180)=""/47)
shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000180)=""/4096)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0], 0x1, 0x800, 0x0, <r2=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0205647, &(0x7f0000000040)={0x0, 0x3, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x35315258})

00:36:17 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x8, 0x0, 0x1, "512ebbcebbcba6fb7ee33f32b9e256d16bef51ab3cdab4ec3dbd214fe49c34aa", 0x38415262})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69ec88ea5f7169f616d8c0a0e4b65594ddb8a607070026dbe16f6b5bed00"}) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f00000000c0)=0x1)

00:36:17 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @vbi={0x1000000, 0x1, 0x1, 0x4c47504a, [0xa7d, 0x3], [0xeaf8, 0xffffff81], 0x2}})
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}}) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})

00:36:17 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x1, 0x1, 0x1, {0x0, @pix={0x8, 0x3ff, 0x30383653, 0x4, 0x6, 0xffffff81, 0x5, 0x0, 0x1, 0x3, 0x2, 0x545c21bb07a4ebf2}}, 0x80}) (async)
r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000180)='.log\x00', 0x80001, 0x10) (async)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)=@overlay={0x10001, 0x2, 0x4, 0x1, 0xc7c, {0x77359400}, {0x2, 0x1, 0xb, 0x20, 0x1, 0x1, "b7c2fdba"}, 0xfffffffd, 0x3, {}, 0x7, 0x0, r2})

00:36:17 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000000c0)=@userptr={0x5, 0x3, 0x4, 0x8, 0x3ff, {0x0, 0x2710}, {0x5, 0x2, 0x8, 0x40, 0x5, 0x6, "20a84e40"}, 0x7, 0x2, {&(0x7f0000000080)}, 0x7})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000001c0)={0x2, @pix_mp={0x9, 0x5, 0x59565955, 0x3, 0xb, [{0x2, 0x7}, {0x1000, 0x8fda}, {0x401}, {0x7}, {0x81}, {0x800, 0x6}, {0x9, 0x7}, {0x7fffffff, 0x400}], 0x4, 0x4, 0x2, 0x1, 0x2}}) (async)
ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000180)={0x0, 0x2, 0xffff257d, 0x5, &(0x7f0000000140)=[{0x2, 0xc9, 0x4, 0x3887}, {0x7ff, 0xe7, 0x8, 0x6}, {0x2, 0x8, 0xfff9, 0xb1}, {0x1, 0x6, 0x3, 0x7bf6}, {0x1000, 0x100, 0x2, 0xfff}]})

00:36:17 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x8, 0x0, 0x1, "512ebbcebbcba6fb7ee33f32b9e256d16bef51ab3cdab4ec3dbd214fe49c34aa", 0x38415262})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69ec88ea5f7169f616d8c0a0e4b65594ddb8a607070026dbe16f6b5bed00"})
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f00000000c0)=0x1)

00:36:17 executing program 2:
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
getitimer(0x0, &(0x7f0000000140)) (async)
r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x20002, 0x80) (async)
r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil)
shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000180)=""/47) (async)
shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000180)=""/4096) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0], 0x1, 0x800, 0x0, <r2=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0205647, &(0x7f0000000040)={0x0, 0x3, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x35315258})

00:36:17 executing program 1:
syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2) (async)
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @vbi={0x1000000, 0x1, 0x1, 0x4c47504a, [0xa7d, 0x3], [0xeaf8, 0xffffff81], 0x2}})
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})

00:36:17 executing program 0:
syz_clone(0x820000, &(0x7f0000000080)="b3f80d6ea1d50b2158779c8688aed0043214258371354b682d09961bc60c0d924f27470be4f712d80a8261a65c28901a82344be17caaa8a65cb61a3f6ba7ed8e369a766147f119101973985e2938429ff04962f6c63ab44dd3504f7cf36913b76c057b841a93f92fb2ba71596fdfcedb3af9630b9d2835af8a16913603937e5faa286ca69053f2cc549719bfd638d2f69e13cb16597751f9fb093c065f3b0a17397d3a76c7d2c436ba22b605d4a5d2fbe38dabcfe6a5f66b650c9e25df16ad3b14c80ed44f38e79a10c4ce7dea3774c9d01a", 0xd2, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="a2acb74dcab2f0841df6377b9de598bb376098cb6b03f082e16e0adc01a8d07fa0c6433b3a6a42ab7252176d54b094b51262233ba9bfd968ccef84fa9dac154384ca2d5b6dbc7c519d5047939704b836c0a2b60b04225e645773dec1a4c327f676")
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:17 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async, rerun: 64)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x1, 0x1, 0x1, {0x0, @pix={0x8, 0x3ff, 0x30383653, 0x4, 0x6, 0xffffff81, 0x5, 0x0, 0x1, 0x3, 0x2, 0x545c21bb07a4ebf2}}, 0x80}) (async, rerun: 64)
r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000180)='.log\x00', 0x80001, 0x10)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)=@overlay={0x10001, 0x2, 0x4, 0x1, 0xc7c, {0x77359400}, {0x2, 0x1, 0xb, 0x20, 0x1, 0x1, "b7c2fdba"}, 0xfffffffd, 0x3, {}, 0x7, 0x0, r2})

00:36:17 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000200)={0x7, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x4, 0x2)
r3 = openat$incfs(r0, &(0x7f0000000240)='.log\x00', 0x200, 0xab)
ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000400)={0x0, @sliced={0x8, [0x7, 0xfffd, 0x8, 0xa6da, 0x73, 0xffff, 0x9, 0x1, 0x6, 0x7, 0x5, 0x2, 0x9, 0x0, 0x2, 0x101, 0x8, 0xff, 0x9, 0x5, 0x4, 0x2000, 0x1, 0x2, 0xffc1, 0x2, 0x82, 0x8e, 0x5, 0x2, 0x3, 0x3, 0x9, 0x3, 0x1, 0x8df3, 0x80, 0xff, 0x3, 0x7, 0x800, 0x1, 0xde5, 0x6, 0x8, 0x3, 0x56e, 0x4], 0x3}})
ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x3, @pix_mp={0xcc5, 0x9, 0x32314d59, 0x2, 0x6, [{0x5, 0x4}, {0x7, 0x400}, {0x8}, {0x1, 0x67b}, {0x0, 0x5}, {0x7ff, 0x1}, {0xd7e, 0x5}, {0x5, 0xff}], 0x7, 0xff, 0x0, 0x1, 0x2}})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240), &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x6, 0x3, 0x40000000000000e4})
ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f00000003c0)={0x0, 0x1, 0x3f, 0x8, &(0x7f0000000380)=[{0x800, 0x6, 0x61}, {0x1, 0x7, 0x101, 0x81}, {0xe3a, 0xd1d7, 0x6, 0x7}, {0x146, 0x36ef, 0x8, 0x800}, {0x8000, 0x1, 0x1, 0x2}, {0xffff, 0x0, 0xa6e, 0xfe21}, {0x1, 0x4, 0x4, 0x1000}, {0x5, 0x5, 0x543f, 0x6}]})

00:36:17 executing program 2:
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
getitimer(0x0, &(0x7f0000000140))
openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x20002, 0x80) (async)
r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x20002, 0x80)
r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil)
shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000180)=""/47)
shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000180)=""/4096)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0], 0x1, 0x800, 0x0, <r2=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0205647, &(0x7f0000000040)={0x0, 0x3, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x35315258})

00:36:17 executing program 1:
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$get_persistent(0x16, 0xffffffffffffffff, r0)
r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x6000000000, 0x2)
ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f00000001c0)=@multiplanar_overlay={0xff000, 0x1, 0x4, 0x0, 0x401, {0x0, 0xea60}, {0x3, 0x8, 0x1, 0x0, 0x0, 0x1, "6762a4da"}, 0x6, 0x3, {&(0x7f0000000140)=[{0x8, 0x0, {0xd3a}, 0x3ff}, {0xbfc, 0xffffffff, {0xda0c}, 0x200}]}, 0x4})

00:36:17 executing program 5:
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x101001, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x6d5, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:17 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000200)={0x7, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async)
r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x4, 0x2) (async)
r3 = openat$incfs(r0, &(0x7f0000000240)='.log\x00', 0x200, 0xab)
ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000400)={0x0, @sliced={0x8, [0x7, 0xfffd, 0x8, 0xa6da, 0x73, 0xffff, 0x9, 0x1, 0x6, 0x7, 0x5, 0x2, 0x9, 0x0, 0x2, 0x101, 0x8, 0xff, 0x9, 0x5, 0x4, 0x2000, 0x1, 0x2, 0xffc1, 0x2, 0x82, 0x8e, 0x5, 0x2, 0x3, 0x3, 0x9, 0x3, 0x1, 0x8df3, 0x80, 0xff, 0x3, 0x7, 0x800, 0x1, 0xde5, 0x6, 0x8, 0x3, 0x56e, 0x4], 0x3}})
ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x3, @pix_mp={0xcc5, 0x9, 0x32314d59, 0x2, 0x6, [{0x5, 0x4}, {0x7, 0x400}, {0x8}, {0x1, 0x67b}, {0x0, 0x5}, {0x7ff, 0x1}, {0xd7e, 0x5}, {0x5, 0xff}], 0x7, 0xff, 0x0, 0x1, 0x2}}) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240), &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x6, 0x3, 0x40000000000000e4}) (async)
ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f00000003c0)={0x0, 0x1, 0x3f, 0x8, &(0x7f0000000380)=[{0x800, 0x6, 0x61}, {0x1, 0x7, 0x101, 0x81}, {0xe3a, 0xd1d7, 0x6, 0x7}, {0x146, 0x36ef, 0x8, 0x800}, {0x8000, 0x1, 0x1, 0x2}, {0xffff, 0x0, 0xa6e, 0xfe21}, {0x1, 0x4, 0x4, 0x1000}, {0x5, 0x5, 0x543f, 0x6}]})

00:36:17 executing program 3:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x40)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
socket$can_raw(0x1d, 0x3, 0x1)

00:36:17 executing program 0:
syz_clone(0x820000, &(0x7f0000000080)="b3f80d6ea1d50b2158779c8688aed0043214258371354b682d09961bc60c0d924f27470be4f712d80a8261a65c28901a82344be17caaa8a65cb61a3f6ba7ed8e369a766147f119101973985e2938429ff04962f6c63ab44dd3504f7cf36913b76c057b841a93f92fb2ba71596fdfcedb3af9630b9d2835af8a16913603937e5faa286ca69053f2cc549719bfd638d2f69e13cb16597751f9fb093c065f3b0a17397d3a76c7d2c436ba22b605d4a5d2fbe38dabcfe6a5f66b650c9e25df16ad3b14c80ed44f38e79a10c4ce7dea3774c9d01a", 0xd2, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="a2acb74dcab2f0841df6377b9de598bb376098cb6b03f082e16e0adc01a8d07fa0c6433b3a6a42ab7252176d54b094b51262233ba9bfd968ccef84fa9dac154384ca2d5b6dbc7c519d5047939704b836c0a2b60b04225e645773dec1a4c327f676")
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)

00:36:17 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x30324c4a})

00:36:17 executing program 5:
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x101001, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x6d5, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:17 executing program 1:
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$get_persistent(0x16, 0xffffffffffffffff, r0) (async)
keyctl$get_persistent(0x16, 0xffffffffffffffff, r0)
r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
syz_open_dev$vim2m(&(0x7f0000000080), 0x6000000000, 0x2) (async)
r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x6000000000, 0x2)
ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f00000001c0)=@multiplanar_overlay={0xff000, 0x1, 0x4, 0x0, 0x401, {0x0, 0xea60}, {0x3, 0x8, 0x1, 0x0, 0x0, 0x1, "6762a4da"}, 0x6, 0x3, {&(0x7f0000000140)=[{0x8, 0x0, {0xd3a}, 0x3ff}, {0xbfc, 0xffffffff, {0xda0c}, 0x200}]}, 0x4})

00:36:17 executing program 3:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x40) (async)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
socket$can_raw(0x1d, 0x3, 0x1)

00:36:17 executing program 5:
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x101001, 0x0) (async)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x6d5, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:17 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000200)={0x7, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async)
r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x4, 0x2) (async)
r3 = openat$incfs(r0, &(0x7f0000000240)='.log\x00', 0x200, 0xab)
ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000400)={0x0, @sliced={0x8, [0x7, 0xfffd, 0x8, 0xa6da, 0x73, 0xffff, 0x9, 0x1, 0x6, 0x7, 0x5, 0x2, 0x9, 0x0, 0x2, 0x101, 0x8, 0xff, 0x9, 0x5, 0x4, 0x2000, 0x1, 0x2, 0xffc1, 0x2, 0x82, 0x8e, 0x5, 0x2, 0x3, 0x3, 0x9, 0x3, 0x1, 0x8df3, 0x80, 0xff, 0x3, 0x7, 0x800, 0x1, 0xde5, 0x6, 0x8, 0x3, 0x56e, 0x4], 0x3}}) (async)
ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x3, @pix_mp={0xcc5, 0x9, 0x32314d59, 0x2, 0x6, [{0x5, 0x4}, {0x7, 0x400}, {0x8}, {0x1, 0x67b}, {0x0, 0x5}, {0x7ff, 0x1}, {0xd7e, 0x5}, {0x5, 0xff}], 0x7, 0xff, 0x0, 0x1, 0x2}}) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240), &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x6, 0x3, 0x40000000000000e4})
ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f00000003c0)={0x0, 0x1, 0x3f, 0x8, &(0x7f0000000380)=[{0x800, 0x6, 0x61}, {0x1, 0x7, 0x101, 0x81}, {0xe3a, 0xd1d7, 0x6, 0x7}, {0x146, 0x36ef, 0x8, 0x800}, {0x8000, 0x1, 0x1, 0x2}, {0xffff, 0x0, 0xa6e, 0xfe21}, {0x1, 0x4, 0x4, 0x1000}, {0x5, 0x5, 0x543f, 0x6}]})

00:36:17 executing program 0:
syz_clone(0x820000, &(0x7f0000000080)="b3f80d6ea1d50b2158779c8688aed0043214258371354b682d09961bc60c0d924f27470be4f712d80a8261a65c28901a82344be17caaa8a65cb61a3f6ba7ed8e369a766147f119101973985e2938429ff04962f6c63ab44dd3504f7cf36913b76c057b841a93f92fb2ba71596fdfcedb3af9630b9d2835af8a16913603937e5faa286ca69053f2cc549719bfd638d2f69e13cb16597751f9fb093c065f3b0a17397d3a76c7d2c436ba22b605d4a5d2fbe38dabcfe6a5f66b650c9e25df16ad3b14c80ed44f38e79a10c4ce7dea3774c9d01a", 0xd2, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="a2acb74dcab2f0841df6377b9de598bb376098cb6b03f082e16e0adc01a8d07fa0c6433b3a6a42ab7252176d54b094b51262233ba9bfd968ccef84fa9dac154384ca2d5b6dbc7c519d5047939704b836c0a2b60b04225e645773dec1a4c327f676")

00:36:17 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x30324c4a})

00:36:17 executing program 3:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x40)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
socket$can_raw(0x1d, 0x3, 0x1) (async)
socket$can_raw(0x1d, 0x3, 0x1)

00:36:17 executing program 1:
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$get_persistent(0x16, 0xffffffffffffffff, r0)
r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x6000000000, 0x2)
ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f00000001c0)=@multiplanar_overlay={0xff000, 0x1, 0x4, 0x0, 0x401, {0x0, 0xea60}, {0x3, 0x8, 0x1, 0x0, 0x0, 0x1, "6762a4da"}, 0x6, 0x3, {&(0x7f0000000140)=[{0x8, 0x0, {0xd3a}, 0x3ff}, {0xbfc, 0xffffffff, {0xda0c}, 0x200}]}, 0x4})
add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) (async)
keyctl$get_persistent(0x16, 0xffffffffffffffff, r0) (async)
syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}}) (async)
syz_open_dev$vim2m(&(0x7f0000000080), 0x6000000000, 0x2) (async)
ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f00000001c0)=@multiplanar_overlay={0xff000, 0x1, 0x4, 0x0, 0x401, {0x0, 0xea60}, {0x3, 0x8, 0x1, 0x0, 0x0, 0x1, "6762a4da"}, 0x6, 0x3, {&(0x7f0000000140)=[{0x8, 0x0, {0xd3a}, 0x3ff}, {0xbfc, 0xffffffff, {0xda0c}, 0x200}]}, 0x4}) (async)

00:36:17 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x5, 0x3, "69eb88ea5f7100000000c70389c0a0ecb63d81ddb8a2c39cd926dbe16f6b5b03", 0x34324d59})
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x1, 0x41415270, 0x2, @discrete={0x7, 0x5}})

00:36:17 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x30324c4a})

00:36:17 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x0)
sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000002}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x1)
syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0x400448c9, &(0x7f0000000040)={0x0, 0x1, 0x2, "69eb88ea5f711a254173c70389c0a0e4b65581dde16f675bed00", 0x34424752})

00:36:17 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000100)='.log\x00', 0xc0040, 0x1)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000140)=@multiplanar_mmap={0x3, 0x1, 0x4, 0x0, 0x6, {}, {0x5, 0x8, 0x7, 0xd3, 0x2, 0xb8, "b932d312"}, 0x0, 0x1, {&(0x7f0000000080)=[{0x81, 0x1fe, {0x8}, 0x6}, {0x7f, 0x8, {0x1}, 0x3}]}, 0x8, 0x0, r1})

00:36:17 executing program 0:
syz_clone(0x0, &(0x7f0000000080)="b3f80d6ea1d50b2158779c8688aed0043214258371354b682d09961bc60c0d924f27470be4f712d80a8261a65c28901a82344be17caaa8a65cb61a3f6ba7ed8e369a766147f119101973985e2938429ff04962f6c63ab44dd3504f7cf36913b76c057b841a93f92fb2ba71596fdfcedb3af9630b9d2835af8a16913603937e5faa286ca69053f2cc549719bfd638d2f69e13cb16597751f9fb093c065f3b0a17397d3a76c7d2c436ba22b605d4a5d2fbe38dabcfe6a5f66b650c9e25df16ad3b14c80ed44f38e79a10c4ce7dea3774c9d01a", 0xd2, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="a2acb74dcab2f0841df6377b9de598bb376098cb6b03f082e16e0adc01a8d07fa0c6433b3a6a42ab7252176d54b094b51262233ba9bfd968ccef84fa9dac154384ca2d5b6dbc7c519d5047939704b836c0a2b60b04225e645773dec1a4c327f676")

00:36:17 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x5, 0x3, "69eb88ea5f7100000000c70389c0a0ecb63d81ddb8a2c39cd926dbe16f6b5b03", 0x34324d59}) (async)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x1, 0x41415270, 0x2, @discrete={0x7, 0x5}})

00:36:17 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000100)={0x0, 0x2, 0x7, 0x0, 0x2})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$cont(0xffffffffffffffff, r2, 0x0, 0x0)
rt_tgsigqueueinfo(0xffffffffffffffff, r2, 0x2e, &(0x7f0000000080)={0x1e, 0x9, 0xfff})

00:36:17 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0x800, 0x8001})
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
clock_gettime(0x0, &(0x7f0000000000)={<r1=>0x0, <r2=>0x0})
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000001c0)=@multiplanar_userptr={0x8000, 0x1, 0x4, 0x10000, 0x0, {r1, r2/1000+60000}, {0x5, 0x1, 0x7f, 0x37, 0x8, 0x9, "e77172a0"}, 0x401, 0x2, {&(0x7f0000000140)=[{0x3, 0x1, {&(0x7f0000000040)}, 0x8}, {0x7, 0x7, {&(0x7f0000000080)}, 0x2}]}, 0x3})

00:36:17 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x0)
sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000002}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x1)
syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2) (async)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0x400448c9, &(0x7f0000000040)={0x0, 0x1, 0x2, "69eb88ea5f711a254173c70389c0a0e4b65581dde16f675bed00", 0x34424752})

00:36:17 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000100)='.log\x00', 0xc0040, 0x1)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000140)=@multiplanar_mmap={0x3, 0x1, 0x4, 0x0, 0x6, {}, {0x5, 0x8, 0x7, 0xd3, 0x2, 0xb8, "b932d312"}, 0x0, 0x1, {&(0x7f0000000080)=[{0x81, 0x1fe, {0x8}, 0x6}, {0x7f, 0x8, {0x1}, 0x3}]}, 0x8, 0x0, r1})

00:36:17 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x5, 0x3, "69eb88ea5f7100000000c70389c0a0ecb63d81ddb8a2c39cd926dbe16f6b5b03", 0x34324d59}) (async)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x1, 0x41415270, 0x2, @discrete={0x7, 0x5}})

00:36:17 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0x800, 0x8001}) (async)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0x800, 0x8001})
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
clock_gettime(0x0, &(0x7f0000000000)={<r1=>0x0, <r2=>0x0})
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000001c0)=@multiplanar_userptr={0x8000, 0x1, 0x4, 0x10000, 0x0, {r1, r2/1000+60000}, {0x5, 0x1, 0x7f, 0x37, 0x8, 0x9, "e77172a0"}, 0x401, 0x2, {&(0x7f0000000140)=[{0x3, 0x1, {&(0x7f0000000040)}, 0x8}, {0x7, 0x7, {&(0x7f0000000080)}, 0x2}]}, 0x3})

00:36:17 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000100)={0x0, 0x2, 0x7, 0x0, 0x2}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$cont(0xffffffffffffffff, r2, 0x0, 0x0) (async)
rt_tgsigqueueinfo(0xffffffffffffffff, r2, 0x2e, &(0x7f0000000080)={0x1e, 0x9, 0xfff})

00:36:17 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000100)='.log\x00', 0xc0040, 0x1)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000140)=@multiplanar_mmap={0x3, 0x1, 0x4, 0x0, 0x6, {}, {0x5, 0x8, 0x7, 0xd3, 0x2, 0xb8, "b932d312"}, 0x0, 0x1, {&(0x7f0000000080)=[{0x81, 0x1fe, {0x8}, 0x6}, {0x7f, 0x8, {0x1}, 0x3}]}, 0x8, 0x0, r1})

00:36:17 executing program 0:
syz_clone(0x0, &(0x7f0000000080)="b3f80d6ea1d50b2158779c8688aed0043214258371354b682d09961bc60c0d924f27470be4f712d80a8261a65c28901a82344be17caaa8a65cb61a3f6ba7ed8e369a766147f119101973985e2938429ff04962f6c63ab44dd3504f7cf36913b76c057b841a93f92fb2ba71596fdfcedb3af9630b9d2835af8a16913603937e5faa286ca69053f2cc549719bfd638d2f69e13cb16597751f9fb093c065f3b0a17397d3a76c7d2c436ba22b605d4a5d2fbe38dabcfe6a5f66b650c9e25df16ad3b14c80ed44f38e79a10c4ce7dea3774c9d01a", 0xd2, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="a2acb74dcab2f0841df6377b9de598bb376098cb6b03f082e16e0adc01a8d07fa0c6433b3a6a42ab7252176d54b094b51262233ba9bfd968ccef84fa9dac154384ca2d5b6dbc7c519d5047939704b836c0a2b60b04225e645773dec1a4c327f676")

00:36:17 executing program 5:
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f00000000c0)={0x0, 0x3})
r0 = getpid()
sched_rr_get_interval(r0, &(0x7f0000000080))
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000100)=@overlay={0x8, 0x1, 0x4, 0x400, 0x3fa8, {0x0, 0xea60}, {0x4, 0x0, 0x40, 0x3f, 0x4, 0x6, "0f450005"}, 0x9, 0x3, {}, 0x544})
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:17 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x0)
sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000002}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x1)
syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0x400448c9, &(0x7f0000000040)={0x0, 0x1, 0x2, "69eb88ea5f711a254173c70389c0a0e4b65581dde16f675bed00", 0x34424752})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async)
sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x0) (async)
sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000002}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x1) (async)
syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0x400448c9, &(0x7f0000000040)={0x0, 0x1, 0x2, "69eb88ea5f711a254173c70389c0a0e4b65581dde16f675bed00", 0x34424752}) (async)

00:36:17 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0x800, 0x8001}) (async, rerun: 32)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}}) (async, rerun: 32)
clock_gettime(0x0, &(0x7f0000000000)={<r1=>0x0, <r2=>0x0})
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000001c0)=@multiplanar_userptr={0x8000, 0x1, 0x4, 0x10000, 0x0, {r1, r2/1000+60000}, {0x5, 0x1, 0x7f, 0x37, 0x8, 0x9, "e77172a0"}, 0x401, 0x2, {&(0x7f0000000140)=[{0x3, 0x1, {&(0x7f0000000040)}, 0x8}, {0x7, 0x7, {&(0x7f0000000080)}, 0x2}]}, 0x3})

00:36:17 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000100)={0x0, 0x2, 0x7, 0x0, 0x2})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$cont(0xffffffffffffffff, r2, 0x0, 0x0)
rt_tgsigqueueinfo(0xffffffffffffffff, r2, 0x2e, &(0x7f0000000080)={0x1e, 0x9, 0xfff})

00:36:17 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000080)={0xffffffff, 0x2, 0x0, "40cc37b0eb24dc1fa6c39cd926dbb0a89e5a1020ed7500"})

00:36:17 executing program 5:
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f00000000c0)={0x0, 0x3})
r0 = getpid()
sched_rr_get_interval(r0, &(0x7f0000000080)) (async, rerun: 32)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async, rerun: 32)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000100)=@overlay={0x8, 0x1, 0x4, 0x400, 0x3fa8, {0x0, 0xea60}, {0x4, 0x0, 0x40, 0x3f, 0x4, 0x6, "0f450005"}, 0x9, 0x3, {}, 0x544}) (async, rerun: 64)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (rerun: 64)

00:36:17 executing program 0:
syz_clone(0x0, &(0x7f0000000080)="b3f80d6ea1d50b2158779c8688aed0043214258371354b682d09961bc60c0d924f27470be4f712d80a8261a65c28901a82344be17caaa8a65cb61a3f6ba7ed8e369a766147f119101973985e2938429ff04962f6c63ab44dd3504f7cf36913b76c057b841a93f92fb2ba71596fdfcedb3af9630b9d2835af8a16913603937e5faa286ca69053f2cc549719bfd638d2f69e13cb16597751f9fb093c065f3b0a17397d3a76c7d2c436ba22b605d4a5d2fbe38dabcfe6a5f66b650c9e25df16ad3b14c80ed44f38e79a10c4ce7dea3774c9d01a", 0xd2, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="a2acb74dcab2f0841df6377b9de598bb376098cb6b03f082e16e0adc01a8d07fa0c6433b3a6a42ab7252176d54b094b51262233ba9bfd968ccef84fa9dac154384ca2d5b6dbc7c519d5047939704b836c0a2b60b04225e645773dec1a4c327f676")

00:36:17 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x1, @pix_mp={0x5, 0x4, 0x494e4f4b, 0x3966f3fecc61556f, 0x4, [{0x5, 0x7fff}, {0x800, 0xfff}, {0xff, 0x10000}, {0x4, 0x4}, {0x1}, {0x401, 0x80000000}, {0xe502, 0x100}, {0x4, 0xacac}], 0x3f, 0x40, 0x4, 0x0, 0x1}})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000400)={0x2, @pix={0xa34, 0x2, 0x3831354f, 0x6, 0x6, 0x1c00, 0xc, 0x51a7c1a3, 0x0, 0x4, 0x0, 0x1}})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x3, @vbi={0x75, 0x0, 0x6, 0x31364d59, [0x1d49, 0x2], [0x7, 0x254a1b7f], 0x2}})
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi={0x1, 0xfed, 0x8, 0xc82429ea19703c01, [0xff, 0xc69a], [0xffff, 0x80000001], 0x1}})
syz_open_dev$dri(&(0x7f00000003c0), 0x8, 0x40000)

00:36:17 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000080)={0xffffffff, 0x2, 0x0, "40cc37b0eb24dc1fa6c39cd926dbb0a89e5a1020ed7500"})

00:36:17 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x0, 0xff, 0x8, 0x20}, 0x8, 0x57, &(0x7f0000000100)={{0x9, 0x45, 0x3, 0x1}, &(0x7f00000000c0)={{0x8, 0xfffffffd, 0x4, 0x5}}}, 0x5, &(0x7f0000000140)="9a9397a26c9a6c4d48a49d2476b0bfb29a44", 0xfa}})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:17 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0x1, @vbi={0x100000, 0x0, 0x0, 0x0, [], [0x9]}})

00:36:17 executing program 5:
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f00000000c0)={0x0, 0x3})
r0 = getpid()
sched_rr_get_interval(r0, &(0x7f0000000080)) (async)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000100)=@overlay={0x8, 0x1, 0x4, 0x400, 0x3fa8, {0x0, 0xea60}, {0x4, 0x0, 0x40, 0x3f, 0x4, 0x6, "0f450005"}, 0x9, 0x3, {}, 0x544}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:17 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000080)={0xffffffff, 0x2, 0x0, "40cc37b0eb24dc1fa6c39cd926dbb0a89e5a1020ed7500"})

00:36:17 executing program 0:
syz_clone(0x820000, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="a2acb74dcab2f0841df6377b9de598bb376098cb6b03f082e16e0adc01a8d07fa0c6433b3a6a42ab7252176d54b094b51262233ba9bfd968ccef84fa9dac154384ca2d5b6dbc7c519d5047939704b836c0a2b60b04225e645773dec1a4c327f676")

00:36:17 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0x1, @vbi={0x100000, 0x0, 0x0, 0x0, [], [0x9]}})

00:36:17 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x1, @pix_mp={0x5, 0x4, 0x494e4f4b, 0x3966f3fecc61556f, 0x4, [{0x5, 0x7fff}, {0x800, 0xfff}, {0xff, 0x10000}, {0x4, 0x4}, {0x1}, {0x401, 0x80000000}, {0xe502, 0x100}, {0x4, 0xacac}], 0x3f, 0x40, 0x4, 0x0, 0x1}}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000400)={0x2, @pix={0xa34, 0x2, 0x3831354f, 0x6, 0x6, 0x1c00, 0xc, 0x51a7c1a3, 0x0, 0x4, 0x0, 0x1}}) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x3, @vbi={0x75, 0x0, 0x6, 0x31364d59, [0x1d49, 0x2], [0x7, 0x254a1b7f], 0x2}}) (async)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi={0x1, 0xfed, 0x8, 0xc82429ea19703c01, [0xff, 0xc69a], [0xffff, 0x80000001], 0x1}}) (async)
syz_open_dev$dri(&(0x7f00000003c0), 0x8, 0x40000)

00:36:17 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x0, 0xff, 0x8, 0x20}, 0x8, 0x57, &(0x7f0000000100)={{0x9, 0x45, 0x3, 0x1}, &(0x7f00000000c0)={{0x8, 0xfffffffd, 0x4, 0x5}}}, 0x5, &(0x7f0000000140)="9a9397a26c9a6c4d48a49d2476b0bfb29a44", 0xfa}}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:17 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:17 executing program 5:
r0 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc3}, &(0x7f0000000380)={0x0, "13d37fad5367b338c7c549f20f23ee6d28bb649fa549ef069b8e9e896a3f8f01c4196dd7cbabd8ac0593e1388dc2e732d8b4db2350914c9eb0ba899c34f0dd95"}, 0x48, 0xfffffffffffffffe)
keyctl$search(0xa, r0, &(0x7f0000000440)='id_resolver\x00', &(0x7f0000000480)={'syz', 0x1}, 0x0)
keyctl$unlink(0x9, r0, 0xfffffffffffffffa)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r2 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x1, 0x0, 0x10001})
r3 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, r2)
add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000240)={0x0, "61c95eab87aed1b10b75fe16c10d0659b758f6fe00e74926d69b2cbe7e22064adcbedf6703c3e56435e32416b586d7fd3e4982ce10dd06c9fbeba39f196d7d78", 0x37}, 0x48, r3)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, &(0x7f00000004c0)={0x0, 0x0, 0x10000, 0xfac3, 0x2})
r5 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7fffffff, 0x2)
ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000100)=0x1)

00:36:17 executing program 0:
syz_clone(0x820000, 0x0, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200)="a2acb74dcab2f0841df6377b9de598bb376098cb6b03f082e16e0adc01a8d07fa0c6433b3a6a42ab7252176d54b094b51262233ba9bfd968ccef84fa9dac154384ca2d5b6dbc7c519d5047939704b836c0a2b60b04225e645773dec1a4c327f676")

00:36:17 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0x1, @vbi={0x100000, 0x0, 0x0, 0x0, [], [0x9]}})

00:36:17 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x1, @pix_mp={0x5, 0x4, 0x494e4f4b, 0x3966f3fecc61556f, 0x4, [{0x5, 0x7fff}, {0x800, 0xfff}, {0xff, 0x10000}, {0x4, 0x4}, {0x1}, {0x401, 0x80000000}, {0xe502, 0x100}, {0x4, 0xacac}], 0x3f, 0x40, 0x4, 0x0, 0x1}})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000400)={0x2, @pix={0xa34, 0x2, 0x3831354f, 0x6, 0x6, 0x1c00, 0xc, 0x51a7c1a3, 0x0, 0x4, 0x0, 0x1}})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x3, @vbi={0x75, 0x0, 0x6, 0x31364d59, [0x1d49, 0x2], [0x7, 0x254a1b7f], 0x2}})
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi={0x1, 0xfed, 0x8, 0xc82429ea19703c01, [0xff, 0xc69a], [0xffff, 0x80000001], 0x1}})
syz_open_dev$dri(&(0x7f00000003c0), 0x8, 0x40000)
syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x1, @pix_mp={0x5, 0x4, 0x494e4f4b, 0x3966f3fecc61556f, 0x4, [{0x5, 0x7fff}, {0x800, 0xfff}, {0xff, 0x10000}, {0x4, 0x4}, {0x1}, {0x401, 0x80000000}, {0xe502, 0x100}, {0x4, 0xacac}], 0x3f, 0x40, 0x4, 0x0, 0x1}}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000400)={0x2, @pix={0xa34, 0x2, 0x3831354f, 0x6, 0x6, 0x1c00, 0xc, 0x51a7c1a3, 0x0, 0x4, 0x0, 0x1}}) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x3, @vbi={0x75, 0x0, 0x6, 0x31364d59, [0x1d49, 0x2], [0x7, 0x254a1b7f], 0x2}}) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async)
ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi={0x1, 0xfed, 0x8, 0xc82429ea19703c01, [0xff, 0xc69a], [0xffff, 0x80000001], 0x1}}) (async)
syz_open_dev$dri(&(0x7f00000003c0), 0x8, 0x40000) (async)

00:36:17 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:17 executing program 5:
r0 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc3}, &(0x7f0000000380)={0x0, "13d37fad5367b338c7c549f20f23ee6d28bb649fa549ef069b8e9e896a3f8f01c4196dd7cbabd8ac0593e1388dc2e732d8b4db2350914c9eb0ba899c34f0dd95"}, 0x48, 0xfffffffffffffffe)
keyctl$search(0xa, r0, &(0x7f0000000440)='id_resolver\x00', &(0x7f0000000480)={'syz', 0x1}, 0x0)
keyctl$unlink(0x9, r0, 0xfffffffffffffffa)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r2 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x1, 0x0, 0x10001})
r3 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, r2)
add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000240)={0x0, "61c95eab87aed1b10b75fe16c10d0659b758f6fe00e74926d69b2cbe7e22064adcbedf6703c3e56435e32416b586d7fd3e4982ce10dd06c9fbeba39f196d7d78", 0x37}, 0x48, r3)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, &(0x7f00000004c0)={0x0, 0x0, 0x10000, 0xfac3, 0x2})
r5 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7fffffff, 0x2)
ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000100)=0x1)
add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc3}, &(0x7f0000000380)={0x0, "13d37fad5367b338c7c549f20f23ee6d28bb649fa549ef069b8e9e896a3f8f01c4196dd7cbabd8ac0593e1388dc2e732d8b4db2350914c9eb0ba899c34f0dd95"}, 0x48, 0xfffffffffffffffe) (async)
keyctl$search(0xa, r0, &(0x7f0000000440)='id_resolver\x00', &(0x7f0000000480)={'syz', 0x1}, 0x0) (async)
keyctl$unlink(0x9, r0, 0xfffffffffffffffa) (async)
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) (async)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x1, 0x0, 0x10001}) (async)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, r2) (async)
add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000240)={0x0, "61c95eab87aed1b10b75fe16c10d0659b758f6fe00e74926d69b2cbe7e22064adcbedf6703c3e56435e32416b586d7fd3e4982ce10dd06c9fbeba39f196d7d78", 0x37}, 0x48, r3) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, &(0x7f00000004c0)={0x0, 0x0, 0x10000, 0xfac3, 0x2}) (async)
syz_open_dev$vim2m(&(0x7f00000000c0), 0x7fffffff, 0x2) (async)
ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000100)=0x1) (async)

00:36:17 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x0, 0xff, 0x8, 0x20}, 0x8, 0x57, &(0x7f0000000100)={{0x9, 0x45, 0x3, 0x1}, &(0x7f00000000c0)={{0x8, 0xfffffffd, 0x4, 0x5}}}, 0x5, &(0x7f0000000140)="9a9397a26c9a6c4d48a49d2476b0bfb29a44", 0xfa}}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:18 executing program 1:
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200)={<r0=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000380)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), r0, 0x7}}, 0x18)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x28, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2a, 0xb9}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000054)
r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000003c0)={0x0, @sdr={0x34424752, 0x1ff}})
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000500)={0x1, 0x0, &(0x7f00000004c0)=[<r4=>0x0]})
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000540)={0xc01, 0x0, r4})
ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x32525942, [], [0x9]}})

00:36:18 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:18 executing program 0:
syz_clone(0x820000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)="a2acb74dcab2f0841df6377b9de598bb376098cb6b03f082e16e0adc01a8d07fa0c6433b3a6a42ab7252176d54b094b51262233ba9bfd968ccef84fa9dac154384ca2d5b6dbc7c519d5047939704b836c0a2b60b04225e645773dec1a4c327f676")

00:36:18 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:18 executing program 5:
r0 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc3}, &(0x7f0000000380)={0x0, "13d37fad5367b338c7c549f20f23ee6d28bb649fa549ef069b8e9e896a3f8f01c4196dd7cbabd8ac0593e1388dc2e732d8b4db2350914c9eb0ba899c34f0dd95"}, 0x48, 0xfffffffffffffffe)
keyctl$search(0xa, r0, &(0x7f0000000440)='id_resolver\x00', &(0x7f0000000480)={'syz', 0x1}, 0x0)
keyctl$unlink(0x9, r0, 0xfffffffffffffffa)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r2 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x1, 0x0, 0x10001})
r3 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, r2)
add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000240)={0x0, "61c95eab87aed1b10b75fe16c10d0659b758f6fe00e74926d69b2cbe7e22064adcbedf6703c3e56435e32416b586d7fd3e4982ce10dd06c9fbeba39f196d7d78", 0x37}, 0x48, r3)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, &(0x7f00000004c0)={0x0, 0x0, 0x10000, 0xfac3, 0x2})
r5 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7fffffff, 0x2)
ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000100)=0x1)
add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc3}, &(0x7f0000000380)={0x0, "13d37fad5367b338c7c549f20f23ee6d28bb649fa549ef069b8e9e896a3f8f01c4196dd7cbabd8ac0593e1388dc2e732d8b4db2350914c9eb0ba899c34f0dd95"}, 0x48, 0xfffffffffffffffe) (async)
keyctl$search(0xa, r0, &(0x7f0000000440)='id_resolver\x00', &(0x7f0000000480)={'syz', 0x1}, 0x0) (async)
keyctl$unlink(0x9, r0, 0xfffffffffffffffa) (async)
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) (async)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x1, 0x0, 0x10001}) (async)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, r2) (async)
add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000240)={0x0, "61c95eab87aed1b10b75fe16c10d0659b758f6fe00e74926d69b2cbe7e22064adcbedf6703c3e56435e32416b586d7fd3e4982ce10dd06c9fbeba39f196d7d78", 0x37}, 0x48, r3) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, &(0x7f00000004c0)={0x0, 0x0, 0x10000, 0xfac3, 0x2}) (async)
syz_open_dev$vim2m(&(0x7f00000000c0), 0x7fffffff, 0x2) (async)
ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000100)=0x1) (async)

00:36:18 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)=@userptr={0x1, 0x1, 0x4, 0x2, 0x0, {0x77359400}, {0x4, 0x1, 0x0, 0x40, 0x8, 0x9, "31a45a37"}, 0x8, 0x2, {&(0x7f0000000080)}})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:18 executing program 1:
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200)={<r0=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000380)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), r0, 0x7}}, 0x18)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x28, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2a, 0xb9}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000054)
r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2) (async)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000003c0)={0x0, @sdr={0x34424752, 0x1ff}}) (async)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000500)={0x1, 0x0, &(0x7f00000004c0)=[<r4=>0x0]})
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000540)={0xc01, 0x0, r4}) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x32525942, [], [0x9]}})

00:36:18 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x2, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:18 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)

00:36:18 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)=@userptr={0x1, 0x1, 0x4, 0x2, 0x0, {0x77359400}, {0x4, 0x1, 0x0, 0x40, 0x8, 0x9, "31a45a37"}, 0x8, 0x2, {&(0x7f0000000080)}}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:18 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x400000, 0x9)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000240)={0x3, &(0x7f0000000200)=[{}, {}, {}]})
ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000000c0)={0x1, @sliced={0x5, [0xfffb, 0x0, 0x7, 0xbad7, 0x13d7, 0x7, 0x7, 0x0, 0x8, 0x6, 0x208, 0x0, 0x2, 0xffe0, 0x0, 0x1ff, 0x8001, 0x4, 0x5, 0xc8, 0x81, 0x5, 0x8, 0x0, 0x9, 0x0, 0x7, 0xfe01, 0x7, 0x145e, 0x0, 0xffff, 0x401, 0x8, 0x800, 0x0, 0x62, 0x7ff, 0x4267, 0x0, 0xf49, 0x3, 0x7ff, 0x101, 0x1000, 0x6, 0x8], 0x4}})
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f00000001c0))

00:36:18 executing program 1:
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200)={<r0=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000380)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), r0, 0x7}}, 0x18) (async)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x28, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2a, 0xb9}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000054) (async)
r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2) (async)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000003c0)={0x0, @sdr={0x34424752, 0x1ff}}) (async)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000500)={0x1, 0x0, &(0x7f00000004c0)=[<r4=>0x0]})
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000540)={0xc01, 0x0, r4})
ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x32525942, [], [0x9]}})

00:36:18 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)

00:36:18 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x2, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:18 executing program 0:
syz_clone(0x820000, 0x0, 0x0, 0x0, 0x0, 0x0)

00:36:18 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x2, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x2, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:18 executing program 4:
syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2) (async)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)=@userptr={0x1, 0x1, 0x4, 0x2, 0x0, {0x77359400}, {0x4, 0x1, 0x0, 0x40, 0x8, 0x9, "31a45a37"}, 0x8, 0x2, {&(0x7f0000000080)}})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:18 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000140)={0x1, @win={{0x0, 0x5e, 0x9, 0x8001}, 0x9, 0x9, &(0x7f0000000080)={{0x0, 0xdd1, 0xb063, 0x8}, &(0x7f0000000040)={{0xfff, 0x1, 0x3, 0x6}, &(0x7f0000000000)={{0x7f, 0x8, 0x80000000, 0xffff}}}}, 0x77, &(0x7f0000000340)="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"}})

00:36:18 executing program 5:
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x400000, 0x9)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000240)={0x3, &(0x7f0000000200)=[{}, {}, {}]}) (async)
ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000240)={0x3, &(0x7f0000000200)=[{}, {}, {}]})
ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000000c0)={0x1, @sliced={0x5, [0xfffb, 0x0, 0x7, 0xbad7, 0x13d7, 0x7, 0x7, 0x0, 0x8, 0x6, 0x208, 0x0, 0x2, 0xffe0, 0x0, 0x1ff, 0x8001, 0x4, 0x5, 0xc8, 0x81, 0x5, 0x8, 0x0, 0x9, 0x0, 0x7, 0xfe01, 0x7, 0x145e, 0x0, 0xffff, 0x401, 0x8, 0x800, 0x0, 0x62, 0x7ff, 0x4267, 0x0, 0xf49, 0x3, 0x7ff, 0x101, 0x1000, 0x6, 0x8], 0x4}})
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f00000001c0))

00:36:18 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x69}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0xf9}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:18 executing program 0:
r0 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc3}, &(0x7f0000000380)={0x0, "13d37fad5367b338c7c549f20f23ee6d28bb649fa549ef069b8e9e896a3f8f01c4196dd7cbabd8ac0593e1388dc2e732d8b4db2350914c9eb0ba899c34f0dd95"}, 0x48, 0xfffffffffffffffe)
keyctl$search(0xa, r0, &(0x7f0000000440)='id_resolver\x00', &(0x7f0000000480)={'syz', 0x1}, 0x0)
keyctl$unlink(0x9, r0, 0xfffffffffffffffa)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r2 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x1, 0x0, 0x10001})
r3 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, r2)
add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000240)={0x0, "61c95eab87aed1b10b75fe16c10d0659b758f6fe00e74926d69b2cbe7e22064adcbedf6703c3e56435e32416b586d7fd3e4982ce10dd06c9fbeba39f196d7d78", 0x37}, 0x48, r3)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, &(0x7f00000004c0)={0x0, 0x0, 0x10000, 0xfac3, 0x2})
r5 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7fffffff, 0x2)
ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000100)=0x1)

00:36:18 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000080)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:18 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000140)={0x1, @win={{0x0, 0x5e, 0x9, 0x8001}, 0x9, 0x9, &(0x7f0000000080)={{0x0, 0xdd1, 0xb063, 0x8}, &(0x7f0000000040)={{0xfff, 0x1, 0x3, 0x6}, &(0x7f0000000000)={{0x7f, 0x8, 0x80000000, 0xffff}}}}, 0x77, &(0x7f0000000340)="ae3acac0813a608d0221a6f3c1e54f8ef280d71363bf8ead7e96b875f4f27f8e0318fc2ae727958ef648f7be4654213f16a55d0148768678f544ab771c760b86cbe7d2592323b09684628a337a9c2a84e10a4396c03158b306ee1aecf9abe703cda23049775946f4dd7caf2bb8e08f66b3bcd553a1a27e060bc6dd8e95686279748641be709b77e492a89a8b448a2ae3ae3c2b5b638ac395f51046ebf6b11e1c85669be3d8c5166a809b79aff0ad9c9b1dd508e8fd4b1d12bd3e958248cd68970fd3ef615eeb202488064717fbdd2bc93f0654579607b59be044a957aa10cbc56a8936797afd33f0d63173b3864e69846bad0188c0cc9b9d871c72dea2ab3797d145322bd4de0b0ec4a7b4d5fcab193f7f2d4915caa7265fb22d7965187abe1241abd8ebba67ad3825ea6fd0aeacf710ab665c0363c1e03194fa9e7233046f41b2b876ee999e4f21261d901cc8ce67fd80e8b54b4448d2e25d58aa18896f788cf4c052afe2e69c82db4f55f57ee9efb6a27cdbb4bbdaa442efffb96d2456bf11bd4f9dbdbcd59cae2ffae90800b407bfafc7601d8eb656beed35f6f2b7e992b5375f7b541acfce98ef20f4cc4c32a947a25a673cc33189ed2ef5fc63ce236c21f359b36a0057624e756e6d424d5311e0ae886e7103cd2844b379cd2aaf52bf4f1ecf5ccbf1ca8eebd3be6e62f138fc2d8ee37b5053a06698efb689b1fbe753ad07c07422c81b845de57a22a63c6512c09fed584fae2b1b295aa756d3352deb8e4e3a29fe321d4fad0deb8e0814e67b0b62d0bb24371b95850f974b503fb6674c9271e21bd95fd0fd1529786cdc6beffbaa1285525877b48f8ef04310f16d4615384aa93785a4d5d504034b6cfdd9fd6a0ccbd4b66e70931b1893c549e7fd77f2ce9fa7c2dc50699a8be7be00c24695d6b61b50e634434d92f2db71057f0b3bd2a7822183403e4dda207868718fe26d74c07bf63c867282d587090ced78343576e9d3a4de960a266769de21b5445e8a1fdec9ad550c7f5d6d1553fd02abafcd8566ef46de0c7ab1bbed4e0511b4d9366d8b4a2ac056b45f83fc1aa96514105482932ac653156a0ae7336866795f9883718210a9716de52d429c7bfd6b73a4fd21938e4eb73acf50a330a1be52b160f62a95a291c006e7b930f1b6423918dfabe694984936226a0b6bb7824bd29ea83ad3f993faa2e775fd581a88071a171303c041dc3d5a316486793743c53fbc0badc543825f74dfab0488027e6864e6bceb3f16e5b68e1d1ca8b805876374f6de0d22592ba20b84bd82fd942959f1043187488e2d09ea84836574b082f73ad4e708bcbb5dcd65cc1321aa33ca91f2e0076e6135132bd82223f55e25ddff8ad667ead8f3c5875fb93a4d1667234b450b046f486e7c86692aa92d8d67fe5cfdb7b26f7c4dc60dd59562389ff0e340bcfb478f6dcd079f448f244c4fa3f1e6f597bd57f6ddfa678a859f5738dd30cc359dcbba77ca367aaac8d034a3b009be4abf8485acaa02ff51846313031dfdcc6da570af15faf16e838a94d38cef60183471150c3ac910e89cd68803fb22403447b9f25542946eb5c2be6cd3e3d33d2e43802ad4a2ad9a2cec854c8de0208d16fa6ca799fb006c8092922e59127391867d4b61c84d0fd20aeea9b3a1b75050d8a22a5e2aa0943b477b6a54ba97270d96355df32c325b147f62613813f464f393e9a71afc400665955309a1e825ad7f368fcbde717b2d09c99a48b63e0df1ea26e6884d59b9779a8764af22d5d8fd25230d8ba1da2663bf62baad773b1f68d904dc08f38516ff6e4a4e14e23d58185954cf9e69bc4fe8c44325b712fad359b0de5e29cd3441c981d9fd94ac07c017ffe5119327ea9840778b8729253e4af6ad0c69fa8c0aec9bf0e10bcb361e0051220f8046dbde3b5f24b1c437e917d0a698c52d44c597a0658f64fe07e070376488ba93e03c64d8533ee023a8ecae6f5ed0a8a1e87d4c6831fc5167bbd5f0be82dfe0c85b63d22f9e922c867a4b5f4bc8b5ca9e5df6475de558082c59b41e593a9c22774b653224338ede2ff168acd4202e28ae4961b36e0f996eb1c6e8b24a3729324ff555e03fc366da74ff0e2aeba416e41d4bb71d8860e397e7b6f16f4395555e1dc59670b3e51aa60b2131206a025617283e13e969536ca9e73e12ebeba26013d9c311af4173ccd41661358d7023a94c35d70dcbf162149c6548ac7020b0583bb5c514a5280651e09338e2c26ee46244f115036f5915c6e1b53056b2a64953aac31c690957b3a9c6766e04d60fe492de0bc7d549ac42ff6941e98439bbc18c8e5ceb9cbc749bcc19e99d5e194d6730bd575f9ab32f0ecee8a8f3dd8f5f781d1b67266e2af66a304dd6cacfd90dbc4e4c85390b78cc210c15b71a4dd74eabe1e93bb36a31116dcdf5dfb55cb0409a6fe4dc69a1a7c793e9509c9bc44c7f124f72a8d81e0461083b86f3fd54c8d2d84e249ff78f50e0ac43f86ca258209d7d2a942f7e14052c5a6bd2409a57a9bf946df8897cf03604ee2d961060dcc94777998c741b6b45457dd3cf0b2051074fdf364abaf3bf52b5a60820ddb84a5b3aef5a3817134988f8fa2caee51b86ba620bd73fc3031fce1dc38eb690b50ebabf93086fd092ef2ad21878818f2d6c761b7f4d2fb3b7a17f08c6fdf7da58ab5dee6838617d748325327086242154e358936ca0ebb72a1fdd86f675caae95a41f314c4d41517e4933f3a7995511ce3127860d848615f4305ac6e74b3c190de9cf2a2fccce93601846d8f1d3d14da1321e7ee7700e2e014b0b97a0d1cbfcc0269314c95403c419ce7afb05730cf9894a33aa50baf15b262586355d5aa241c9ed134ab1b8177f03c9beef72d9ca72b702a3e85347c9f125c671ea8563982bf5b9b1e45cb7e444eeae146a92cd5c87790db1ea769f47d6d6cfda54deeb8496f3d29b3e7912863f0fd4ff151c807c20ece236ff51d37783cf31d1e9dc911464d68bca50b76af5045a73d2b437699ad8c2d578bd16aa30aee47c597d3fc15fbfa21858197b9227f2c467e3f3d59a13590fe61b8097b46e398b407487460cec6dcdc40409eca755b0cccf48e4d7d609039057120393913f5754eea248ba884f866881d770dab848a27efd880d6fadc2ab1de3f8b4bd0ed79669aac489d75b14bad1daeedf0b75cdf9cabdc0a763babb695bd973fb4586ac625ecdfd88c9ed1b00d619a9abc86b2217ca501bf066ab306d11a3fbcf99fe3d508a7b96dffb8790e5c08f514fca3d837d5c57d7deb87a424e88a5f94b5340934ee59675a853e36af84bc58dc339e94820f4da30e28f64df82eabba5738d9db17dcf60b4ac5914ed1f790c80b329e602f698d45d2c55aed1aebc7f4b5ebdb0f371f49177c1e1cd7afbb58c1df056a31f4b1a29c1d6510fcd7f10a968374fc64d1ab2161c89fcf678cca36b200bdbcfcc818214396eb4f4f108f488270fe12b6b59d09bed0b738e67be114b17a60c0362d1467ec1bac03b187cf2df9c56be096b0044fe064e0b67871b567bd161ec1f8c4c1a8edc3510fc7c689e296d5a80f62df719a844b61c2e68510e7b0ac04987d82aab92c0a4221fffea31fd9fb6304e8116482416033ca3c53d57e0ce2a9c67929e69d15487b2ccd53117de0e38bfd96c85c867ee78b0847702741cb9c2a05604ad1c5f917a1b60dcf3437e70de7e2a446f457a0f8e3c32a6a970fe06572ca41cb4468d5027862387a5221df5d4fbf2d828bd09bfe38feddac6676d63a715a2f4e21f09fb0a8e3e54f308667693909e79f51bf47ea0c2d5a5c052ace8e249d5065cefb22b380a781664aeda6a72de53539bb253fe1500c858c893bed8df79d630c5cca34f25740d662a948a092d513cb2464e9ffc007c20fbba954bf818e9e5fc306727f1dbe91fc0970172fb69165a58178d8f162241fc694a2da2335901d5a7f9c7618c1c8d2531f9a9217f9e5188de2c194eda7b2d72a5676b096d7a6f79f1ff14d03286b0fe4ee22150958b3974fefb492d5b2ce2c787a60c05be19ad8dd33643880e52326beed3dce817fe494cb8637a19e85a683760b30cec2a3849a0410fbf616b76396da0b74c6bcd9f5569f5a730dd6d4baf17084734736cc0127f6f347f95e8785dd23c636c61b9b7e8a9f1da7895b14feef837a0b9962ab07cd9be6ecf4bd70d05a258907cf71f767ffb53d5bda35e844df7988f712f8d9458e049eb70108053c4d2771447de1c968f6c482557446431f3ee081bb6b17b5fd07087cd7010764d10499f0c64fe8348de3600ae4684b1eed161eb6402227ed739e2dcda2cc6fdca1733045dd254b114856c2e7795b46d00aaf4e44344c0c78ba2b45a25abda099bb745ee984708602b83da7935fe1a1e3ded3719a55ef2b181aac5c0188a25626b285e2f25d07a603e0fda84edde873f2b809bbdfc4ee7a86185227764f53bbe0b7a672192b0aca35a86cab68933d664a719feabf7981a966a07e8085e7985641f188448202543ab2c997e04389b6d0d98fcd5d5b07f2524590ded560d3a0a0fcdb0caec7a1e2974a8dac14804e9dfd91340ab4bc98e834e4b1a9cb099620dcae4a8d49dbaac66038987310907f52ff30f419f99de82ab853238834e672e534ff36f48e211822d450bfd4a66a2c1eeb13823b50af2b84ce0cc1ee593ef6072bdbc66e8c6993e6d945c2a8c7e8f2e2adbfe926ffc981bab332aebb532fb1ae5dae10d111f79cd4ded18c754fba9c5a8db86bbb20083e3402149117f0ae05deff6085dadcf1a18595cc7dc02dd4ea7a048a46892a95dc703d46114b6d44c4f6ba3cc51b294661dcd86fae9634f90b3d0b6eb7d1fcf8d9b1e2612d478caca5a665c14a667e1cc472da5cfde06e3518cd4b147e7a02a5526e45c58b96db447c1aabf4004eba9b29896246ea5c650d02722657804107df8664961bd481cd0076554561381e06397345c22a4b51044e177d0597afcb11bd22d19261608f765889cdda751e27d0205403b626edb2a5dc7fde0a33deca6e89ba7acddc1e4bcb835ee98fcb6da7c4587e9d8c260c871ba5093bff70ab4ff7837c9cc02ed3d7478eea0ae7da0d00a8444763841c39633da8a407f16cdd0162dd62a48adbe894e216bb93bf6ebd05bbe64826689007f112e51640eddc8694812d23c963195aab9dd0914a56b5fd86def7cb2781859ce422e6901bc6b4ec135f5d926e55828ae4489fa6abd6b6e316cb71696fb49a9ed4dadc8e579a4494cc00d3fbff9af50949f1e6d77ee40daa616c5fbcf86226b333e5a93ce00d540dcc2e7f79940f8a9901d2b460be52edfdf25a22ea40aa4e888ffa604decafc6f112cd8fbb2cbc62a8cbe6ebd66dbf072fe44d14115d945c0940c2f01f6aa76a427b72e812a6594705b323897d10dad5308d92007c41b55b8822cc0a115c8ac3c622645d40a3823ddfc780b1d5e5da49fdf51b9259ecd558a1e467b6d1e94bdbf3f69e907effc6b7a46e59b09dd8f738615b327af036f54ab08eff1e3596b7419a1da4e77b16233a7e512008ec322ca44b030e2513fd1f25b2228490b33f0a4feced4050b27e6a3030f013e494fdb9e785fe0aec32714fe1f7da9ed4ea34643272031f09b57b7455a29f82e0ab8db8101f71bda25991bc18c5272edc60ebf93a86c4f748dffa4e83622078aa9fe72cc27f3702805c4203be10ddfadde16c2d1acfeaeb23d4cca1d786053ca006a3adea2d7f2f91f29579aa4307010fb921822d712299af8257131fe2d4954f1abb5eb7b8fd069c6184ed33a37ac025fba3685b2"}}) (async)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000140)={0x1, @win={{0x0, 0x5e, 0x9, 0x8001}, 0x9, 0x9, &(0x7f0000000080)={{0x0, 0xdd1, 0xb063, 0x8}, &(0x7f0000000040)={{0xfff, 0x1, 0x3, 0x6}, &(0x7f0000000000)={{0x7f, 0x8, 0x80000000, 0xffff}}}}, 0x77, &(0x7f0000000340)="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"}})

00:36:18 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x69}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0xf9}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x69}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0xf9}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8) (async)
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)

00:36:18 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x400000, 0x9) (async)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0) (async, rerun: 64)
ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000240)={0x3, &(0x7f0000000200)=[{}, {}, {}]}) (rerun: 64)
ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000000c0)={0x1, @sliced={0x5, [0xfffb, 0x0, 0x7, 0xbad7, 0x13d7, 0x7, 0x7, 0x0, 0x8, 0x6, 0x208, 0x0, 0x2, 0xffe0, 0x0, 0x1ff, 0x8001, 0x4, 0x5, 0xc8, 0x81, 0x5, 0x8, 0x0, 0x9, 0x0, 0x7, 0xfe01, 0x7, 0x145e, 0x0, 0xffff, 0x401, 0x8, 0x800, 0x0, 0x62, 0x7ff, 0x4267, 0x0, 0xf49, 0x3, 0x7ff, 0x101, 0x1000, 0x6, 0x8], 0x4}}) (async, rerun: 64)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (rerun: 64)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f00000001c0))

00:36:18 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x3, @raw_data="5c02b4e9e8fa1a23c778b31c728e73a5436888bd661e22e87932141299bd7cd9ab0785b64ccf1a970378c50833f7126077b6681f7109697b099e9f483bc84372305054ac03fec162d8c36823085cf38c383f9bf9e5c38bdef7395793ea6ee41a9c2681fd56d2d9faf378e9fa084cb73926643a3556ddbfb6553cffbf3814ef2cb345c6021e8c20ea0498e2e3dbdd93fde043a68324e2d52d90e12826671439284a805760ffe32311bf737a797828330a88e5ef825cdca16177496f137c727ee58938a753f4de5913"})

00:36:18 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000080)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000080)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)

00:36:18 executing program 0:
r0 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc3}, &(0x7f0000000380)={0x0, "13d37fad5367b338c7c549f20f23ee6d28bb649fa549ef069b8e9e896a3f8f01c4196dd7cbabd8ac0593e1388dc2e732d8b4db2350914c9eb0ba899c34f0dd95"}, 0x48, 0xfffffffffffffffe)
keyctl$search(0xa, r0, &(0x7f0000000440)='id_resolver\x00', &(0x7f0000000480)={'syz', 0x1}, 0x0)
keyctl$unlink(0x9, r0, 0xfffffffffffffffa)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r2 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x1, 0x0, 0x10001})
r3 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, r2)
add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000240)={0x0, "61c95eab87aed1b10b75fe16c10d0659b758f6fe00e74926d69b2cbe7e22064adcbedf6703c3e56435e32416b586d7fd3e4982ce10dd06c9fbeba39f196d7d78", 0x37}, 0x48, r3)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, &(0x7f00000004c0)={0x0, 0x0, 0x10000, 0xfac3, 0x2})
r5 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7fffffff, 0x2)
ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000100)=0x1)

00:36:18 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000140)={0x1, @win={{0x0, 0x5e, 0x9, 0x8001}, 0x9, 0x9, &(0x7f0000000080)={{0x0, 0xdd1, 0xb063, 0x8}, &(0x7f0000000040)={{0xfff, 0x1, 0x3, 0x6}, &(0x7f0000000000)={{0x7f, 0x8, 0x80000000, 0xffff}}}}, 0x77, &(0x7f0000000340)="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"}})

00:36:18 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x69}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0xf9}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8) (async)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:18 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x3, @raw_data="5c02b4e9e8fa1a23c778b31c728e73a5436888bd661e22e87932141299bd7cd9ab0785b64ccf1a970378c50833f7126077b6681f7109697b099e9f483bc84372305054ac03fec162d8c36823085cf38c383f9bf9e5c38bdef7395793ea6ee41a9c2681fd56d2d9faf378e9fa084cb73926643a3556ddbfb6553cffbf3814ef2cb345c6021e8c20ea0498e2e3dbdd93fde043a68324e2d52d90e12826671439284a805760ffe32311bf737a797828330a88e5ef825cdca16177496f137c727ee58938a753f4de5913"})

00:36:18 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x8f2, 0x0, 0x4, {0x2, @pix={0x401, 0x10001, 0x32314d54, 0x6, 0x9, 0x0, 0x5, 0x3, 0x1, 0x1, 0x1, 0x4}}, 0x3})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:18 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000080)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000080)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)

00:36:18 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x0, @vbi={0xff, 0x4, 0x9, 0x55595659, [0x80000000, 0xc9a0], [0x0, 0xfff], 0x2}})
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000140)={0x1, @sdr={0x47524247, 0x1}})

00:36:18 executing program 0:
r0 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc3}, &(0x7f0000000380)={0x0, "13d37fad5367b338c7c549f20f23ee6d28bb649fa549ef069b8e9e896a3f8f01c4196dd7cbabd8ac0593e1388dc2e732d8b4db2350914c9eb0ba899c34f0dd95"}, 0x48, 0xfffffffffffffffe)
keyctl$search(0xa, r0, &(0x7f0000000440)='id_resolver\x00', &(0x7f0000000480)={'syz', 0x1}, 0x0)
keyctl$unlink(0x9, r0, 0xfffffffffffffffa)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r2 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x1, 0x0, 0x10001})
r3 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, r2)
add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000240)={0x0, "61c95eab87aed1b10b75fe16c10d0659b758f6fe00e74926d69b2cbe7e22064adcbedf6703c3e56435e32416b586d7fd3e4982ce10dd06c9fbeba39f196d7d78", 0x37}, 0x48, r3)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, &(0x7f00000004c0)={0x0, 0x0, 0x10000, 0xfac3, 0x2})
r5 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7fffffff, 0x2)
ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000100)=0x1)

00:36:18 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x3, @raw_data="5c02b4e9e8fa1a23c778b31c728e73a5436888bd661e22e87932141299bd7cd9ab0785b64ccf1a970378c50833f7126077b6681f7109697b099e9f483bc84372305054ac03fec162d8c36823085cf38c383f9bf9e5c38bdef7395793ea6ee41a9c2681fd56d2d9faf378e9fa084cb73926643a3556ddbfb6553cffbf3814ef2cb345c6021e8c20ea0498e2e3dbdd93fde043a68324e2d52d90e12826671439284a805760ffe32311bf737a797828330a88e5ef825cdca16177496f137c727ee58938a753f4de5913"})
syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x3, @raw_data="5c02b4e9e8fa1a23c778b31c728e73a5436888bd661e22e87932141299bd7cd9ab0785b64ccf1a970378c50833f7126077b6681f7109697b099e9f483bc84372305054ac03fec162d8c36823085cf38c383f9bf9e5c38bdef7395793ea6ee41a9c2681fd56d2d9faf378e9fa084cb73926643a3556ddbfb6553cffbf3814ef2cb345c6021e8c20ea0498e2e3dbdd93fde043a68324e2d52d90e12826671439284a805760ffe32311bf737a797828330a88e5ef825cdca16177496f137c727ee58938a753f4de5913"}) (async)

00:36:18 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000000c0)={0x3, @pix_mp={0x6, 0x2, 0x38415261, 0x0, 0x8, [{0x3, 0x4}, {0x651a, 0x10001}, {0x8, 0x7}, {0x80, 0x2}, {0x9, 0x1000}, {0x4, 0x99}, {0x7, 0x80000001}, {0xeba6, 0x6}], 0x8c, 0x40, 0x3, 0x0, 0x1}})

00:36:18 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x8f2, 0x0, 0x4, {0x2, @pix={0x401, 0x10001, 0x32314d54, 0x6, 0x9, 0x0, 0x5, 0x3, 0x1, 0x1, 0x1, 0x4}}, 0x3}) (async)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x8f2, 0x0, 0x4, {0x2, @pix={0x401, 0x10001, 0x32314d54, 0x6, 0x9, 0x0, 0x5, 0x3, 0x1, 0x1, 0x1, 0x4}}, 0x3})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:18 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x0, @vbi={0xff, 0x4, 0x9, 0x55595659, [0x80000000, 0xc9a0], [0x0, 0xfff], 0x2}}) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}}) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000140)={0x1, @sdr={0x47524247, 0x1}})

00:36:18 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:18 executing program 0:
r0 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc3}, &(0x7f0000000380)={0x0, "13d37fad5367b338c7c549f20f23ee6d28bb649fa549ef069b8e9e896a3f8f01c4196dd7cbabd8ac0593e1388dc2e732d8b4db2350914c9eb0ba899c34f0dd95"}, 0x48, 0xfffffffffffffffe)
keyctl$search(0xa, r0, &(0x7f0000000440)='id_resolver\x00', &(0x7f0000000480)={'syz', 0x1}, 0x0)
keyctl$unlink(0x9, r0, 0xfffffffffffffffa)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r2 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x1, 0x0, 0x10001})
r3 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, r2)
add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000240)={0x0, "61c95eab87aed1b10b75fe16c10d0659b758f6fe00e74926d69b2cbe7e22064adcbedf6703c3e56435e32416b586d7fd3e4982ce10dd06c9fbeba39f196d7d78", 0x37}, 0x48, r3)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, &(0x7f00000004c0)={0x0, 0x0, 0x10000, 0xfac3, 0x2})
syz_open_dev$vim2m(&(0x7f00000000c0), 0x7fffffff, 0x2)

00:36:18 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000440)={&(0x7f0000000400)=[0x0, 0x0, 0x0], 0x3, 0x40800, 0x0, <r1=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000480)={0x10001, 0x32315241, 0x3})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x2, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000300)={0x7fffffff, 0x97, 0x2, {0x3, @win={{0xdbd, 0x6, 0x7ff, 0x80}, 0x5, 0xff, &(0x7f0000000200)={{0x9, 0x2, 0x8, 0x7}, &(0x7f00000001c0)={{0x6, 0x5, 0x400, 0x3ff}, &(0x7f0000000180)={{0x7, 0x7ff, 0x7, 0x6}}}}, 0x8, &(0x7f0000000240)="2d4bfc98c8923d57030d9b6d7f4555704d0b13bd64dc22414850a2a67e96fe4cdb5699e04d64754933d2364fdda5b786334ca2af6b43577a4bf09ca0020f6e0d6c4a856e3539f2bf9dd6f1e0c76684eb4581a1f8b67fe157fc3bfc9e14fa1b2a1a84c3a526c60fcb240bd05e7b051308f45e599c0f4df9f3bf6a337dfafbb59e96d165661fea2dfdc8a9c28bc6e5660e273b898d0317dc19f4ed7fdfb56d9e2c838f5700ca999cfd50b59e9afc4be7046b3a2e"}}, 0x4})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000004c0)={0x2, 0x31ed68f1e0abf700, 0x3, "42a2c182961d443d774b7f603d57926ae2254b42db571a5b26a79f3b8daa313a", 0x30314247})
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x0, @pix={0x918, 0xfffffff9, 0x575c1a77, 0x5, 0x3, 0x81, 0x0, 0x7afc, 0x1, 0x7, 0x1, 0x2}})

00:36:18 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000000c0)={0x3, @pix_mp={0x6, 0x2, 0x38415261, 0x0, 0x8, [{0x3, 0x4}, {0x651a, 0x10001}, {0x8, 0x7}, {0x80, 0x2}, {0x9, 0x1000}, {0x4, 0x99}, {0x7, 0x80000001}, {0xeba6, 0x6}], 0x8c, 0x40, 0x3, 0x0, 0x1}})
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async)
ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000000c0)={0x3, @pix_mp={0x6, 0x2, 0x38415261, 0x0, 0x8, [{0x3, 0x4}, {0x651a, 0x10001}, {0x8, 0x7}, {0x80, 0x2}, {0x9, 0x1000}, {0x4, 0x99}, {0x7, 0x80000001}, {0xeba6, 0x6}], 0x8c, 0x40, 0x3, 0x0, 0x1}}) (async)

00:36:18 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x8f2, 0x0, 0x4, {0x2, @pix={0x401, 0x10001, 0x32314d54, 0x6, 0x9, 0x0, 0x5, 0x3, 0x1, 0x1, 0x1, 0x4}}, 0x3}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:18 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000440)={&(0x7f0000000400)=[0x0, 0x0, 0x0], 0x3, 0x40800, 0x0, <r1=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000480)={0x10001, 0x32315241, 0x3}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x2, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000300)={0x7fffffff, 0x97, 0x2, {0x3, @win={{0xdbd, 0x6, 0x7ff, 0x80}, 0x5, 0xff, &(0x7f0000000200)={{0x9, 0x2, 0x8, 0x7}, &(0x7f00000001c0)={{0x6, 0x5, 0x400, 0x3ff}, &(0x7f0000000180)={{0x7, 0x7ff, 0x7, 0x6}}}}, 0x8, &(0x7f0000000240)="2d4bfc98c8923d57030d9b6d7f4555704d0b13bd64dc22414850a2a67e96fe4cdb5699e04d64754933d2364fdda5b786334ca2af6b43577a4bf09ca0020f6e0d6c4a856e3539f2bf9dd6f1e0c76684eb4581a1f8b67fe157fc3bfc9e14fa1b2a1a84c3a526c60fcb240bd05e7b051308f45e599c0f4df9f3bf6a337dfafbb59e96d165661fea2dfdc8a9c28bc6e5660e273b898d0317dc19f4ed7fdfb56d9e2c838f5700ca999cfd50b59e9afc4be7046b3a2e"}}, 0x4}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000004c0)={0x2, 0x31ed68f1e0abf700, 0x3, "42a2c182961d443d774b7f603d57926ae2254b42db571a5b26a79f3b8daa313a", 0x30314247}) (async)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x0, @pix={0x918, 0xfffffff9, 0x575c1a77, 0x5, 0x3, 0x81, 0x0, 0x7afc, 0x1, 0x7, 0x1, 0x2}})

00:36:18 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:18 executing program 0:
r0 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc3}, &(0x7f0000000380)={0x0, "13d37fad5367b338c7c549f20f23ee6d28bb649fa549ef069b8e9e896a3f8f01c4196dd7cbabd8ac0593e1388dc2e732d8b4db2350914c9eb0ba899c34f0dd95"}, 0x48, 0xfffffffffffffffe)
keyctl$search(0xa, r0, &(0x7f0000000440)='id_resolver\x00', &(0x7f0000000480)={'syz', 0x1}, 0x0)
keyctl$unlink(0x9, r0, 0xfffffffffffffffa)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r2 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x1, 0x0, 0x10001})
r3 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, r2)
add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000240)={0x0, "61c95eab87aed1b10b75fe16c10d0659b758f6fe00e74926d69b2cbe7e22064adcbedf6703c3e56435e32416b586d7fd3e4982ce10dd06c9fbeba39f196d7d78", 0x37}, 0x48, r3)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, &(0x7f00000004c0)={0x0, 0x0, 0x10000, 0xfac3, 0x2})

00:36:18 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x0, @vbi={0xff, 0x4, 0x9, 0x55595659, [0x80000000, 0xc9a0], [0x0, 0xfff], 0x2}}) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}}) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000140)={0x1, @sdr={0x47524247, 0x1}})

00:36:18 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000000c0)={0x3, @pix_mp={0x6, 0x2, 0x38415261, 0x0, 0x8, [{0x3, 0x4}, {0x651a, 0x10001}, {0x8, 0x7}, {0x80, 0x2}, {0x9, 0x1000}, {0x4, 0x99}, {0x7, 0x80000001}, {0xeba6, 0x6}], 0x8c, 0x40, 0x3, 0x0, 0x1}}) (async)
ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000000c0)={0x3, @pix_mp={0x6, 0x2, 0x38415261, 0x0, 0x8, [{0x3, 0x4}, {0x651a, 0x10001}, {0x8, 0x7}, {0x80, 0x2}, {0x9, 0x1000}, {0x4, 0x99}, {0x7, 0x80000001}, {0xeba6, 0x6}], 0x8c, 0x40, 0x3, 0x0, 0x1}})

00:36:18 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x10d7, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
memfd_create(&(0x7f0000000180)='/dev/video#\x00', 0x3)
ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000080)=""/217)

00:36:18 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)

00:36:18 executing program 0:
r0 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc3}, &(0x7f0000000380)={0x0, "13d37fad5367b338c7c549f20f23ee6d28bb649fa549ef069b8e9e896a3f8f01c4196dd7cbabd8ac0593e1388dc2e732d8b4db2350914c9eb0ba899c34f0dd95"}, 0x48, 0xfffffffffffffffe)
keyctl$search(0xa, r0, &(0x7f0000000440)='id_resolver\x00', &(0x7f0000000480)={'syz', 0x1}, 0x0)
keyctl$unlink(0x9, r0, 0xfffffffffffffffa)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r2 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x1, 0x0, 0x10001})
r3 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, r2)
add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000240)={0x0, "61c95eab87aed1b10b75fe16c10d0659b758f6fe00e74926d69b2cbe7e22064adcbedf6703c3e56435e32416b586d7fd3e4982ce10dd06c9fbeba39f196d7d78", 0x37}, 0x48, r3)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, 0x0)

00:36:18 executing program 4:
syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2) (async)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000440)={&(0x7f0000000400)=[0x0, 0x0, 0x0], 0x3, 0x40800, 0x0, <r1=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000480)={0x10001, 0x32315241, 0x3})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x2, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000300)={0x7fffffff, 0x97, 0x2, {0x3, @win={{0xdbd, 0x6, 0x7ff, 0x80}, 0x5, 0xff, &(0x7f0000000200)={{0x9, 0x2, 0x8, 0x7}, &(0x7f00000001c0)={{0x6, 0x5, 0x400, 0x3ff}, &(0x7f0000000180)={{0x7, 0x7ff, 0x7, 0x6}}}}, 0x8, &(0x7f0000000240)="2d4bfc98c8923d57030d9b6d7f4555704d0b13bd64dc22414850a2a67e96fe4cdb5699e04d64754933d2364fdda5b786334ca2af6b43577a4bf09ca0020f6e0d6c4a856e3539f2bf9dd6f1e0c76684eb4581a1f8b67fe157fc3bfc9e14fa1b2a1a84c3a526c60fcb240bd05e7b051308f45e599c0f4df9f3bf6a337dfafbb59e96d165661fea2dfdc8a9c28bc6e5660e273b898d0317dc19f4ed7fdfb56d9e2c838f5700ca999cfd50b59e9afc4be7046b3a2e"}}, 0x4}) (async)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000300)={0x7fffffff, 0x97, 0x2, {0x3, @win={{0xdbd, 0x6, 0x7ff, 0x80}, 0x5, 0xff, &(0x7f0000000200)={{0x9, 0x2, 0x8, 0x7}, &(0x7f00000001c0)={{0x6, 0x5, 0x400, 0x3ff}, &(0x7f0000000180)={{0x7, 0x7ff, 0x7, 0x6}}}}, 0x8, &(0x7f0000000240)="2d4bfc98c8923d57030d9b6d7f4555704d0b13bd64dc22414850a2a67e96fe4cdb5699e04d64754933d2364fdda5b786334ca2af6b43577a4bf09ca0020f6e0d6c4a856e3539f2bf9dd6f1e0c76684eb4581a1f8b67fe157fc3bfc9e14fa1b2a1a84c3a526c60fcb240bd05e7b051308f45e599c0f4df9f3bf6a337dfafbb59e96d165661fea2dfdc8a9c28bc6e5660e273b898d0317dc19f4ed7fdfb56d9e2c838f5700ca999cfd50b59e9afc4be7046b3a2e"}}, 0x4})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000004c0)={0x2, 0x31ed68f1e0abf700, 0x3, "42a2c182961d443d774b7f603d57926ae2254b42db571a5b26a79f3b8daa313a", 0x30314247})
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x0, @pix={0x918, 0xfffffff9, 0x575c1a77, 0x5, 0x3, 0x81, 0x0, 0x7afc, 0x1, 0x7, 0x1, 0x2}})

00:36:18 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x9, 0x400})
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f00000001c0)={0x4, 0x5a1})
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0), 0x0, 0xc00})
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @sdr={0x47425247, 0x6}})
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000340)={0x2, 0xcc10, 0x7, 0x80800})

00:36:18 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, &(0x7f0000000080)={0x40000, 0x4, 0x87, 0x4d5, 0x0, 0x14})

00:36:18 executing program 0:
r0 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc3}, &(0x7f0000000380)={0x0, "13d37fad5367b338c7c549f20f23ee6d28bb649fa549ef069b8e9e896a3f8f01c4196dd7cbabd8ac0593e1388dc2e732d8b4db2350914c9eb0ba899c34f0dd95"}, 0x48, 0xfffffffffffffffe)
keyctl$search(0xa, r0, &(0x7f0000000440)='id_resolver\x00', &(0x7f0000000480)={'syz', 0x1}, 0x0)
keyctl$unlink(0x9, r0, 0xfffffffffffffffa)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r2 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x1, 0x0, 0x10001})
r3 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, r2)
add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000240)={0x0, "61c95eab87aed1b10b75fe16c10d0659b758f6fe00e74926d69b2cbe7e22064adcbedf6703c3e56435e32416b586d7fd3e4982ce10dd06c9fbeba39f196d7d78", 0x37}, 0x48, r3)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)

00:36:18 executing program 2:
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, &(0x7f0000000080)={0x40000, 0x4, 0x87, 0x4d5, 0x0, 0x14})

00:36:18 executing program 3:
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000100)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000180)={0x0, r2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, 0x40, 0x5, 0x20})

00:36:18 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x9, 0x400})
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f00000001c0)={0x4, 0x5a1})
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0), 0x0, 0xc00})
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @sdr={0x47425247, 0x6}})
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000340)={0x2, 0xcc10, 0x7, 0x80800})
syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x9, 0x400}) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f00000001c0)={0x4, 0x5a1}) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}) (async)
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0]}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0), 0x0, 0xc00}) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @sdr={0x47425247, 0x6}}) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000340)={0x2, 0xcc10, 0x7, 0x80800}) (async)

00:36:18 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x10d7, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
memfd_create(&(0x7f0000000180)='/dev/video#\x00', 0x3) (async)
ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000080)=""/217)

00:36:18 executing program 0:
r0 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc3}, &(0x7f0000000380)={0x0, "13d37fad5367b338c7c549f20f23ee6d28bb649fa549ef069b8e9e896a3f8f01c4196dd7cbabd8ac0593e1388dc2e732d8b4db2350914c9eb0ba899c34f0dd95"}, 0x48, 0xfffffffffffffffe)
keyctl$search(0xa, r0, &(0x7f0000000440)='id_resolver\x00', &(0x7f0000000480)={'syz', 0x1}, 0x0)
keyctl$unlink(0x9, r0, 0xfffffffffffffffa)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r2 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x1, 0x0, 0x10001})
r3 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, r2)
add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000240)={0x0, "61c95eab87aed1b10b75fe16c10d0659b758f6fe00e74926d69b2cbe7e22064adcbedf6703c3e56435e32416b586d7fd3e4982ce10dd06c9fbeba39f196d7d78", 0x37}, 0x48, r3)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:18 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async, rerun: 64)
ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, &(0x7f0000000080)={0x40000, 0x4, 0x87, 0x4d5, 0x0, 0x14}) (rerun: 64)

00:36:18 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r1=>0x0, <r2=>0x0})
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)=@userptr={0x0, 0x0, 0x4, 0x8, 0x9, {r1, r2/1000+60000}, {0x1, 0x2, 0x1, 0xff, 0x1, 0x1, "97f61e2e"}, 0x5, 0x2, {&(0x7f00000000c0)}, 0x9})
r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x101, 0x2)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000240)=@multiplanar_fd={0x1, 0x2, 0x4, 0x2000, 0x7, {0x77359400}, {0x3, 0x2, 0x18, 0x7, 0x2, 0x7, "7e5944c0"}, 0x4, 0x4, {&(0x7f00000001c0)=[{0x7, 0xfffffffa, {}, 0xfffff85f}, {0x53b, 0x31, {}, 0x200}]}, 0x2})
r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:18 executing program 3:
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000100)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000180)={0x0, r2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, 0x40, 0x5, 0x20})

00:36:18 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r1=>0x0, <r2=>0x0})
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)=@userptr={0x0, 0x0, 0x4, 0x8, 0x9, {r1, r2/1000+60000}, {0x1, 0x2, 0x1, 0xff, 0x1, 0x1, "97f61e2e"}, 0x5, 0x2, {&(0x7f00000000c0)}, 0x9}) (async)
r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x101, 0x2)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000240)=@multiplanar_fd={0x1, 0x2, 0x4, 0x2000, 0x7, {0x77359400}, {0x3, 0x2, 0x18, 0x7, 0x2, 0x7, "7e5944c0"}, 0x4, 0x4, {&(0x7f00000001c0)=[{0x7, 0xfffffffa, {}, 0xfffff85f}, {0x53b, 0x31, {}, 0x200}]}, 0x2})
r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:18 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x10d7, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
memfd_create(&(0x7f0000000180)='/dev/video#\x00', 0x3)
ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000080)=""/217)

00:36:18 executing program 0:
r0 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc3}, &(0x7f0000000380)={0x0, "13d37fad5367b338c7c549f20f23ee6d28bb649fa549ef069b8e9e896a3f8f01c4196dd7cbabd8ac0593e1388dc2e732d8b4db2350914c9eb0ba899c34f0dd95"}, 0x48, 0xfffffffffffffffe)
keyctl$search(0xa, r0, &(0x7f0000000440)='id_resolver\x00', &(0x7f0000000480)={'syz', 0x1}, 0x0)
keyctl$unlink(0x9, r0, 0xfffffffffffffffa)
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x1, 0x0, 0x10001})
r2 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000240)={0x0, "61c95eab87aed1b10b75fe16c10d0659b758f6fe00e74926d69b2cbe7e22064adcbedf6703c3e56435e32416b586d7fd3e4982ce10dd06c9fbeba39f196d7d78", 0x37}, 0x48, r2)

00:36:18 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x9, 0x400}) (async)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f00000001c0)={0x4, 0x5a1}) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}) (async)
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0]}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0), 0x0, 0xc00})
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @sdr={0x47425247, 0x6}}) (async)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000340)={0x2, 0xcc10, 0x7, 0x80800})

00:36:18 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x2e040000, 0x3, 0x2, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x3136564e})
r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x80000, 0x1)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x0, @raw_data="3c5da0a430419462db27f5e4e259f59e33f58abdb8eff400f06a2211f648f5f24f474826d0dde183db6ea7797c71b3f87ba0b1a18df8b1924840b7c3914c84dbcac3cb8258d5eedc07146aa1ee73dc6bb3a036a6bbd498f97fce91720a78a52ef8f5b0978458cc33b1b54c5edbc50cf6b4de77f285f7e7a962dc32783d4290f025198ecabaeb2a15e47c114ad86883e69ee30fda1c5d19f66838817bf3b1e5effd05482f8c0dc4e895d681c759095da70c0ee56bc022fe817574e46fc0fda642e770d2c76e63c2e3"})

00:36:18 executing program 3:
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000100)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000180)={0x0, r2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, 0x40, 0x5, 0x20})

00:36:18 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r1=>0x0, <r2=>0x0})
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)=@userptr={0x0, 0x0, 0x4, 0x8, 0x9, {r1, r2/1000+60000}, {0x1, 0x2, 0x1, 0xff, 0x1, 0x1, "97f61e2e"}, 0x5, 0x2, {&(0x7f00000000c0)}, 0x9}) (async, rerun: 32)
r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x101, 0x2) (rerun: 32)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000240)=@multiplanar_fd={0x1, 0x2, 0x4, 0x2000, 0x7, {0x77359400}, {0x3, 0x2, 0x18, 0x7, 0x2, 0x7, "7e5944c0"}, 0x4, 0x4, {&(0x7f00000001c0)=[{0x7, 0xfffffffa, {}, 0xfffff85f}, {0x53b, 0x31, {}, 0x200}]}, 0x2}) (async)
r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:18 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x2e040000, 0x3, 0x2, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x3136564e})
r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x80000, 0x1)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x0, @raw_data="3c5da0a430419462db27f5e4e259f59e33f58abdb8eff400f06a2211f648f5f24f474826d0dde183db6ea7797c71b3f87ba0b1a18df8b1924840b7c3914c84dbcac3cb8258d5eedc07146aa1ee73dc6bb3a036a6bbd498f97fce91720a78a52ef8f5b0978458cc33b1b54c5edbc50cf6b4de77f285f7e7a962dc32783d4290f025198ecabaeb2a15e47c114ad86883e69ee30fda1c5d19f66838817bf3b1e5effd05482f8c0dc4e895d681c759095da70c0ee56bc022fe817574e46fc0fda642e770d2c76e63c2e3"})

00:36:19 executing program 0:
r0 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc3}, &(0x7f0000000380)={0x0, "13d37fad5367b338c7c549f20f23ee6d28bb649fa549ef069b8e9e896a3f8f01c4196dd7cbabd8ac0593e1388dc2e732d8b4db2350914c9eb0ba899c34f0dd95"}, 0x48, 0xfffffffffffffffe)
keyctl$search(0xa, r0, &(0x7f0000000440)='id_resolver\x00', &(0x7f0000000480)={'syz', 0x1}, 0x0)
keyctl$unlink(0x9, r0, 0xfffffffffffffffa)
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x1, 0x0, 0x10001})
add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000240)={0x0, "61c95eab87aed1b10b75fe16c10d0659b758f6fe00e74926d69b2cbe7e22064adcbedf6703c3e56435e32416b586d7fd3e4982ce10dd06c9fbeba39f196d7d78", 0x37}, 0x48, 0x0)

00:36:19 executing program 5:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0)
openat$incfs(r0, &(0x7f0000000080)='.log\x00', 0x80001, 0x8)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:19 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x2, @sdr={0x4745504d, 0xfff}})
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000001c0)={0x1, 0x3f, 0x5fd, 0x80880})
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000140)=@multiplanar_userptr={0x85, 0x1, 0x4, 0x1000, 0xba, {}, {0x1, 0x8, 0x9, 0x4, 0x3, 0x6, "d06e2947"}, 0x10001, 0x2, {&(0x7f0000000080)=[{0x3, 0x9, {}, 0xfffffff9}, {0xffffffff, 0x4, {&(0x7f0000000040)}, 0x4}]}, 0x9})
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})

00:36:19 executing program 3:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x20)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x3, 0x1ff, 0x1000, 0x10000})
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x13f, 0x4}}, 0x20)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080))

00:36:19 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x2e040000, 0x3, 0x2, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x3136564e}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x2e040000, 0x3, 0x2, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed", 0x3136564e})
r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x80000, 0x1)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x0, @raw_data="3c5da0a430419462db27f5e4e259f59e33f58abdb8eff400f06a2211f648f5f24f474826d0dde183db6ea7797c71b3f87ba0b1a18df8b1924840b7c3914c84dbcac3cb8258d5eedc07146aa1ee73dc6bb3a036a6bbd498f97fce91720a78a52ef8f5b0978458cc33b1b54c5edbc50cf6b4de77f285f7e7a962dc32783d4290f025198ecabaeb2a15e47c114ad86883e69ee30fda1c5d19f66838817bf3b1e5effd05482f8c0dc4e895d681c759095da70c0ee56bc022fe817574e46fc0fda642e770d2c76e63c2e3"})

00:36:19 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000240))
syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x7ff, 0x1, 0x1, 0x0, 0xff})
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000140)={0x5, 0x2, 0x0, "aa9466f96c577b2adaa531c7d32a8f4c17c89ba71351f41c7adfeca9b10d843a", 0x35303553})
ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000180)=0x1)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000200))
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x2, "ddb8a6c39cd926dbe16f6b5bed0000002000", 0x3147504d})
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f00000002c0)=@userptr={0x0, 0x2, 0x4, 0x40, 0x7ce, {0x77359400}, {0x2, 0x2, 0x40, 0x1, 0x80, 0x8}, 0x400, 0x2, {&(0x7f0000000280)}, 0x4})
ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})

00:36:19 executing program 5:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0)
openat$incfs(r0, &(0x7f0000000080)='.log\x00', 0x80001, 0x8)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:19 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x2, @sdr={0x4745504d, 0xfff}})
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000001c0)={0x1, 0x3f, 0x5fd, 0x80880}) (async)
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000140)=@multiplanar_userptr={0x85, 0x1, 0x4, 0x1000, 0xba, {}, {0x1, 0x8, 0x9, 0x4, 0x3, 0x6, "d06e2947"}, 0x10001, 0x2, {&(0x7f0000000080)=[{0x3, 0x9, {}, 0xfffffff9}, {0xffffffff, 0x4, {&(0x7f0000000040)}, 0x4}]}, 0x9}) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})

00:36:19 executing program 0:
r0 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc3}, &(0x7f0000000380)={0x0, "13d37fad5367b338c7c549f20f23ee6d28bb649fa549ef069b8e9e896a3f8f01c4196dd7cbabd8ac0593e1388dc2e732d8b4db2350914c9eb0ba899c34f0dd95"}, 0x48, 0xfffffffffffffffe)
keyctl$search(0xa, r0, &(0x7f0000000440)='id_resolver\x00', &(0x7f0000000480)={'syz', 0x1}, 0x0)
keyctl$unlink(0x9, r0, 0xfffffffffffffffa)
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x1, 0x0, 0x10001})
add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000240)={0x0, "61c95eab87aed1b10b75fe16c10d0659b758f6fe00e74926d69b2cbe7e22064adcbedf6703c3e56435e32416b586d7fd3e4982ce10dd06c9fbeba39f196d7d78", 0x37}, 0x48, 0x0)

00:36:19 executing program 3:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async, rerun: 32)
r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x20) (rerun: 32)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x3, 0x1ff, 0x1000, 0x10000}) (async, rerun: 32)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x13f, 0x4}}, 0x20) (async, rerun: 32)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080))

00:36:19 executing program 5:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0) (async)
openat$incfs(r0, &(0x7f0000000080)='.log\x00', 0x80001, 0x8) (async)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:19 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000001c0)={0x2, @win={{0x10001, 0x9, 0x7, 0x1}, 0x7, 0x8, &(0x7f0000000100)={{0x1, 0x62, 0x3, 0x9}, &(0x7f00000000c0)={{0x7, 0x200, 0x0, 0x9}, &(0x7f0000000080)={{0x5, 0x80003, 0x7ff, 0x2}}}}, 0x5, &(0x7f0000000140)="4aebd46e130f608136e754c9b35c8392b704e0add01a5c2bd1dbccce1225e2c3be2a45c6de6db6a0f715f1f0d55d0f3d30586d41a234f6b3acdc54a8bd7d995e3e", 0x5}})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:19 executing program 0:
r0 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc3}, &(0x7f0000000380)={0x0, "13d37fad5367b338c7c549f20f23ee6d28bb649fa549ef069b8e9e896a3f8f01c4196dd7cbabd8ac0593e1388dc2e732d8b4db2350914c9eb0ba899c34f0dd95"}, 0x48, 0xfffffffffffffffe)
keyctl$search(0xa, r0, &(0x7f0000000440)='id_resolver\x00', &(0x7f0000000480)={'syz', 0x1}, 0x0)
keyctl$unlink(0x9, r0, 0xfffffffffffffffa)
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x1, 0x0, 0x10001})
add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000240)={0x0, "61c95eab87aed1b10b75fe16c10d0659b758f6fe00e74926d69b2cbe7e22064adcbedf6703c3e56435e32416b586d7fd3e4982ce10dd06c9fbeba39f196d7d78", 0x37}, 0x48, 0x0)

00:36:19 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x2, @sdr={0x4745504d, 0xfff}})
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000001c0)={0x1, 0x3f, 0x5fd, 0x80880})
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000140)=@multiplanar_userptr={0x85, 0x1, 0x4, 0x1000, 0xba, {}, {0x1, 0x8, 0x9, 0x4, 0x3, 0x6, "d06e2947"}, 0x10001, 0x2, {&(0x7f0000000080)=[{0x3, 0x9, {}, 0xfffffff9}, {0xffffffff, 0x4, {&(0x7f0000000040)}, 0x4}]}, 0x9}) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})

00:36:19 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000001c0)={0x2, @win={{0x10001, 0x9, 0x7, 0x1}, 0x7, 0x8, &(0x7f0000000100)={{0x1, 0x62, 0x3, 0x9}, &(0x7f00000000c0)={{0x7, 0x200, 0x0, 0x9}, &(0x7f0000000080)={{0x5, 0x80003, 0x7ff, 0x2}}}}, 0x5, &(0x7f0000000140)="4aebd46e130f608136e754c9b35c8392b704e0add01a5c2bd1dbccce1225e2c3be2a45c6de6db6a0f715f1f0d55d0f3d30586d41a234f6b3acdc54a8bd7d995e3e", 0x5}})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:19 executing program 3:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x20)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x3, 0x1ff, 0x1000, 0x10000}) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x13f, 0x4}}, 0x20) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080))

00:36:19 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x3, 0x0, 0x40, 0x90800})

00:36:19 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000240))
syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2) (async)
r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x7ff, 0x1, 0x1, 0x0, 0xff})
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000140)={0x5, 0x2, 0x0, "aa9466f96c577b2adaa531c7d32a8f4c17c89ba71351f41c7adfeca9b10d843a", 0x35303553}) (async)
ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000180)=0x1) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000200))
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x2, "ddb8a6c39cd926dbe16f6b5bed0000002000", 0x3147504d}) (async)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f00000002c0)=@userptr={0x0, 0x2, 0x4, 0x40, 0x7ce, {0x77359400}, {0x2, 0x2, 0x40, 0x1, 0x80, 0x8}, 0x400, 0x2, {&(0x7f0000000280)}, 0x4}) (async)
ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})

00:36:19 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000440)={0x0, @vbi={0xffff9029, 0x2777, 0x1, 0x7f011715, [0x10001, 0x200], [0xfffffeff, 0x1], 0x1}})
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x0)
r4 = openat$incfs(r1, &(0x7f00000001c0)='.pending_reads\x00', 0x4000, 0x8)
ioctl$DRM_IOCTL_AGP_ACQUIRE(r4, 0x6430)
syz_clone(0x2061080, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x28, r3, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2a, 0x9}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x29, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xa000}, 0x24044004)

00:36:19 executing program 0:
r0 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc3}, &(0x7f0000000380)={0x0, "13d37fad5367b338c7c549f20f23ee6d28bb649fa549ef069b8e9e896a3f8f01c4196dd7cbabd8ac0593e1388dc2e732d8b4db2350914c9eb0ba899c34f0dd95"}, 0x48, 0xfffffffffffffffe)
keyctl$search(0xa, r0, &(0x7f0000000440)='id_resolver\x00', &(0x7f0000000480)={'syz', 0x1}, 0x0)
keyctl$unlink(0x9, r0, 0xfffffffffffffffa)
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
r2 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000240)={0x0, "61c95eab87aed1b10b75fe16c10d0659b758f6fe00e74926d69b2cbe7e22064adcbedf6703c3e56435e32416b586d7fd3e4982ce10dd06c9fbeba39f196d7d78", 0x37}, 0x48, r2)

00:36:19 executing program 3:
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6a}, {0xa, 0x4e21, 0x1, @empty}, 0xffffffffffffffff, 0x4}}, 0x48)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:19 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000001c0)={0x2, @win={{0x10001, 0x9, 0x7, 0x1}, 0x7, 0x8, &(0x7f0000000100)={{0x1, 0x62, 0x3, 0x9}, &(0x7f00000000c0)={{0x7, 0x200, 0x0, 0x9}, &(0x7f0000000080)={{0x5, 0x80003, 0x7ff, 0x2}}}}, 0x5, &(0x7f0000000140)="4aebd46e130f608136e754c9b35c8392b704e0add01a5c2bd1dbccce1225e2c3be2a45c6de6db6a0f715f1f0d55d0f3d30586d41a234f6b3acdc54a8bd7d995e3e", 0x5}})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:19 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x3, 0x0, 0x40, 0x90800})
syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x3, 0x0, 0x40, 0x90800}) (async)

00:36:19 executing program 0:
r0 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc3}, &(0x7f0000000380)={0x0, "13d37fad5367b338c7c549f20f23ee6d28bb649fa549ef069b8e9e896a3f8f01c4196dd7cbabd8ac0593e1388dc2e732d8b4db2350914c9eb0ba899c34f0dd95"}, 0x48, 0xfffffffffffffffe)
keyctl$search(0xa, r0, &(0x7f0000000440)='id_resolver\x00', &(0x7f0000000480)={'syz', 0x1}, 0x0)
keyctl$unlink(0x9, r0, 0xfffffffffffffffa)
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, 0x0)
add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000240)={0x0, "61c95eab87aed1b10b75fe16c10d0659b758f6fe00e74926d69b2cbe7e22064adcbedf6703c3e56435e32416b586d7fd3e4982ce10dd06c9fbeba39f196d7d78", 0x37}, 0x48, r1)

00:36:19 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x2, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})
ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x3, 0x4, 0x1, {0x2, @raw_data="7ff4a08755a2cb67fe2e28d96ce27e61c5f0596a8c5a3797c5ca0d2c24d46366c979f57193b935cf47e352667fe5d91dfe33ef1f31c849f039b9f61b902984a4f2fddf78022f48e0846e4896eff4fadd6d1821c148cd31f65f6e238fc0fc5e29c776798ed1144688cb5ac97dfedd37f26ed65e62b102227c1ae60d186c6d6b470fd1d4d3bad00fb18c0953267ff5a6c89cfb23571be290edd9922d09e097e689597886a333c434c0ed00a0c19b8bf453e89aad813e328aea2fe4415e83ea4319735c26de3fa93e42"}, 0x10001})

00:36:19 executing program 3:
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6a}, {0xa, 0x4e21, 0x1, @empty}, 0xffffffffffffffff, 0x4}}, 0x48) (async)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:19 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"}) (async)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x3, 0x0, 0x40, 0x90800})

00:36:19 executing program 0:
r0 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc3}, &(0x7f0000000380)={0x0, "13d37fad5367b338c7c549f20f23ee6d28bb649fa549ef069b8e9e896a3f8f01c4196dd7cbabd8ac0593e1388dc2e732d8b4db2350914c9eb0ba899c34f0dd95"}, 0x48, 0xfffffffffffffffe)
keyctl$search(0xa, r0, &(0x7f0000000440)='id_resolver\x00', &(0x7f0000000480)={'syz', 0x1}, 0x0)
keyctl$unlink(0x9, r0, 0xfffffffffffffffa)
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, 0x0)
add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000240)={0x0, "61c95eab87aed1b10b75fe16c10d0659b758f6fe00e74926d69b2cbe7e22064adcbedf6703c3e56435e32416b586d7fd3e4982ce10dd06c9fbeba39f196d7d78", 0x37}, 0x48, r1)

00:36:19 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0)
ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000440)={0x0, @vbi={0xffff9029, 0x2777, 0x1, 0x7f011715, [0x10001, 0x200], [0xfffffeff, 0x1], 0x1}})
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x0)
r4 = openat$incfs(r1, &(0x7f00000001c0)='.pending_reads\x00', 0x4000, 0x8)
ioctl$DRM_IOCTL_AGP_ACQUIRE(r4, 0x6430)
syz_clone(0x2061080, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x28, r3, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2a, 0x9}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x29, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xa000}, 0x24044004)
syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}}) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000440)={0x0, @vbi={0xffff9029, 0x2777, 0x1, 0x7f011715, [0x10001, 0x200], [0xfffffeff, 0x1], 0x1}}) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async)
sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x0) (async)
openat$incfs(r1, &(0x7f00000001c0)='.pending_reads\x00', 0x4000, 0x8) (async)
ioctl$DRM_IOCTL_AGP_ACQUIRE(r4, 0x6430) (async)
syz_clone(0x2061080, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x28, r3, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2a, 0x9}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x29, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xa000}, 0x24044004) (async)

00:36:19 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, 0x0) (async)
ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000240)) (async)
syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x7ff, 0x1, 0x1, 0x0, 0xff}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000140)={0x5, 0x2, 0x0, "aa9466f96c577b2adaa531c7d32a8f4c17c89ba71351f41c7adfeca9b10d843a", 0x35303553}) (async)
ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000180)=0x1) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000200)) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x2, "ddb8a6c39cd926dbe16f6b5bed0000002000", 0x3147504d})
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f00000002c0)=@userptr={0x0, 0x2, 0x4, 0x40, 0x7ce, {0x77359400}, {0x2, 0x2, 0x40, 0x1, 0x80, 0x8}, 0x400, 0x2, {&(0x7f0000000280)}, 0x4})
ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})

00:36:19 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}}) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, 0x0) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000440)={0x0, @vbi={0xffff9029, 0x2777, 0x1, 0x7f011715, [0x10001, 0x200], [0xfffffeff, 0x1], 0x1}}) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x0) (async)
r4 = openat$incfs(r1, &(0x7f00000001c0)='.pending_reads\x00', 0x4000, 0x8)
ioctl$DRM_IOCTL_AGP_ACQUIRE(r4, 0x6430)
syz_clone(0x2061080, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x28, r3, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2a, 0x9}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x29, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xa000}, 0x24044004)

00:36:19 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r3=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r3, @ANYBLOB='\f'], 0x28}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', <r4=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x5c, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x2b}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x19}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x20}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3f}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan4\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r7, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14}, 0x14}}, 0x0)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r7, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4004881)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r9=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r9, @ANYBLOB='\f'], 0x28}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000380)={'wpan1\x00', <r10=>0x0})
sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x44, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x20082}, 0x4014)
r11 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r11, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})

00:36:19 executing program 4:
r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xc1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x1)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:19 executing program 4:
r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xc1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x1) (async)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:19 executing program 4:
r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xc1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x1) (async)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, 0x0, "69eb88ea5f711a254173c70389c0a0e4b65581ddb8a6c39cd926dbe16f6b5bed"})

00:36:19 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14}, 0x14}}, 0x0) (async)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r3=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r3, @ANYBLOB='\f'], 0x28}}, 0x0) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', <r4=>0x0}) (rerun: 32)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x5c, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x2b}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x19}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x20}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3f}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan4\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r7, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14}, 0x14}}, 0x0) (async)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r7, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4004881) (async)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r9=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r9, @ANYBLOB='\f'], 0x28}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000380)={'wpan1\x00', <r10=>0x0})
sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x44, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x20082}, 0x4014) (async, rerun: 64)
r11 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000, 0x2) (rerun: 64)
ioctl$vim2m_VIDIOC_TRY_FMT(r11, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x9]}})

[ 2183.563516][    C0] 
[ 2183.564122][    C0] ======================================================
[ 2183.565635][    C0] WARNING: possible circular locking dependency detected
[ 2183.567232][    C0] 6.4.0-rc2-syzkaller-gf1fcbaa18b28 #0 Not tainted
[ 2183.568702][    C0] ------------------------------------------------------
[ 2183.570430][    C0] syz-fuzzer/5976 is trying to acquire lock:
[ 2183.571918][    C0] ffff0001fea76c40 (&pgdat->kcompactd_wait){-.-.}-{2:2}, at: __wake_up+0xec/0x1a8
[ 2183.574136][    C0] 
[ 2183.574136][    C0] but task is already holding lock:
[ 2183.576002][    C0] ffff0001b4239b18 (&rq->__lock){-.-.}-{2:2}, at: scheduler_tick+0xa4/0x52c
[ 2183.578167][    C0] 
[ 2183.578167][    C0] which lock already depends on the new lock.
[ 2183.578167][    C0] 
[ 2183.580745][    C0] 
[ 2183.580745][    C0] the existing dependency chain (in reverse order) is:
[ 2183.582972][    C0] 
[ 2183.582972][    C0] -> #2 (&rq->__lock){-.-.}-{2:2}:
[ 2183.584893][    C0]        _raw_spin_lock_nested+0x50/0x6c
[ 2183.586238][    C0]        raw_spin_rq_lock_nested+0x2c/0x44
[ 2183.587620][    C0]        task_fork_fair+0x7c/0x23c
[ 2183.588792][    C0]        sched_cgroup_fork+0x38c/0x464
[ 2183.590146][    C0]        copy_process+0x24fc/0x3514
[ 2183.591404][    C0]        kernel_clone+0x1d8/0x8ac
[ 2183.592644][    C0]        user_mode_thread+0x110/0x178
[ 2183.593947][    C0]        rest_init+0x2c/0x2f4
[ 2183.595165][    C0]        start_kernel+0x0/0x55c
[ 2183.596315][    C0]        start_kernel+0x3f0/0x55c
[ 2183.597529][    C0]        __primary_switched+0xb8/0xc0
[ 2183.598683][    C0] 
[ 2183.598683][    C0] -> #1 (&p->pi_lock){-.-.}-{2:2}:
[ 2183.600461][    C0]        _raw_spin_lock_irqsave+0x5c/0x7c
[ 2183.601842][    C0]        try_to_wake_up+0xb0/0xd9c
[ 2183.603164][    C0]        default_wake_function+0x4c/0x60
[ 2183.604441][    C0]        autoremove_wake_function+0x24/0xf8
[ 2183.605909][    C0]        __wake_up_common+0x23c/0x3bc
[ 2183.607324][    C0]        __wake_up+0x10c/0x1a8
[ 2183.608499][    C0]        wakeup_kcompactd+0x254/0x310
[ 2183.609814][    C0]        balance_pgdat+0x1880/0x1c34
[ 2183.611036][    C0]        kswapd+0x7d0/0x10fc
[ 2183.612117][    C0]        kthread+0x288/0x310
[ 2183.613230][    C0]        ret_from_fork+0x10/0x20
[ 2183.614500][    C0] 
[ 2183.614500][    C0] -> #0 (&pgdat->kcompactd_wait){-.-.}-{2:2}:
[ 2183.616505][    C0]        __lock_acquire+0x3310/0x75f0
[ 2183.617673][    C0]        lock_acquire+0x23c/0x71c
[ 2183.618945][    C0]        _raw_spin_lock_irqsave+0x5c/0x7c
[ 2183.620324][    C0]        __wake_up+0xec/0x1a8
[ 2183.621503][    C0]        wakeup_kcompactd+0x254/0x310
[ 2183.622736][    C0]        wakeup_kswapd+0x350/0x8c8
[ 2183.623979][    C0]        wake_all_kswapds+0x13c/0x23c
[ 2183.625259][    C0]        __alloc_pages_slowpath+0x378/0x1edc
[ 2183.626724][    C0]        __alloc_pages+0x3bc/0x698
[ 2183.627951][    C0]        alloc_pages+0x4bc/0x7c0
[ 2183.629176][    C0]        __stack_depot_save+0x4ac/0x678
[ 2183.630420][    C0]        kasan_save_stack+0x54/0x6c
[ 2183.631651][    C0]        __kasan_record_aux_stack+0xcc/0xe8
[ 2183.632974][    C0]        kasan_record_aux_stack+0x14/0x20
[ 2183.634305][    C0]        task_work_add+0x94/0x3c0
[ 2183.635614][    C0]        scheduler_tick+0x2d0/0x52c
[ 2183.636869][    C0]        update_process_times+0x198/0x1f4
[ 2183.638387][    C0]        tick_sched_timer+0x330/0x4e8
[ 2183.639828][    C0]        __hrtimer_run_queues+0x458/0xca0
[ 2183.641302][    C0]        hrtimer_interrupt+0x2c0/0xb64
[ 2183.642638][    C0]        arch_timer_handler_virt+0x74/0x88
[ 2183.644090][    C0]        handle_percpu_devid_irq+0x2a4/0x804
[ 2183.645517][    C0]        generic_handle_domain_irq+0x7c/0xc4
[ 2183.646779][    C0]        gic_handle_irq+0x70/0x1e4
[ 2183.647680][    C0]        call_on_irq_stack+0x24/0x4c
[ 2183.648622][    C0]        do_interrupt_handler+0xd4/0x138
[ 2183.649760][    C0]        el1_interrupt+0x34/0x68
[ 2183.651074][    C0]        el1h_64_irq_handler+0x18/0x24
[ 2183.652364][    C0]        el1h_64_irq+0x64/0x68
[ 2183.653497][    C0]        _raw_spin_unlock_irq+0x34/0x80
[ 2183.654900][    C0]        __filemap_add_folio+0x6f8/0x11b4
[ 2183.656312][    C0]        filemap_add_folio+0x10c/0x298
[ 2183.657652][    C0]        page_cache_ra_unbounded+0x1c0/0x58c
[ 2183.659116][    C0]        page_cache_ra_order+0x7fc/0x994
[ 2183.660480][    C0]        do_sync_mmap_readahead+0x3a4/0x844
[ 2183.661920][    C0]        filemap_fault+0x5bc/0x1154
[ 2183.663254][    C0]        __do_fault+0x11c/0x3d8
[ 2183.664459][    C0]        handle_mm_fault+0x32cc/0x48ec
[ 2183.665845][    C0]        do_page_fault+0x81c/0xcbc
[ 2183.667115][    C0]        do_translation_fault+0x94/0xc8
[ 2183.668402][    C0]        do_mem_abort+0x74/0x200
[ 2183.669625][    C0]        el0_da+0x64/0x178
[ 2183.670758][    C0]        el0t_64_sync_handler+0xcc/0xf0
[ 2183.672110][    C0]        el0t_64_sync+0x190/0x194
[ 2183.673406][    C0] 
[ 2183.673406][    C0] other info that might help us debug this:
[ 2183.673406][    C0] 
[ 2183.675819][    C0] Chain exists of:
[ 2183.675819][    C0]   &pgdat->kcompactd_wait --> &p->pi_lock --> &rq->__lock
[ 2183.675819][    C0] 
[ 2183.678968][    C0]  Possible unsafe locking scenario:
[ 2183.678968][    C0] 
[ 2183.680880][    C0]        CPU0                    CPU1
[ 2183.682210][    C0]        ----                    ----
[ 2183.683458][    C0]   lock(&rq->__lock);
[ 2183.684437][    C0]                                lock(&p->pi_lock);
[ 2183.686126][    C0]                                lock(&rq->__lock);
[ 2183.687805][    C0]   lock(&pgdat->kcompactd_wait);
[ 2183.688915][    C0] 
[ 2183.688915][    C0]  *** DEADLOCK ***
[ 2183.688915][    C0] 
[ 2183.690746][    C0] 2 locks held by syz-fuzzer/5976:
[ 2183.691924][    C0]  #0: ffff0000c48db7a0 (mapping.invalidate_lock){++++}-{3:3}, at: page_cache_ra_unbounded+0xc8/0x58c
[ 2183.694769][    C0]  #1: ffff0001b4239b18 (&rq->__lock){-.-.}-{2:2}, at: scheduler_tick+0xa4/0x52c
[ 2183.697126][    C0] 
[ 2183.697126][    C0] stack backtrace:
[ 2183.698518][    C0] CPU: 0 PID: 5976 Comm: syz-fuzzer Not tainted 6.4.0-rc2-syzkaller-gf1fcbaa18b28 #0
[ 2183.700923][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023
[ 2183.703372][    C0] Call trace:
[ 2183.704220][    C0]  dump_backtrace+0x1b8/0x1e4
[ 2183.705358][    C0]  show_stack+0x2c/0x44
[ 2183.706370][    C0]  dump_stack_lvl+0xd0/0x124
[ 2183.707472][    C0]  dump_stack+0x1c/0x28
[ 2183.708496][    C0]  print_circular_bug+0x150/0x1b8
[ 2183.709823][    C0]  check_noncircular+0x2cc/0x378
[ 2183.710965][    C0]  __lock_acquire+0x3310/0x75f0
[ 2183.712090][    C0]  lock_acquire+0x23c/0x71c
[ 2183.713184][    C0]  _raw_spin_lock_irqsave+0x5c/0x7c
[ 2183.714470][    C0]  __wake_up+0xec/0x1a8
[ 2183.715457][    C0]  wakeup_kcompactd+0x254/0x310
[ 2183.716691][    C0]  wakeup_kswapd+0x350/0x8c8
[ 2183.717859][    C0]  wake_all_kswapds+0x13c/0x23c
[ 2183.719049][    C0]  __alloc_pages_slowpath+0x378/0x1edc
[ 2183.720387][    C0]  __alloc_pages+0x3bc/0x698
[ 2183.721552][    C0]  alloc_pages+0x4bc/0x7c0
[ 2183.722602][    C0]  __stack_depot_save+0x4ac/0x678
[ 2183.723829][    C0]  kasan_save_stack+0x54/0x6c
[ 2183.724955][    C0]  __kasan_record_aux_stack+0xcc/0xe8
[ 2183.726318][    C0]  kasan_record_aux_stack+0x14/0x20
[ 2183.727553][    C0]  task_work_add+0x94/0x3c0
[ 2183.728719][    C0]  scheduler_tick+0x2d0/0x52c
[ 2183.729876][    C0]  update_process_times+0x198/0x1f4
[ 2183.731148][    C0]  tick_sched_timer+0x330/0x4e8
[ 2183.732334][    C0]  __hrtimer_run_queues+0x458/0xca0
[ 2183.733649][    C0]  hrtimer_interrupt+0x2c0/0xb64
[ 2183.734878][    C0]  arch_timer_handler_virt+0x74/0x88
[ 2183.736144][    C0]  handle_percpu_devid_irq+0x2a4/0x804
[ 2183.737463][    C0]  generic_handle_domain_irq+0x7c/0xc4
[ 2183.738871][    C0]  gic_handle_irq+0x70/0x1e4
[ 2183.739900][    C0]  call_on_irq_stack+0x24/0x4c
[ 2183.741048][    C0]  do_interrupt_handler+0xd4/0x138
[ 2183.742367][    C0]  el1_interrupt+0x34/0x68
[ 2183.743505][    C0]  el1h_64_irq_handler+0x18/0x24
[ 2183.744730][    C0]  el1h_64_irq+0x64/0x68
[ 2183.745692][    C0]  _raw_spin_unlock_irq+0x34/0x80
[ 2183.746871][    C0]  __filemap_add_folio+0x6f8/0x11b4
[ 2183.748203][    C0]  filemap_add_folio+0x10c/0x298
[ 2183.749413][    C0]  page_cache_ra_unbounded+0x1c0/0x58c
[ 2183.750670][    C0]  page_cache_ra_order+0x7fc/0x994
[ 2183.751910][    C0]  do_sync_mmap_readahead+0x3a4/0x844
[ 2183.753143][    C0]  filemap_fault+0x5bc/0x1154
[ 2183.754160][    C0]  __do_fault+0x11c/0x3d8
[ 2183.755125][    C0]  handle_mm_fault+0x32cc/0x48ec
[ 2183.756345][    C0]  do_page_fault+0x81c/0xcbc
[ 2183.757400][    C0]  do_translation_fault+0x94/0xc8
[ 2183.758607][    C0]  do_mem_abort+0x74/0x200
[ 2183.759732][    C0]  el0_da+0x64/0x178
[ 2183.760748][    C0]  el0t_64_sync_handler+0xcc/0xf0
[ 2183.761938][    C0]  el0t_64_sync+0x190/0x194