ER_IOCTL_PARAMS(r0, 0x40505412, 0x0) [ 1016.391591] should_fail.cold+0x10a/0x149 [ 1016.391994] Unknown ioctl -1067952625 [ 1016.395731] should_failslab+0xd6/0x130 [ 1016.395744] __kmalloc+0x2c1/0x400 [ 1016.395753] ? __vb2_queue_alloc+0xf4/0xd90 [ 1016.395764] __vb2_queue_alloc+0xf4/0xd90 [ 1016.395776] ? unwind_get_return_address+0x51/0x90 [ 1016.395786] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1016.395795] ? __save_stack_trace+0xa0/0x160 [ 1016.395807] ? vim2m_queue_setup+0x221/0x330 [ 1016.395821] vb2_core_create_bufs+0x279/0x5a0 20:48:39 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x228000) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000080)={{0x1, 0x2, 0x4, 0x2, 0x3}}) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) (async) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000080), 0x0) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000040), 0x4) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 20:48:39 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x3, &(0x7f0000000200)=[{0x1, 0x8, 0x3, 0x81}, {0x1, 0x81, 0xff, 0x9}, {0x3ff, 0x0, 0x4}]}) keyctl$get_persistent(0x16, 0x0, r1) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) [ 1016.412984] Unknown ioctl 46852 [ 1016.415507] ? __vb2_queue_free+0x7a0/0x7a0 [ 1016.415523] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1016.415533] ? trace_hardirqs_on+0x10/0x10 [ 1016.415544] vb2_create_bufs+0x2e1/0x5b0 [ 1016.415558] ? vb2_thread_start+0x310/0x310 [ 1016.415573] v4l_create_bufs+0xa4/0x150 [ 1016.415583] __video_do_ioctl+0x65b/0x6a0 [ 1016.434434] Unknown ioctl 1077171216 [ 1016.434618] ? video_ioctl2+0x30/0x30 [ 1016.441846] Unknown ioctl -1067952625 [ 1016.442439] ? __might_fault+0x177/0x1b0 20:48:39 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1001, 0xffffffffffffffff, 0x2, &(0x7f0000000040)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) (async) prctl$PR_SCHED_CORE(0x3e, 0x1001, 0xffffffffffffffff, 0x2, &(0x7f0000000040)) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) (async) 20:48:39 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f00000000c0)=0x4, 0x4) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000080)={{0x0, 0x2, 0x8, 0x1, 0x40}}) [ 1016.442452] ? video_ioctl2+0x30/0x30 [ 1016.442462] video_usercopy+0xfd/0xe70 [ 1016.442475] ? v4l_g_ctrl+0x390/0x390 [ 1016.454912] Unknown ioctl -1067952625 [ 1016.457123] ? proc_fail_nth_write+0x7b/0x180 [ 1016.457135] ? trace_hardirqs_on+0x10/0x10 [ 1016.457149] ? fsnotify+0x974/0x11b0 [ 1016.457157] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 1016.457166] ? __handle_mm_fault+0x80f/0x4620 [ 1016.457180] v4l2_ioctl+0x1bb/0x2f0 [ 1016.457187] ? v4l2_open+0x2f0/0x2f0 [ 1016.457197] do_vfs_ioctl+0x75a/0xff0 [ 1016.457207] ? lock_acquire+0x170/0x3f0 [ 1016.457216] ? ioctl_preallocate+0x1a0/0x1a0 [ 1016.457226] ? __fget+0x265/0x3e0 [ 1016.457237] ? do_vfs_ioctl+0xff0/0xff0 [ 1016.498749] Unknown ioctl 1077171216 [ 1016.500409] ? security_file_ioctl+0x83/0xb0 [ 1016.500423] SyS_ioctl+0x7f/0xb0 [ 1016.500434] ? do_vfs_ioctl+0xff0/0xff0 [ 1016.504394] Unknown ioctl -1067952625 [ 1016.508688] do_syscall_64+0x1d5/0x640 [ 1016.508703] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1016.508711] RIP: 0033:0x7fa7d3c480c9 20:48:39 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) (fail_nth: 17) 20:48:39 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f00000000c0)=0x4, 0x4) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000080)={{0x0, 0x2, 0x8, 0x1, 0x40}}) 20:48:39 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x3, &(0x7f0000000200)=[{0x1, 0x8, 0x3, 0x81}, {0x1, 0x81, 0xff, 0x9}, {0x3ff, 0x0, 0x4}]}) (async) keyctl$get_persistent(0x16, 0x0, r1) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) 20:48:39 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x228000) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000080)={{0x1, 0x2, 0x4, 0x2, 0x3}}) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) (async) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000080), 0x0) (async) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000040), 0x4) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) [ 1016.508715] RSP: 002b:00007fa7d21ba168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1016.508725] RAX: ffffffffffffffda RBX: 00007fa7d3d67f80 RCX: 00007fa7d3c480c9 [ 1016.508731] RDX: 0000000020000180 RSI: 00000000c100565c RDI: 0000000000000003 [ 1016.508737] RBP: 00007fa7d21ba1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1016.508742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1016.508748] R13: 00007ffdc7685b4f R14: 00007fa7d21ba300 R15: 0000000000022000 [ 1016.521764] Unknown ioctl -1067952625 [ 1016.564740] Unknown ioctl 21664 [ 1016.624639] FAULT_INJECTION: forcing a failure. 20:48:40 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000300)={0x1, @sliced={0x0, [0x8, 0x100, 0x4, 0x4d, 0x2, 0x0, 0x5, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x414e], 0xc03b}}) 20:48:40 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f00000000c0)=0x4, 0x4) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000080)={{0x0, 0x2, 0x8, 0x1, 0x40}}) 20:48:40 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000001480), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r2, 0x301}, 0x14}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xf006f54}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7ba9d0f8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x45) [ 1016.624639] name failslab, interval 1, probability 0, space 0, times 0 [ 1016.645384] Unknown ioctl 1077171216 [ 1016.652290] Unknown ioctl -1067952625 [ 1016.657806] Unknown ioctl -1067952625 [ 1016.677787] Unknown ioctl 21664 [ 1016.682696] CPU: 0 PID: 20050 Comm: syz-executor.0 Not tainted 4.14.304-syzkaller #0 20:48:40 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1001, 0xffffffffffffffff, 0x2, &(0x7f0000000040)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) (async) prctl$PR_SCHED_CORE(0x3e, 0x1001, 0xffffffffffffffff, 0x2, &(0x7f0000000040)) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) (async) 20:48:40 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) (async, rerun: 64) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) (rerun: 64) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r1) (async, rerun: 32) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x3, &(0x7f0000000200)=[{0x1, 0x8, 0x3, 0x81}, {0x1, 0x81, 0xff, 0x9}, {0x3ff, 0x0, 0x4}]}) (async, rerun: 32) keyctl$get_persistent(0x16, 0x0, r1) (async) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) [ 1016.690580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1016.699923] Call Trace: [ 1016.702509] dump_stack+0x1b2/0x281 [ 1016.706139] should_fail.cold+0x10a/0x149 [ 1016.710418] should_failslab+0xd6/0x130 [ 1016.714390] __kmalloc+0x2c1/0x400 [ 1016.717925] ? __vb2_queue_alloc+0xf4/0xd90 [ 1016.722244] __vb2_queue_alloc+0xf4/0xd90 [ 1016.726391] ? unwind_get_return_address+0x51/0x90 [ 1016.729860] Unknown ioctl 21664 [ 1016.731311] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 20:48:40 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) [ 1016.731323] ? __save_stack_trace+0xa0/0x160 [ 1016.731335] ? vim2m_queue_setup+0x221/0x330 [ 1016.731348] vb2_core_create_bufs+0x279/0x5a0 [ 1016.741538] Unknown ioctl 21664 [ 1016.744338] ? __vb2_queue_free+0x7a0/0x7a0 [ 1016.744356] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1016.744367] ? trace_hardirqs_on+0x10/0x10 [ 1016.744378] vb2_create_bufs+0x2e1/0x5b0 [ 1016.744390] ? vb2_thread_start+0x310/0x310 [ 1016.778733] v4l_create_bufs+0xa4/0x150 [ 1016.782708] __video_do_ioctl+0x65b/0x6a0 [ 1016.783249] Unknown ioctl -1067952625 20:48:40 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000040)) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) [ 1016.786854] ? video_ioctl2+0x30/0x30 [ 1016.786867] ? __might_fault+0x177/0x1b0 [ 1016.786877] ? video_ioctl2+0x30/0x30 [ 1016.786884] video_usercopy+0xfd/0xe70 [ 1016.786897] ? v4l_g_ctrl+0x390/0x390 [ 1016.786907] ? proc_fail_nth_write+0x7b/0x180 [ 1016.786919] ? trace_hardirqs_on+0x10/0x10 [ 1016.786933] ? fsnotify+0x974/0x11b0 [ 1016.786942] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 1016.786949] ? __handle_mm_fault+0x80f/0x4620 [ 1016.786960] v4l2_ioctl+0x1bb/0x2f0 [ 1016.786969] ? v4l2_open+0x2f0/0x2f0 [ 1016.801432] Unknown ioctl -2141170668 20:48:40 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000040)) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) (async) [ 1016.802361] do_vfs_ioctl+0x75a/0xff0 [ 1016.802373] ? lock_acquire+0x170/0x3f0 [ 1016.802382] ? ioctl_preallocate+0x1a0/0x1a0 [ 1016.802393] ? __fget+0x265/0x3e0 [ 1016.842551] Unknown ioctl -1067952625 [ 1016.842908] ? do_vfs_ioctl+0xff0/0xff0 [ 1016.850599] Unknown ioctl -2141170668 [ 1016.850650] ? security_file_ioctl+0x83/0xb0 [ 1016.874367] SyS_ioctl+0x7f/0xb0 [ 1016.877727] ? do_vfs_ioctl+0xff0/0xff0 [ 1016.881709] do_syscall_64+0x1d5/0x640 [ 1016.885600] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1016.890791] RIP: 0033:0x7fa7d3c480c9 [ 1016.891425] Unknown ioctl -1067952625 [ 1016.894519] RSP: 002b:00007fa7d21ba168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1016.894532] RAX: ffffffffffffffda RBX: 00007fa7d3d67f80 RCX: 00007fa7d3c480c9 [ 1016.894537] RDX: 0000000020000180 RSI: 00000000c100565c RDI: 0000000000000003 [ 1016.894543] RBP: 00007fa7d21ba1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1016.894547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1016.894554] R13: 00007ffdc7685b4f R14: 00007fa7d21ba300 R15: 0000000000022000 20:48:40 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) (fail_nth: 18) 20:48:40 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$link(0x8, 0x0, r4) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000200)="4c6f673cc4b7d2723194e82dea11a73dfee18476fae670b307f60c2b0936196c85f316f1f5803ca9e28750efaacdbeca77d9ebfd41161da5caef6984a09f6d76ab4449883aa1877a3fbbce34f5925b2302a76306827d93f48c6c06a776e327a2f70d05f9d6f21dee0bcce42e0289819e70c4fc23a87b19a626c608a029d3d2b4da9929d3172f95", 0x87, r4) 20:48:40 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f00000000c0)=0x4, 0x4) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x0, 0x2, 0x8, 0x1, 0x40}}) 20:48:40 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000001480), r1) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r2, 0x301}, 0x14}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xf006f54}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7ba9d0f8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x45) 20:48:40 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000300)={0x1, @sliced={0x0, [0x8, 0x100, 0x4, 0x4d, 0x2, 0x0, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x414e], 0xc03b}}) [ 1016.898515] Unknown ioctl -2141170668 [ 1016.961540] Unknown ioctl -1067952625 [ 1016.965810] Unknown ioctl -2141170668 [ 1016.975606] FAULT_INJECTION: forcing a failure. [ 1016.975606] name failslab, interval 1, probability 0, space 0, times 0 [ 1016.986985] CPU: 1 PID: 20104 Comm: syz-executor.0 Not tainted 4.14.304-syzkaller #0 [ 1016.994864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1017.004209] Call Trace: [ 1017.006793] dump_stack+0x1b2/0x281 [ 1017.010424] should_fail.cold+0x10a/0x149 [ 1017.014573] should_failslab+0xd6/0x130 [ 1017.018555] __kmalloc+0x2c1/0x400 [ 1017.022090] ? __vb2_queue_alloc+0xf4/0xd90 [ 1017.026412] __vb2_queue_alloc+0xf4/0xd90 [ 1017.030561] ? unwind_get_return_address+0x51/0x90 [ 1017.035498] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1017.040858] ? __save_stack_trace+0xa0/0x160 [ 1017.045262] ? vim2m_queue_setup+0x221/0x330 [ 1017.049670] vb2_core_create_bufs+0x279/0x5a0 [ 1017.054167] ? __vb2_queue_free+0x7a0/0x7a0 [ 1017.058487] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1017.063844] ? trace_hardirqs_on+0x10/0x10 [ 1017.068076] vb2_create_bufs+0x2e1/0x5b0 [ 1017.072136] ? vb2_thread_start+0x310/0x310 [ 1017.076461] v4l_create_bufs+0xa4/0x150 [ 1017.080434] __video_do_ioctl+0x65b/0x6a0 [ 1017.084581] ? video_ioctl2+0x30/0x30 [ 1017.088383] ? __might_fault+0x177/0x1b0 [ 1017.092444] ? video_ioctl2+0x30/0x30 [ 1017.096239] video_usercopy+0xfd/0xe70 [ 1017.100124] ? v4l_g_ctrl+0x390/0x390 [ 1017.103918] ? proc_fail_nth_write+0x7b/0x180 [ 1017.108414] ? trace_hardirqs_on+0x10/0x10 [ 1017.112650] ? fsnotify+0x974/0x11b0 [ 1017.116495] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 1017.121416] ? __handle_mm_fault+0x80f/0x4620 [ 1017.125918] v4l2_ioctl+0x1bb/0x2f0 [ 1017.129637] ? v4l2_open+0x2f0/0x2f0 [ 1017.133346] do_vfs_ioctl+0x75a/0xff0 [ 1017.137141] ? lock_acquire+0x170/0x3f0 20:48:40 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000001480), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r2, 0x301}, 0x14}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xf006f54}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7ba9d0f8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x45) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000001480), r1) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r2, 0x301}, 0x14}}, 0x0) (async) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xf006f54}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7ba9d0f8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x45) (async) 20:48:40 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x0, 0x2, 0x8, 0x1, 0x40}}) 20:48:40 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x0, 0x2, 0x8, 0x1, 0x40}}) 20:48:40 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000140)={@private1, 0x0, r2}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000170900100000000003000000185a0000070000000000000000000000180000d90500009400"/56], &(0x7f0000000080)='GPL\x00', 0x101, 0x1e, &(0x7f00000000c0)=""/30, 0x41100, 0x18, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0xf, 0x101, 0x3ff}, 0x10}, 0x80) r3 = socket(0x2b, 0xa, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000001180)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001140)={&(0x7f0000000e00)={0x14, 0x0, 0x4}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000240)={'wg2\x00'}) setsockopt$inet6_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000200)=@ccm_128={{0x7}, "66cb5932d387714a", "c593a681fdf8332e4d99b88ed6b5a90e", "1db488e0", "e102194ed55b8866"}, 0x28) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 20:48:40 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x8002) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x0, 0x2, 0x8, 0x1, 0x40}}) 20:48:40 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x8002) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x0, 0x2, 0x8, 0x1, 0x40}}) [ 1017.141144] ? ioctl_preallocate+0x1a0/0x1a0 [ 1017.145553] ? __fget+0x265/0x3e0 [ 1017.149010] ? do_vfs_ioctl+0xff0/0xff0 [ 1017.152977] ? security_file_ioctl+0x83/0xb0 [ 1017.157375] SyS_ioctl+0x7f/0xb0 [ 1017.160734] ? do_vfs_ioctl+0xff0/0xff0 [ 1017.164701] do_syscall_64+0x1d5/0x640 [ 1017.168587] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1017.173767] RIP: 0033:0x7fa7d3c480c9 [ 1017.177465] RSP: 002b:00007fa7d21ba168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1017.185165] RAX: ffffffffffffffda RBX: 00007fa7d3d67f80 RCX: 00007fa7d3c480c9 20:48:40 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000040)={{0x2, 0x1, 0x8, 0x2, 0x7}, 0x4, 0x4, 0x7fffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) 20:48:40 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) (fail_nth: 19) 20:48:40 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) (async) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$link(0x8, 0x0, r4) (async) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000200)="4c6f673cc4b7d2723194e82dea11a73dfee18476fae670b307f60c2b0936196c85f316f1f5803ca9e28750efaacdbeca77d9ebfd41161da5caef6984a09f6d76ab4449883aa1877a3fbbce34f5925b2302a76306827d93f48c6c06a776e327a2f70d05f9d6f21dee0bcce42e0289819e70c4fc23a87b19a626c608a029d3d2b4da9929d3172f95", 0x87, r4) 20:48:40 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x8002) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x0, 0x2, 0x8, 0x1, 0x40}}) 20:48:40 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000140)={@private1, 0x0, r2}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000170900100000000003000000185a0000070000000000000000000000180000d90500009400"/56], &(0x7f0000000080)='GPL\x00', 0x101, 0x1e, &(0x7f00000000c0)=""/30, 0x41100, 0x18, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0xf, 0x101, 0x3ff}, 0x10}, 0x80) (async) r3 = socket(0x2b, 0xa, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000001180)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001140)={&(0x7f0000000e00)={0x14, 0x0, 0x4}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000240)={'wg2\x00'}) (async) setsockopt$inet6_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000200)=@ccm_128={{0x7}, "66cb5932d387714a", "c593a681fdf8332e4d99b88ed6b5a90e", "1db488e0", "e102194ed55b8866"}, 0x28) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 20:48:40 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000300)={0x1, @sliced={0x0, [0x8, 0x100, 0x4, 0x4d, 0x2, 0x0, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x414e], 0xc03b}}) 20:48:40 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000040)={{0x2, 0x1, 0x8, 0x2, 0x7}, 0x4, 0x4, 0x7fffffffffffffff}) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) [ 1017.192424] RDX: 0000000020000180 RSI: 00000000c100565c RDI: 0000000000000003 [ 1017.199687] RBP: 00007fa7d21ba1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1017.206949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1017.214204] R13: 00007ffdc7685b4f R14: 00007fa7d21ba300 R15: 0000000000022000 [ 1017.231669] Unknown ioctl -1067952625 [ 1017.235965] Unknown ioctl -1068477435 20:48:40 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x0, 0x2, 0x8, 0x1, 0x40}}) 20:48:40 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000040)={{0x2, 0x1, 0x8, 0x2, 0x7}, 0x4, 0x4, 0x7fffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) 20:48:40 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000300)={0x1, @sliced={0x0, [0x8, 0x100, 0x4, 0x4d, 0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x414e], 0xc03b}}) [ 1017.274410] Unknown ioctl -1067952625 [ 1017.281501] Unknown ioctl -1068477435 [ 1017.305754] FAULT_INJECTION: forcing a failure. [ 1017.305754] name failslab, interval 1, probability 0, space 0, times 0 [ 1017.319255] CPU: 1 PID: 20146 Comm: syz-executor.0 Not tainted 4.14.304-syzkaller #0 [ 1017.327149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1017.336499] Call Trace: [ 1017.339097] dump_stack+0x1b2/0x281 [ 1017.342726] should_fail.cold+0x10a/0x149 [ 1017.346860] should_failslab+0xd6/0x130 [ 1017.350822] __kmalloc+0x2c1/0x400 [ 1017.354341] ? __vb2_queue_alloc+0xf4/0xd90 [ 1017.358643] __vb2_queue_alloc+0xf4/0xd90 [ 1017.362795] ? unwind_get_return_address+0x51/0x90 [ 1017.367702] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1017.373048] ? __save_stack_trace+0xa0/0x160 [ 1017.377454] ? vim2m_queue_setup+0x221/0x330 [ 1017.381851] vb2_core_create_bufs+0x279/0x5a0 [ 1017.386338] ? __vb2_queue_free+0x7a0/0x7a0 [ 1017.390652] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1017.396012] ? trace_hardirqs_on+0x10/0x10 [ 1017.400237] vb2_create_bufs+0x2e1/0x5b0 [ 1017.404284] ? vb2_thread_start+0x310/0x310 [ 1017.408591] v4l_create_bufs+0xa4/0x150 [ 1017.412558] __video_do_ioctl+0x65b/0x6a0 [ 1017.416693] ? video_ioctl2+0x30/0x30 [ 1017.420474] ? __might_fault+0x177/0x1b0 20:48:40 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000140)={@private1, 0x0, r2}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000170900100000000003000000185a0000070000000000000000000000180000d90500009400"/56], &(0x7f0000000080)='GPL\x00', 0x101, 0x1e, &(0x7f00000000c0)=""/30, 0x41100, 0x18, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0xf, 0x101, 0x3ff}, 0x10}, 0x80) r3 = socket(0x2b, 0xa, 0x9) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000001180)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001140)={&(0x7f0000000e00)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000240)={'wg2\x00'}) (async) setsockopt$inet6_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000200)=@ccm_128={{0x7}, "66cb5932d387714a", "c593a681fdf8332e4d99b88ed6b5a90e", "1db488e0", "e102194ed55b8866"}, 0x28) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) [ 1017.424526] ? video_ioctl2+0x30/0x30 [ 1017.428323] video_usercopy+0xfd/0xe70 [ 1017.432210] ? v4l_g_ctrl+0x390/0x390 [ 1017.436011] ? proc_fail_nth_write+0x7b/0x180 [ 1017.440505] ? trace_hardirqs_on+0x10/0x10 [ 1017.444742] ? fsnotify+0x974/0x11b0 [ 1017.448458] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 1017.453385] ? __handle_mm_fault+0x80f/0x4620 [ 1017.457884] v4l2_ioctl+0x1bb/0x2f0 [ 1017.461510] ? v4l2_open+0x2f0/0x2f0 [ 1017.465223] do_vfs_ioctl+0x75a/0xff0 [ 1017.469021] ? lock_acquire+0x170/0x3f0 [ 1017.472986] ? ioctl_preallocate+0x1a0/0x1a0 [ 1017.477376] ? __fget+0x265/0x3e0 [ 1017.480816] ? do_vfs_ioctl+0xff0/0xff0 [ 1017.484777] ? security_file_ioctl+0x83/0xb0 [ 1017.489165] SyS_ioctl+0x7f/0xb0 [ 1017.492510] ? do_vfs_ioctl+0xff0/0xff0 [ 1017.496464] do_syscall_64+0x1d5/0x640 [ 1017.500333] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1017.505523] RIP: 0033:0x7fa7d3c480c9 [ 1017.509211] RSP: 002b:00007fa7d21ba168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1017.516896] RAX: ffffffffffffffda RBX: 00007fa7d3d67f80 RCX: 00007fa7d3c480c9 20:48:40 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x1, 0x1, 0x9, 0x3, 0x1ff}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000001c0)={0x800, 0x2, 0x3, "8cae43714d6ac5f45240bf6f754a5348384bb382cc3bcf566949a06b52c0cd4b", 0x47314356}) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000080)=""/225) 20:48:40 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) (async) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$link(0x8, 0x0, r4) (async) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000200)="4c6f673cc4b7d2723194e82dea11a73dfee18476fae670b307f60c2b0936196c85f316f1f5803ca9e28750efaacdbeca77d9ebfd41161da5caef6984a09f6d76ab4449883aa1877a3fbbce34f5925b2302a76306827d93f48c6c06a776e327a2f70d05f9d6f21dee0bcce42e0289819e70c4fc23a87b19a626c608a029d3d2b4da9929d3172f95", 0x87, r4) 20:48:40 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) (fail_nth: 20) 20:48:40 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000080)={{0x0, 0x2, 0x8, 0x1, 0x40}}) 20:48:40 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000300)={0x1, @sliced={0x0, [0x8, 0x100, 0x4, 0x4d, 0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x414e], 0xc03b}}) [ 1017.524158] RDX: 0000000020000180 RSI: 00000000c100565c RDI: 0000000000000003 [ 1017.531425] RBP: 00007fa7d21ba1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1017.538670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1017.545944] R13: 00007ffdc7685b4f R14: 00007fa7d21ba300 R15: 0000000000022000 20:48:40 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1, 0x0, 0x1003, 0x0, 0xffffffff}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f00000000c0)=0x2) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000100)=@fd={0x3, 0x3, 0x4, 0x4000, 0x1, {r2, r3/1000+10000}, {0x5, 0x0, 0x3f, 0x1, 0x4, 0x40, "b1c48837"}, 0x1, 0x4, {}, 0xffffffff}) [ 1017.581838] Unknown ioctl -1067952625 [ 1017.585921] Unknown ioctl -1068477435 [ 1017.653931] Unknown ioctl -1067952625 20:48:41 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000300)='pkcs7_test\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)='\x00', r0) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000200)='@,\x00', r0) keyctl$negate(0xd, r1, 0x9, r2) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) request_key(&(0x7f0000000240)='logon\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)='asymmetric\x00', 0xfffffffffffffffa) keyctl$get_persistent(0x16, 0xee00, r3) 20:48:41 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000080)={{0x0, 0x2, 0x8, 0x1, 0x40}}) [ 1017.681155] Unknown ioctl -1069525502 [ 1017.687831] Unknown ioctl 1074026002 [ 1017.691971] Unknown ioctl -2132257775 [ 1017.706796] FAULT_INJECTION: forcing a failure. [ 1017.706796] name failslab, interval 1, probability 0, space 0, times 0 20:48:41 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000300)={0x1, @sliced={0x0, [0x8, 0x100, 0x4, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x414e], 0xc03b}}) 20:48:41 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1, 0x0, 0x1003, 0x0, 0xffffffff}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f00000000c0)=0x2) (async) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000100)=@fd={0x3, 0x3, 0x4, 0x4000, 0x1, {r2, r3/1000+10000}, {0x5, 0x0, 0x3f, 0x1, 0x4, 0x40, "b1c48837"}, 0x1, 0x4, {}, 0xffffffff}) 20:48:41 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000080)={{0x0, 0x2, 0x8, 0x1, 0x40}}) 20:48:41 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) [ 1017.733451] CPU: 1 PID: 20174 Comm: syz-executor.0 Not tainted 4.14.304-syzkaller #0 [ 1017.741352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1017.750873] Call Trace: [ 1017.753464] dump_stack+0x1b2/0x281 [ 1017.757091] should_fail.cold+0x10a/0x149 [ 1017.761238] should_failslab+0xd6/0x130 [ 1017.765216] __kmalloc+0x2c1/0x400 [ 1017.768751] ? __vb2_queue_alloc+0xf4/0xd90 [ 1017.773072] __vb2_queue_alloc+0xf4/0xd90 [ 1017.777220] ? unwind_get_return_address+0x51/0x90 [ 1017.782147] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1017.787504] ? __save_stack_trace+0xa0/0x160 [ 1017.791910] ? vim2m_queue_setup+0x221/0x330 [ 1017.796316] vb2_core_create_bufs+0x279/0x5a0 [ 1017.800806] ? __vb2_queue_free+0x7a0/0x7a0 [ 1017.805123] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1017.810481] ? trace_hardirqs_on+0x10/0x10 [ 1017.813375] Unknown ioctl 1074026002 [ 1017.814712] vb2_create_bufs+0x2e1/0x5b0 [ 1017.814728] ? vb2_thread_start+0x310/0x310 [ 1017.814744] v4l_create_bufs+0xa4/0x150 [ 1017.830720] __video_do_ioctl+0x65b/0x6a0 [ 1017.834859] ? video_ioctl2+0x30/0x30 [ 1017.838655] ? __might_fault+0x177/0x1b0 [ 1017.842707] ? video_ioctl2+0x30/0x30 [ 1017.846486] video_usercopy+0xfd/0xe70 [ 1017.850359] ? v4l_g_ctrl+0x390/0x390 [ 1017.854136] ? proc_fail_nth_write+0x7b/0x180 [ 1017.858609] ? trace_hardirqs_on+0x10/0x10 [ 1017.862820] ? fsnotify+0x974/0x11b0 [ 1017.866527] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 1017.871437] ? __handle_mm_fault+0x80f/0x4620 [ 1017.875948] v4l2_ioctl+0x1bb/0x2f0 [ 1017.879551] ? v4l2_open+0x2f0/0x2f0 [ 1017.883241] do_vfs_ioctl+0x75a/0xff0 [ 1017.887020] ? lock_acquire+0x170/0x3f0 [ 1017.890971] ? ioctl_preallocate+0x1a0/0x1a0 [ 1017.895355] ? __fget+0x265/0x3e0 [ 1017.898787] ? do_vfs_ioctl+0xff0/0xff0 [ 1017.902737] ? security_file_ioctl+0x83/0xb0 [ 1017.907120] SyS_ioctl+0x7f/0xb0 [ 1017.910463] ? do_vfs_ioctl+0xff0/0xff0 [ 1017.914421] do_syscall_64+0x1d5/0x640 [ 1017.918296] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1017.923461] RIP: 0033:0x7fa7d3c480c9 20:48:41 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x1, 0x1, 0x9, 0x3, 0x1ff}) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async, rerun: 64) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000001c0)={0x800, 0x2, 0x3, "8cae43714d6ac5f45240bf6f754a5348384bb382cc3bcf566949a06b52c0cd4b", 0x47314356}) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000080)=""/225) 20:48:41 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) 20:48:41 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000300)='pkcs7_test\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)='\x00', r0) (async) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) (async) r2 = request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000200)='@,\x00', r0) keyctl$negate(0xd, r1, 0x9, r2) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) request_key(&(0x7f0000000240)='logon\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)='asymmetric\x00', 0xfffffffffffffffa) (async) keyctl$get_persistent(0x16, 0xee00, r3) 20:48:41 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1, 0x0, 0x1003, 0x0, 0xffffffff}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f00000000c0)=0x2) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000100)=@fd={0x3, 0x3, 0x4, 0x4000, 0x1, {r2, r3/1000+10000}, {0x5, 0x0, 0x3f, 0x1, 0x4, 0x40, "b1c48837"}, 0x1, 0x4, {}, 0xffffffff}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1, 0x0, 0x1003, 0x0, 0xffffffff}) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f00000000c0)=0x2) (async) clock_gettime(0x0, &(0x7f0000000080)) (async) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000100)=@fd={0x3, 0x3, 0x4, 0x4000, 0x1, {r2, r3/1000+10000}, {0x5, 0x0, 0x3f, 0x1, 0x4, 0x40, "b1c48837"}, 0x1, 0x4, {}, 0xffffffff}) (async) 20:48:41 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) (fail_nth: 21) 20:48:41 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000300)={0x1, @sliced={0x0, [0x8, 0x100, 0x4, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x414e], 0xc03b}}) [ 1017.927161] RSP: 002b:00007fa7d21ba168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1017.934846] RAX: ffffffffffffffda RBX: 00007fa7d3d67f80 RCX: 00007fa7d3c480c9 [ 1017.942095] RDX: 0000000020000180 RSI: 00000000c100565c RDI: 0000000000000003 [ 1017.949341] RBP: 00007fa7d21ba1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1017.956597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1017.963856] R13: 00007ffdc7685b4f R14: 00007fa7d21ba300 R15: 0000000000022000 20:48:41 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) 20:48:41 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x80000) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000080)={{0x1, 0x0, 0x3, 0x0, 0x5}, 0x6, 0xffffffffffffffff, 0x746a}) [ 1018.011456] FAULT_INJECTION: forcing a failure. [ 1018.011456] name failslab, interval 1, probability 0, space 0, times 0 [ 1018.023607] Unknown ioctl 1074026002 [ 1018.030090] CPU: 1 PID: 20198 Comm: syz-executor.0 Not tainted 4.14.304-syzkaller #0 [ 1018.037981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1018.047326] Call Trace: [ 1018.049918] dump_stack+0x1b2/0x281 [ 1018.053556] should_fail.cold+0x10a/0x149 [ 1018.057702] should_failslab+0xd6/0x130 20:48:41 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x80000) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000080)={{0x1, 0x0, 0x3, 0x0, 0x5}, 0x6, 0xffffffffffffffff, 0x746a}) [ 1018.061680] __kmalloc+0x2c1/0x400 [ 1018.065217] ? __vb2_queue_alloc+0xf4/0xd90 [ 1018.069533] __vb2_queue_alloc+0xf4/0xd90 [ 1018.073679] ? unwind_get_return_address+0x51/0x90 [ 1018.078602] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1018.083955] ? __save_stack_trace+0xa0/0x160 [ 1018.088368] ? vim2m_queue_setup+0x221/0x330 [ 1018.090720] Unknown ioctl -1067952625 [ 1018.092776] vb2_core_create_bufs+0x279/0x5a0 [ 1018.092789] ? __vb2_queue_free+0x7a0/0x7a0 [ 1018.092804] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 20:48:41 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x1, 0x1, 0x9, 0x3, 0x1ff}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000001c0)={0x800, 0x2, 0x3, "8cae43714d6ac5f45240bf6f754a5348384bb382cc3bcf566949a06b52c0cd4b", 0x47314356}) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000080)=""/225) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x1, 0x1, 0x9, 0x3, 0x1ff}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000001c0)={0x800, 0x2, 0x3, "8cae43714d6ac5f45240bf6f754a5348384bb382cc3bcf566949a06b52c0cd4b", 0x47314356}) (async) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000080)=""/225) (async) 20:48:41 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x80000) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000080)={{0x1, 0x0, 0x3, 0x0, 0x5}, 0x6, 0xffffffffffffffff, 0x746a}) [ 1018.092815] ? trace_hardirqs_on+0x10/0x10 [ 1018.096706] Unknown ioctl -1069525502 [ 1018.101095] vb2_create_bufs+0x2e1/0x5b0 [ 1018.101111] ? vb2_thread_start+0x310/0x310 [ 1018.101127] v4l_create_bufs+0xa4/0x150 [ 1018.101137] __video_do_ioctl+0x65b/0x6a0 [ 1018.112375] Unknown ioctl -2132257775 [ 1018.114993] ? video_ioctl2+0x30/0x30 [ 1018.115006] ? __might_fault+0x177/0x1b0 [ 1018.115017] ? video_ioctl2+0x30/0x30 [ 1018.115025] video_usercopy+0xfd/0xe70 [ 1018.115038] ? v4l_g_ctrl+0x390/0x390 [ 1018.115049] ? proc_fail_nth_write+0x7b/0x180 [ 1018.115059] ? trace_hardirqs_on+0x10/0x10 [ 1018.115072] ? fsnotify+0x974/0x11b0 [ 1018.154399] Unknown ioctl -1067952625 [ 1018.154536] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 1018.163683] Unknown ioctl -1069525502 [ 1018.167001] ? __handle_mm_fault+0x80f/0x4620 [ 1018.167016] v4l2_ioctl+0x1bb/0x2f0 [ 1018.167025] ? v4l2_open+0x2f0/0x2f0 [ 1018.167037] do_vfs_ioctl+0x75a/0xff0 [ 1018.167048] ? lock_acquire+0x170/0x3f0 [ 1018.167057] ? ioctl_preallocate+0x1a0/0x1a0 [ 1018.167069] ? __fget+0x265/0x3e0 20:48:41 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x444100) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x1}) 20:48:41 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x444100) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x1}) 20:48:41 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000300)='pkcs7_test\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)='\x00', r0) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) (async, rerun: 32) r2 = request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000200)='@,\x00', r0) (rerun: 32) keyctl$negate(0xd, r1, 0x9, r2) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) (async) request_key(&(0x7f0000000240)='logon\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)='asymmetric\x00', 0xfffffffffffffffa) keyctl$get_persistent(0x16, 0xee00, r3) [ 1018.167080] ? do_vfs_ioctl+0xff0/0xff0 [ 1018.174990] Unknown ioctl -2132257775 [ 1018.179460] ? security_file_ioctl+0x83/0xb0 [ 1018.179474] SyS_ioctl+0x7f/0xb0 [ 1018.179484] ? do_vfs_ioctl+0xff0/0xff0 [ 1018.179496] do_syscall_64+0x1d5/0x640 [ 1018.179510] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1018.195730] Unknown ioctl -1067952625 [ 1018.198926] RIP: 0033:0x7fa7d3c480c9 [ 1018.198931] RSP: 002b:00007fa7d21ba168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1018.198942] RAX: ffffffffffffffda RBX: 00007fa7d3d67f80 RCX: 00007fa7d3c480c9 20:48:41 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x444100) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x1}) 20:48:41 executing program 1: setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000040)=0x80000000, 0x4) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000200)) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0) 20:48:41 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) (fail_nth: 22) 20:48:41 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x0, 0x0, 0x8, 0x1, 0x40}}) 20:48:41 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000300)={0x1, @sliced={0x0, [0x8, 0x100, 0x4, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x414e], 0xc03b}}) 20:48:41 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0x0, r2) keyctl$search(0xa, r2, &(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x3}, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)="3af52bcb4685364d53fc250a09ac4fda6f8598c2e3fc09c7224d3d5b8f7d8c4bf95f8286bda57c366abd2d7cfb0fe10057a79c2ecf69dc484d9f4785e0403198afdfedfc4939b5ff97efff4624736b3cada93eca950e89e4c68918db2464", 0x5e, 0xfffffffffffffff9) r5 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$link(0x8, 0x0, r5) request_key(&(0x7f0000000200)='syzkaller\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)=')-\x00', r5) keyctl$get_persistent(0x16, 0xee00, r3) 20:48:41 executing program 3: openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x288a01) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x1, 0x0, 0x1}) [ 1018.198948] RDX: 0000000020000180 RSI: 00000000c100565c RDI: 0000000000000003 [ 1018.198954] RBP: 00007fa7d21ba1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1018.198960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1018.198966] R13: 00007ffdc7685b4f R14: 00007fa7d21ba300 R15: 0000000000022000 [ 1018.202641] Unknown ioctl -1069525502 20:48:41 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x0, 0x0, 0x8, 0x1, 0x40}}) 20:48:41 executing program 1: setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000040)=0x80000000, 0x4) (async, rerun: 32) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (rerun: 32) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000200)) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0) 20:48:41 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x0, 0x0, 0x8, 0x1, 0x40}}) 20:48:41 executing program 3: openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x288a01) (async) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x1, 0x0, 0x1}) 20:48:41 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0x0, r2) (async) keyctl$search(0xa, r2, &(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x3}, 0xffffffffffffffff) (async) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) (async, rerun: 64) add_key$user(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)="3af52bcb4685364d53fc250a09ac4fda6f8598c2e3fc09c7224d3d5b8f7d8c4bf95f8286bda57c366abd2d7cfb0fe10057a79c2ecf69dc484d9f4785e0403198afdfedfc4939b5ff97efff4624736b3cada93eca950e89e4c68918db2464", 0x5e, 0xfffffffffffffff9) (rerun: 64) r5 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$link(0x8, 0x0, r5) (async, rerun: 64) request_key(&(0x7f0000000200)='syzkaller\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)=')-\x00', r5) (async, rerun: 64) keyctl$get_persistent(0x16, 0xee00, r3) [ 1018.372452] FAULT_INJECTION: forcing a failure. [ 1018.372452] name failslab, interval 1, probability 0, space 0, times 0 [ 1018.394015] Unknown ioctl -1072409599 [ 1018.403828] CPU: 0 PID: 20255 Comm: syz-executor.0 Not tainted 4.14.304-syzkaller #0 [ 1018.411718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 20:48:41 executing program 3: openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x288a01) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x1, 0x0, 0x1}) [ 1018.421068] Call Trace: [ 1018.423655] dump_stack+0x1b2/0x281 [ 1018.427291] should_fail.cold+0x10a/0x149 [ 1018.428578] Unknown ioctl -1072409599 [ 1018.431439] should_failslab+0xd6/0x130 [ 1018.431453] __kmalloc+0x2c1/0x400 [ 1018.431464] ? __vb2_queue_alloc+0xf4/0xd90 [ 1018.431476] __vb2_queue_alloc+0xf4/0xd90 [ 1018.451177] ? unwind_get_return_address+0x51/0x90 [ 1018.456103] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1018.461460] ? __save_stack_trace+0xa0/0x160 [ 1018.465867] ? vim2m_queue_setup+0x221/0x330 20:48:41 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000001180)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001140)={&(0x7f0000000e00)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r2, r3}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1, 0x1}) [ 1018.470278] vb2_core_create_bufs+0x279/0x5a0 [ 1018.471158] Unknown ioctl -1072409599 [ 1018.474774] ? __vb2_queue_free+0x7a0/0x7a0 [ 1018.474792] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1018.474804] ? trace_hardirqs_on+0x10/0x10 [ 1018.474815] vb2_create_bufs+0x2e1/0x5b0 [ 1018.474828] ? vb2_thread_start+0x310/0x310 [ 1018.474842] v4l_create_bufs+0xa4/0x150 [ 1018.474853] __video_do_ioctl+0x65b/0x6a0 [ 1018.474866] ? video_ioctl2+0x30/0x30 [ 1018.474876] ? __might_fault+0x177/0x1b0 [ 1018.474889] ? video_ioctl2+0x30/0x30 [ 1018.520643] video_usercopy+0xfd/0xe70 [ 1018.524531] ? v4l_g_ctrl+0x390/0x390 [ 1018.528339] ? proc_fail_nth_write+0x7b/0x180 [ 1018.531821] Unknown ioctl -1067952625 [ 1018.532826] ? trace_hardirqs_on+0x10/0x10 [ 1018.532843] ? fsnotify+0x974/0x11b0 [ 1018.532853] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 1018.532864] ? __handle_mm_fault+0x80f/0x4620 [ 1018.541180] Unknown ioctl -1067952625 [ 1018.544569] v4l2_ioctl+0x1bb/0x2f0 [ 1018.544579] ? v4l2_open+0x2f0/0x2f0 [ 1018.544591] do_vfs_ioctl+0x75a/0xff0 [ 1018.544605] ? lock_acquire+0x170/0x3f0 [ 1018.556027] Unknown ioctl 35296 [ 1018.557767] ? ioctl_preallocate+0x1a0/0x1a0 [ 1018.557781] ? __fget+0x265/0x3e0 [ 1018.557792] ? do_vfs_ioctl+0xff0/0xff0 [ 1018.557804] ? security_file_ioctl+0x83/0xb0 [ 1018.592215] SyS_ioctl+0x7f/0xb0 [ 1018.595557] ? do_vfs_ioctl+0xff0/0xff0 [ 1018.599508] do_syscall_64+0x1d5/0x640 [ 1018.603379] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1018.608546] RIP: 0033:0x7fa7d3c480c9 [ 1018.612243] RSP: 002b:00007fa7d21ba168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 20:48:42 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) (fail_nth: 23) 20:48:42 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) (async, rerun: 64) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) (rerun: 64) keyctl$get_persistent(0x16, 0x0, r2) keyctl$search(0xa, r2, &(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x3}, 0xffffffffffffffff) (async) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) (async) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)="3af52bcb4685364d53fc250a09ac4fda6f8598c2e3fc09c7224d3d5b8f7d8c4bf95f8286bda57c366abd2d7cfb0fe10057a79c2ecf69dc484d9f4785e0403198afdfedfc4939b5ff97efff4624736b3cada93eca950e89e4c68918db2464", 0x5e, 0xfffffffffffffff9) (async) r5 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$link(0x8, 0x0, r5) (async) request_key(&(0x7f0000000200)='syzkaller\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)=')-\x00', r5) (async) keyctl$get_persistent(0x16, 0xee00, r3) 20:48:42 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000300)={0x1, @sliced={0x0, [0x8, 0x100, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x414e], 0xc03b}}) 20:48:42 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x40}}) 20:48:42 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000001180)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001140)={&(0x7f0000000e00)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r2, r3}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1, 0x1}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000001180)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001140)={&(0x7f0000000e00)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, 0x0) (async) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r2, r3}) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1, 0x1}) (async) 20:48:42 executing program 1: setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000040)=0x80000000, 0x4) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000200)) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0) [ 1018.619934] RAX: ffffffffffffffda RBX: 00007fa7d3d67f80 RCX: 00007fa7d3c480c9 [ 1018.627184] RDX: 0000000020000180 RSI: 00000000c100565c RDI: 0000000000000003 [ 1018.634437] RBP: 00007fa7d21ba1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1018.641699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1018.648946] R13: 00007ffdc7685b4f R14: 00007fa7d21ba300 R15: 0000000000022000 20:48:42 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x0, 0x40}}) 20:48:42 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 20:48:42 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000300)={0x1, @sliced={0x0, [0x8, 0x100, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x414e], 0xc03b}}) 20:48:42 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) r3 = getpgid(0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, r2) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000200)="98025a9774036b93ff185c2b7e0d0fff0613981e0a8667ca33d6323c76494e298dae6a54cbac081791152fe7c608", 0x2e, r4) getpgid(r3) r5 = request_key(&(0x7f0000000380)='cifs.spnego\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000400)='keyring\x00', r2) add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000340)="a5885fb5f277dbe07b1fd049c54d7f6e0313ef14871667a6126d83de2c5cd7a081b7e3bd8d0dd99dcfafc9882f91f79219e36076079c3bebc9401e322c06", 0x3e, r5) keyctl$get_persistent(0x16, 0xee00, r2) 20:48:42 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async) [ 1018.737118] Unknown ioctl -1067952625 [ 1018.748134] FAULT_INJECTION: forcing a failure. [ 1018.748134] name failslab, interval 1, probability 0, space 0, times 0 [ 1018.752202] Unknown ioctl -1067952625 [ 1018.770700] Unknown ioctl 35296 [ 1018.794128] CPU: 0 PID: 20291 Comm: syz-executor.0 Not tainted 4.14.304-syzkaller #0 [ 1018.802022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1018.811370] Call Trace: [ 1018.813957] dump_stack+0x1b2/0x281 [ 1018.817582] should_fail.cold+0x10a/0x149 [ 1018.821733] should_failslab+0xd6/0x130 [ 1018.825702] __kmalloc+0x2c1/0x400 [ 1018.829234] ? __vb2_queue_alloc+0xf4/0xd90 [ 1018.833549] __vb2_queue_alloc+0xf4/0xd90 [ 1018.837692] ? unwind_get_return_address+0x51/0x90 20:48:42 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x0, 0x2}}) 20:48:42 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) r3 = getpgid(0xffffffffffffffff) (async) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, r2) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000200)="98025a9774036b93ff185c2b7e0d0fff0613981e0a8667ca33d6323c76494e298dae6a54cbac081791152fe7c608", 0x2e, r4) getpgid(r3) (async, rerun: 32) r5 = request_key(&(0x7f0000000380)='cifs.spnego\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000400)='keyring\x00', r2) (rerun: 32) add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000340)="a5885fb5f277dbe07b1fd049c54d7f6e0313ef14871667a6126d83de2c5cd7a081b7e3bd8d0dd99dcfafc9882f91f79219e36076079c3bebc9401e322c06", 0x3e, r5) (async, rerun: 64) keyctl$get_persistent(0x16, 0xee00, r2) (rerun: 64) [ 1018.842613] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1018.847973] ? __save_stack_trace+0xa0/0x160 [ 1018.852378] ? vim2m_queue_setup+0x221/0x330 [ 1018.856785] vb2_core_create_bufs+0x279/0x5a0 [ 1018.861276] ? __vb2_queue_free+0x7a0/0x7a0 [ 1018.865598] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1018.870950] ? trace_hardirqs_on+0x10/0x10 [ 1018.875166] vb2_create_bufs+0x2e1/0x5b0 [ 1018.879205] ? vb2_thread_start+0x310/0x310 [ 1018.883515] v4l_create_bufs+0xa4/0x150 [ 1018.887479] __video_do_ioctl+0x65b/0x6a0 [ 1018.891612] ? video_ioctl2+0x30/0x30 [ 1018.895389] ? __might_fault+0x177/0x1b0 [ 1018.899426] ? video_ioctl2+0x30/0x30 [ 1018.903201] video_usercopy+0xfd/0xe70 [ 1018.907065] ? v4l_g_ctrl+0x390/0x390 [ 1018.910852] ? proc_fail_nth_write+0x7b/0x180 [ 1018.915327] ? trace_hardirqs_on+0x10/0x10 [ 1018.919549] ? fsnotify+0x974/0x11b0 [ 1018.923238] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 1018.928153] ? __handle_mm_fault+0x80f/0x4620 [ 1018.932625] v4l2_ioctl+0x1bb/0x2f0 [ 1018.936228] ? v4l2_open+0x2f0/0x2f0 [ 1018.939916] do_vfs_ioctl+0x75a/0xff0 [ 1018.943697] ? lock_acquire+0x170/0x3f0 [ 1018.947646] ? ioctl_preallocate+0x1a0/0x1a0 [ 1018.952031] ? __fget+0x265/0x3e0 [ 1018.955475] ? do_vfs_ioctl+0xff0/0xff0 [ 1018.959424] ? security_file_ioctl+0x83/0xb0 [ 1018.963809] SyS_ioctl+0x7f/0xb0 [ 1018.967164] ? do_vfs_ioctl+0xff0/0xff0 [ 1018.971120] do_syscall_64+0x1d5/0x640 [ 1018.974999] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1018.980171] RIP: 0033:0x7fa7d3c480c9 [ 1018.983861] RSP: 002b:00007fa7d21ba168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 20:48:42 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) (fail_nth: 24) 20:48:42 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) r3 = getpgid(0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, r2) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000200)="98025a9774036b93ff185c2b7e0d0fff0613981e0a8667ca33d6323c76494e298dae6a54cbac081791152fe7c608", 0x2e, r4) getpgid(r3) r5 = request_key(&(0x7f0000000380)='cifs.spnego\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000400)='keyring\x00', r2) add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000340)="a5885fb5f277dbe07b1fd049c54d7f6e0313ef14871667a6126d83de2c5cd7a081b7e3bd8d0dd99dcfafc9882f91f79219e36076079c3bebc9401e322c06", 0x3e, r5) keyctl$get_persistent(0x16, 0xee00, r2) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) (async) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) (async) getpgid(0xffffffffffffffff) (async) add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, r2) (async) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000200)="98025a9774036b93ff185c2b7e0d0fff0613981e0a8667ca33d6323c76494e298dae6a54cbac081791152fe7c608", 0x2e, r4) (async) getpgid(r3) (async) request_key(&(0x7f0000000380)='cifs.spnego\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000400)='keyring\x00', r2) (async) add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000340)="a5885fb5f277dbe07b1fd049c54d7f6e0313ef14871667a6126d83de2c5cd7a081b7e3bd8d0dd99dcfafc9882f91f79219e36076079c3bebc9401e322c06", 0x3e, r5) (async) keyctl$get_persistent(0x16, 0xee00, r2) (async) 20:48:42 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 20:48:42 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 20:48:42 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000001180)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001140)={&(0x7f0000000e00)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r2, r3}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1, 0x1}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000001180)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001140)={&(0x7f0000000e00)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, 0x0) (async) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r2, r3}) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1, 0x1}) (async) 20:48:42 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000300)={0x1, @sliced={0x0, [0x8, 0x100, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x414e], 0xc03b}}) [ 1018.991558] RAX: ffffffffffffffda RBX: 00007fa7d3d67f80 RCX: 00007fa7d3c480c9 [ 1018.998806] RDX: 0000000020000180 RSI: 00000000c100565c RDI: 0000000000000003 [ 1019.006050] RBP: 00007fa7d21ba1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1019.013292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1019.020535] R13: 00007ffdc7685b4f R14: 00007fa7d21ba300 R15: 0000000000022000 20:48:42 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000001180)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001140)={&(0x7f0000000e00)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r2, r3}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1, 0x1}) [ 1019.080887] Unknown ioctl -1067952625 [ 1019.086933] FAULT_INJECTION: forcing a failure. [ 1019.086933] name failslab, interval 1, probability 0, space 0, times 0 [ 1019.101109] Unknown ioctl -1067952625 [ 1019.107408] Unknown ioctl 35296 [ 1019.121001] CPU: 0 PID: 20328 Comm: syz-executor.0 Not tainted 4.14.304-syzkaller #0 20:48:42 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x8000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f00000001c0)={0x3, 0x0, 0x1ff, 0x0, 0x5}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000040)) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x151000, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r2, r3, 0x25, 0x7}, 0x10) clock_gettime(0x0, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000003c0)) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, 0x0) setsockopt$MRT_ASSERT(r4, 0x0, 0xcf, &(0x7f0000000240), 0x4) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000340)=@fd={0x96, 0x2, 0x4, 0x4000, 0x9, {0x77359400}, {0x3, 0x1, 0x2, 0x40, 0x0, 0x1e, "c5bf92bc"}, 0x9, 0x4, {}, 0x0, 0x0, r2}) [ 1019.121554] Unknown ioctl -1067952625 [ 1019.128887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1019.128892] Call Trace: [ 1019.128910] dump_stack+0x1b2/0x281 [ 1019.128927] should_fail.cold+0x10a/0x149 [ 1019.128941] should_failslab+0xd6/0x130 [ 1019.128953] __kmalloc+0x2c1/0x400 [ 1019.128963] ? __vb2_queue_alloc+0xf4/0xd90 [ 1019.128974] __vb2_queue_alloc+0xf4/0xd90 [ 1019.128988] ? unwind_get_return_address+0x51/0x90 [ 1019.128998] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 20:48:42 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x0, 0x0, 0x8, 0x1, 0x40}}) [ 1019.129008] ? __save_stack_trace+0xa0/0x160 [ 1019.129019] ? vim2m_queue_setup+0x221/0x330 [ 1019.129035] vb2_core_create_bufs+0x279/0x5a0 [ 1019.164161] Unknown ioctl -1067952625 [ 1019.164322] ? __vb2_queue_free+0x7a0/0x7a0 [ 1019.171133] Unknown ioctl 35296 [ 1019.173364] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1019.173376] ? trace_hardirqs_on+0x10/0x10 [ 1019.173390] vb2_create_bufs+0x2e1/0x5b0 [ 1019.214011] Unknown ioctl -1067952625 [ 1019.216910] ? vb2_thread_start+0x310/0x310 [ 1019.216927] v4l_create_bufs+0xa4/0x150 20:48:42 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x8000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f00000001c0)={0x3, 0x0, 0x1ff, 0x0, 0x5}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000040)) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x151000, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r2, r3, 0x25, 0x7}, 0x10) clock_gettime(0x0, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000003c0)) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, 0x0) setsockopt$MRT_ASSERT(r4, 0x0, 0xcf, &(0x7f0000000240), 0x4) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000340)=@fd={0x96, 0x2, 0x4, 0x4000, 0x9, {0x77359400}, {0x3, 0x1, 0x2, 0x40, 0x0, 0x1e, "c5bf92bc"}, 0x9, 0x4, {}, 0x0, 0x0, r2}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x8000) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f00000001c0)={0x3, 0x0, 0x1ff, 0x0, 0x5}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000040)) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x151000, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r2, r3, 0x25, 0x7}, 0x10) (async) clock_gettime(0x0, &(0x7f0000000200)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000003c0)) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, 0x0) (async) setsockopt$MRT_ASSERT(r4, 0x0, 0xcf, &(0x7f0000000240), 0x4) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000340)=@fd={0x96, 0x2, 0x4, 0x4000, 0x9, {0x77359400}, {0x3, 0x1, 0x2, 0x40, 0x0, 0x1e, "c5bf92bc"}, 0x9, 0x4, {}, 0x0, 0x0, r2}) (async) 20:48:42 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x0, 0x0, 0x8, 0x1, 0x40}}) [ 1019.216939] __video_do_ioctl+0x65b/0x6a0 [ 1019.216953] ? video_ioctl2+0x30/0x30 [ 1019.216964] ? __might_fault+0x177/0x1b0 [ 1019.216974] ? video_ioctl2+0x30/0x30 [ 1019.216983] video_usercopy+0xfd/0xe70 [ 1019.216995] ? v4l_g_ctrl+0x390/0x390 [ 1019.217008] ? proc_fail_nth_write+0x7b/0x180 [ 1019.256897] ? trace_hardirqs_on+0x10/0x10 [ 1019.261130] ? fsnotify+0x974/0x11b0 [ 1019.264840] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 1019.269776] ? __handle_mm_fault+0x80f/0x4620 [ 1019.274272] v4l2_ioctl+0x1bb/0x2f0 [ 1019.277458] Unknown ioctl -1067952625 20:48:42 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x0, 0x0, 0x8, 0x1, 0x40}}) [ 1019.277889] ? v4l2_open+0x2f0/0x2f0 [ 1019.285369] do_vfs_ioctl+0x75a/0xff0 [ 1019.289170] ? lock_acquire+0x170/0x3f0 [ 1019.293144] ? ioctl_preallocate+0x1a0/0x1a0 [ 1019.297661] ? __fget+0x265/0x3e0 [ 1019.301111] ? do_vfs_ioctl+0xff0/0xff0 [ 1019.305085] ? security_file_ioctl+0x83/0xb0 [ 1019.309496] SyS_ioctl+0x7f/0xb0 [ 1019.312862] ? do_vfs_ioctl+0xff0/0xff0 [ 1019.316835] do_syscall_64+0x1d5/0x640 [ 1019.320722] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1019.325913] RIP: 0033:0x7fa7d3c480c9 20:48:42 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) (fail_nth: 25) 20:48:42 executing program 2: ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000080)={{0x0, 0x0, 0x8, 0x1, 0x40}}) 20:48:42 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x8000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f00000001c0)={0x3, 0x0, 0x1ff, 0x0, 0x5}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000040)) (async) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x151000, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r2, r3, 0x25, 0x7}, 0x10) clock_gettime(0x0, &(0x7f0000000200)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000003c0)) (async) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, 0x0) (async) setsockopt$MRT_ASSERT(r4, 0x0, 0xcf, &(0x7f0000000240), 0x4) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000340)=@fd={0x96, 0x2, 0x4, 0x4000, 0x9, {0x77359400}, {0x3, 0x1, 0x2, 0x40, 0x0, 0x1e, "c5bf92bc"}, 0x9, 0x4, {}, 0x0, 0x0, r2}) 20:48:42 executing program 4: r0 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r1) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$link(0x8, 0x0, r3) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r3) keyctl$reject(0x13, r3, 0x7, 0x7, r4) r5 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$get_persistent(0x16, 0xee00, r5) 20:48:42 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x151002) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x0, 0x3, 0x6, 0x3, 0xff}) 20:48:42 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000300)={0x1, @sliced={0x0, [0x8, 0x100, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x414e], 0xc03b}}) [ 1019.329618] RSP: 002b:00007fa7d21ba168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1019.337319] RAX: ffffffffffffffda RBX: 00007fa7d3d67f80 RCX: 00007fa7d3c480c9 [ 1019.344585] RDX: 0000000020000180 RSI: 00000000c100565c RDI: 0000000000000003 [ 1019.351855] RBP: 00007fa7d21ba1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1019.359115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1019.366396] R13: 00007ffdc7685b4f R14: 00007fa7d21ba300 R15: 0000000000022000 20:48:42 executing program 2: ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000080)={{0x0, 0x0, 0x8, 0x1, 0x40}}) 20:48:42 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x151002) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x0, 0x3, 0x6, 0x3, 0xff}) 20:48:42 executing program 4: r0 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r1) (async) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$link(0x8, 0x0, r3) (async, rerun: 32) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r3) (rerun: 32) keyctl$reject(0x13, r3, 0x7, 0x7, r4) (async, rerun: 32) r5 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) (rerun: 32) keyctl$get_persistent(0x16, 0xee00, r5) 20:48:42 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x22040) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) [ 1019.430828] Unknown ioctl -1067952625 [ 1019.441445] FAULT_INJECTION: forcing a failure. [ 1019.441445] name failslab, interval 1, probability 0, space 0, times 0 [ 1019.458562] CPU: 0 PID: 20391 Comm: syz-executor.0 Not tainted 4.14.304-syzkaller #0 [ 1019.466455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1019.475804] Call Trace: 20:48:42 executing program 4: r0 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r1) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$link(0x8, 0x0, r3) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r3) keyctl$reject(0x13, r3, 0x7, 0x7, r4) r5 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$get_persistent(0x16, 0xee00, r5) add_key$keyring(&(0x7f0000000300), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r0) (async) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r1) (async) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r2) (async) keyctl$link(0x8, 0x0, r3) (async) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r3) (async) keyctl$reject(0x13, r3, 0x7, 0x7, r4) (async) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) (async) keyctl$get_persistent(0x16, 0xee00, r5) (async) [ 1019.478394] dump_stack+0x1b2/0x281 [ 1019.482027] should_fail.cold+0x10a/0x149 [ 1019.486175] should_failslab+0xd6/0x130 [ 1019.490147] __kmalloc+0x2c1/0x400 [ 1019.493688] ? __vb2_queue_alloc+0xf4/0xd90 [ 1019.498010] __vb2_queue_alloc+0xf4/0xd90 [ 1019.502158] ? unwind_get_return_address+0x51/0x90 [ 1019.507087] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1019.512454] ? __save_stack_trace+0xa0/0x160 [ 1019.516864] ? vim2m_queue_setup+0x221/0x330 [ 1019.521273] vb2_core_create_bufs+0x279/0x5a0 [ 1019.525769] ? __vb2_queue_free+0x7a0/0x7a0 20:48:42 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x22040) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x22040) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async) [ 1019.530090] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1019.535456] ? trace_hardirqs_on+0x10/0x10 [ 1019.539693] vb2_create_bufs+0x2e1/0x5b0 [ 1019.543753] ? vb2_thread_start+0x310/0x310 [ 1019.548078] v4l_create_bufs+0xa4/0x150 [ 1019.552062] __video_do_ioctl+0x65b/0x6a0 [ 1019.556215] ? video_ioctl2+0x30/0x30 [ 1019.560010] ? __might_fault+0x177/0x1b0 [ 1019.564066] ? video_ioctl2+0x30/0x30 [ 1019.567862] video_usercopy+0xfd/0xe70 [ 1019.571747] ? v4l_g_ctrl+0x390/0x390 [ 1019.575543] ? proc_fail_nth_write+0x7b/0x180 [ 1019.580030] ? trace_hardirqs_on+0x10/0x10 [ 1019.584268] ? fsnotify+0x974/0x11b0 [ 1019.587959] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 1019.592869] ? __handle_mm_fault+0x80f/0x4620 [ 1019.597344] v4l2_ioctl+0x1bb/0x2f0 [ 1019.600948] ? v4l2_open+0x2f0/0x2f0 [ 1019.604641] do_vfs_ioctl+0x75a/0xff0 [ 1019.608433] ? lock_acquire+0x170/0x3f0 [ 1019.612394] ? ioctl_preallocate+0x1a0/0x1a0 [ 1019.616782] ? __fget+0x265/0x3e0 [ 1019.620234] ? do_vfs_ioctl+0xff0/0xff0 [ 1019.624188] ? security_file_ioctl+0x83/0xb0 [ 1019.628582] SyS_ioctl+0x7f/0xb0 [ 1019.631937] ? do_vfs_ioctl+0xff0/0xff0 [ 1019.635888] do_syscall_64+0x1d5/0x640 [ 1019.639756] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1019.644931] RIP: 0033:0x7fa7d3c480c9 [ 1019.648624] RSP: 002b:00007fa7d21ba168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1019.656310] RAX: ffffffffffffffda RBX: 00007fa7d3d67f80 RCX: 00007fa7d3c480c9 [ 1019.663557] RDX: 0000000020000180 RSI: 00000000c100565c RDI: 0000000000000003 [ 1019.670894] RBP: 00007fa7d21ba1d0 R08: 0000000000000000 R09: 0000000000000000 20:48:43 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) (fail_nth: 26) 20:48:43 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x22040) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x22040) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async) 20:48:43 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000200)=@fd={0x1f, 0x1, 0x4, 0x2, 0xffffffff, {r0, r1/1000+60000}, {0x4, 0x1, 0x7, 0x0, 0xdf, 0x9, "c39d42b9"}, 0xbfd5, 0x4, {}, 0x3}) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r2) clock_gettime(0x0, &(0x7f0000000100)) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r3) keyctl$get_persistent(0x16, 0xee00, r4) 20:48:43 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x151002) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x0, 0x3, 0x6, 0x3, 0xff}) 20:48:43 executing program 2: ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000080)={{0x0, 0x0, 0x8, 0x1, 0x40}}) 20:48:43 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000300)={0x1, @sliced={0x0, [0x8, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x414e], 0xc03b}}) [ 1019.678148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1019.685407] R13: 00007ffdc7685b4f R14: 00007fa7d21ba300 R15: 0000000000022000 20:48:43 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000200)=@fd={0x1f, 0x1, 0x4, 0x2, 0xffffffff, {r0, r1/1000+60000}, {0x4, 0x1, 0x7, 0x0, 0xdf, 0x9, "c39d42b9"}, 0xbfd5, 0x4, {}, 0x3}) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r2) clock_gettime(0x0, &(0x7f0000000100)) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r3) keyctl$get_persistent(0x16, 0xee00, r4) clock_gettime(0x0, &(0x7f00000000c0)) (async) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000200)=@fd={0x1f, 0x1, 0x4, 0x2, 0xffffffff, {r0, r1/1000+60000}, {0x4, 0x1, 0x7, 0x0, 0xdf, 0x9, "c39d42b9"}, 0xbfd5, 0x4, {}, 0x3}) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) (async) add_key$keyring(&(0x7f0000000040), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r2) (async) clock_gettime(0x0, &(0x7f0000000100)) (async) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r3) (async) keyctl$get_persistent(0x16, 0xee00, r4) (async) [ 1019.751003] FAULT_INJECTION: forcing a failure. [ 1019.751003] name failslab, interval 1, probability 0, space 0, times 0 [ 1019.763471] CPU: 0 PID: 20423 Comm: syz-executor.0 Not tainted 4.14.304-syzkaller #0 [ 1019.771367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1019.780716] Call Trace: [ 1019.783304] dump_stack+0x1b2/0x281 [ 1019.786934] should_fail.cold+0x10a/0x149 [ 1019.791086] should_failslab+0xd6/0x130 [ 1019.795062] __kmalloc+0x2c1/0x400 20:48:43 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000200)=@fd={0x1f, 0x1, 0x4, 0x2, 0xffffffff, {r0, r1/1000+60000}, {0x4, 0x1, 0x7, 0x0, 0xdf, 0x9, "c39d42b9"}, 0xbfd5, 0x4, {}, 0x3}) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r2) clock_gettime(0x0, &(0x7f0000000100)) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r3) keyctl$get_persistent(0x16, 0xee00, r4) clock_gettime(0x0, &(0x7f00000000c0)) (async) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000200)=@fd={0x1f, 0x1, 0x4, 0x2, 0xffffffff, {r0, r1/1000+60000}, {0x4, 0x1, 0x7, 0x0, 0xdf, 0x9, "c39d42b9"}, 0xbfd5, 0x4, {}, 0x3}) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) (async) add_key$keyring(&(0x7f0000000040), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r2) (async) clock_gettime(0x0, &(0x7f0000000100)) (async) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r3) (async) keyctl$get_persistent(0x16, 0xee00, r4) (async) 20:48:43 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$search(0xa, 0x0, &(0x7f0000000080)='pkcs7_test\x00', &(0x7f00000000c0)={'syz', 0x2}, r1) keyctl$clear(0x7, r1) keyctl$KEYCTL_MOVE(0x1e, r2, r0, r1, 0x1) keyctl$get_persistent(0x16, 0xee00, r2) 20:48:43 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000040)) [ 1019.798599] ? __vb2_queue_alloc+0xf4/0xd90 [ 1019.802927] __vb2_queue_alloc+0xf4/0xd90 [ 1019.807166] ? unwind_get_return_address+0x51/0x90 [ 1019.812098] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1019.817462] ? __save_stack_trace+0xa0/0x160 [ 1019.821876] ? vim2m_queue_setup+0x221/0x330 [ 1019.826294] vb2_core_create_bufs+0x279/0x5a0 [ 1019.830788] ? __vb2_queue_free+0x7a0/0x7a0 [ 1019.835110] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1019.840473] ? trace_hardirqs_on+0x10/0x10 [ 1019.844709] vb2_create_bufs+0x2e1/0x5b0 20:48:43 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$search(0xa, 0x0, &(0x7f0000000080)='pkcs7_test\x00', &(0x7f00000000c0)={'syz', 0x2}, r1) keyctl$clear(0x7, r1) keyctl$KEYCTL_MOVE(0x1e, r2, r0, r1, 0x1) keyctl$get_persistent(0x16, 0xee00, r2) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) (async) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) (async) keyctl$search(0xa, 0x0, &(0x7f0000000080)='pkcs7_test\x00', &(0x7f00000000c0)={'syz', 0x2}, r1) (async) keyctl$clear(0x7, r1) (async) keyctl$KEYCTL_MOVE(0x1e, r2, r0, r1, 0x1) (async) keyctl$get_persistent(0x16, 0xee00, r2) (async) [ 1019.848772] ? vb2_thread_start+0x310/0x310 [ 1019.853104] v4l_create_bufs+0xa4/0x150 [ 1019.857081] __video_do_ioctl+0x65b/0x6a0 [ 1019.861235] ? video_ioctl2+0x30/0x30 [ 1019.865033] ? __might_fault+0x177/0x1b0 [ 1019.869092] ? video_ioctl2+0x30/0x30 [ 1019.872890] video_usercopy+0xfd/0xe70 [ 1019.876776] ? v4l_g_ctrl+0x390/0x390 [ 1019.880573] ? proc_fail_nth_write+0x7b/0x180 [ 1019.885159] ? trace_hardirqs_on+0x10/0x10 [ 1019.889393] ? fsnotify+0x974/0x11b0 [ 1019.893110] ? proc_tgid_io_accounting+0x7a0/0x7a0 20:48:43 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$search(0xa, 0x0, &(0x7f0000000080)='pkcs7_test\x00', &(0x7f00000000c0)={'syz', 0x2}, r1) (async) keyctl$clear(0x7, r1) (async, rerun: 64) keyctl$KEYCTL_MOVE(0x1e, r2, r0, r1, 0x1) (async, rerun: 64) keyctl$get_persistent(0x16, 0xee00, r2) [ 1019.898035] ? __handle_mm_fault+0x80f/0x4620 [ 1019.902527] v4l2_ioctl+0x1bb/0x2f0 [ 1019.906149] ? v4l2_open+0x2f0/0x2f0 [ 1019.909859] do_vfs_ioctl+0x75a/0xff0 [ 1019.913655] ? lock_acquire+0x170/0x3f0 [ 1019.917627] ? ioctl_preallocate+0x1a0/0x1a0 [ 1019.922033] ? __fget+0x265/0x3e0 [ 1019.925483] ? do_vfs_ioctl+0xff0/0xff0 [ 1019.929455] ? security_file_ioctl+0x83/0xb0 [ 1019.933861] SyS_ioctl+0x7f/0xb0 [ 1019.937222] ? do_vfs_ioctl+0xff0/0xff0 [ 1019.941198] do_syscall_64+0x1d5/0x640 [ 1019.945089] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 20:48:43 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) (fail_nth: 27) 20:48:43 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000040)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000040)) (async) 20:48:43 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x4, 0x20, 0xfe, 0x9}, {0x5, 0x4, 0xbc, 0x7}, {0x6, 0xff, 0x7, 0x7}, {0x7fc7, 0x3, 0x9, 0x6}]}) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000004c0)) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x210001, 0x0) write$P9_RRENAMEAT(r5, &(0x7f0000000080)={0x6, 0x4b, 0x2}, 0x7) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, 0x0) getpeername$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, &(0x7f0000000440)=0x1c) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r3) getpeername$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}, &(0x7f0000000280)=0x1c) r8 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r7) r9 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r9, 0xc0d05604, 0x0) keyctl$get_persistent(0x16, 0xee00, r8) add_key$user(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)="51344c728c7eada1bbf31564c88bbb7105da41", 0x13, r7) 20:48:43 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x0, 0x0, 0x8, 0x1, 0x40}}) [ 1019.950265] RIP: 0033:0x7fa7d3c480c9 [ 1019.953951] RSP: 002b:00007fa7d21ba168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1019.961638] RAX: ffffffffffffffda RBX: 00007fa7d3d67f80 RCX: 00007fa7d3c480c9 [ 1019.968975] RDX: 0000000020000180 RSI: 00000000c100565c RDI: 0000000000000003 [ 1019.976226] RBP: 00007fa7d21ba1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1019.983560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1019.990816] R13: 00007ffdc7685b4f R14: 00007fa7d21ba300 R15: 0000000000022000 20:48:43 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000300)={0x1, @sliced={0x0, [0x8, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x414e], 0xc03b}}) 20:48:43 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000340)={0x0, 0x1, r1, 0x7ff}) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000080)=""/250) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) socketpair(0x9, 0x1, 0x201, &(0x7f0000000180)={0xffffffffffffffff}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000240), r1) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x403}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x10) 20:48:43 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x0, 0x0, 0x8, 0x1, 0x40}}) 20:48:43 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000300)={0x1, @sliced={0x0, [0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x414e], 0xc03b}}) 20:48:43 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000040)) [ 1020.067856] Unknown ioctl -1067952625 [ 1020.078387] Unknown ioctl -1067952625 [ 1020.082945] Unknown ioctl 1075323139 [ 1020.088553] Unknown ioctl -2132257775 [ 1020.100633] Unknown ioctl -1067952625 [ 1020.101674] FAULT_INJECTION: forcing a failure. [ 1020.101674] name failslab, interval 1, probability 0, space 0, times 0 20:48:43 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) (async) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000340)={0x0, 0x1, r1, 0x7ff}) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000080)=""/250) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) (async, rerun: 64) socketpair(0x9, 0x1, 0x201, &(0x7f0000000180)={0xffffffffffffffff}) (rerun: 64) syz_genetlink_get_family_id$wireguard(&(0x7f0000000240), r1) (async) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x403}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x10) [ 1020.110653] Unknown ioctl -1067952625 [ 1020.133347] Unknown ioctl -1068490496 [ 1020.133661] CPU: 0 PID: 20478 Comm: syz-executor.0 Not tainted 4.14.304-syzkaller #0 [ 1020.145024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1020.150078] Unknown ioctl -1067952625 [ 1020.154402] Call Trace: [ 1020.154419] dump_stack+0x1b2/0x281 [ 1020.154435] should_fail.cold+0x10a/0x149 [ 1020.154450] should_failslab+0xd6/0x130 [ 1020.154463] __kmalloc+0x2c1/0x400 [ 1020.172387] Unknown ioctl -1067952625 [ 1020.172522] ? __vb2_queue_alloc+0xf4/0xd90 [ 1020.178640] Unknown ioctl -1067952625 [ 1020.179829] __vb2_queue_alloc+0xf4/0xd90 [ 1020.179846] ? unwind_get_return_address+0x51/0x90 [ 1020.179857] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1020.179867] ? __save_stack_trace+0xa0/0x160 [ 1020.184302] Unknown ioctl 1075323139 [ 1020.187975] ? vim2m_queue_setup+0x221/0x330 20:48:43 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x0, 0x0, 0x8, 0x1, 0x40}}) [ 1020.187987] vb2_core_create_bufs+0x279/0x5a0 [ 1020.187999] ? __vb2_queue_free+0x7a0/0x7a0 [ 1020.188011] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1020.188023] ? trace_hardirqs_on+0x10/0x10 [ 1020.188035] vb2_create_bufs+0x2e1/0x5b0 [ 1020.188049] ? vb2_thread_start+0x310/0x310 [ 1020.188064] v4l_create_bufs+0xa4/0x150 [ 1020.188075] __video_do_ioctl+0x65b/0x6a0 [ 1020.188089] ? video_ioctl2+0x30/0x30 [ 1020.188099] ? __might_fault+0x177/0x1b0 [ 1020.188109] ? video_ioctl2+0x30/0x30 [ 1020.205023] Unknown ioctl -2132257775 20:48:43 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000080)={{0x0, 0x0, 0x8, 0x1, 0x40}}) [ 1020.206882] video_usercopy+0xfd/0xe70 [ 1020.206898] ? v4l_g_ctrl+0x390/0x390 [ 1020.206910] ? proc_fail_nth_write+0x7b/0x180 [ 1020.206922] ? trace_hardirqs_on+0x10/0x10 [ 1020.206935] ? fsnotify+0x974/0x11b0 [ 1020.285231] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 1020.290157] ? __handle_mm_fault+0x80f/0x4620 [ 1020.294657] v4l2_ioctl+0x1bb/0x2f0 [ 1020.298278] ? v4l2_open+0x2f0/0x2f0 [ 1020.301979] do_vfs_ioctl+0x75a/0xff0 [ 1020.305758] ? lock_acquire+0x170/0x3f0 [ 1020.309729] ? ioctl_preallocate+0x1a0/0x1a0 [ 1020.314118] ? __fget+0x265/0x3e0 [ 1020.317559] ? do_vfs_ioctl+0xff0/0xff0 [ 1020.321534] ? security_file_ioctl+0x83/0xb0 [ 1020.325937] SyS_ioctl+0x7f/0xb0 [ 1020.329297] ? do_vfs_ioctl+0xff0/0xff0 [ 1020.333258] do_syscall_64+0x1d5/0x640 [ 1020.337225] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1020.342402] RIP: 0033:0x7fa7d3c480c9 [ 1020.346087] RSP: 002b:00007fa7d21ba168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1020.353773] RAX: ffffffffffffffda RBX: 00007fa7d3d67f80 RCX: 00007fa7d3c480c9 [ 1020.361019] RDX: 0000000020000180 RSI: 00000000c100565c RDI: 0000000000000003 20:48:43 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) (fail_nth: 28) 20:48:43 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = getpgrp(0x0) syz_open_procfs$namespace(r2, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) write$P9_RGETLOCK(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="230000003701000209000000000000000500000000000000", @ANYRES32=r2, @ANYRES8=r3], 0x23) 20:48:43 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x4, 0x20, 0xfe, 0x9}, {0x5, 0x4, 0xbc, 0x7}, {0x6, 0xff, 0x7, 0x7}, {0x7fc7, 0x3, 0x9, 0x6}]}) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000004c0)) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) (async) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, 0x0) (async) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x210001, 0x0) write$P9_RRENAMEAT(r5, &(0x7f0000000080)={0x6, 0x4b, 0x2}, 0x7) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, 0x0) (async) getpeername$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, &(0x7f0000000440)=0x1c) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r3) getpeername$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}, &(0x7f0000000280)=0x1c) (async) r8 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r7) (async) r9 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r9, 0xc0d05604, 0x0) (async, rerun: 64) keyctl$get_persistent(0x16, 0xee00, r8) (async, rerun: 64) add_key$user(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)="51344c728c7eada1bbf31564c88bbb7105da41", 0x13, r7) 20:48:43 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000080)={{0x0, 0x0, 0x8, 0x1, 0x40}}) 20:48:43 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000340)={0x0, 0x1, r1, 0x7ff}) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000080)=""/250) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) socketpair(0x9, 0x1, 0x201, &(0x7f0000000180)={0xffffffffffffffff}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000240), r1) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x403}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000340)={0x0, 0x1, r1, 0x7ff}) (async) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000080)=""/250) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) (async) socketpair(0x9, 0x1, 0x201, &(0x7f0000000180)) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000240), r1) (async) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x403}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x10) (async) 20:48:43 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000300)={0x1, @sliced={0x0, [0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x414e], 0xc03b}}) [ 1020.368266] RBP: 00007fa7d21ba1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1020.375522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1020.382778] R13: 00007ffdc7685b4f R14: 00007fa7d21ba300 R15: 0000000000022000 20:48:43 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000080)={{0x0, 0x0, 0x8, 0x1, 0x40}}) 20:48:43 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async, rerun: 64) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) (async, rerun: 32) r2 = getpgrp(0x0) (rerun: 32) syz_open_procfs$namespace(r2, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) (async) write$P9_RGETLOCK(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="230000003701000209000000000000000500000000000000", @ANYRES32=r2, @ANYRES8=r3], 0x23) 20:48:43 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000300)={0x1, @sliced={0x0, [0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x414e], 0xc03b}}) [ 1020.460087] Unknown ioctl -1067952625 [ 1020.466414] Unknown ioctl -1067952625 [ 1020.466825] FAULT_INJECTION: forcing a failure. [ 1020.466825] name failslab, interval 1, probability 0, space 0, times 0 [ 1020.472582] Unknown ioctl 1075323139 [ 1020.487692] Unknown ioctl -1067952625 [ 1020.496015] Unknown ioctl -1067952625 [ 1020.501119] Unknown ioctl -1068490496 20:48:43 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) 20:48:43 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) 20:48:43 executing program 3: ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@ipv4={""/10, ""/2, @loopback}, 0x0}, &(0x7f0000000080)=0x14) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f00000004c0)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @broadcast, @empty}, &(0x7f0000000480)=0xc) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r0}, 0x14) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f00000001c0)={0x1}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000180)={@remote, 0x0}, &(0x7f00000002c0)=0x14) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x60200) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x6, &(0x7f0000000100)=@raw=[@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x10}, @jmp={0x5, 0x0, 0x536f1281f10cb1d4, 0x6, 0xb, 0x0, 0x10}], &(0x7f0000000140)='syzkaller\x00', 0x3, 0xb6, &(0x7f0000000200)=""/182, 0x40f00, 0x1, '\x00', r2, 0x25, r4, 0x8, &(0x7f0000000300)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x2, 0xcd, 0x9}, 0x10}, 0x80) [ 1020.509733] Unknown ioctl -2132257775 [ 1020.511733] Unknown ioctl -1067952625 [ 1020.518462] Unknown ioctl -2132257775 [ 1020.523384] Unknown ioctl -1067952625 [ 1020.534685] CPU: 0 PID: 20505 Comm: syz-executor.0 Not tainted 4.14.304-syzkaller #0 [ 1020.542592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1020.551945] Call Trace: [ 1020.554538] dump_stack+0x1b2/0x281 [ 1020.558169] should_fail.cold+0x10a/0x149 [ 1020.562321] should_failslab+0xd6/0x130 [ 1020.566299] __kmalloc+0x2c1/0x400 [ 1020.569837] ? __vb2_queue_alloc+0xf4/0xd90 [ 1020.574163] __vb2_queue_alloc+0xf4/0xd90 [ 1020.578312] ? unwind_get_return_address+0x51/0x90 [ 1020.582753] Unknown ioctl -1067952625 [ 1020.583240] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1020.588270] Unknown ioctl -1067952625 [ 1020.592373] ? __save_stack_trace+0xa0/0x160 [ 1020.592388] ? vim2m_queue_setup+0x221/0x330 [ 1020.592403] vb2_core_create_bufs+0x279/0x5a0 [ 1020.609453] ? __vb2_queue_free+0x7a0/0x7a0 [ 1020.613772] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1020.619115] ? trace_hardirqs_on+0x10/0x10 [ 1020.623328] vb2_create_bufs+0x2e1/0x5b0 [ 1020.627375] ? vb2_thread_start+0x310/0x310 [ 1020.631681] v4l_create_bufs+0xa4/0x150 [ 1020.635634] __video_do_ioctl+0x65b/0x6a0 [ 1020.639783] ? video_ioctl2+0x30/0x30 [ 1020.643569] ? __might_fault+0x177/0x1b0 [ 1020.647620] ? video_ioctl2+0x30/0x30 [ 1020.651403] video_usercopy+0xfd/0xe70 [ 1020.655276] ? v4l_g_ctrl+0x390/0x390 [ 1020.659069] ? proc_fail_nth_write+0x7b/0x180 [ 1020.663552] ? trace_hardirqs_on+0x10/0x10 [ 1020.667772] ? fsnotify+0x974/0x11b0 [ 1020.671462] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 1020.676367] ? __handle_mm_fault+0x80f/0x4620 [ 1020.680841] v4l2_ioctl+0x1bb/0x2f0 [ 1020.684443] ? v4l2_open+0x2f0/0x2f0 [ 1020.688137] do_vfs_ioctl+0x75a/0xff0 [ 1020.691916] ? lock_acquire+0x170/0x3f0 [ 1020.695870] ? ioctl_preallocate+0x1a0/0x1a0 [ 1020.700258] ? __fget+0x265/0x3e0 [ 1020.703693] ? do_vfs_ioctl+0xff0/0xff0 [ 1020.707646] ? security_file_ioctl+0x83/0xb0 [ 1020.712032] SyS_ioctl+0x7f/0xb0 [ 1020.715387] ? do_vfs_ioctl+0xff0/0xff0 [ 1020.719357] do_syscall_64+0x1d5/0x640 [ 1020.723235] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1020.728405] RIP: 0033:0x7fa7d3c480c9 [ 1020.732116] RSP: 002b:00007fa7d21ba168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1020.739805] RAX: ffffffffffffffda RBX: 00007fa7d3d67f80 RCX: 00007fa7d3c480c9 [ 1020.747070] RDX: 0000000020000180 RSI: 00000000c100565c RDI: 0000000000000003 [ 1020.754316] RBP: 00007fa7d21ba1d0 R08: 0000000000000000 R09: 0000000000000000 20:48:44 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) (fail_nth: 29) 20:48:44 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) 20:48:44 executing program 3: ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@ipv4={""/10, ""/2, @loopback}, 0x0}, &(0x7f0000000080)=0x14) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f00000004c0)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @broadcast, @empty}, &(0x7f0000000480)=0xc) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r0}, 0x14) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f00000001c0)={0x1}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000180)={@remote, 0x0}, &(0x7f00000002c0)=0x14) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x60200) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x6, &(0x7f0000000100)=@raw=[@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x10}, @jmp={0x5, 0x0, 0x536f1281f10cb1d4, 0x6, 0xb, 0x0, 0x10}], &(0x7f0000000140)='syzkaller\x00', 0x3, 0xb6, &(0x7f0000000200)=""/182, 0x40f00, 0x1, '\x00', r2, 0x25, r4, 0x8, &(0x7f0000000300)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x2, 0xcd, 0x9}, 0x10}, 0x80) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) (async) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@ipv4={""/10, ""/2, @loopback}}, &(0x7f0000000080)=0x14) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f00000004c0)) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) (async) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @broadcast, @empty}, &(0x7f0000000480)=0xc) (async) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r0}, 0x14) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f00000001c0)={0x1}) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000180)={@remote}, &(0x7f00000002c0)=0x14) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x60200) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x6, &(0x7f0000000100)=@raw=[@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x10}, @jmp={0x5, 0x0, 0x536f1281f10cb1d4, 0x6, 0xb, 0x0, 0x10}], &(0x7f0000000140)='syzkaller\x00', 0x3, 0xb6, &(0x7f0000000200)=""/182, 0x40f00, 0x1, '\x00', r2, 0x25, r4, 0x8, &(0x7f0000000300)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x2, 0xcd, 0x9}, 0x10}, 0x80) (async) 20:48:44 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x4, 0x20, 0xfe, 0x9}, {0x5, 0x4, 0xbc, 0x7}, {0x6, 0xff, 0x7, 0x7}, {0x7fc7, 0x3, 0x9, 0x6}]}) (async) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) (async) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, 0x0) (async, rerun: 32) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000004c0)) (async, rerun: 32) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) (async) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x210001, 0x0) write$P9_RRENAMEAT(r5, &(0x7f0000000080)={0x6, 0x4b, 0x2}, 0x7) (async, rerun: 32) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (rerun: 32) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, 0x0) (async) getpeername$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, &(0x7f0000000440)=0x1c) (async) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r3) getpeername$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}, &(0x7f0000000280)=0x1c) (async) r8 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r7) (async) r9 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r9, 0xc0d05604, 0x0) (async) keyctl$get_persistent(0x16, 0xee00, r8) add_key$user(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)="51344c728c7eada1bbf31564c88bbb7105da41", 0x13, r7) 20:48:44 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000300)={0x1, @sliced={0x0, [0x8, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x414e]}}) 20:48:44 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) (async) r2 = getpgrp(0x0) syz_open_procfs$namespace(r2, 0x0) (async) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) write$P9_RGETLOCK(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="230000003701000209000000000000000500000000000000", @ANYRES32=r2, @ANYRES8=r3], 0x23) [ 1020.761567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1020.768821] R13: 00007ffdc7685b4f R14: 00007fa7d21ba300 R15: 0000000000022000 20:48:44 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x1, 0x40}}) 20:48:44 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000010, 0x0, 0x0, 0x0}}}) 20:48:44 executing program 5: ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@ipv4={""/10, ""/2, @loopback}, 0x0}, &(0x7f0000000080)=0x14) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f00000004c0)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @broadcast, @empty}, &(0x7f0000000480)=0xc) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r0}, 0x14) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f00000001c0)={0x1}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000180)={@remote, 0x0}, &(0x7f00000002c0)=0x14) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x60200) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x6, &(0x7f0000000100)=@raw=[@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x10}, @jmp={0x5, 0x0, 0x536f1281f10cb1d4, 0x6, 0xb, 0x0, 0x10}], &(0x7f0000000140)='syzkaller\x00', 0x3, 0xb6, &(0x7f0000000200)=""/182, 0x40f00, 0x1, '\x00', r2, 0x25, r4, 0x8, &(0x7f0000000300)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x2, 0xcd, 0x9}, 0x10}, 0x80) [ 1020.837049] Unknown ioctl -1067952625 [ 1020.848151] Unknown ioctl -1067952625 [ 1020.852389] Unknown ioctl -1067952625 [ 1020.866574] Unknown ioctl -1067952625 [ 1020.878788] Unknown ioctl -1067952625 [ 1020.879297] Unknown ioctl -1068490496 20:48:44 executing program 3: ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) (async) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@ipv4={""/10, ""/2, @loopback}, 0x0}, &(0x7f0000000080)=0x14) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f00000004c0)) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @broadcast, @empty}, &(0x7f0000000480)=0xc) (async) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r0}, 0x14) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f00000001c0)={0x1}) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000180)={@remote, 0x0}, &(0x7f00000002c0)=0x14) (async) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x60200) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) (async) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x6, &(0x7f0000000100)=@raw=[@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x10}, @jmp={0x5, 0x0, 0x536f1281f10cb1d4, 0x6, 0xb, 0x0, 0x10}], &(0x7f0000000140)='syzkaller\x00', 0x3, 0xb6, &(0x7f0000000200)=""/182, 0x40f00, 0x1, '\x00', r2, 0x25, r4, 0x8, &(0x7f0000000300)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x2, 0xcd, 0x9}, 0x10}, 0x80) 20:48:44 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000040)={0x0, {{0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, '\x00', 0x14}, 0x9}}}, 0x88) [ 1020.884228] Unknown ioctl -1067952625 [ 1020.898428] Unknown ioctl -1067952625 [ 1020.899391] Unknown ioctl -1067952625 [ 1020.918090] Unknown ioctl -1067952625 [ 1020.923502] Unknown ioctl -1067952625 [ 1020.926681] Unknown ioctl -1068490496 20:48:44 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x40}}) 20:48:44 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000010, 0x0, 0x0, 0x0}}}) 20:48:44 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000040)={0x0, {{0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, '\x00', 0x14}, 0x9}}}, 0x88) [ 1020.934003] Unknown ioctl -1068490496 [ 1020.942073] Unknown ioctl -1067952625 [ 1020.943896] Unknown ioctl -1067952625 [ 1020.957477] Unknown ioctl -1067952625 [ 1020.958264] Unknown ioctl -1067952625 [ 1020.968715] Unknown ioctl -1067952625 [ 1020.971530] Unknown ioctl -1068490496 [ 1020.981107] Unknown ioctl -1067952625 20:48:44 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)) [ 1020.988000] Unknown ioctl -1067952625 [ 1020.996940] Unknown ioctl -1067952625 [ 1020.998908] Unknown ioctl -1068490496 [ 1021.004156] Unknown ioctl -1067952625 [ 1021.014637] Unknown ioctl -1067952625 [ 1021.026409] Unknown ioctl -1067952625 [ 1021.030973] Unknown ioctl -1068490496 [ 1021.035418] Unknown ioctl -1067952625 [ 1021.038455] Unknown ioctl -1068490496 [ 1021.042303] Unknown ioctl -1067952625 [ 1021.050528] Unknown ioctl -1068490496 [ 1021.057935] Unknown ioctl -1067952625 [ 1021.059591] Unknown ioctl -1068490496 [ 1021.064302] Unknown ioctl -1067952625 [ 1021.070567] Unknown ioctl -1067952625 [ 1021.072294] Unknown ioctl -1068490496 [ 1021.074443] Unknown ioctl -1067952625 [ 1021.074449] Unknown ioctl -1067952625 [ 1021.074453] Unknown ioctl -1067952625 [ 1021.074457] Unknown ioctl -1067952625 [ 1021.074462] Unknown ioctl -1067952625 [ 1021.074466] Unknown ioctl -1067952625 [ 1021.074471] Unknown ioctl -1067952625 [ 1021.074475] Unknown ioctl -1067952625 [ 1021.074481] Unknown ioctl -1067952625 [ 1021.074486] Unknown ioctl -1067952625 [ 1021.074490] Unknown ioctl -1067952625 [ 1021.074495] Unknown ioctl -1067952625 [ 1021.079157] Unknown ioctl -1067952625 [ 1021.084389] Unknown ioctl -1068490496 [ 1021.087165] Unknown ioctl -1067952625 [ 1021.092958] Unknown ioctl -1068490496 [ 1021.093992] Unknown ioctl -1067952625 [ 1021.099665] Unknown ioctl -1068490496 [ 1021.103421] Unknown ioctl -1067952625 [ 1021.108496] Unknown ioctl -1068490496 [ 1021.111412] Unknown ioctl -1067952625 [ 1021.113436] Unknown ioctl -1068490496 [ 1021.163034] Unknown ioctl -1068490496 [ 1021.166876] Unknown ioctl -1068490496 [ 1021.170663] Unknown ioctl -1068490496 [ 1021.174436] Unknown ioctl -1068490496 [ 1021.178286] Unknown ioctl -1068490496 [ 1021.182360] Unknown ioctl -1068490496 20:48:44 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$clear(0x7, r1) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$get_persistent(0x16, 0x0, r3) keyctl$reject(0x13, r3, 0x9, 0x6, r2) keyctl$get_persistent(0x16, 0xee00, r2) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 20:48:44 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0x1, 0x3, 0x5}, 0x3, 0x80000000}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) 20:48:44 executing program 5: ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@ipv4={""/10, ""/2, @loopback}, 0x0}, &(0x7f0000000080)=0x14) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f00000004c0)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @broadcast, @empty}, &(0x7f0000000480)=0xc) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r0}, 0x14) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f00000001c0)={0x1}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000180)={@remote, 0x0}, &(0x7f00000002c0)=0x14) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x60200) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x6, &(0x7f0000000100)=@raw=[@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x10}, @jmp={0x5, 0x0, 0x536f1281f10cb1d4, 0x6, 0xb, 0x0, 0x10}], &(0x7f0000000140)='syzkaller\x00', 0x3, 0xb6, &(0x7f0000000200)=""/182, 0x40f00, 0x1, '\x00', r2, 0x25, r4, 0x8, &(0x7f0000000300)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x2, 0xcd, 0x9}, 0x10}, 0x80) 20:48:44 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000010, 0x0, 0x0, 0x0}}}) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000010, 0x0, 0x0, 0x0}}}) (async) 20:48:44 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000040)={0x0, {{0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, '\x00', 0x14}, 0x9}}}, 0x88) 20:48:44 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000300)={0x1, @sliced={0x0, [0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x414e], 0xc03b}}) [ 1021.186711] Unknown ioctl -1068490496 [ 1021.190505] Unknown ioctl -1068490496 [ 1021.194279] Unknown ioctl -1068490496 [ 1021.198171] Unknown ioctl -1068490496 [ 1021.201962] Unknown ioctl -1068490496 [ 1021.205814] Unknown ioctl -1068490496 [ 1021.209614] Unknown ioctl -1068490496 [ 1021.213391] Unknown ioctl -1068490496 [ 1021.217242] Unknown ioctl -1068490496 [ 1021.221027] Unknown ioctl -1068490496 [ 1021.224892] Unknown ioctl -1068490496 [ 1021.228705] Unknown ioctl -1068490496 20:48:44 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) (async, rerun: 32) keyctl$clear(0x7, r1) (async, rerun: 32) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r3) (async) keyctl$get_persistent(0x16, 0x0, r3) (async, rerun: 64) keyctl$reject(0x13, r3, 0x9, 0x6, r2) (async, rerun: 64) keyctl$get_persistent(0x16, 0xee00, r2) (async, rerun: 64) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (rerun: 64) 20:48:44 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000380)=@overlay={0x4, 0x0, 0x4, 0x400, 0x1, {0x77359400}, {0x1, 0x0, 0x5, 0x6, 0x85, 0x67, "b2e3a2f0"}, 0x10000, 0x3, {}, 0x8}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000300)=@mmap={0x8, 0x0, 0x4, 0xe000, 0x80000000, {0x0, 0x2710}, {0x3, 0x3, 0x5, 0x6, 0x9, 0x51, "b75ed77a"}, 0x0, 0x1, {}, 0x80000001, 0x0, r3}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000040)={0x3, @pix_mp={0x9, 0xbc, 0x20493859, 0x0, 0x5, [{}, {0x78}, {0x400, 0x2}, {0x101, 0xd3}, {0x3, 0x2e}, {0xffff8001, 0x101}, {0xffffffff, 0x1c00}, {0x21, 0xa98}], 0x1a, 0x81, 0x3, 0x0, 0x7}}) 20:48:44 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0x1, 0x3, 0x5}, 0x3, 0x80000000}) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) 20:48:44 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x501a02, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f0000000080)) 20:48:44 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0x1, 0x3, 0x5}, 0x3, 0x80000000}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) 20:48:44 executing program 5: ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@ipv4={""/10, ""/2, @loopback}, 0x0}, &(0x7f0000000080)=0x14) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f00000004c0)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @broadcast, @empty}, &(0x7f0000000480)=0xc) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r0}, 0x14) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f00000001c0)={0x1}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000180)={@remote, 0x0}, &(0x7f00000002c0)=0x14) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x60200) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x6, &(0x7f0000000100)=@raw=[@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x10}, @jmp={0x5, 0x0, 0x536f1281f10cb1d4, 0x6, 0xb, 0x0, 0x10}], &(0x7f0000000140)='syzkaller\x00', 0x3, 0xb6, &(0x7f0000000200)=""/182, 0x40f00, 0x1, '\x00', r2, 0x25, r4, 0x8, &(0x7f0000000300)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x2, 0xcd, 0x9}, 0x10}, 0x80) [ 1021.275168] Unknown ioctl -1067952625 [ 1021.286931] Unknown ioctl -1067952625 20:48:44 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0x1, 0x3, 0x5}, 0x3, 0x80000000}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) 20:48:44 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0x1, 0x3, 0x5}, 0x3, 0x80000000}) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) 20:48:44 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$clear(0x7, r1) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$get_persistent(0x16, 0x0, r3) (async, rerun: 64) keyctl$reject(0x13, r3, 0x9, 0x6, r2) (rerun: 64) keyctl$get_persistent(0x16, 0xee00, r2) (async, rerun: 64) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (rerun: 64) 20:48:44 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x501a02, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f0000000080)) 20:48:44 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000380)=@overlay={0x4, 0x0, 0x4, 0x400, 0x1, {0x77359400}, {0x1, 0x0, 0x5, 0x6, 0x85, 0x67, "b2e3a2f0"}, 0x10000, 0x3, {}, 0x8}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000300)=@mmap={0x8, 0x0, 0x4, 0xe000, 0x80000000, {0x0, 0x2710}, {0x3, 0x3, 0x5, 0x6, 0x9, 0x51, "b75ed77a"}, 0x0, 0x1, {}, 0x80000001, 0x0, r3}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000040)={0x3, @pix_mp={0x9, 0xbc, 0x20493859, 0x0, 0x5, [{}, {0x78}, {0x400, 0x2}, {0x101, 0xd3}, {0x3, 0x2e}, {0xffff8001, 0x101}, {0xffffffff, 0x1c00}, {0x21, 0xa98}], 0x1a, 0x81, 0x3, 0x0, 0x7}}) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000380)=@overlay={0x4, 0x0, 0x4, 0x400, 0x1, {0x77359400}, {0x1, 0x0, 0x5, 0x6, 0x85, 0x67, "b2e3a2f0"}, 0x10000, 0x3, {}, 0x8}) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, 0x0) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000300)=@mmap={0x8, 0x0, 0x4, 0xe000, 0x80000000, {0x0, 0x2710}, {0x3, 0x3, 0x5, 0x6, 0x9, 0x51, "b75ed77a"}, 0x0, 0x1, {}, 0x80000001, 0x0, r3}) (async) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000040)={0x3, @pix_mp={0x9, 0xbc, 0x20493859, 0x0, 0x5, [{}, {0x78}, {0x400, 0x2}, {0x101, 0xd3}, {0x3, 0x2e}, {0xffff8001, 0x101}, {0xffffffff, 0x1c00}, {0x21, 0xa98}], 0x1a, 0x81, 0x3, 0x0, 0x7}}) (async) 20:48:44 executing program 5: ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@ipv4={""/10, ""/2, @loopback}, 0x0}, &(0x7f0000000080)=0x14) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f00000004c0)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @broadcast, @empty}, &(0x7f0000000480)=0xc) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r0}, 0x14) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f00000001c0)={0x1}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000180)={@remote}, &(0x7f00000002c0)=0x14) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x60200) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, 0x0) 20:48:44 executing program 3: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) [ 1021.357720] Unknown ioctl -1067952625 [ 1021.359083] Unknown ioctl -1067952625 [ 1021.373007] Unknown ioctl 21667 [ 1021.380622] Unknown ioctl -1067952625 20:48:44 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0x1, 0x3, 0x5}, 0x3, 0x80000000}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) 20:48:44 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x501a02, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f0000000080)) 20:48:44 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0x1, 0x3, 0x5}, 0x3, 0x80000000}) 20:48:44 executing program 5: ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@ipv4={""/10, ""/2, @loopback}, 0x0}, &(0x7f0000000080)=0x14) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f00000004c0)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @broadcast, @empty}, &(0x7f0000000480)=0xc) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r0}, 0x14) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f00000001c0)={0x1}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000180)={@remote}, &(0x7f00000002c0)=0x14) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x60200) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 20:48:44 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000380)=@overlay={0x4, 0x0, 0x4, 0x400, 0x1, {0x77359400}, {0x1, 0x0, 0x5, 0x6, 0x85, 0x67, "b2e3a2f0"}, 0x10000, 0x3, {}, 0x8}) (async, rerun: 64) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) (async) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, 0x0) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000300)=@mmap={0x8, 0x0, 0x4, 0xe000, 0x80000000, {0x0, 0x2710}, {0x3, 0x3, 0x5, 0x6, 0x9, 0x51, "b75ed77a"}, 0x0, 0x1, {}, 0x80000001, 0x0, r3}) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) (rerun: 64) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000040)={0x3, @pix_mp={0x9, 0xbc, 0x20493859, 0x0, 0x5, [{}, {0x78}, {0x400, 0x2}, {0x101, 0xd3}, {0x3, 0x2e}, {0xffff8001, 0x101}, {0xffffffff, 0x1c00}, {0x21, 0xa98}], 0x1a, 0x81, 0x3, 0x0, 0x7}}) 20:48:44 executing program 3: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) [ 1021.443228] Unknown ioctl -1067952625 [ 1021.459582] Unknown ioctl -1067952625 [ 1021.469141] Unknown ioctl -1067952625 [ 1021.479680] Unknown ioctl 21667 20:48:44 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@private}}, &(0x7f0000000080)=0xfffffee8) keyctl$get_persistent(0x16, r2, r0) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000140)={@private1, 0x0, r4}) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000140)={@private1, 0x0, r6}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @empty, @empty}, &(0x7f0000000340)=0xc) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000880)={&(0x7f0000000380)={0x500, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r1}, {0x224}}, {{0x8, 0x1, r1}, {0xfc, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x8, 0x7, 0x43, 0x1ff}, {0x3, 0x1, 0x0, 0x9}, {0x8c, 0x31, 0x3, 0x6}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r6}, {0x1b4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x64a, 0x0, 0xbf, 0x2}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x150}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}]}, 0x500}, 0x1, 0x0, 0x0, 0x8880}, 0x4) r8 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r9 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r8) keyctl$get_persistent(0x16, 0xee00, r9) 20:48:44 executing program 1: ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000040)={{0x3, 0x1, 0x2, 0x0, 0x39}, 0x3, 0x1, 0x81}) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 20:48:44 executing program 3: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) 20:48:44 executing program 5: ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@ipv4={""/10, ""/2, @loopback}, 0x0}, &(0x7f0000000080)=0x14) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f00000004c0)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @broadcast, @empty}, &(0x7f0000000480)=0xc) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r0}, 0x14) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f00000001c0)={0x1}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000180)={@remote}, &(0x7f00000002c0)=0x14) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x60200) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) [ 1021.543509] Unknown ioctl -1067952625 20:48:44 executing program 2: ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000040)={{0x1, 0x3, 0x5}, 0x3, 0x80000000}) 20:48:45 executing program 1: ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000040)={{0x3, 0x1, 0x2, 0x0, 0x39}, 0x3, 0x1, 0x81}) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 20:48:45 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@private}}, &(0x7f0000000080)=0xfffffee8) keyctl$get_persistent(0x16, r2, r0) (async) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000140)={@private1, 0x0, r4}) (async) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000140)={@private1, 0x0, r6}) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @empty, @empty}, &(0x7f0000000340)=0xc) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000880)={&(0x7f0000000380)={0x500, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r1}, {0x224}}, {{0x8, 0x1, r1}, {0xfc, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x8, 0x7, 0x43, 0x1ff}, {0x3, 0x1, 0x0, 0x9}, {0x8c, 0x31, 0x3, 0x6}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r6}, {0x1b4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x64a, 0x0, 0xbf, 0x2}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x150}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}]}, 0x500}, 0x1, 0x0, 0x0, 0x8880}, 0x4) (async) r8 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r9 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r8) keyctl$get_persistent(0x16, 0xee00, r9) [ 1021.579055] Unknown ioctl -1067952625 [ 1021.583313] Unknown ioctl 21667 [ 1021.608303] Unknown ioctl 21667 [ 1021.621751] Unknown ioctl 21667 20:48:45 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f00000001c0)={0x1, 0x0, 0x800, 0x2}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0xffffffffffffffff, 0x2, 0x2, 0x2, 0x94e8}, 0x9, 0x3, 0x4}) 20:48:45 executing program 2: ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000040)={{0x1, 0x3, 0x5}, 0x3, 0x80000000}) 20:48:45 executing program 5: ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@ipv4={""/10, ""/2, @loopback}, 0x0}, &(0x7f0000000080)=0x14) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f00000004c0)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @broadcast, @empty}, &(0x7f0000000480)=0xc) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r0}, 0x14) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f00000001c0)={0x1}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000180)={@remote}, &(0x7f00000002c0)=0x14) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) [ 1021.628952] Unknown ioctl 21667 [ 1021.634348] Unknown ioctl -1067952625 [ 1021.643110] Unknown ioctl 21667 [ 1021.661889] Unknown ioctl 21667 [ 1021.670171] Unknown ioctl 21667 [ 1021.673728] Unknown ioctl 21667 [ 1021.682831] Unknown ioctl 21667 [ 1021.694012] Unknown ioctl 21667 [ 1021.702399] Unknown ioctl 21667 [ 1021.710235] Unknown ioctl 21667 [ 1021.713578] Unknown ioctl 21667 [ 1021.714903] Unknown ioctl -1067952625 [ 1021.719599] Unknown ioctl 21667 [ 1021.723975] Unknown ioctl 21667 [ 1021.730159] Unknown ioctl 21667 [ 1021.733470] Unknown ioctl 21667 [ 1021.737871] Unknown ioctl 21667 [ 1021.741237] Unknown ioctl 21667 [ 1021.745650] Unknown ioctl 21667 [ 1021.748942] Unknown ioctl 21667 [ 1021.752273] Unknown ioctl 21667 [ 1021.757103] Unknown ioctl 21667 [ 1021.760391] Unknown ioctl 21667 [ 1021.763662] Unknown ioctl 21667 [ 1021.767815] Unknown ioctl 21667 [ 1021.771090] Unknown ioctl 21667 [ 1021.774344] Unknown ioctl 21667 [ 1021.778557] Unknown ioctl 21667 [ 1021.781865] Unknown ioctl 21667 [ 1021.785998] Unknown ioctl 21667 [ 1021.789271] Unknown ioctl 21667 [ 1021.792551] Unknown ioctl 21667 [ 1021.796635] Unknown ioctl 21667 [ 1021.799995] Unknown ioctl 21667 [ 1021.803281] Unknown ioctl 21667 [ 1021.806660] Unknown ioctl 21667 [ 1021.809925] Unknown ioctl 21667 [ 1021.813188] Unknown ioctl 21667 [ 1021.816539] Unknown ioctl 21667 [ 1021.819821] Unknown ioctl 21667 [ 1021.823085] Unknown ioctl 21667 [ 1021.826407] Unknown ioctl 21667 [ 1021.829674] Unknown ioctl 21667 [ 1021.832947] Unknown ioctl 21667 [ 1021.836875] Unknown ioctl 21667 [ 1021.840153] Unknown ioctl 21667 [ 1021.843415] Unknown ioctl 21667 [ 1021.846742] Unknown ioctl 21667 [ 1021.850005] Unknown ioctl 21667 [ 1021.853260] Unknown ioctl 21667 [ 1021.856580] Unknown ioctl 21667 [ 1021.859842] Unknown ioctl 21667 [ 1021.863098] Unknown ioctl 21667 [ 1021.866432] Unknown ioctl 21667 [ 1021.869709] Unknown ioctl 21667 [ 1021.872964] Unknown ioctl 21667 [ 1021.876296] Unknown ioctl 21667 [ 1021.879562] Unknown ioctl 21667 20:48:45 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0x489, 0x6, 0x47314356, 0x5, 0x0, 0x8, 0x4, 0x1, 0x0, 0x6, 0x2, 0x1}}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x18000, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)=@mmap={0x0, 0x1, 0x4, 0x800, 0x7ff, {0x0, 0xea60}, {0x1, 0x1, 0x1, 0x7f, 0xdb, 0x0, 'H%KL'}, 0xe2439000, 0x1, {}, 0x4, 0x0, r2}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2a6c01, 0x0) 20:48:45 executing program 1: ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000040)={{0x3, 0x1, 0x2, 0x0, 0x39}, 0x3, 0x1, 0x81}) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000040)={{0x3, 0x1, 0x2, 0x0, 0x39}, 0x3, 0x1, 0x81}) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async) 20:48:45 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@private}}, &(0x7f0000000080)=0xfffffee8) keyctl$get_persistent(0x16, r2, r0) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000140)={@private1, 0x0, r4}) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000140)={@private1, 0x0, r6}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @empty, @empty}, &(0x7f0000000340)=0xc) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000880)={&(0x7f0000000380)={0x500, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r1}, {0x224}}, {{0x8, 0x1, r1}, {0xfc, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x8, 0x7, 0x43, 0x1ff}, {0x3, 0x1, 0x0, 0x9}, {0x8c, 0x31, 0x3, 0x6}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r6}, {0x1b4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x64a, 0x0, 0xbf, 0x2}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x150}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}]}, 0x500}, 0x1, 0x0, 0x0, 0x8880}, 0x4) r8 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r9 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r8) keyctl$get_persistent(0x16, 0xee00, r9) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6, @in=@loopback}}, {{@in=@initdev}, 0x0, @in=@private}}, &(0x7f0000000080)=0xfffffee8) (async) keyctl$get_persistent(0x16, r2, r0) (async) socket$inet6_dccp(0xa, 0x6, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)) (async) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000140)={@private1, 0x0, r4}) (async) socket$inet6_dccp(0xa, 0x6, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)) (async) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000140)={@private1, 0x0, r6}) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @empty, @empty}, &(0x7f0000000340)=0xc) (async) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000880)={&(0x7f0000000380)={0x500, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r1}, {0x224}}, {{0x8, 0x1, r1}, {0xfc, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x8, 0x7, 0x43, 0x1ff}, {0x3, 0x1, 0x0, 0x9}, {0x8c, 0x31, 0x3, 0x6}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r6}, {0x1b4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x64a, 0x0, 0xbf, 0x2}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x150}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}]}, 0x500}, 0x1, 0x0, 0x0, 0x8880}, 0x4) (async) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) (async) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r8) (async) keyctl$get_persistent(0x16, 0xee00, r9) (async) 20:48:45 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f00000001c0)={0x1, 0x0, 0x800, 0x2}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0xffffffffffffffff, 0x2, 0x2, 0x2, 0x94e8}, 0x9, 0x3, 0x4}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f00000001c0)={0x1, 0x0, 0x800, 0x2}) (async) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0xffffffffffffffff, 0x2, 0x2, 0x2, 0x94e8}, 0x9, 0x3, 0x4}) (async) 20:48:45 executing program 2: ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000040)={{0x1, 0x3, 0x5}, 0x3, 0x80000000}) 20:48:45 executing program 5: ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@ipv4={""/10, ""/2, @loopback}, 0x0}, &(0x7f0000000080)=0x14) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f00000004c0)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @broadcast, @empty}, &(0x7f0000000480)=0xc) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r0}, 0x14) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f00000001c0)={0x1}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000180)={@remote}, &(0x7f00000002c0)=0x14) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) [ 1021.882815] Unknown ioctl 21667 [ 1021.886152] Unknown ioctl 21667 [ 1021.889413] Unknown ioctl 21667 [ 1021.892668] Unknown ioctl 21667 [ 1021.896000] Unknown ioctl 21667 [ 1021.899267] Unknown ioctl 21667 20:48:45 executing program 4: r0 = request_key(&(0x7f00000000c0)='.request_key_auth\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000200)='{/\x00', 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) 20:48:45 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0x1, 0x3, 0x5}, 0x3, 0x80000000}) 20:48:45 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000040)={{0x2, 0x1, 0x80, 0x2, 0x9}, 0x1ff, 0x1}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 20:48:45 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0x489, 0x6, 0x47314356, 0x5, 0x0, 0x8, 0x4, 0x1, 0x0, 0x6, 0x2, 0x1}}) (async) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x18000, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)=@mmap={0x0, 0x1, 0x4, 0x800, 0x7ff, {0x0, 0xea60}, {0x1, 0x1, 0x1, 0x7f, 0xdb, 0x0, 'H%KL'}, 0xe2439000, 0x1, {}, 0x4, 0x0, r2}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2a6c01, 0x0) 20:48:45 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f00000001c0)={0x1, 0x0, 0x800, 0x2}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0xffffffffffffffff, 0x2, 0x2, 0x2, 0x94e8}, 0x9, 0x3, 0x4}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f00000001c0)={0x1, 0x0, 0x800, 0x2}) (async) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0xffffffffffffffff, 0x2, 0x2, 0x2, 0x94e8}, 0x9, 0x3, 0x4}) (async) [ 1021.962608] Unknown ioctl -1067952625 20:48:45 executing program 5: ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@ipv4={""/10, ""/2, @loopback}, 0x0}, &(0x7f0000000080)=0x14) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f00000004c0)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @broadcast, @empty}, &(0x7f0000000480)=0xc) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r0}, 0x14) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f00000001c0)={0x1}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000180)={@remote}, &(0x7f00000002c0)=0x14) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 20:48:45 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0x1, 0x3, 0x5}, 0x3, 0x80000000}) 20:48:45 executing program 4: r0 = request_key(&(0x7f00000000c0)='.request_key_auth\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000200)='{/\x00', 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) [ 1022.016267] Unknown ioctl -1067952625 20:48:45 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000040)={{0x2, 0x1, 0x80, 0x2, 0x9}, 0x1ff, 0x1}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 20:48:45 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0x1, 0x3, 0x5}, 0x3, 0x80000000}) 20:48:45 executing program 5: ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@ipv4={""/10, ""/2, @loopback}, 0x0}, &(0x7f0000000080)=0x14) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f00000004c0)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @broadcast, @empty}, &(0x7f0000000480)=0xc) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r0}, 0x14) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f00000001c0)={0x1}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x60200) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) 20:48:45 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0x489, 0x6, 0x47314356, 0x5, 0x0, 0x8, 0x4, 0x1, 0x0, 0x6, 0x2, 0x1}}) (async, rerun: 64) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x18000, 0x0) (rerun: 64) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)=@mmap={0x0, 0x1, 0x4, 0x800, 0x7ff, {0x0, 0xea60}, {0x1, 0x1, 0x1, 0x7f, 0xdb, 0x0, 'H%KL'}, 0xe2439000, 0x1, {}, 0x4, 0x0, r2}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2a6c01, 0x0) 20:48:45 executing program 4: r0 = request_key(&(0x7f00000000c0)='.request_key_auth\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000200)='{/\x00', 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) 20:48:45 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1, 0x3}) [ 1022.037434] Unknown ioctl 1078481924 [ 1022.048535] Unknown ioctl -1067952625 20:48:45 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000040)={{0x1, 0x3, 0x5}, 0x3, 0x80000000}) 20:48:45 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000040)={{0x2, 0x1, 0x80, 0x2, 0x9}, 0x1ff, 0x1}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 20:48:45 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1, 0x3}) 20:48:45 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000004c0)={0x0, @sdr={0x38414762, 0xffffff00}}) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r1) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000700)=@multiplanar_fd={0x100, 0x0, 0x4, 0x40, 0x6, {0x77359400}, {0x2, 0x0, 0x0, 0x2, 0x3, 0x81, "fc3c6ae4"}, 0x400, 0x4, {&(0x7f0000000680)=[{0x3, 0x9, {r4}, 0x1}, {0x1000, 0x2, {}, 0x1}]}, 0x81}) r5 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$link(0x8, 0x0, r5) r6 = add_key$keyring(&(0x7f0000000080), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r5) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r8, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000380)={0x0, 0x1, 0x0, "d31c29c4632ff315433c36877a3097b2e5ff0ed643ca129278cd5932b21bb24a", 0x50565559}) ioctl$SOUND_MIXER_READ_RECSRC(0xffffffffffffffff, 0x80044dff, &(0x7f0000000440)) r9 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000300)) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8000006b1cee6b256e402ab67f9360285522c4d3f000", @ANYRES16=0x0, @ANYBLOB="02022dbd7000fcdbdf2525000000080001007063690011000200303030303a30303a31302e300000000008008b00", @ANYRES32=r7, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008b00", @ANYRES32, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32=r9, @ANYBLOB], 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) keyctl$get_persistent(0x16, 0xee00, r6) 20:48:45 executing program 5: ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@ipv4={""/10, ""/2, @loopback}, 0x0}, &(0x7f0000000080)=0x14) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f00000004c0)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @broadcast, @empty}, &(0x7f0000000480)=0xc) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r0}, 0x14) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x60200) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) 20:48:45 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x1, 0x3, 0x10000, 0x80}) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @pix_mp={0x10000, 0xc23, 0x34343459, 0x1, 0x5, [{0x882b, 0xfffffffa}, {0x401, 0x3}, {0x6, 0x1}, {0x0, 0xffffffff}, {0x207}, {0xfffffc01, 0x2}, {0x5, 0x800}, {0x8, 0x1dab}], 0x6a, 0x3a, 0x7, 0x1, 0x7}}}) 20:48:45 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000040)={{0x1, 0x3, 0x5}, 0x3, 0x80000000}) [ 1022.111381] Unknown ioctl -1067952625 [ 1022.115410] Unknown ioctl 1078481924 [ 1022.142201] Unknown ioctl -1067952625 20:48:45 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000040)={{0x1, 0x3, 0x5}, 0x3, 0x80000000}) 20:48:45 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000040)) 20:48:45 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1, 0x3}) 20:48:45 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000004c0)={0x0, @sdr={0x38414762, 0xffffff00}}) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r1) (async) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000700)=@multiplanar_fd={0x100, 0x0, 0x4, 0x40, 0x6, {0x77359400}, {0x2, 0x0, 0x0, 0x2, 0x3, 0x81, "fc3c6ae4"}, 0x400, 0x4, {&(0x7f0000000680)=[{0x3, 0x9, {r4}, 0x1}, {0x1000, 0x2, {}, 0x1}]}, 0x81}) (async) r5 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$link(0x8, 0x0, r5) r6 = add_key$keyring(&(0x7f0000000080), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r5) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) (async) r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r8, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) (async, rerun: 64) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000380)={0x0, 0x1, 0x0, "d31c29c4632ff315433c36877a3097b2e5ff0ed643ca129278cd5932b21bb24a", 0x50565559}) (async, rerun: 64) ioctl$SOUND_MIXER_READ_RECSRC(0xffffffffffffffff, 0x80044dff, &(0x7f0000000440)) (async) r9 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000300)) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8000006b1cee6b256e402ab67f9360285522c4d3f000", @ANYRES16=0x0, @ANYBLOB="02022dbd7000fcdbdf2525000000080001007063690011000200303030303a30303a31302e300000000008008b00", @ANYRES32=r7, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008b00", @ANYRES32, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32=r9, @ANYBLOB], 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) (async) keyctl$get_persistent(0x16, 0xee00, r6) 20:48:45 executing program 5: ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@ipv4={""/10, ""/2, @loopback}}, &(0x7f0000000080)=0x14) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f00000004c0)) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000440)={0x0, @broadcast, @empty}, &(0x7f0000000480)=0xc) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x60200) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) 20:48:45 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x1, 0x3, 0x10000, 0x80}) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @pix_mp={0x10000, 0xc23, 0x34343459, 0x1, 0x5, [{0x882b, 0xfffffffa}, {0x401, 0x3}, {0x6, 0x1}, {0x0, 0xffffffff}, {0x207}, {0xfffffc01, 0x2}, {0x5, 0x800}, {0x8, 0x1dab}], 0x6a, 0x3a, 0x7, 0x1, 0x7}}}) [ 1022.199507] Unknown ioctl -1067952625 [ 1022.209201] Unknown ioctl -1067952625 [ 1022.216595] Unknown ioctl 1078481924 [ 1022.219898] Unknown ioctl -1067952625 [ 1022.232880] Unknown ioctl -1069525488 20:48:45 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, 0x0) 20:48:45 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000040)) 20:48:45 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x1, 0x80000001, 0x2, 0x4}}) 20:48:45 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000004c0)={0x0, @sdr={0x38414762, 0xffffff00}}) (async) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r1) (async) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) (async) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, 0x0) (async, rerun: 32) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000700)=@multiplanar_fd={0x100, 0x0, 0x4, 0x40, 0x6, {0x77359400}, {0x2, 0x0, 0x0, 0x2, 0x3, 0x81, "fc3c6ae4"}, 0x400, 0x4, {&(0x7f0000000680)=[{0x3, 0x9, {r4}, 0x1}, {0x1000, 0x2, {}, 0x1}]}, 0x81}) (rerun: 32) r5 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$link(0x8, 0x0, r5) r6 = add_key$keyring(&(0x7f0000000080), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r5) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) (async) r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r8, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000380)={0x0, 0x1, 0x0, "d31c29c4632ff315433c36877a3097b2e5ff0ed643ca129278cd5932b21bb24a", 0x50565559}) (async) ioctl$SOUND_MIXER_READ_RECSRC(0xffffffffffffffff, 0x80044dff, &(0x7f0000000440)) (async) r9 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000300)) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8000006b1cee6b256e402ab67f9360285522c4d3f000", @ANYRES16=0x0, @ANYBLOB="02022dbd7000fcdbdf2525000000080001007063690011000200303030303a30303a31302e300000000008008b00", @ANYRES32=r7, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008b00", @ANYRES32, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32=r9, @ANYBLOB], 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) (async) keyctl$get_persistent(0x16, 0xee00, r6) 20:48:45 executing program 5: ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@ipv4={""/10, ""/2, @loopback}}, &(0x7f0000000080)=0x14) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f00000004c0)) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x60200) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) 20:48:45 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, 0x0) [ 1022.297487] Unknown ioctl -1067952625 [ 1022.314068] Unknown ioctl -1067952625 [ 1022.328463] Unknown ioctl -1069525488 20:48:45 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000040)) 20:48:45 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x1, 0x3, 0x10000, 0x80}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @pix_mp={0x10000, 0xc23, 0x34343459, 0x1, 0x5, [{0x882b, 0xfffffffa}, {0x401, 0x3}, {0x6, 0x1}, {0x0, 0xffffffff}, {0x207}, {0xfffffc01, 0x2}, {0x5, 0x800}, {0x8, 0x1dab}], 0x6a, 0x3a, 0x7, 0x1, 0x7}}}) 20:48:45 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x1, 0x80000001, 0x2, 0x4}}) 20:48:45 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, 0x0) 20:48:45 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) [ 1022.370836] Unknown ioctl -1067952625 [ 1022.376803] Unknown ioctl -1067952625 [ 1022.381799] Unknown ioctl -1067952625 [ 1022.402377] Unknown ioctl -1067952625 [ 1022.416685] Unknown ioctl -1067952625 20:48:45 executing program 5: ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@ipv4={""/10, ""/2, @loopback}}, &(0x7f0000000080)=0x14) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f00000004c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x60200) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 20:48:45 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x1, 0x80000001, 0x2, 0x4}}) 20:48:45 executing program 5: ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@ipv4={""/10, ""/2, @loopback}}, &(0x7f0000000080)=0x14) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f00000004c0)) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x60200) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) [ 1022.428099] Unknown ioctl -1067952625 [ 1022.447768] Unknown ioctl -1067952625 [ 1022.457581] Unknown ioctl -1067952625 [ 1022.458859] Unknown ioctl -1069525488 [ 1022.471539] Unknown ioctl -1067952625 20:48:45 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0x0, 0x3, 0x5}, 0x3, 0x80000000}) [ 1022.484252] Unknown ioctl -1067952625 [ 1022.493105] Unknown ioctl -1067952625 [ 1022.497567] Unknown ioctl -1067952625 [ 1022.501453] Unknown ioctl 21666 [ 1022.515853] Unknown ioctl -1067952625 [ 1022.520917] Unknown ioctl -1067952625 [ 1022.529880] Unknown ioctl -1067952625 [ 1022.534008] Unknown ioctl -1067952625 [ 1022.538688] Unknown ioctl -1067952625 [ 1022.542509] Unknown ioctl -1067952625 [ 1022.547189] Unknown ioctl -1067952625 [ 1022.550979] Unknown ioctl -1067952625 [ 1022.555075] Unknown ioctl -1067952625 [ 1022.558875] Unknown ioctl -1067952625 [ 1022.562658] Unknown ioctl -1067952625 [ 1022.566646] Unknown ioctl -1067952625 [ 1022.570432] Unknown ioctl -1067952625 [ 1022.574210] Unknown ioctl -1067952625 [ 1022.578065] Unknown ioctl -1067952625 20:48:46 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) socketpair(0xa, 0x3, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) 20:48:46 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x4, 0x1}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) 20:48:46 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async) 20:48:46 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x40, 0xfe, 0x7f, 0x80}, {0x8bd5, 0x20, 0x4, 0x258}, {0xe0f3, 0x7, 0x6, 0x1}, {0x8, 0x5, 0x1, 0x2}, {0x6, 0x5, 0xe8, 0xbac}, {0xfff, 0x7, 0x9, 0x7}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)={0x9, &(0x7f0000000100)=[{0x4, 0x9, 0x5, 0xffff8000}, {0x1f, 0x1f, 0xfb, 0x8}, {0x6, 0x0, 0x2, 0x7}, {0x7, 0x1, 0x82, 0x8}, {0x401, 0x6, 0x0, 0x2}, {0x4, 0xb9, 0x9, 0x4f8}, {0x7f, 0x40, 0x40, 0x100}, {0x0, 0x1f, 0x8}, {0xbf, 0x7b, 0x5, 0x5000}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000200)) 20:48:46 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0x0, 0x3, 0x5}, 0x3, 0x80000000}) 20:48:46 executing program 5: ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@ipv4={""/10, ""/2, @loopback}}, &(0x7f0000000080)=0x14) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x60200) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) [ 1022.581852] Unknown ioctl -1067952625 [ 1022.585733] Unknown ioctl -1067952625 [ 1022.589520] Unknown ioctl -1067952625 [ 1022.593293] Unknown ioctl -1067952625 [ 1022.597153] Unknown ioctl -1067952625 [ 1022.600936] Unknown ioctl -1067952625 [ 1022.604932] Unknown ioctl -1067952625 [ 1022.608717] Unknown ioctl -1067952625 20:48:46 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x40, 0xfe, 0x7f, 0x80}, {0x8bd5, 0x20, 0x4, 0x258}, {0xe0f3, 0x7, 0x6, 0x1}, {0x8, 0x5, 0x1, 0x2}, {0x6, 0x5, 0xe8, 0xbac}, {0xfff, 0x7, 0x9, 0x7}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f00000000c0)) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)={0x9, &(0x7f0000000100)=[{0x4, 0x9, 0x5, 0xffff8000}, {0x1f, 0x1f, 0xfb, 0x8}, {0x6, 0x0, 0x2, 0x7}, {0x7, 0x1, 0x82, 0x8}, {0x401, 0x6, 0x0, 0x2}, {0x4, 0xb9, 0x9, 0x4f8}, {0x7f, 0x40, 0x40, 0x100}, {0x0, 0x1f, 0x8}, {0xbf, 0x7b, 0x5, 0x5000}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000200)) 20:48:46 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x4, 0x1}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) 20:48:46 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0x0, 0x3, 0x5}, 0x3, 0x80000000}) 20:48:46 executing program 5: ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x60200) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 20:48:46 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async) 20:48:46 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) socketpair(0xa, 0x3, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) (async) socketpair(0xa, 0x3, 0x0, 0x0) (async) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) (async) keyctl$get_persistent(0x16, 0xee00, r2) (async) [ 1022.648501] Unknown ioctl -1067952625 [ 1022.664264] Unknown ioctl 21666 [ 1022.681021] Unknown ioctl 21666 [ 1022.686622] Unknown ioctl -1067952625 20:48:46 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x4, 0x1}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) (async) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x4, 0x1}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) (async) 20:48:46 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x40, 0xfe, 0x7f, 0x80}, {0x8bd5, 0x20, 0x4, 0x258}, {0xe0f3, 0x7, 0x6, 0x1}, {0x8, 0x5, 0x1, 0x2}, {0x6, 0x5, 0xe8, 0xbac}, {0xfff, 0x7, 0x9, 0x7}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f00000000c0)) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)={0x9, &(0x7f0000000100)=[{0x4, 0x9, 0x5, 0xffff8000}, {0x1f, 0x1f, 0xfb, 0x8}, {0x6, 0x0, 0x2, 0x7}, {0x7, 0x1, 0x82, 0x8}, {0x401, 0x6, 0x0, 0x2}, {0x4, 0xb9, 0x9, 0x4f8}, {0x7f, 0x40, 0x40, 0x100}, {0x0, 0x1f, 0x8}, {0xbf, 0x7b, 0x5, 0x5000}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000200)) 20:48:46 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0x1, 0x0, 0x5}, 0x3, 0x80000000}) 20:48:46 executing program 5: ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x60200) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 20:48:46 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0x1}, 0x3, 0x80000000}) 20:48:46 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@mcast1, 0x0}, &(0x7f0000000080)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x49, r1}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @loopback, @remote}, &(0x7f0000000140)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x4e24, 0xa04, 0x4e22, 0x0, 0xa, 0x40, 0x20, 0xff, r3, 0xffffffffffffffff}, {0x20d9, 0x7f, 0x6, 0x80000001, 0x7ff, 0x8, 0x1f, 0x9}, {0x4, 0x0, 0x200, 0x2}, 0xe1, 0x6e6bc0, 0x0, 0x1, 0x2, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) [ 1022.769350] Unknown ioctl -1067952625 [ 1022.784253] Unknown ioctl 21666 20:48:46 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000003, 0x0, 0x0, 0x0}}}) 20:48:46 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x60200) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 20:48:46 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xe670d55e06ff496a) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) 20:48:46 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0x1}, 0x0, 0x80000000}) [ 1022.815753] Unknown ioctl 21666 [ 1022.816255] Unknown ioctl -1067952625 20:48:46 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) socketpair(0xa, 0x3, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) (async) socketpair(0xa, 0x3, 0x0, 0x0) (async) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) (async) keyctl$get_persistent(0x16, 0xee00, r2) (async) 20:48:46 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000003, 0x0, 0x0, 0x0}}}) 20:48:46 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@mcast1, 0x0}, &(0x7f0000000080)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x49, r1}) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @loopback, @remote}, &(0x7f0000000140)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x4e24, 0xa04, 0x4e22, 0x0, 0xa, 0x40, 0x20, 0xff, r3, 0xffffffffffffffff}, {0x20d9, 0x7f, 0x6, 0x80000001, 0x7ff, 0x8, 0x1f, 0x9}, {0x4, 0x0, 0x200, 0x2}, 0xe1, 0x6e6bc0, 0x0, 0x1, 0x2, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:46 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0x1}}) 20:48:46 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x60200) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 20:48:46 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xe670d55e06ff496a) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) 20:48:46 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000003, 0x0, 0x0, 0x0}}}) [ 1022.901913] Unknown ioctl -1067952625 [ 1022.909409] Unknown ioctl 21666 20:48:46 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@mcast1, 0x0}, &(0x7f0000000080)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x49, r1}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @loopback, @remote}, &(0x7f0000000140)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x4e24, 0xa04, 0x4e22, 0x0, 0xa, 0x40, 0x20, 0xff, r3, 0xffffffffffffffff}, {0x20d9, 0x7f, 0x6, 0x80000001, 0x7ff, 0x8, 0x1f, 0x9}, {0x4, 0x0, 0x200, 0x2}, 0xe1, 0x6e6bc0, 0x0, 0x1, 0x2, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:46 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@mcast1, 0x0}, &(0x7f0000000080)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x49, r1}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @loopback, @remote}, &(0x7f0000000140)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x4e24, 0xa04, 0x4e22, 0x0, 0xa, 0x40, 0x20, 0xff, r3, 0xffffffffffffffff}, {0x20d9, 0x7f, 0x6, 0x80000001, 0x7ff, 0x8, 0x1f, 0x9}, {0x4, 0x0, 0x200, 0x2}, 0xe1, 0x6e6bc0, 0x0, 0x1, 0x2, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:46 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x60200) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 20:48:46 executing program 0: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) 20:48:46 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xe670d55e06ff496a) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) [ 1022.992664] Unknown ioctl -1067952625 [ 1022.997101] Unknown ioctl 21666 20:48:46 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$negate(0xd, r1, 0x0, r2) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r3) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$get_persistent(0x16, 0x0, r4) keyctl$search(0xa, r0, &(0x7f0000000200)='.dead\x00', &(0x7f0000000240)={'syz', 0x3}, r4) 20:48:46 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@mcast1, 0x0}, &(0x7f0000000080)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x49, r1}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @loopback, @remote}, &(0x7f0000000140)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x4e24, 0xa04, 0x4e22, 0x0, 0xa, 0x40, 0x20, 0xff, r3, 0xffffffffffffffff}, {0x20d9, 0x7f, 0x6, 0x80000001, 0x7ff, 0x8, 0x1f, 0x9}, {0x4, 0x0, 0x200, 0x2}, 0xe1, 0x6e6bc0, 0x0, 0x1, 0x2, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:46 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x60200) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 20:48:46 executing program 0: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) (async) 20:48:46 executing program 3: r0 = syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000140)={@private1, 0x0, r4}) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000140)={@private1, 0x0, r6}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="30020000", @ANYRES16=r0, @ANYBLOB="000228bd7000ffdbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="fc0002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000500000008000600", @ANYRES32=r2, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="cc00028054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000240004000004fffc01040000ff039e34010000000500ff2201000000070007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400060000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="f918f200", @ANYRES32=r6, @ANYBLOB="3c0002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB], 0x230}, 0x1, 0x0, 0x0, 0x14}, 0x20004804) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, &(0x7f00000001c0)={0x1}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r7, 0x80605414, &(0x7f00000000c0)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r8, 0x29, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) 20:48:46 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x1, 0x3, 0x3, 0x0, 0x8}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000040)={0x2, 0x1, 0x10001, 0x0, 0x1}) 20:48:46 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) [ 1023.069494] Unknown ioctl -1067952625 [ 1023.076773] Unknown ioctl 21666 20:48:46 executing program 3: r0 = syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000140)={@private1, 0x0, r4}) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000140)={@private1, 0x0, r6}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="30020000", @ANYRES16=r0, @ANYBLOB="000228bd7000ffdbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="fc0002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000500000008000600", @ANYRES32=r2, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="cc00028054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000240004000004fffc01040000ff039e34010000000500ff2201000000070007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400060000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="f918f200", @ANYRES32=r6, @ANYBLOB="3c0002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB], 0x230}, 0x1, 0x0, 0x0, 0x14}, 0x20004804) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, &(0x7f00000001c0)={0x1}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r7, 0x80605414, &(0x7f00000000c0)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r8, 0x29, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg0\x00'}) (async) socket$inet6_dccp(0xa, 0x6, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)) (async) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000140)={@private1, 0x0, r4}) (async) socket$inet6_dccp(0xa, 0x6, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)) (async) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000140)={@private1, 0x0, r6}) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="30020000", @ANYRES16=r0, @ANYBLOB="000228bd7000ffdbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="fc0002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000500000008000600", @ANYRES32=r2, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="cc00028054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000240004000004fffc01040000ff039e34010000000500ff2201000000070007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400060000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="f918f200", @ANYRES32=r6, @ANYBLOB="3c0002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB], 0x230}, 0x1, 0x0, 0x0, 0x14}, 0x20004804) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, &(0x7f00000001c0)={0x1}) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r7, 0x80605414, &(0x7f00000000c0)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) getsockopt$inet6_int(r8, 0x29, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) 20:48:46 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@mcast1, 0x0}, &(0x7f0000000080)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x49, r1}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @loopback, @remote}, &(0x7f0000000140)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x4e24, 0xa04, 0x4e22, 0x0, 0xa, 0x40, 0x20, 0xff, r3, 0xffffffffffffffff}, {0x20d9, 0x7f, 0x6, 0x80000001, 0x7ff, 0x8, 0x1f, 0x9}, {0x4, 0x0, 0x200, 0x2}, 0xe1, 0x6e6bc0, 0x0, 0x1, 0x2, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:46 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$negate(0xd, r1, 0x0, r2) (async) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r3) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r4) (async) keyctl$get_persistent(0x16, 0x0, r4) (async) keyctl$search(0xa, r0, &(0x7f0000000200)='.dead\x00', &(0x7f0000000240)={'syz', 0x3}, r4) 20:48:46 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x1, 0x3, 0x3, 0x0, 0x8}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000040)={0x2, 0x1, 0x10001, 0x0, 0x1}) 20:48:46 executing program 5: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 20:48:46 executing program 0: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) [ 1023.130713] Unknown ioctl -1067952625 [ 1023.141888] Unknown ioctl 1079006226 20:48:46 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@mcast1, 0x0}, &(0x7f0000000080)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x49, r1}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x4e24, 0xa04, 0x4e22, 0x0, 0xa, 0x40, 0x20, 0xff, 0x0, 0xffffffffffffffff}, {0x20d9, 0x7f, 0x6, 0x80000001, 0x7ff, 0x8, 0x1f, 0x9}, {0x4, 0x0, 0x200, 0x2}, 0xe1, 0x6e6bc0, 0x0, 0x1, 0x2, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:46 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, r0) (async) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$negate(0xd, r1, 0x0, r2) (async) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r3) (async) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r4) (async) keyctl$get_persistent(0x16, 0x0, r4) (async) keyctl$search(0xa, r0, &(0x7f0000000200)='.dead\x00', &(0x7f0000000240)={'syz', 0x3}, r4) 20:48:46 executing program 5: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 20:48:46 executing program 3: r0 = syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000140)={@private1, 0x0, r4}) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000140)={@private1, 0x0, r6}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="30020000", @ANYRES16=r0, @ANYBLOB="000228bd7000ffdbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="fc0002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000500000008000600", @ANYRES32=r2, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="cc00028054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000240004000004fffc01040000ff039e34010000000500ff2201000000070007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400060000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="f918f200", @ANYRES32=r6, @ANYBLOB="3c0002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB], 0x230}, 0x1, 0x0, 0x0, 0x14}, 0x20004804) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, &(0x7f00000001c0)={0x1}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r7, 0x80605414, &(0x7f00000000c0)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r8, 0x29, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg0\x00'}) (async) socket$inet6_dccp(0xa, 0x6, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)) (async) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000140)={@private1, 0x0, r4}) (async) socket$inet6_dccp(0xa, 0x6, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)) (async) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000140)={@private1, 0x0, r6}) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="30020000", @ANYRES16=r0, @ANYBLOB="000228bd7000ffdbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="fc0002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000500000008000600", @ANYRES32=r2, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="cc00028054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000240004000004fffc01040000ff039e34010000000500ff2201000000070007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400060000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="f918f200", @ANYRES32=r6, @ANYBLOB="3c0002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB], 0x230}, 0x1, 0x0, 0x0, 0x14}, 0x20004804) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, &(0x7f00000001c0)={0x1}) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r7, 0x80605414, &(0x7f00000000c0)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) getsockopt$inet6_int(r8, 0x29, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) 20:48:46 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@mcast1, 0x0}, &(0x7f0000000080)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x49, r1}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x4e24, 0xa04, 0x4e22, 0x0, 0xa, 0x40, 0x20, 0xff, 0x0, 0xffffffffffffffff}, {0x20d9, 0x7f, 0x6, 0x80000001, 0x7ff, 0x8, 0x1f, 0x9}, {0x4, 0x0, 0x200, 0x2}, 0xe1, 0x6e6bc0, 0x0, 0x1, 0x2, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) [ 1023.204523] Unknown ioctl -1067952625 [ 1023.217306] Unknown ioctl 1079006226 20:48:46 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x1, 0x3, 0x3, 0x0, 0x8}) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000040)={0x2, 0x1, 0x10001, 0x0, 0x1}) (rerun: 64) 20:48:46 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, &(0x7f0000000100)={@rand_addr=0x64010100, @broadcast}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x0, @sliced={0x2, [0x101, 0x4, 0x1, 0x8, 0x8001, 0x3f80, 0x0, 0x0, 0x6, 0x3ff, 0xde38, 0xff, 0x4, 0x7, 0x713f, 0x2, 0x800, 0x0, 0x7fff, 0x2, 0xff, 0x7, 0xef4, 0x7ff, 0x2, 0x7fff, 0xfe, 0x9a8, 0xfffa, 0x7, 0x1, 0x400, 0xf001, 0x2, 0x7, 0xffff, 0x2, 0xba, 0x8, 0x0, 0x8, 0x401, 0xaf0a, 0x200, 0x6, 0x436f, 0x6, 0x7], 0xfdfb2cc}}) 20:48:46 executing program 5: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 20:48:46 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) setsockopt$MRT_ASSERT(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000080), 0x4) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) r3 = request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)='#\x00', r2) keyctl$link(0x8, r3, r2) keyctl$get_persistent(0x16, 0xee00, r2) 20:48:46 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@mcast1, 0x0}, &(0x7f0000000080)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x49, r1}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x4e24, 0xa04, 0x4e22, 0x0, 0xa, 0x40, 0x20, 0xff, 0x0, 0xffffffffffffffff}, {0x20d9, 0x7f, 0x6, 0x80000001, 0x7ff, 0x8, 0x1f, 0x9}, {0x4, 0x0, 0x200, 0x2}, 0xe1, 0x6e6bc0, 0x0, 0x1, 0x2, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:46 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) (async) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, &(0x7f0000000100)={@rand_addr=0x64010100, @broadcast}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x0, @sliced={0x2, [0x101, 0x4, 0x1, 0x8, 0x8001, 0x3f80, 0x0, 0x0, 0x6, 0x3ff, 0xde38, 0xff, 0x4, 0x7, 0x713f, 0x2, 0x800, 0x0, 0x7fff, 0x2, 0xff, 0x7, 0xef4, 0x7ff, 0x2, 0x7fff, 0xfe, 0x9a8, 0xfffa, 0x7, 0x1, 0x400, 0xf001, 0x2, 0x7, 0xffff, 0x2, 0xba, 0x8, 0x0, 0x8, 0x401, 0xaf0a, 0x200, 0x6, 0x436f, 0x6, 0x7], 0xfdfb2cc}}) [ 1023.302378] Unknown ioctl -1067952625 [ 1023.309938] Unknown ioctl 1079006226 [ 1023.329999] Unknown ioctl 1079006226 [ 1023.338484] Unknown ioctl 1079006226 20:48:46 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x101601, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080)={0x2, 0x42179289fa111827, 0x4, 0x1, 0x4}) 20:48:46 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@mcast1, 0x0}, &(0x7f0000000080)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x49, r1}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x4e24, 0xa04, 0x4e22, 0x0, 0xa, 0x40, 0x20, 0xff, 0x0, 0xffffffffffffffff}, {0x20d9, 0x7f, 0x6, 0x80000001, 0x7ff, 0x8, 0x1f, 0x9}, {0x4, 0x0, 0x200, 0x2}, 0xe1, 0x6e6bc0, 0x0, 0x1, 0x2, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:46 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) setsockopt$MRT_ASSERT(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000080), 0x4) (async, rerun: 32) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) (rerun: 32) r3 = request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)='#\x00', r2) keyctl$link(0x8, r3, r2) (async) keyctl$get_persistent(0x16, 0xee00, r2) 20:48:46 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0x1}, 0x3, 0x80000000}) [ 1023.355645] Unknown ioctl 1079006226 [ 1023.362952] Unknown ioctl 1079006226 [ 1023.380148] Unknown ioctl 1079006226 [ 1023.390346] Unknown ioctl 1079006226 20:48:46 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, &(0x7f0000000100)={@rand_addr=0x64010100, @broadcast}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x0, @sliced={0x2, [0x101, 0x4, 0x1, 0x8, 0x8001, 0x3f80, 0x0, 0x0, 0x6, 0x3ff, 0xde38, 0xff, 0x4, 0x7, 0x713f, 0x2, 0x800, 0x0, 0x7fff, 0x2, 0xff, 0x7, 0xef4, 0x7ff, 0x2, 0x7fff, 0xfe, 0x9a8, 0xfffa, 0x7, 0x1, 0x400, 0xf001, 0x2, 0x7, 0xffff, 0x2, 0xba, 0x8, 0x0, 0x8, 0x401, 0xaf0a, 0x200, 0x6, 0x436f, 0x6, 0x7], 0xfdfb2cc}}) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) (async) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, &(0x7f0000000100)={@rand_addr=0x64010100, @broadcast}) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x0, @sliced={0x2, [0x101, 0x4, 0x1, 0x8, 0x8001, 0x3f80, 0x0, 0x0, 0x6, 0x3ff, 0xde38, 0xff, 0x4, 0x7, 0x713f, 0x2, 0x800, 0x0, 0x7fff, 0x2, 0xff, 0x7, 0xef4, 0x7ff, 0x2, 0x7fff, 0xfe, 0x9a8, 0xfffa, 0x7, 0x1, 0x400, 0xf001, 0x2, 0x7, 0xffff, 0x2, 0xba, 0x8, 0x0, 0x8, 0x401, 0xaf0a, 0x200, 0x6, 0x436f, 0x6, 0x7], 0xfdfb2cc}}) (async) 20:48:46 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@mcast1, 0x0}, &(0x7f0000000080)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x49, r0}) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x4e24, 0xa04, 0x4e22, 0x0, 0xa, 0x40, 0x20, 0xff, 0x0, 0xffffffffffffffff}, {0x20d9, 0x7f, 0x6, 0x80000001, 0x7ff, 0x8, 0x1f, 0x9}, {0x4, 0x0, 0x200, 0x2}, 0xe1, 0x6e6bc0, 0x0, 0x1, 0x2, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) [ 1023.405125] Unknown ioctl 1079006226 [ 1023.413308] Unknown ioctl -1072409599 [ 1023.414218] Unknown ioctl 1079006226 [ 1023.425131] Unknown ioctl 1079006226 [ 1023.433246] Unknown ioctl 1079006226 [ 1023.455753] Unknown ioctl 1079006226 [ 1023.459758] Unknown ioctl 1079006226 [ 1023.463606] Unknown ioctl 1079006226 [ 1023.467603] Unknown ioctl 1079006226 [ 1023.471417] Unknown ioctl 1079006226 [ 1023.476053] Unknown ioctl 1079006226 [ 1023.480305] Unknown ioctl 1079006226 [ 1023.487016] Unknown ioctl 1079006226 [ 1023.490744] Unknown ioctl 1079006226 [ 1023.494541] Unknown ioctl 1079006226 [ 1023.498242] Unknown ioctl 1079006226 [ 1023.501937] Unknown ioctl 1079006226 [ 1023.505724] Unknown ioctl 1079006226 [ 1023.509429] Unknown ioctl 1079006226 [ 1023.513118] Unknown ioctl 1079006226 [ 1023.516943] Unknown ioctl 1079006226 [ 1023.520649] Unknown ioctl 1079006226 [ 1023.525201] Unknown ioctl 1079006226 [ 1023.528928] Unknown ioctl 1079006226 [ 1023.532628] Unknown ioctl 1079006226 [ 1023.536419] Unknown ioctl 1079006226 [ 1023.540123] Unknown ioctl 1079006226 [ 1023.543816] Unknown ioctl 1079006226 [ 1023.547582] Unknown ioctl 1079006226 [ 1023.551306] Unknown ioctl 1079006226 [ 1023.555089] Unknown ioctl 1079006226 [ 1023.558790] Unknown ioctl 1079006226 [ 1023.562482] Unknown ioctl 1079006226 [ 1023.566243] Unknown ioctl 1079006226 [ 1023.569940] Unknown ioctl 1079006226 [ 1023.573627] Unknown ioctl 1079006226 [ 1023.577398] Unknown ioctl 1079006226 [ 1023.581095] Unknown ioctl 1079006226 [ 1023.584865] Unknown ioctl 1079006226 [ 1023.588601] Unknown ioctl 1079006226 [ 1023.592300] Unknown ioctl 1079006226 [ 1023.596078] Unknown ioctl 1079006226 [ 1023.599778] Unknown ioctl 1079006226 [ 1023.603468] Unknown ioctl 1079006226 [ 1023.607214] Unknown ioctl 1079006226 [ 1023.610942] Unknown ioctl 1079006226 [ 1023.614723] Unknown ioctl 1079006226 [ 1023.618424] Unknown ioctl 1079006226 [ 1023.622124] Unknown ioctl 1079006226 [ 1023.625869] Unknown ioctl 1079006226 [ 1023.629573] Unknown ioctl 1079006226 [ 1023.633264] Unknown ioctl 1079006226 [ 1023.637037] Unknown ioctl 1079006226 [ 1023.640817] Unknown ioctl 1079006226 [ 1023.644575] Unknown ioctl 1079006226 [ 1023.648285] Unknown ioctl 1079006226 [ 1023.651980] Unknown ioctl 1079006226 20:48:47 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000080)={0x2, @sliced={0xfff8, [0x7, 0xcced, 0x3f, 0x101, 0x3, 0x101, 0xfffc, 0x3, 0x8000, 0x800, 0x62, 0x9745, 0x0, 0x9c7, 0x8, 0x0, 0x80, 0x9, 0xfffd, 0x4, 0xfffb, 0x6, 0x1, 0x1ff, 0xfffc, 0x5, 0x0, 0x7, 0x8, 0x2, 0x8, 0x4, 0x3ae4, 0x1, 0xba4, 0x3, 0x3, 0x8001, 0x2, 0x3ff, 0x4, 0x4, 0xffff, 0xff, 0x8, 0x8, 0x2, 0x8], 0x500}}) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x9, 0x80000000}) 20:48:47 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x101601, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080)={0x2, 0x42179289fa111827, 0x4, 0x1, 0x4}) 20:48:47 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0x0, 0x3, 0x5}, 0x3, 0x80000000}) 20:48:47 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) setsockopt$MRT_ASSERT(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000080), 0x4) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) r3 = request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)='#\x00', r2) keyctl$link(0x8, r3, r2) keyctl$get_persistent(0x16, 0xee00, r2) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) (async) setsockopt$MRT_ASSERT(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000080), 0x4) (async) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) (async) request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)='#\x00', r2) (async) keyctl$link(0x8, r3, r2) (async) keyctl$get_persistent(0x16, 0xee00, r2) (async) 20:48:47 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@mcast1}, &(0x7f0000000080)=0x14) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x4e24, 0xa04, 0x4e22, 0x0, 0xa, 0x40, 0x20, 0xff, 0x0, 0xffffffffffffffff}, {0x20d9, 0x7f, 0x6, 0x80000001, 0x7ff, 0x8, 0x1f, 0x9}, {0x4, 0x0, 0x200, 0x2}, 0xe1, 0x6e6bc0, 0x0, 0x1, 0x2, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:47 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000003, 0x0, 0x0, 0x0}}}) 20:48:47 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000080)={0x2, @sliced={0xfff8, [0x7, 0xcced, 0x3f, 0x101, 0x3, 0x101, 0xfffc, 0x3, 0x8000, 0x800, 0x62, 0x9745, 0x0, 0x9c7, 0x8, 0x0, 0x80, 0x9, 0xfffd, 0x4, 0xfffb, 0x6, 0x1, 0x1ff, 0xfffc, 0x5, 0x0, 0x7, 0x8, 0x2, 0x8, 0x4, 0x3ae4, 0x1, 0xba4, 0x3, 0x3, 0x8001, 0x2, 0x3ff, 0x4, 0x4, 0xffff, 0xff, 0x8, 0x8, 0x2, 0x8], 0x500}}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x9, 0x80000000}) [ 1023.656369] Unknown ioctl 1079006226 [ 1023.660076] Unknown ioctl 1079006226 20:48:47 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000003, 0x0, 0x0, 0x0}}}) 20:48:47 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0x0, 0x3, 0x5}, 0x3, 0x80000000}) 20:48:47 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x4e24, 0xa04, 0x4e22, 0x0, 0xa, 0x40, 0x20, 0xff, 0x0, 0xffffffffffffffff}, {0x20d9, 0x7f, 0x6, 0x80000001, 0x7ff, 0x8, 0x1f, 0x9}, {0x4, 0x0, 0x200, 0x2}, 0xe1, 0x6e6bc0, 0x0, 0x1, 0x2, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:47 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$get_persistent(0x16, 0xee00, r3) 20:48:47 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x101601, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080)={0x2, 0x42179289fa111827, 0x4, 0x1, 0x4}) [ 1023.728366] Unknown ioctl -1072409599 20:48:47 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000003, 0x0, 0x0, 0x0}}}) 20:48:47 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x4e24, 0xa04, 0x4e22, 0x0, 0xa, 0x40, 0x20, 0xff, 0x0, 0xffffffffffffffff}, {0x20d9, 0x7f, 0x6, 0x80000001, 0x7ff, 0x8, 0x1f, 0x9}, {0x4, 0x0, 0x200, 0x2}, 0xe1, 0x6e6bc0, 0x0, 0x1, 0x2, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:47 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async, rerun: 32) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (rerun: 32) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000080)={0x2, @sliced={0xfff8, [0x7, 0xcced, 0x3f, 0x101, 0x3, 0x101, 0xfffc, 0x3, 0x8000, 0x800, 0x62, 0x9745, 0x0, 0x9c7, 0x8, 0x0, 0x80, 0x9, 0xfffd, 0x4, 0xfffb, 0x6, 0x1, 0x1ff, 0xfffc, 0x5, 0x0, 0x7, 0x8, 0x2, 0x8, 0x4, 0x3ae4, 0x1, 0xba4, 0x3, 0x3, 0x8001, 0x2, 0x3ff, 0x4, 0x4, 0xffff, 0xff, 0x8, 0x8, 0x2, 0x8], 0x500}}) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x9, 0x80000000}) 20:48:47 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0x0, 0x3, 0x5}, 0x3, 0x80000000}) 20:48:47 executing program 2: socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x4e24, 0xa04, 0x4e22, 0x0, 0xa, 0x40, 0x20, 0xff, 0x0, 0xffffffffffffffff}, {0x20d9, 0x7f, 0x6, 0x80000001, 0x7ff, 0x8, 0x1f, 0x9}, {0x4, 0x0, 0x200, 0x2}, 0xe1, 0x6e6bc0, 0x0, 0x1, 0x2, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:47 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$get_persistent(0x16, 0xee00, r3) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) (async) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000080)={0xffffffffffffffff}) (async) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r1) (async) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r2) (async) keyctl$get_persistent(0x16, 0xee00, r3) (async) 20:48:47 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) [ 1023.808982] Unknown ioctl -1067952625 [ 1023.827363] Unknown ioctl 35296 [ 1023.846039] Unknown ioctl -1072409599 20:48:47 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000140)=0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYRES16=r0, @ANYRES32=0x0, @ANYBLOB="08ea00004b400000"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x81, 0x0) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000600), 0xc442, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000006c0)=@multiplanar_fd={0x3, 0x1, 0x4, 0x70000, 0x3, {r5, r6/1000+10000}, {0x1, 0xc, 0x5, 0x8, 0x17, 0x0, "fb839ce6"}, 0x8, 0x4, {&(0x7f0000000640)=[{0x1, 0x9, {}, 0x2}, {0x6, 0x80000000, {r7}, 0xab98}]}, 0x1}) sendto$inet6(r3, &(0x7f0000000500)="9e7597d085d931e1f684f74de348b3c3025ad9b7f802d80fcd0696", 0x1b, 0x0, &(0x7f0000000540)={0xa, 0x4e22, 0x46, @local, 0x4}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000140)={@private1, 0x0, r8}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xc, 0x5, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @generic={0xdb, 0x5, 0x4, 0x8, 0x54}]}, &(0x7f0000000300)='syzkaller\x00', 0x1c00000, 0xba, &(0x7f0000000340)=""/186, 0x41100, 0x0, '\x00', r8, 0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x4, 0x4, 0x6e}, 0x10, 0xffffffffffffffff}, 0x80) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) 20:48:47 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x1ed4, 0x0, 0x3, {0x2, @pix={0x40, 0x10001, 0x3231564e, 0x6, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4}}, 0x7fffffff}) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x1, 0x8, 0x1, 0x1}, 0x200, 0x2, 'id0\x00', 'timer1\x00', 0x0, 0x10001, 0x1, 0x557b, 0x8000}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) 20:48:47 executing program 5: ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000040)={{0x0, 0x3, 0x5}, 0x3, 0x80000000}) 20:48:47 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 20:48:47 executing program 2: socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x4e24, 0xa04, 0x4e22, 0x0, 0xa, 0x40, 0x20, 0xff, 0x0, 0xffffffffffffffff}, {0x20d9, 0x7f, 0x6, 0x80000001, 0x7ff, 0x8, 0x1f, 0x9}, {0x4, 0x0, 0x200, 0x2}, 0xe1, 0x6e6bc0, 0x0, 0x1, 0x2, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) [ 1023.941576] Unknown ioctl -1067952625 20:48:47 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000140)=0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYRES16=r0, @ANYRES32=0x0, @ANYBLOB="08ea00004b400000"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) (async) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x81, 0x0) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) (async) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000600), 0xc442, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000006c0)=@multiplanar_fd={0x3, 0x1, 0x4, 0x70000, 0x3, {r5, r6/1000+10000}, {0x1, 0xc, 0x5, 0x8, 0x17, 0x0, "fb839ce6"}, 0x8, 0x4, {&(0x7f0000000640)=[{0x1, 0x9, {}, 0x2}, {0x6, 0x80000000, {r7}, 0xab98}]}, 0x1}) (async) sendto$inet6(r3, &(0x7f0000000500)="9e7597d085d931e1f684f74de348b3c3025ad9b7f802d80fcd0696", 0x1b, 0x0, &(0x7f0000000540)={0xa, 0x4e22, 0x46, @local, 0x4}, 0x1c) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000140)={@private1, 0x0, r8}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xc, 0x5, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @generic={0xdb, 0x5, 0x4, 0x8, 0x54}]}, &(0x7f0000000300)='syzkaller\x00', 0x1c00000, 0xba, &(0x7f0000000340)=""/186, 0x41100, 0x0, '\x00', r8, 0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x4, 0x4, 0x6e}, 0x10, 0xffffffffffffffff}, 0x80) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) 20:48:47 executing program 5: ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000040)={{0x0, 0x3, 0x5}, 0x3, 0x80000000}) 20:48:47 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) (async) [ 1023.961772] Unknown ioctl 35296 [ 1023.974906] Unknown ioctl -1067952625 [ 1023.989199] Unknown ioctl -1067952625 [ 1023.990364] Unknown ioctl 35296 [ 1024.003344] Unknown ioctl 35298 [ 1024.007691] Unknown ioctl -1067952625 20:48:47 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$get_persistent(0x16, 0xee00, r3) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) (async) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000080)={0xffffffffffffffff}) (async) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r1) (async) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r2) (async) keyctl$get_persistent(0x16, 0xee00, r3) (async) 20:48:47 executing program 2: socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x4e24, 0xa04, 0x4e22, 0x0, 0xa, 0x40, 0x20, 0xff, 0x0, 0xffffffffffffffff}, {0x20d9, 0x7f, 0x6, 0x80000001, 0x7ff, 0x8, 0x1f, 0x9}, {0x4, 0x0, 0x200, 0x2}, 0xe1, 0x6e6bc0, 0x0, 0x1, 0x2, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:47 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x1ed4, 0x0, 0x3, {0x2, @pix={0x40, 0x10001, 0x3231564e, 0x6, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4}}, 0x7fffffff}) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x1, 0x8, 0x1, 0x1}, 0x200, 0x2, 'id0\x00', 'timer1\x00', 0x0, 0x10001, 0x1, 0x557b, 0x8000}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x1ed4, 0x0, 0x3, {0x2, @pix={0x40, 0x10001, 0x3231564e, 0x6, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4}}, 0x7fffffff}) (async) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x1, 0x8, 0x1, 0x1}, 0x200, 0x2, 'id0\x00', 'timer1\x00', 0x0, 0x10001, 0x1, 0x557b, 0x8000}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) (async) 20:48:47 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000240)={0x0, 0x0, 0x80000001}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000100)=@multiplanar_overlay={0x3, 0x0, 0x4, 0x100, 0x66d, {0x77359400}, {0x2, 0x0, 0x8, 0x9, 0x20, 0x5, "edffa8a4"}, 0x2, 0x3, {&(0x7f0000000080)=[{0x7, 0xfffffffd, {0xd9}, 0x7}, {0x7fffffff, 0x65, {0xffff}, 0x1f}]}, 0x1}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f0000000180)={'icmp6\x00'}, &(0x7f0000000200)=0x1e) [ 1024.020437] Unknown ioctl -1056942500 [ 1024.029363] Unknown ioctl -1057467389 20:48:47 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) 20:48:47 executing program 5: ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000040)={{0x0, 0x3, 0x5}, 0x3, 0x80000000}) 20:48:47 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000140)=0x2) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYRES16=r0, @ANYRES32=0x0, @ANYBLOB="08ea00004b400000"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) (async) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x81, 0x0) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) (async) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000600), 0xc442, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000006c0)=@multiplanar_fd={0x3, 0x1, 0x4, 0x70000, 0x3, {r5, r6/1000+10000}, {0x1, 0xc, 0x5, 0x8, 0x17, 0x0, "fb839ce6"}, 0x8, 0x4, {&(0x7f0000000640)=[{0x1, 0x9, {}, 0x2}, {0x6, 0x80000000, {r7}, 0xab98}]}, 0x1}) (async) sendto$inet6(r3, &(0x7f0000000500)="9e7597d085d931e1f684f74de348b3c3025ad9b7f802d80fcd0696", 0x1b, 0x0, &(0x7f0000000540)={0xa, 0x4e22, 0x46, @local, 0x4}, 0x1c) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000140)={@private1, 0x0, r8}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xc, 0x5, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @generic={0xdb, 0x5, 0x4, 0x8, 0x54}]}, &(0x7f0000000300)='syzkaller\x00', 0x1c00000, 0xba, &(0x7f0000000340)=""/186, 0x41100, 0x0, '\x00', r8, 0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x4, 0x4, 0x6e}, 0x10, 0xffffffffffffffff}, 0x80) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) [ 1024.083500] Unknown ioctl 35298 [ 1024.088727] Unknown ioctl -1067952625 [ 1024.089415] Unknown ioctl -1067952625 [ 1024.093718] Unknown ioctl -1067952625 [ 1024.098642] Unknown ioctl 35296 20:48:47 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00'}) keyctl$get_persistent(0x16, 0xee00, r2) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/115, 0x73, 0x0, &(0x7f0000000240)=""/28, 0x1c}, &(0x7f00000003c0)=0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000001180)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001140)={&(0x7f0000000e00)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r4) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$get_persistent(0x16, 0x0, r3) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, r2) r6 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r6) keyctl$get_persistent(0x16, 0x0, r6) keyctl$KEYCTL_MOVE(0x1e, r3, r5, r6, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)) 20:48:47 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0x0, 0x3, 0x5}, 0x3, 0x80000000}) 20:48:47 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) [ 1024.131472] Unknown ioctl -1056942500 [ 1024.143998] Unknown ioctl -1057467389 [ 1024.154480] Unknown ioctl -1067952625 [ 1024.164147] Unknown ioctl -1057467389 [ 1024.166766] Unknown ioctl -1067952625 [ 1024.173001] Unknown ioctl -1056942500 [ 1024.175942] Unknown ioctl 1079006226 20:48:47 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffc, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}, 0x40000}) 20:48:47 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000240)={0x0, 0x0, 0x80000001}) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000100)=@multiplanar_overlay={0x3, 0x0, 0x4, 0x100, 0x66d, {0x77359400}, {0x2, 0x0, 0x8, 0x9, 0x20, 0x5, "edffa8a4"}, 0x2, 0x3, {&(0x7f0000000080)=[{0x7, 0xfffffffd, {0xd9}, 0x7}, {0x7fffffff, 0x65, {0xffff}, 0x1f}]}, 0x1}) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) (async) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f0000000180)={'icmp6\x00'}, &(0x7f0000000200)=0x1e) 20:48:47 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x1ed4, 0x0, 0x3, {0x2, @pix={0x40, 0x10001, 0x3231564e, 0x6, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4}}, 0x7fffffff}) (async) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x1, 0x8, 0x1, 0x1}, 0x200, 0x2, 'id0\x00', 'timer1\x00', 0x0, 0x10001, 0x1, 0x557b, 0x8000}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) 20:48:47 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) 20:48:47 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00'}) keyctl$get_persistent(0x16, 0xee00, r2) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/115, 0x73, 0x0, &(0x7f0000000240)=""/28, 0x1c}, &(0x7f00000003c0)=0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000001180)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001140)={&(0x7f0000000e00)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r4) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$get_persistent(0x16, 0x0, r3) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, r2) r6 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r6) keyctl$get_persistent(0x16, 0x0, r6) keyctl$KEYCTL_MOVE(0x1e, r3, r5, r6, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) (async) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) (async) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00'}) (async) keyctl$get_persistent(0x16, 0xee00, r2) (async) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/115, 0x73, 0x0, &(0x7f0000000240)=""/28, 0x1c}, &(0x7f00000003c0)=0x40) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000001180)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001140)={&(0x7f0000000e00)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r4) (async) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r3) (async) keyctl$get_persistent(0x16, 0x0, r3) (async) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, r2) (async) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r6) (async) keyctl$get_persistent(0x16, 0x0, r6) (async) keyctl$KEYCTL_MOVE(0x1e, r3, r5, r6, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)) (async) 20:48:47 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0x0, 0x3, 0x5}, 0x3, 0x80000000}) [ 1024.177558] Unknown ioctl -1067952625 [ 1024.193791] Unknown ioctl 35298 20:48:47 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffc, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}, 0x40000}) 20:48:47 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0xa04, 0x4e22, 0x0, 0xa, 0x40, 0x20, 0xff, 0x0, 0xffffffffffffffff}, {0x20d9, 0x7f, 0x6, 0x80000001, 0x7ff, 0x8, 0x1f, 0x9}, {0x4, 0x0, 0x200, 0x2}, 0xe1, 0x6e6bc0, 0x0, 0x1, 0x2, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:47 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0x0, 0x3, 0x5}, 0x3, 0x80000000}) 20:48:47 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000240)={0x0, 0x0, 0x80000001}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000100)=@multiplanar_overlay={0x3, 0x0, 0x4, 0x100, 0x66d, {0x77359400}, {0x2, 0x0, 0x8, 0x9, 0x20, 0x5, "edffa8a4"}, 0x2, 0x3, {&(0x7f0000000080)=[{0x7, 0xfffffffd, {0xd9}, 0x7}, {0x7fffffff, 0x65, {0xffff}, 0x1f}]}, 0x1}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f0000000180)={'icmp6\x00'}, &(0x7f0000000200)=0x1e) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000240)={0x0, 0x0, 0x80000001}) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000100)=@multiplanar_overlay={0x3, 0x0, 0x4, 0x100, 0x66d, {0x77359400}, {0x2, 0x0, 0x8, 0x9, 0x20, 0x5, "edffa8a4"}, 0x2, 0x3, {&(0x7f0000000080)=[{0x7, 0xfffffffd, {0xd9}, 0x7}, {0x7fffffff, 0x65, {0xffff}, 0x1f}]}, 0x1}) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) (async) socket$inet6_dccp(0xa, 0x6, 0x0) (async) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f0000000180)={'icmp6\x00'}, &(0x7f0000000200)=0x1e) (async) 20:48:47 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x4e22, 0x0, 0xa, 0x40, 0x20, 0xff, 0x0, 0xffffffffffffffff}, {0x20d9, 0x7f, 0x6, 0x80000001, 0x7ff, 0x8, 0x1f, 0x9}, {0x4, 0x0, 0x200, 0x2}, 0xe1, 0x6e6bc0, 0x0, 0x1, 0x2, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) [ 1024.253272] Unknown ioctl 35298 [ 1024.259835] Unknown ioctl -1067952625 [ 1024.278054] Unknown ioctl -1056942500 [ 1024.279150] Unknown ioctl -1057467389 [ 1024.285310] Unknown ioctl -1067952625 [ 1024.290118] Unknown ioctl 1079006226 20:48:47 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00'}) keyctl$get_persistent(0x16, 0xee00, r2) (async) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/115, 0x73, 0x0, &(0x7f0000000240)=""/28, 0x1c}, &(0x7f00000003c0)=0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000001180)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001140)={&(0x7f0000000e00)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r4) (async) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$get_persistent(0x16, 0x0, r3) (async) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, r2) r6 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r6) (async) keyctl$get_persistent(0x16, 0x0, r6) (async) keyctl$KEYCTL_MOVE(0x1e, r3, r5, r6, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)) 20:48:47 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 20:48:47 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x20, 0xff, 0x0, 0xffffffffffffffff}, {0x20d9, 0x7f, 0x6, 0x80000001, 0x7ff, 0x8, 0x1f, 0x9}, {0x4, 0x0, 0x200, 0x2}, 0xe1, 0x6e6bc0, 0x0, 0x1, 0x2, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:47 executing program 5: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000040)={{0x0, 0x3, 0x5}, 0x3, 0x80000000}) 20:48:47 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffc, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}, 0x40000}) [ 1024.366572] Unknown ioctl -1067952625 20:48:47 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async) 20:48:47 executing program 5: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000040)={{0x0, 0x3, 0x5}, 0x3, 0x80000000}) [ 1024.392487] Unknown ioctl 1079006226 20:48:47 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000140)={@private1, 0x0, r2}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r2, 0x25, 0xa}, 0x10) r3 = socket(0x2, 0xa, 0x6b) setsockopt$MRT_DEL_MFC(r3, 0x0, 0xcd, &(0x7f0000000280)={@multicast2, @multicast1, 0x0, "3c9ac01c3d2a3abc73271ec088740aa8e90d88bd1f06d40344dbc9f4f7258ff1", 0x8, 0x9, 0xbef, 0x200}, 0x3c) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x6, 0x20002000, 0x0, 0x0, 0x0}}}) 20:48:47 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x12a80, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r1, 0x80044dfb, &(0x7f0000000100)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, &(0x7f0000000040)) 20:48:47 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x20, 0xff, 0x0, 0xffffffffffffffff}, {0x20d9, 0x7f, 0x6, 0x80000001, 0x7ff, 0x8, 0x1f, 0x9}, {0x4, 0x0, 0x200, 0x2}, 0xe1, 0x6e6bc0, 0x0, 0x1, 0x2, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:47 executing program 5: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000040)={{0x0, 0x3, 0x5}, 0x3, 0x80000000}) 20:48:47 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) r3 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='syzkaller\x00', &(0x7f00000000c0)={'syz', 0x1}, r3) 20:48:47 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async) 20:48:47 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x20, 0xff, 0x0, 0xffffffffffffffff}, {0x20d9, 0x7f, 0x6, 0x80000001, 0x7ff, 0x8, 0x1f, 0x9}, {0x4, 0x0, 0x200, 0x2}, 0xe1, 0x6e6bc0, 0x0, 0x1, 0x2, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:47 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, 0x0) 20:48:47 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000140)={@private1, 0x0, r2}) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r2, 0x25, 0xa}, 0x10) (async) r3 = socket(0x2, 0xa, 0x6b) setsockopt$MRT_DEL_MFC(r3, 0x0, 0xcd, &(0x7f0000000280)={@multicast2, @multicast1, 0x0, "3c9ac01c3d2a3abc73271ec088740aa8e90d88bd1f06d40344dbc9f4f7258ff1", 0x8, 0x9, 0xbef, 0x200}, 0x3c) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x6, 0x20002000, 0x0, 0x0, 0x0}}}) 20:48:47 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 20:48:47 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) (async) r3 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='syzkaller\x00', &(0x7f00000000c0)={'syz', 0x1}, r3) 20:48:47 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x20, 0xff, 0x0, 0xffffffffffffffff}, {0x20d9, 0x7f, 0x6, 0x80000001, 0x7ff, 0x8, 0x1f, 0x9}, {0x4, 0x0, 0x200, 0x2}, 0xe1, 0x6e6bc0, 0x0, 0x1, 0x2, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) [ 1024.522142] Unknown ioctl -1067952625 20:48:47 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, 0x0) [ 1024.550276] Unknown ioctl -2141694956 20:48:47 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) r3 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='syzkaller\x00', &(0x7f00000000c0)={'syz', 0x1}, r3) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) (async) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) (async) keyctl$get_persistent(0x16, 0xee00, r2) (async) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r0) (async) keyctl$search(0xa, r0, &(0x7f0000000080)='syzkaller\x00', &(0x7f00000000c0)={'syz', 0x1}, r3) (async) 20:48:47 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x12a80, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r1, 0x80044dfb, &(0x7f0000000100)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, &(0x7f0000000040)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x12a80, 0x0) (async) ioctl$SOUND_MIXER_READ_STEREODEVS(r1, 0x80044dfb, &(0x7f0000000100)) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, &(0x7f0000000040)) (async) 20:48:47 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0xff, 0x0, 0xffffffffffffffff}, {0x20d9, 0x7f, 0x6, 0x80000001, 0x7ff, 0x8, 0x1f, 0x9}, {0x4, 0x0, 0x200, 0x2}, 0xe1, 0x6e6bc0, 0x0, 0x1, 0x2, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:48 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000140)={@private1, 0x0, r2}) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r2, 0x25, 0xa}, 0x10) (async) r3 = socket(0x2, 0xa, 0x6b) setsockopt$MRT_DEL_MFC(r3, 0x0, 0xcd, &(0x7f0000000280)={@multicast2, @multicast1, 0x0, "3c9ac01c3d2a3abc73271ec088740aa8e90d88bd1f06d40344dbc9f4f7258ff1", 0x8, 0x9, 0xbef, 0x200}, 0x3c) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x6, 0x20002000, 0x0, 0x0, 0x0}}}) 20:48:48 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, 0x0) 20:48:48 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 20:48:48 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff}, {0x20d9, 0x7f, 0x6, 0x80000001, 0x7ff, 0x8, 0x1f, 0x9}, {0x4, 0x0, 0x200, 0x2}, 0xe1, 0x6e6bc0, 0x0, 0x1, 0x2, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:48 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$get_persistent(0x16, 0x0, r3) r4 = request_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000200)='syz', r0) keyctl$negate(0xd, r3, 0xfff, r4) 20:48:48 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{0x0, 0x1}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) 20:48:48 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async) 20:48:48 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$get_persistent(0x16, 0x0, r3) r4 = request_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000200)='syz', r0) keyctl$negate(0xd, r3, 0xfff, r4) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) (async) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) (async) keyctl$get_persistent(0x16, 0xee00, r2) (async) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r3) (async) keyctl$get_persistent(0x16, 0x0, r3) (async) request_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000200)='syz', r0) (async) keyctl$negate(0xd, r3, 0xfff, r4) (async) 20:48:48 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x20d9, 0x7f, 0x6, 0x80000001, 0x7ff, 0x8, 0x1f, 0x9}, {0x4, 0x0, 0x200, 0x2}, 0xe1, 0x6e6bc0, 0x0, 0x1, 0x2, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:48 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0x0, 0x0, 0x5}, 0x3, 0x80000000}) 20:48:48 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x12a80, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r1, 0x80044dfb, &(0x7f0000000100)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, &(0x7f0000000040)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x12a80, 0x0) (async) ioctl$SOUND_MIXER_READ_STEREODEVS(r1, 0x80044dfb, &(0x7f0000000100)) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, &(0x7f0000000040)) (async) [ 1024.662491] Unknown ioctl -1067952625 [ 1024.673328] Unknown ioctl -2141694956 [ 1024.693214] Unknown ioctl -1067952625 20:48:48 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{0x0, 0x1}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) 20:48:48 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7f, 0x6, 0x80000001, 0x7ff, 0x8, 0x1f, 0x9}, {0x4, 0x0, 0x200, 0x2}, 0xe1, 0x6e6bc0, 0x0, 0x1, 0x2, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:48 executing program 1: r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x12c, r0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0xb8, 0x8, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x663, @remote, 0x10001}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010102}}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xffffff7c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xd1}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @broadcast}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000040) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x74980) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0) 20:48:48 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{}, 0x3, 0x80000000}) 20:48:48 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$get_persistent(0x16, 0x0, r3) r4 = request_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000200)='syz', r0) keyctl$negate(0xd, r3, 0xfff, r4) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) (async) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) (async) keyctl$get_persistent(0x16, 0xee00, r2) (async) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r3) (async) keyctl$get_persistent(0x16, 0x0, r3) (async) request_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000200)='syz', r0) (async) keyctl$negate(0xd, r3, 0xfff, r4) (async) 20:48:48 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{0x0, 0x1}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{0x0, 0x1}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) (async) 20:48:48 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{}, 0x0, 0x80000000}) 20:48:48 executing program 1: r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x12c, r0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0xb8, 0x8, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x663, @remote, 0x10001}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010102}}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xffffff7c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xd1}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @broadcast}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000040) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x74980) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0) 20:48:48 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x6, 0x80000001, 0x7ff, 0x8, 0x1f, 0x9}, {0x4, 0x0, 0x200, 0x2}, 0xe1, 0x6e6bc0, 0x0, 0x1, 0x2, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:48 executing program 3: setsockopt$MRT_DEL_MFC(0xffffffffffffffff, 0x0, 0xcd, &(0x7f0000000040)={@multicast2, @remote, 0x0, "f4df4bda017500ec0b37559238358f4f4108ae79ca0e0108b008edb6976fb6fe", 0x5a13, 0x77af, 0x5, 0x1}, 0x3c) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) 20:48:48 executing program 4: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) [ 1024.785200] Unknown ioctl -1067952625 [ 1024.800338] Unknown ioctl -2141694956 [ 1024.818823] Unknown ioctl -1067952625 20:48:48 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)) 20:48:48 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x80000001, 0x7ff, 0x8, 0x1f, 0x9}, {0x4, 0x0, 0x200, 0x2}, 0xe1, 0x6e6bc0, 0x0, 0x1, 0x2, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:48 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000080)=@multiplanar_mmap={0x80, 0x1, 0x4, 0x0, 0x9, {0x0, 0x2710}, {0x4, 0x0, 0xc0, 0x26, 0x5, 0x4, "abf08097"}, 0x7ff, 0x1, {&(0x7f0000000000)=[{0x6, 0x0, {0x6}, 0x7ff}, {0x8, 0x7, {0x8}, 0x7}]}, 0x7}) 20:48:48 executing program 1: r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x12c, r0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0xb8, 0x8, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x663, @remote, 0x10001}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010102}}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xffffff7c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xd1}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @broadcast}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000040) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x74980) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0) 20:48:48 executing program 3: setsockopt$MRT_DEL_MFC(0xffffffffffffffff, 0x0, 0xcd, &(0x7f0000000040)={@multicast2, @remote, 0x0, "f4df4bda017500ec0b37559238358f4f4108ae79ca0e0108b008edb6976fb6fe", 0x5a13, 0x77af, 0x5, 0x1}, 0x3c) (async) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) 20:48:48 executing program 4: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) 20:48:48 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000080)=@multiplanar_mmap={0x80, 0x1, 0x4, 0x0, 0x9, {0x0, 0x2710}, {0x4, 0x0, 0xc0, 0x26, 0x5, 0x4, "abf08097"}, 0x7ff, 0x1, {&(0x7f0000000000)=[{0x6, 0x0, {0x6}, 0x7ff}, {0x8, 0x7, {0x8}, 0x7}]}, 0x7}) 20:48:48 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x7ff, 0x8, 0x1f, 0x9}, {0x4, 0x0, 0x200, 0x2}, 0xe1, 0x6e6bc0, 0x0, 0x1, 0x2, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:48 executing program 3: setsockopt$MRT_DEL_MFC(0xffffffffffffffff, 0x0, 0xcd, &(0x7f0000000040)={@multicast2, @remote, 0x0, "f4df4bda017500ec0b37559238358f4f4108ae79ca0e0108b008edb6976fb6fe", 0x5a13, 0x77af, 0x5, 0x1}, 0x3c) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) setsockopt$MRT_DEL_MFC(0xffffffffffffffff, 0x0, 0xcd, &(0x7f0000000040)={@multicast2, @remote, 0x0, "f4df4bda017500ec0b37559238358f4f4108ae79ca0e0108b008edb6976fb6fe", 0x5a13, 0x77af, 0x5, 0x1}, 0x3c) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) (async) 20:48:48 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000080)=@multiplanar_mmap={0x80, 0x1, 0x4, 0x0, 0x9, {0x0, 0x2710}, {0x4, 0x0, 0xc0, 0x26, 0x5, 0x4, "abf08097"}, 0x7ff, 0x1, {&(0x7f0000000000)=[{0x6, 0x0, {0x6}, 0x7ff}, {0x8, 0x7, {0x8}, 0x7}]}, 0x7}) 20:48:48 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) socket$inet6(0xa, 0x2, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in=@multicast1, @in=@private}}, {{@in6=@private0}, 0x0, @in6=@loopback}}, &(0x7f0000000040)=0xe8) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000680), r0) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000140)={@private1, 0x0, r4}) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f00000006c0), 0x70000, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000700)={'wg2\x00', 0x0}) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000140)={@private1, 0x0, r8}) r9 = syz_open_procfs$userns(0x0, &(0x7f0000000740)) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000840)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x68, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010102}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_LINK={0x8, 0x1, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_O_TEI={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x840) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) r10 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r10, &(0x7f0000000640)={&(0x7f00000001c0)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f00000002c0)=""/50, 0x32}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/236, 0xec}, {&(0x7f0000000440)=""/36, 0x24}, {&(0x7f0000000480)=""/91, 0x5b}, {&(0x7f0000000500)=""/160, 0xa0}], 0x7}, 0x1) 20:48:48 executing program 4: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) 20:48:48 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1f, 0x9}, {0x4, 0x0, 0x200, 0x2}, 0xe1, 0x6e6bc0, 0x0, 0x1, 0x2, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:48 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000080)=@multiplanar_mmap={0x80, 0x1, 0x4, 0x0, 0x9, {0x0, 0x2710}, {0x4, 0x0, 0xc0, 0x26, 0x5, 0x4, "abf08097"}, 0x7ff, 0x1, {&(0x7f0000000000)=[{0x6, 0x0, {0x6}, 0x7ff}, {0x8, 0x7, {0x8}, 0x7}]}, 0x7}) 20:48:48 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x181402) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x540c1) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)) 20:48:48 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000080)=@multiplanar_mmap={0x80, 0x1, 0x4, 0x0, 0x9, {0x0, 0x2710}, {0x4, 0x0, 0xc0, 0x26, 0x5, 0x4, "abf08097"}, 0x7ff, 0x1, {&(0x7f0000000000)=[{0x6, 0x0, {0x6}, 0x7ff}, {0x8, 0x7, {0x8}, 0x7}]}, 0x7}) 20:48:48 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x9}, {0x4, 0x0, 0x200, 0x2}, 0xe1, 0x6e6bc0, 0x0, 0x1, 0x2, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) [ 1025.054596] Unknown ioctl -1067952625 20:48:48 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000400)={0xf867a435, 0x3, 0x0, "fbe0e3d1ae071f9795d3594b43a61c2ace1354abfc486d373494a5371fc1795a", 0x3231564e}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffff, 0x4, {0x1, @win={{0x0, 0x1, 0x0, 0x1}, 0x6, 0x20000000, 0x0, 0x8, 0x0}}, 0x4}) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3e, &(0x7f0000000100), &(0x7f0000000140)=0x4) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x12401, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000300)={0x1, @raw_data="9624d736383eb362983bcefba82f1ec4548c55cf264948d9a9e6502995fb0ffc90e2231a334b2b384743f516f6ddc77eca77ac2a8134055a40f0760267d55a59ad87421ba0e9d88dfc029a422cdae6c09d15b1df60e32988ae91128937b60f10bf37553c5dbe7d3272a4ac916d6888fa2734057337a90581c40562065a266c441993d58ba9b3834b2a0c8acfd4e9fb648fd0db9530ba81583b3ea72b7fa48b97faca1aff7a239752faf9c10b50e11cb2f79f846bf9d72aa93699059d7c7083eacf5fb564ac25d06a"}) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000000)={0x1, @vbi={0xfffffb01, 0x4, 0x3ff, 0x34324142, [0x1, 0x3], [0x10000, 0x10000], 0x1}}) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000480)={0x2, 0x8, 0x5e1f, 0x80}) 20:48:48 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, r1) r3 = request_key(&(0x7f0000000080)='blacklist\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000200)='keyring\x00', 0xfffffffffffffffa) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$get_persistent(0x16, 0x0, r4) r5 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$search(0xa, r4, &(0x7f0000000440)='user\x00', &(0x7f0000000480)={'syz', 0x3}, r5) add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000340)="de7ae8c630b6dbf5efa6becfc1158595a9901cc4de265768c57ed5cb363aa10fa0962195d91ac172b2a1e6ae485dc1d279a77127cb65bcd57f165b779f5a60bbc13f95a24829c5bef77d623f4cb622ec95c112b7a8e5b1db2c9509", 0x5b, r3) keyctl$negate(0xd, r2, 0x1, r3) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000003c0)={{0x2, 0x0, 0x3ff, 0xe3e579b46a570392, 0x1}, 0x100000001, 0x9, 0x9}) keyctl$get_persistent(0x16, 0xee00, r2) 20:48:48 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x181402) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x540c1) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)) 20:48:48 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x4, 0x0, 0x200, 0x2}, 0xe1, 0x6e6bc0, 0x0, 0x1, 0x2, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:48 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000080)=@multiplanar_mmap={0x80, 0x1, 0x4, 0x0, 0x9, {0x0, 0x2710}, {0x4, 0x0, 0xc0, 0x26, 0x5, 0x4, "abf08097"}, 0x7ff, 0x1, {&(0x7f0000000000)=[{0x6, 0x0, {0x6}, 0x7ff}, {0x8, 0x7, {0x8}, 0x7}]}, 0x7}) [ 1025.121898] Unknown ioctl 35123 [ 1025.126861] Unknown ioctl 1079006226 [ 1025.154049] Unknown ioctl -1069525488 20:48:49 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) socket$inet6(0xa, 0x2, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in=@multicast1, @in=@private}}, {{@in6=@private0}, 0x0, @in6=@loopback}}, &(0x7f0000000040)=0xe8) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000680), r0) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000140)={@private1, 0x0, r4}) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f00000006c0), 0x70000, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000700)={'wg2\x00', 0x0}) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000140)={@private1, 0x0, r8}) r9 = syz_open_procfs$userns(0x0, &(0x7f0000000740)) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000840)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x68, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010102}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_LINK={0x8, 0x1, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_O_TEI={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x840) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) r10 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r10, &(0x7f0000000640)={&(0x7f00000001c0)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f00000002c0)=""/50, 0x32}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/236, 0xec}, {&(0x7f0000000440)=""/36, 0x24}, {&(0x7f0000000480)=""/91, 0x5b}, {&(0x7f0000000500)=""/160, 0xa0}], 0x7}, 0x1) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) (async) socket$inet6(0xa, 0x2, 0x2) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in=@multicast1, @in=@private}}, {{@in6=@private0}, 0x0, @in6=@loopback}}, &(0x7f0000000040)=0xe8) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000680), r0) (async) socket$inet6_dccp(0xa, 0x6, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)) (async) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000140)={@private1, 0x0, r4}) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000006c0), 0x70000, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000700)={'wg2\x00'}) (async) socket$inet6_dccp(0xa, 0x6, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000100)) (async) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000140)={@private1, 0x0, r8}) (async) syz_open_procfs$userns(0x0, &(0x7f0000000740)) (async) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000840)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x68, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010102}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_LINK={0x8, 0x1, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_O_TEI={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x840) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) (async) recvmsg$kcm(r10, &(0x7f0000000640)={&(0x7f00000001c0)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f00000002c0)=""/50, 0x32}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/236, 0xec}, {&(0x7f0000000440)=""/36, 0x24}, {&(0x7f0000000480)=""/91, 0x5b}, {&(0x7f0000000500)=""/160, 0xa0}], 0x7}, 0x1) (async) 20:48:49 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000400)={0xf867a435, 0x3, 0x0, "fbe0e3d1ae071f9795d3594b43a61c2ace1354abfc486d373494a5371fc1795a", 0x3231564e}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffff, 0x4, {0x1, @win={{0x0, 0x1, 0x0, 0x1}, 0x6, 0x20000000, 0x0, 0x8, 0x0}}, 0x4}) (async) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3e, &(0x7f0000000100), &(0x7f0000000140)=0x4) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x12401, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000300)={0x1, @raw_data="9624d736383eb362983bcefba82f1ec4548c55cf264948d9a9e6502995fb0ffc90e2231a334b2b384743f516f6ddc77eca77ac2a8134055a40f0760267d55a59ad87421ba0e9d88dfc029a422cdae6c09d15b1df60e32988ae91128937b60f10bf37553c5dbe7d3272a4ac916d6888fa2734057337a90581c40562065a266c441993d58ba9b3834b2a0c8acfd4e9fb648fd0db9530ba81583b3ea72b7fa48b97faca1aff7a239752faf9c10b50e11cb2f79f846bf9d72aa93699059d7c7083eacf5fb564ac25d06a"}) (async) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) (async) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000000)={0x1, @vbi={0xfffffb01, 0x4, 0x3ff, 0x34324142, [0x1, 0x3], [0x10000, 0x10000], 0x1}}) (async) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000480)={0x2, 0x8, 0x5e1f, 0x80}) 20:48:49 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x181402) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x540c1) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x181402) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x540c1) (async) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)) (async) 20:48:49 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x4, 0x0, 0x200, 0x2}, 0xe1, 0x6e6bc0, 0x0, 0x1, 0x2, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:49 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) (async) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, r1) (async) r3 = request_key(&(0x7f0000000080)='blacklist\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000200)='keyring\x00', 0xfffffffffffffffa) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r4) (async) keyctl$get_persistent(0x16, 0x0, r4) r5 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$search(0xa, r4, &(0x7f0000000440)='user\x00', &(0x7f0000000480)={'syz', 0x3}, r5) (async) add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000340)="de7ae8c630b6dbf5efa6becfc1158595a9901cc4de265768c57ed5cb363aa10fa0962195d91ac172b2a1e6ae485dc1d279a77127cb65bcd57f165b779f5a60bbc13f95a24829c5bef77d623f4cb622ec95c112b7a8e5b1db2c9509", 0x5b, r3) keyctl$negate(0xd, r2, 0x1, r3) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000003c0)={{0x2, 0x0, 0x3ff, 0xe3e579b46a570392, 0x1}, 0x100000001, 0x9, 0x9}) (async) keyctl$get_persistent(0x16, 0xee00, r2) 20:48:49 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000080)=@multiplanar_mmap={0x80, 0x1, 0x4, 0x0, 0x9, {0x0, 0x2710}, {0x4, 0x0, 0xc0, 0x26, 0x5, 0x4, "abf08097"}, 0x7ff, 0x1, {&(0x7f0000000000)=[{0x6, 0x0, {0x6}, 0x7ff}, {0x8, 0x7, {0x8}, 0x7}]}, 0x7}) 20:48:49 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x0, 0x0, 0x200, 0x2}, 0xe1, 0x6e6bc0, 0x0, 0x1, 0x2, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:49 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x200201) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f00000000c0)=""/66) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x7fff, 0x3, 0x3, "27ca12c4145cd26e3575e675510e74e914ee3f1cb7f29881ac21b9560fe371fa", 0x32315258}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) 20:48:49 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000080)=@multiplanar_mmap={0x80, 0x1, 0x4, 0x0, 0x9, {0x0, 0x2710}, {0x4, 0x0, 0xc0, 0x26, 0x5, 0x4, "abf08097"}, 0x7ff, 0x1, {&(0x7f0000000000)=[{0x6, 0x0, {0x6}, 0x7ff}, {0x8, 0x7, {0x8}, 0x7}]}, 0x7}) 20:48:49 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, r1) r3 = request_key(&(0x7f0000000080)='blacklist\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000200)='keyring\x00', 0xfffffffffffffffa) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$get_persistent(0x16, 0x0, r4) r5 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$search(0xa, r4, &(0x7f0000000440)='user\x00', &(0x7f0000000480)={'syz', 0x3}, r5) add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000340)="de7ae8c630b6dbf5efa6becfc1158595a9901cc4de265768c57ed5cb363aa10fa0962195d91ac172b2a1e6ae485dc1d279a77127cb65bcd57f165b779f5a60bbc13f95a24829c5bef77d623f4cb622ec95c112b7a8e5b1db2c9509", 0x5b, r3) keyctl$negate(0xd, r2, 0x1, r3) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000003c0)={{0x2, 0x0, 0x3ff, 0xe3e579b46a570392, 0x1}, 0x100000001, 0x9, 0x9}) keyctl$get_persistent(0x16, 0xee00, r2) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) (async) add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r0) (async) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, r1) (async) request_key(&(0x7f0000000080)='blacklist\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000200)='keyring\x00', 0xfffffffffffffffa) (async) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r4) (async) keyctl$get_persistent(0x16, 0x0, r4) (async) add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) (async) keyctl$search(0xa, r4, &(0x7f0000000440)='user\x00', &(0x7f0000000480)={'syz', 0x3}, r5) (async) add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000340)="de7ae8c630b6dbf5efa6becfc1158595a9901cc4de265768c57ed5cb363aa10fa0962195d91ac172b2a1e6ae485dc1d279a77127cb65bcd57f165b779f5a60bbc13f95a24829c5bef77d623f4cb622ec95c112b7a8e5b1db2c9509", 0x5b, r3) (async) keyctl$negate(0xd, r2, 0x1, r3) (async) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000003c0)={{0x2, 0x0, 0x3ff, 0xe3e579b46a570392, 0x1}, 0x100000001, 0x9, 0x9}) (async) keyctl$get_persistent(0x16, 0xee00, r2) (async) 20:48:49 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async, rerun: 32) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (rerun: 32) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000400)={0xf867a435, 0x3, 0x0, "fbe0e3d1ae071f9795d3594b43a61c2ace1354abfc486d373494a5371fc1795a", 0x3231564e}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffff, 0x4, {0x1, @win={{0x0, 0x1, 0x0, 0x1}, 0x6, 0x20000000, 0x0, 0x8, 0x0}}, 0x4}) (async) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3e, &(0x7f0000000100), &(0x7f0000000140)=0x4) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x12401, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000300)={0x1, @raw_data="9624d736383eb362983bcefba82f1ec4548c55cf264948d9a9e6502995fb0ffc90e2231a334b2b384743f516f6ddc77eca77ac2a8134055a40f0760267d55a59ad87421ba0e9d88dfc029a422cdae6c09d15b1df60e32988ae91128937b60f10bf37553c5dbe7d3272a4ac916d6888fa2734057337a90581c40562065a266c441993d58ba9b3834b2a0c8acfd4e9fb648fd0db9530ba81583b3ea72b7fa48b97faca1aff7a239752faf9c10b50e11cb2f79f846bf9d72aa93699059d7c7083eacf5fb564ac25d06a"}) (async) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) (async, rerun: 64) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000000)={0x1, @vbi={0xfffffb01, 0x4, 0x3ff, 0x34324142, [0x1, 0x3], [0x10000, 0x10000], 0x1}}) (rerun: 64) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000480)={0x2, 0x8, 0x5e1f, 0x80}) 20:48:49 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x0, 0x0, 0x0, 0x2}, 0xe1, 0x6e6bc0, 0x0, 0x1, 0x2, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) [ 1025.936799] Unknown ioctl -1067952625 [ 1025.951235] Unknown ioctl -1069525488 [ 1025.999097] Unknown ioctl 35123 [ 1026.011886] Unknown ioctl 1079006226 [ 1026.045700] Unknown ioctl -1069525488 20:48:49 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) (async) socket$inet6(0xa, 0x2, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in=@multicast1, @in=@private}}, {{@in6=@private0}, 0x0, @in6=@loopback}}, &(0x7f0000000040)=0xe8) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000680), r0) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000140)={@private1, 0x0, r4}) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f00000006c0), 0x70000, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000700)={'wg2\x00', 0x0}) (async) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000140)={@private1, 0x0, r8}) (async) r9 = syz_open_procfs$userns(0x0, &(0x7f0000000740)) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000840)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x68, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010102}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_LINK={0x8, 0x1, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_O_TEI={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x840) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async) r10 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r10, &(0x7f0000000640)={&(0x7f00000001c0)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f00000002c0)=""/50, 0x32}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/236, 0xec}, {&(0x7f0000000440)=""/36, 0x24}, {&(0x7f0000000480)=""/91, 0x5b}, {&(0x7f0000000500)=""/160, 0xa0}], 0x7}, 0x1) 20:48:49 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x200201) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f00000000c0)=""/66) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x7fff, 0x3, 0x3, "27ca12c4145cd26e3575e675510e74e914ee3f1cb7f29881ac21b9560fe371fa", 0x32315258}) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) 20:48:49 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000080)=@multiplanar_mmap={0x80, 0x1, 0x4, 0x0, 0x9, {0x0, 0x2710}, {0x4, 0x0, 0xc0, 0x26, 0x5, 0x4, "abf08097"}, 0x7ff, 0x1, {&(0x7f0000000000)=[{0x6, 0x0, {0x6}, 0x7ff}, {0x8, 0x7, {0x8}, 0x7}]}, 0x7}) 20:48:49 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = request_key(&(0x7f0000000740)='.dead\x00', &(0x7f0000000780)={'syz', 0x1}, &(0x7f00000007c0)='id_legacy\x00', r0) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r3) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, r2) keyctl$reject(0x13, 0x0, 0x0, 0x9, r4) add_key$user(&(0x7f0000000880), &(0x7f00000008c0)={'syz', 0x2}, &(0x7f0000000900)="fe2ed3607122f4ad041b9ad632900bb85053a9eb468922560fbe44ce2bbd6b740ea7b9150a62df160a11505a1d4c6d8d14bfcca104886263903f401367b372c4690e8dd04eb927b0ae2464d7a397a61c066690c3d605befa0bad001d9da461e04d7c4cd35459dc103f99264f51fef40d27e3e3721aa60e8d89490c55121ef4d863fea4525e4e8a53c46e70e642cd04412a996706f7df976503ad86", 0x9b, 0x0) keyctl$get_persistent(0x16, 0x0, r4) r5 = request_key(&(0x7f0000000ac0)='dns_resolver\x00', &(0x7f0000000b00)={'syz', 0x1}, &(0x7f0000000b40)='keyring\x00', r4) keyctl$search(0xa, 0x0, 0x0, &(0x7f0000000a80)={'syz', 0x0}, r5) r6 = request_key(&(0x7f0000000080)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000200)=':@@\x00', r1) r7 = add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="42e7b9c97c50ca13ee8bdf177a568fa924af84330bd557dc63d85533fe5b3643987326588975cba84ae9bb2acb18a6ee855ddb8d2538ab0be0fd6ec8db6f27da7abdc1bd82a845b4cfe7e8e4616e5168392529e2ad77b454ed9bcc7a727e8dba9b4077b46de758a92daf9628b29eac6e531226", 0x73, r1) r8 = request_key(&(0x7f00000009c0)='big_key\x00', &(0x7f0000000a00)={'syz', 0x2}, &(0x7f0000000a40)='syz', r3) keyctl$search(0xa, r8, &(0x7f0000000b80)='user\x00', &(0x7f0000000bc0)={'syz', 0x0}, r0) add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, r1) keyctl$dh_compute(0x17, &(0x7f0000000340)={r5, r6, r7}, &(0x7f0000000380)=""/88, 0x58, &(0x7f0000000540)={&(0x7f0000000400)={'sha3-384-generic\x00'}, &(0x7f0000000440)="197349973310cfcd31fdae180a517a1ab12ce993fc2b6290dca51f62064a8349f7d7fbedaf008436bba28c9580b85c65233063b6bad897b627e899dcf2191e08d587a4bc7eeae218f2dcad47adafada25e4be26de64b07899277fd903cf1ed6865e84eceff069ee7ec99a502ae252813b4609fff33b9fda0023302f78079fa8cd80b1e5be4c3484aa17cd3e4ebb6527ae710f24eeb3f51b08f77fab8cce7d2a626590abfd140b6c85b6fd0837ed74d446182d98afbabdae29dba94933ca420b56ec471f5f9510b5471b7bf72da3b1304b8", 0xd1}) r9 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r9, 0xc0d05604, &(0x7f0000000640)={0x2, @sliced={0x2, [0x4, 0x5, 0x5ab, 0x4, 0xfff8, 0x2, 0xf9, 0x1, 0x800, 0x1, 0x7ff, 0xfff8, 0x1, 0x400, 0x0, 0x6, 0x3, 0x100, 0x16, 0x806, 0x2, 0x8001, 0x100, 0x100, 0x9, 0x5, 0x101, 0x80, 0x1, 0x7991, 0x8000, 0x9, 0x7, 0x80, 0x7f, 0x0, 0x8001, 0x70, 0x8, 0x400, 0x2, 0x8, 0x7, 0x8, 0x4, 0x1f, 0x7, 0x6], 0x6de7}}) 20:48:49 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0xe1, 0x6e6bc0, 0x0, 0x1, 0x2, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:49 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={@private2, @empty}) [ 1026.069003] Unknown ioctl 1079006226 20:48:49 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bc0, 0x0, 0x1, 0x2, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:49 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) (async) r2 = request_key(&(0x7f0000000740)='.dead\x00', &(0x7f0000000780)={'syz', 0x1}, &(0x7f00000007c0)='id_legacy\x00', r0) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r3) (async) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, r2) keyctl$reject(0x13, 0x0, 0x0, 0x9, r4) (async) add_key$user(&(0x7f0000000880), &(0x7f00000008c0)={'syz', 0x2}, &(0x7f0000000900)="fe2ed3607122f4ad041b9ad632900bb85053a9eb468922560fbe44ce2bbd6b740ea7b9150a62df160a11505a1d4c6d8d14bfcca104886263903f401367b372c4690e8dd04eb927b0ae2464d7a397a61c066690c3d605befa0bad001d9da461e04d7c4cd35459dc103f99264f51fef40d27e3e3721aa60e8d89490c55121ef4d863fea4525e4e8a53c46e70e642cd04412a996706f7df976503ad86", 0x9b, 0x0) keyctl$get_persistent(0x16, 0x0, r4) r5 = request_key(&(0x7f0000000ac0)='dns_resolver\x00', &(0x7f0000000b00)={'syz', 0x1}, &(0x7f0000000b40)='keyring\x00', r4) keyctl$search(0xa, 0x0, 0x0, &(0x7f0000000a80)={'syz', 0x0}, r5) (async) r6 = request_key(&(0x7f0000000080)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000200)=':@@\x00', r1) (async) r7 = add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="42e7b9c97c50ca13ee8bdf177a568fa924af84330bd557dc63d85533fe5b3643987326588975cba84ae9bb2acb18a6ee855ddb8d2538ab0be0fd6ec8db6f27da7abdc1bd82a845b4cfe7e8e4616e5168392529e2ad77b454ed9bcc7a727e8dba9b4077b46de758a92daf9628b29eac6e531226", 0x73, r1) r8 = request_key(&(0x7f00000009c0)='big_key\x00', &(0x7f0000000a00)={'syz', 0x2}, &(0x7f0000000a40)='syz', r3) keyctl$search(0xa, r8, &(0x7f0000000b80)='user\x00', &(0x7f0000000bc0)={'syz', 0x0}, r0) (async) add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, r1) (async) keyctl$dh_compute(0x17, &(0x7f0000000340)={r5, r6, r7}, &(0x7f0000000380)=""/88, 0x58, &(0x7f0000000540)={&(0x7f0000000400)={'sha3-384-generic\x00'}, &(0x7f0000000440)="197349973310cfcd31fdae180a517a1ab12ce993fc2b6290dca51f62064a8349f7d7fbedaf008436bba28c9580b85c65233063b6bad897b627e899dcf2191e08d587a4bc7eeae218f2dcad47adafada25e4be26de64b07899277fd903cf1ed6865e84eceff069ee7ec99a502ae252813b4609fff33b9fda0023302f78079fa8cd80b1e5be4c3484aa17cd3e4ebb6527ae710f24eeb3f51b08f77fab8cce7d2a626590abfd140b6c85b6fd0837ed74d446182d98afbabdae29dba94933ca420b56ec471f5f9510b5471b7bf72da3b1304b8", 0xd1}) (async) r9 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r9, 0xc0d05604, &(0x7f0000000640)={0x2, @sliced={0x2, [0x4, 0x5, 0x5ab, 0x4, 0xfff8, 0x2, 0xf9, 0x1, 0x800, 0x1, 0x7ff, 0xfff8, 0x1, 0x400, 0x0, 0x6, 0x3, 0x100, 0x16, 0x806, 0x2, 0x8001, 0x100, 0x100, 0x9, 0x5, 0x101, 0x80, 0x1, 0x7991, 0x8000, 0x9, 0x7, 0x80, 0x7f, 0x0, 0x8001, 0x70, 0x8, 0x400, 0x2, 0x8, 0x7, 0x8, 0x4, 0x1f, 0x7, 0x6], 0x6de7}}) 20:48:49 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={@private2, @empty}) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) (async) ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={@private2, @empty}) (async) 20:48:49 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000080)=@multiplanar_mmap={0x80, 0x1, 0x4, 0x0, 0x9, {0x0, 0x2710}, {0x4, 0x0, 0xc0, 0x26, 0x5, 0x4, "abf08097"}, 0x7ff, 0x1, {&(0x7f0000000000)=[{0x6, 0x0, {0x6}, 0x7ff}, {0x8, 0x7, {0x8}, 0x7}]}, 0x7}) 20:48:49 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x200201) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f00000000c0)=""/66) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x7fff, 0x3, 0x3, "27ca12c4145cd26e3575e675510e74e914ee3f1cb7f29881ac21b9560fe371fa", 0x32315258}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x200201) (async) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f00000000c0)=""/66) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x7fff, 0x3, 0x3, "27ca12c4145cd26e3575e675510e74e914ee3f1cb7f29881ac21b9560fe371fa", 0x32315258}) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) (async) [ 1026.131264] Unknown ioctl -1067952625 20:48:49 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x0, 0x1, 0x2, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) [ 1026.188432] Unknown ioctl 35123 [ 1026.200320] Unknown ioctl 1079006226 20:48:50 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa0a80) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 20:48:50 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) (async) ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={@private2, @empty}) 20:48:50 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)=@multiplanar_mmap={0x80, 0x1, 0x4, 0x0, 0x9, {0x0, 0x2710}, {0x4, 0x0, 0xc0, 0x26, 0x5, 0x4, "abf08097"}, 0x7ff, 0x1, {&(0x7f0000000000)=[{0x6, 0x0, {0x6}, 0x7ff}, {0x8, 0x7, {0x8}, 0x7}]}, 0x7}) 20:48:50 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) (async, rerun: 32) r2 = request_key(&(0x7f0000000740)='.dead\x00', &(0x7f0000000780)={'syz', 0x1}, &(0x7f00000007c0)='id_legacy\x00', r0) (rerun: 32) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r3) (async) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, r2) keyctl$reject(0x13, 0x0, 0x0, 0x9, r4) (async) add_key$user(&(0x7f0000000880), &(0x7f00000008c0)={'syz', 0x2}, &(0x7f0000000900)="fe2ed3607122f4ad041b9ad632900bb85053a9eb468922560fbe44ce2bbd6b740ea7b9150a62df160a11505a1d4c6d8d14bfcca104886263903f401367b372c4690e8dd04eb927b0ae2464d7a397a61c066690c3d605befa0bad001d9da461e04d7c4cd35459dc103f99264f51fef40d27e3e3721aa60e8d89490c55121ef4d863fea4525e4e8a53c46e70e642cd04412a996706f7df976503ad86", 0x9b, 0x0) (async) keyctl$get_persistent(0x16, 0x0, r4) r5 = request_key(&(0x7f0000000ac0)='dns_resolver\x00', &(0x7f0000000b00)={'syz', 0x1}, &(0x7f0000000b40)='keyring\x00', r4) keyctl$search(0xa, 0x0, 0x0, &(0x7f0000000a80)={'syz', 0x0}, r5) (async, rerun: 64) r6 = request_key(&(0x7f0000000080)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000200)=':@@\x00', r1) (async, rerun: 64) r7 = add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="42e7b9c97c50ca13ee8bdf177a568fa924af84330bd557dc63d85533fe5b3643987326588975cba84ae9bb2acb18a6ee855ddb8d2538ab0be0fd6ec8db6f27da7abdc1bd82a845b4cfe7e8e4616e5168392529e2ad77b454ed9bcc7a727e8dba9b4077b46de758a92daf9628b29eac6e531226", 0x73, r1) (async) r8 = request_key(&(0x7f00000009c0)='big_key\x00', &(0x7f0000000a00)={'syz', 0x2}, &(0x7f0000000a40)='syz', r3) keyctl$search(0xa, r8, &(0x7f0000000b80)='user\x00', &(0x7f0000000bc0)={'syz', 0x0}, r0) (async) add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, r1) (async) keyctl$dh_compute(0x17, &(0x7f0000000340)={r5, r6, r7}, &(0x7f0000000380)=""/88, 0x58, &(0x7f0000000540)={&(0x7f0000000400)={'sha3-384-generic\x00'}, &(0x7f0000000440)="197349973310cfcd31fdae180a517a1ab12ce993fc2b6290dca51f62064a8349f7d7fbedaf008436bba28c9580b85c65233063b6bad897b627e899dcf2191e08d587a4bc7eeae218f2dcad47adafada25e4be26de64b07899277fd903cf1ed6865e84eceff069ee7ec99a502ae252813b4609fff33b9fda0023302f78079fa8cd80b1e5be4c3484aa17cd3e4ebb6527ae710f24eeb3f51b08f77fab8cce7d2a626590abfd140b6c85b6fd0837ed74d446182d98afbabdae29dba94933ca420b56ec471f5f9510b5471b7bf72da3b1304b8", 0xd1}) (async, rerun: 64) r9 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) (rerun: 64) ioctl$vim2m_VIDIOC_G_FMT(r9, 0xc0d05604, &(0x7f0000000640)={0x2, @sliced={0x2, [0x4, 0x5, 0x5ab, 0x4, 0xfff8, 0x2, 0xf9, 0x1, 0x800, 0x1, 0x7ff, 0xfff8, 0x1, 0x400, 0x0, 0x6, 0x3, 0x100, 0x16, 0x806, 0x2, 0x8001, 0x100, 0x100, 0x9, 0x5, 0x101, 0x80, 0x1, 0x7991, 0x8000, 0x9, 0x7, 0x80, 0x7f, 0x0, 0x8001, 0x70, 0x8, 0x400, 0x2, 0x8, 0x7, 0x8, 0x4, 0x1f, 0x7, 0x6], 0x6de7}}) 20:48:50 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x0, 0x1, 0x2, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:50 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x0, 0xfffffffe}) 20:48:50 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)=@multiplanar_mmap={0x80, 0x1, 0x4, 0x0, 0x9, {0x0, 0x2710}, {0x4, 0x0, 0xc0, 0x26, 0x5, 0x4, "abf08097"}, 0x7ff, 0x1, {&(0x7f0000000000)=[{0x6, 0x0, {0x6}, 0x7ff}, {0x8, 0x7, {0x8}, 0x7}]}, 0x7}) 20:48:50 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x0, 0xfffffffe}) 20:48:50 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x20400, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000480)={0x3, 0x9, 0xfffffffe}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0xfffffffe, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042abd7000fddbdf2502000000080002000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000900010000000c0003000400000000010001000000000052cfd451a1340e9a365edda4b3609d1c9dacfcce8797a3140f19596544b3a8c430759a50e0b7a9fb67d07cdba1eaf0b6df90acd70e4561c36f6c8d54272f38741ad2f9d65f6fdafcc3641fea7d3820a370ecbccb537516464ef14ed7e564887cf5eb09f3ee1c2443125d46cbb991814ee6e893fed29a4c2e3945955b77b0a2a7274f4ca295e5c05848e8bec1745efcccd7d62405d9abfefa7b72948bcd3637d6a6b80d74aba4b177a12d28775d658b5d1cde83c8febd236f7aacf73f61e74e063e5589f7ba0503fea263d2a1cf7972b72ea761786b709269cee622ac9b597b7c95a2"], 0x38}, 0x1, 0x0, 0x0, 0x24000004}, 0x8040) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000080)=@overlay={0x7, 0x1, 0x4, 0x4, 0x7f, {r3, r4/1000+10000}, {0x0, 0x8, 0x1, 0x8, 0x20, 0x80, "95beaf87"}, 0x6, 0x3, {}, 0x20}) 20:48:50 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa0a80) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa0a80) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async) 20:48:50 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x0, 0x1, 0x2, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:50 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x20400, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000480)={0x3, 0x9, 0xfffffffe}) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000000)=0x1) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0xfffffffe, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) (async) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042abd7000fddbdf2502000000080002000000000008000100", @ANYRES32=0x0, @ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x24000004}, 0x8040) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000080)=@overlay={0x7, 0x1, 0x4, 0x4, 0x7f, {r3, r4/1000+10000}, {0x0, 0x8, 0x1, 0x8, 0x20, 0x80, "95beaf87"}, 0x6, 0x3, {}, 0x20}) 20:48:50 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x0, 0xfffffffe}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x0, 0xfffffffe}) (async) 20:48:50 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)=@multiplanar_mmap={0x80, 0x1, 0x4, 0x0, 0x9, {0x0, 0x2710}, {0x4, 0x0, 0xc0, 0x26, 0x5, 0x4, "abf08097"}, 0x7ff, 0x1, {&(0x7f0000000000)=[{0x6, 0x0, {0x6}, 0x7ff}, {0x8, 0x7, {0x8}, 0x7}]}, 0x7}) [ 1027.045065] Unknown ioctl -1069525488 20:48:50 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x20400, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000480)={0x3, 0x9, 0xfffffffe}) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) (async) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000000)=0x1) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0xfffffffe, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042abd7000fddbdf2502000000080002000000000008000100", @ANYRES32=0x0, @ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x24000004}, 0x8040) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000080)=@overlay={0x7, 0x1, 0x4, 0x4, 0x7f, {r3, r4/1000+10000}, {0x0, 0x8, 0x1, 0x8, 0x20, 0x80, "95beaf87"}, 0x6, 0x3, {}, 0x20}) [ 1027.093833] Unknown ioctl -1069525488 20:48:50 executing program 4: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$get_persistent(0x16, 0xee00, 0x0) 20:48:50 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa0a80) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa0a80) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async) 20:48:50 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)=@multiplanar_mmap={0x80, 0x1, 0x4, 0x0, 0x9, {0x0, 0x2710}, {0x4, 0x0, 0xc0, 0x26, 0x5, 0x4, "abf08097"}, 0x7ff, 0x1, {&(0x7f0000000000)=[{0x6, 0x0, {0x6}, 0x7ff}, {0x8, 0x7, {0x8}, 0x7}]}, 0x7}) 20:48:50 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bc0, 0x0, 0x0, 0x2, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:50 executing program 3: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x38800, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x6af3, @private2, 0x2}, 0x1c) 20:48:50 executing program 0: ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f00000001c0)) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0xfffffffe, 0x4, {0x1, @win={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x5, 0x5, 0x3, {0x4, @pix={0x8001, 0x6, 0x59565955, 0x1, 0xff, 0x5, 0x2, 0x5, 0x0, 0x2}}, 0x5}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0xd9a4, 0x5, 0x2, "96c8bd57d3a352a78f0579576afea44cb225902d55ce62cd6084d6767961e105", 0x30314142}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000000)=0xe, 0x4) [ 1027.142615] Unknown ioctl -1069525488 20:48:50 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bc0, 0x0, 0x0, 0x0, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:50 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)=@multiplanar_mmap={0x80, 0x1, 0x4, 0x0, 0x9, {0x0, 0x2710}, {0x4, 0x0, 0xc0, 0x26, 0x5, 0x4, "abf08097"}, 0x7ff, 0x1, {&(0x7f0000000000)=[{0x6, 0x0, {0x6}, 0x7ff}, {0x8, 0x7, {0x8}, 0x7}]}, 0x7}) 20:48:50 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 20:48:50 executing program 3: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async, rerun: 32) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (rerun: 32) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x38800, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x6af3, @private2, 0x2}, 0x1c) 20:48:50 executing program 4: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) (async) keyctl$get_persistent(0x16, 0xee00, 0x0) 20:48:50 executing program 0: ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f00000001c0)) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0xfffffffe, 0x4, {0x1, @win={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x5, 0x5, 0x3, {0x4, @pix={0x8001, 0x6, 0x59565955, 0x1, 0xff, 0x5, 0x2, 0x5, 0x0, 0x2}}, 0x5}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0xd9a4, 0x5, 0x2, "96c8bd57d3a352a78f0579576afea44cb225902d55ce62cd6084d6767961e105", 0x30314142}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000000)=0xe, 0x4) ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f00000001c0)) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0xfffffffe, 0x4, {0x1, @win={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x5, 0x5, 0x3, {0x4, @pix={0x8001, 0x6, 0x59565955, 0x1, 0xff, 0x5, 0x2, 0x5, 0x0, 0x2}}, 0x5}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0xd9a4, 0x5, 0x2, "96c8bd57d3a352a78f0579576afea44cb225902d55ce62cd6084d6767961e105", 0x30314142}) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) (async) socket$inet6_dccp(0xa, 0x6, 0x0) (async) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000000)=0xe, 0x4) (async) 20:48:50 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) [ 1027.231014] Unknown ioctl -1067952625 20:48:50 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bc0}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:50 executing program 4: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) (async) keyctl$get_persistent(0x16, 0xee00, 0x0) 20:48:50 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000080)=@multiplanar_mmap={0x80, 0x1, 0x4, 0x0, 0x9, {0x0, 0x2710}, {0x4, 0x0, 0xc0, 0x26, 0x5, 0x4, "abf08097"}, 0x7ff, 0x1, {&(0x7f0000000000)=[{0x6, 0x0, {0x6}, 0x7ff}, {0x8, 0x7, {0x8}, 0x7}]}, 0x7}) 20:48:50 executing program 3: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x38800, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) (async, rerun: 32) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 32) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x6af3, @private2, 0x2}, 0x1c) [ 1027.294830] Unknown ioctl -1067952625 20:48:50 executing program 0: ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f00000001c0)) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0xfffffffe, 0x4, {0x1, @win={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x5, 0x5, 0x3, {0x4, @pix={0x8001, 0x6, 0x59565955, 0x1, 0xff, 0x5, 0x2, 0x5, 0x0, 0x2}}, 0x5}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0xd9a4, 0x5, 0x2, "96c8bd57d3a352a78f0579576afea44cb225902d55ce62cd6084d6767961e105", 0x30314142}) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) (async) socket$inet6_dccp(0xa, 0x6, 0x0) (async) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000000)=0xe, 0x4) 20:48:50 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async, rerun: 64) r1 = socket$kcm(0x29, 0x2, 0x0) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 20:48:50 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r2) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, 0xffffffffffffffff) 20:48:50 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000080)=@multiplanar_mmap={0x80, 0x1, 0x4, 0x0, 0x9, {0x0, 0x2710}, {0x4, 0x0, 0xc0, 0x26, 0x5, 0x4, "abf08097"}, 0x7ff, 0x1, {&(0x7f0000000000)=[{0x6, 0x0, {0x6}, 0x7ff}, {0x8, 0x7, {0x8}, 0x7}]}, 0x7}) 20:48:50 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bc0}, {{@in, 0x4d5, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:50 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000080)=@multiplanar_mmap={0x80, 0x1, 0x4, 0x0, 0x9, {0x0, 0x2710}, {0x4, 0x0, 0xc0, 0x26, 0x5, 0x4, "abf08097"}, 0x7ff, 0x1, {&(0x7f0000000000)=[{0x6, 0x0, {0x6}, 0x7ff}, {0x8, 0x7, {0x8}, 0x7}]}, 0x7}) 20:48:50 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x84100) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x20}) 20:48:50 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x9, 0x20000000, 0x0, 0x6, 0x0}}}) 20:48:50 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) getsockopt$MRT(r0, 0x0, 0xce, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) 20:48:50 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r2) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r1) (async) keyctl$get_persistent(0x16, 0xee00, 0xffffffffffffffff) [ 1027.402467] Unknown ioctl -1067952625 20:48:50 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bc0}, {{@in, 0x0, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:50 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x9, 0x20000000, 0x0, 0x6, 0x0}}}) 20:48:50 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) (async, rerun: 32) getsockopt$MRT(r0, 0x0, 0xce, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) 20:48:50 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x84100) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x20}) [ 1027.479873] Unknown ioctl -1067952625 20:48:50 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, 0x0) 20:48:50 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) (async) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r2) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r1) (async) keyctl$get_persistent(0x16, 0xee00, 0xffffffffffffffff) 20:48:50 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bc0}, {{}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:50 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, 0x0) [ 1027.539187] Unknown ioctl -1067952625 [ 1027.550304] Unknown ioctl -1067952625 [ 1027.560169] Unknown ioctl -1067952625 20:48:50 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x9, 0x20000000, 0x0, 0x6, 0x0}}}) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x9, 0x20000000, 0x0, 0x6, 0x0}}}) (async) 20:48:50 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x84100) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x20}) 20:48:50 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) keyctl$search(0xa, r2, &(0x7f0000000080)='pkcs7_test\x00', &(0x7f00000000c0)={'syz', 0x3}, r1) 20:48:50 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bc0}, {{}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) [ 1027.585591] Unknown ioctl -1067952625 [ 1027.589416] Unknown ioctl -1067952625 [ 1027.598319] Unknown ioctl -1067952625 [ 1027.609251] Unknown ioctl -1067952625 [ 1027.621735] Unknown ioctl -1067952625 20:48:51 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, 0x0) 20:48:51 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bc0}, {{}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) [ 1027.636480] Unknown ioctl -1067952625 [ 1027.642145] Unknown ioctl -1067952625 [ 1027.651624] Unknown ioctl -1067952625 [ 1027.667081] Unknown ioctl -1067952625 [ 1027.675176] Unknown ioctl -1067952625 [ 1027.678995] Unknown ioctl -1067952625 [ 1027.682800] Unknown ioctl -1067952625 [ 1027.690131] Unknown ioctl -1067952625 [ 1027.695895] Unknown ioctl -1067952625 [ 1027.700513] Unknown ioctl -1067952625 [ 1027.705634] Unknown ioctl -1067952625 [ 1027.709501] Unknown ioctl -1067952625 [ 1027.713326] Unknown ioctl -1067952625 [ 1027.718547] Unknown ioctl -1067952625 [ 1027.722423] Unknown ioctl -1067952625 [ 1027.726900] Unknown ioctl -1067952625 [ 1027.730821] Unknown ioctl -1067952625 [ 1027.734678] Unknown ioctl -1067952625 20:48:51 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) getsockopt$MRT(r0, 0x0, 0xce, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) (async) getsockopt$MRT(r0, 0x0, 0xce, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) (async) 20:48:51 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) (async) keyctl$search(0xa, r2, &(0x7f0000000080)='pkcs7_test\x00', &(0x7f00000000c0)={'syz', 0x3}, r1) 20:48:51 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xd9}) 20:48:51 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000040)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x7ff, 0x3, 0x1, "bb46ad3c3cd99704088980c0e713c7f77f860eb8b01e65c95a17d5c00b1751ac", 0x61047f7a}) 20:48:51 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bc0}, {{@in, 0x0, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:51 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x9, {0x0, 0x2710}, {0x4, 0x0, 0xc0, 0x26, 0x5, 0x4, "abf08097"}, 0x7ff, 0x1, {&(0x7f0000000000)=[{0x6, 0x0, {0x6}, 0x7ff}, {0x8, 0x7, {0x8}, 0x7}]}, 0x7}) [ 1027.738467] Unknown ioctl -1067952625 [ 1027.742250] Unknown ioctl -1067952625 [ 1027.746103] Unknown ioctl -1067952625 [ 1027.749896] Unknown ioctl -1067952625 [ 1027.753679] Unknown ioctl -1067952625 [ 1027.757559] Unknown ioctl -1067952625 [ 1027.761349] Unknown ioctl -1067952625 20:48:51 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bc0}, {{@in, 0x0, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:51 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) (async) keyctl$search(0xa, r2, &(0x7f0000000080)='pkcs7_test\x00', &(0x7f00000000c0)={'syz', 0x3}, r1) [ 1027.807088] Unknown ioctl -1067952625 20:48:51 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xd9}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xd9}) (async) 20:48:51 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) (async) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000040)) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x7ff, 0x3, 0x1, "bb46ad3c3cd99704088980c0e713c7f77f860eb8b01e65c95a17d5c00b1751ac", 0x61047f7a}) 20:48:51 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)=@multiplanar_mmap={0x0, 0x0, 0x4, 0x0, 0x9, {0x0, 0x2710}, {0x4, 0x0, 0xc0, 0x26, 0x5, 0x4, "abf08097"}, 0x7ff, 0x1, {&(0x7f0000000000)=[{0x6, 0x0, {0x6}, 0x7ff}, {0x8, 0x7, {0x8}, 0x7}]}, 0x7}) 20:48:51 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) socket$inet(0x2, 0x80000, 0x22) [ 1027.831638] Unknown ioctl -1067952625 20:48:51 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xd9}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xd9}) (async) 20:48:51 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)=@multiplanar_mmap={0x0, 0x0, 0x4, 0x0, 0x9, {0x0, 0x2710}, {0x4, 0x0, 0xc0, 0x26, 0x5, 0x4, "abf08097"}, 0x7ff, 0x1, {&(0x7f0000000000)=[{0x6, 0x0, {0x6}, 0x7ff}, {0x8, 0x7, {0x8}, 0x7}]}, 0x7}) 20:48:51 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bc0}, {{@in, 0x0, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:51 executing program 4: r0 = request_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000300), 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$link(0x8, 0x0, r3) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$get_persistent(0x16, 0xee00, r4) 20:48:51 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000040)) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x7ff, 0x3, 0x1, "bb46ad3c3cd99704088980c0e713c7f77f860eb8b01e65c95a17d5c00b1751ac", 0x61047f7a}) 20:48:51 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x501880) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x2, 0x1, 0x0, 0xfe0}}) 20:48:51 executing program 4: r0 = request_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000300), 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r1) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) (async) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$link(0x8, 0x0, r3) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$get_persistent(0x16, 0xee00, r4) 20:48:51 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bc0}, {{@in, 0x0, 0x33}, 0xa, @in6=@dev, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:51 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)=@multiplanar_mmap={0x0, 0x0, 0x4, 0x0, 0x9, {0x0, 0x2710}, {0x4, 0x0, 0xc0, 0x26, 0x5, 0x4, "abf08097"}, 0x7ff, 0x1, {&(0x7f0000000000)=[{0x6, 0x0, {0x6}, 0x7ff}, {0x8, 0x7, {0x8}, 0x7}]}, 0x7}) 20:48:51 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) socket$inet(0x2, 0x80000, 0x22) 20:48:51 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000000)={{0x2, 0x3, 0x8001, 0x0, 0xfff}, 0x1, 0x4b, 'id1\x00', 'timer0\x00', 0x0, 0x97, 0x1, 0xfffffffffffffffa, 0x8}) 20:48:51 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x501880) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x2, 0x1, 0x0, 0xfe0}}) 20:48:51 executing program 4: r0 = request_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000300), 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$link(0x8, 0x0, r3) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$get_persistent(0x16, 0xee00, r4) request_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000300), 0xffffffffffffffff) (async) add_key$keyring(&(0x7f0000000040), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, r0) (async) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r1) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) (async) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r2) (async) keyctl$link(0x8, 0x0, r3) (async) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r3) (async) keyctl$get_persistent(0x16, 0xee00, r4) (async) 20:48:51 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bc0}, {{@in, 0x0, 0x33}, 0xa, @in6=@dev, 0x0, 0x0, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:51 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x4, 0x0, 0xc0, 0x26, 0x5, 0x4, "abf08097"}, 0x7ff, 0x1, {&(0x7f0000000000)=[{0x6, 0x0, {0x6}, 0x7ff}, {0x8, 0x7, {0x8}, 0x7}]}, 0x7}) 20:48:51 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x501880) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x2, 0x1, 0x0, 0xfe0}}) 20:48:51 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000000)={{0x2, 0x3, 0x8001, 0x0, 0xfff}, 0x1, 0x4b, 'id1\x00', 'timer0\x00', 0x0, 0x97, 0x1, 0xfffffffffffffffa, 0x8}) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) (async) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000000)={{0x2, 0x3, 0x8001, 0x0, 0xfff}, 0x1, 0x4b, 'id1\x00', 'timer0\x00', 0x0, 0x97, 0x1, 0xfffffffffffffffa, 0x8}) (async) 20:48:51 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) socket$inet(0x2, 0x80000, 0x22) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async) socket$inet(0x2, 0x80000, 0x22) (async) 20:48:51 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) 20:48:51 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) write$P9_RLCREATE(r0, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x80, 0x0, 0x3}, 0x50000000}}, 0x18) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)={&(0x7f0000000240)='./file0\x00', 0x0, 0x18}, 0x10) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$link(0x8, 0x0, r5) keyctl$negate(0xd, r2, 0xda, r5) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$get_persistent(0x16, 0xee00, r3) 20:48:51 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bc0}, {{@in, 0x0, 0x33}, 0xa, @in6=@dev, 0x0, 0x0, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:51 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000000)={{0x2, 0x3, 0x8001, 0x0, 0xfff}, 0x1, 0x4b, 'id1\x00', 'timer0\x00', 0x0, 0x97, 0x1, 0xfffffffffffffffa, 0x8}) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) (async) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000000)={{0x2, 0x3, 0x8001, 0x0, 0xfff}, 0x1, 0x4b, 'id1\x00', 'timer0\x00', 0x0, 0x97, 0x1, 0xfffffffffffffffa, 0x8}) (async) 20:48:51 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0xc0, 0x26, 0x5, 0x4, "abf08097"}, 0x7ff, 0x1, {&(0x7f0000000000)=[{0x6, 0x0, {0x6}, 0x7ff}, {0x8, 0x7, {0x8}, 0x7}]}, 0x7}) 20:48:51 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bc0}, {{@in, 0x0, 0x33}, 0xa, @in6=@dev, 0x0, 0x0, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:51 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) (async, rerun: 64) write$P9_RLCREATE(r0, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x80, 0x0, 0x3}, 0x50000000}}, 0x18) (async, rerun: 64) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)={&(0x7f0000000240)='./file0\x00', 0x0, 0x18}, 0x10) (async) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r2) (async) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$link(0x8, 0x0, r5) (async, rerun: 32) keyctl$negate(0xd, r2, 0xda, r5) (rerun: 32) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) (async) keyctl$get_persistent(0x16, 0xee00, r3) 20:48:51 executing program 1: ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) [ 1028.166715] Unknown ioctl -1067952625 20:48:51 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000001480), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r3, 0x301}, 0x14}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r3, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xd8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r6}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x884) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) 20:48:51 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) 20:48:51 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x26, 0x5, 0x4, "abf08097"}, 0x7ff, 0x1, {&(0x7f0000000000)=[{0x6, 0x0, {0x6}, 0x7ff}, {0x8, 0x7, {0x8}, 0x7}]}, 0x7}) 20:48:51 executing program 1: ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) (async) 20:48:51 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bc0}, {{@in, 0x0, 0x33}, 0xa, @in6=@dev, 0x0, 0x1, 0x0, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:51 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14}, 0x14}}, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000001480), r2) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r3, 0x301}, 0x14}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) (async) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, 0x0) (async, rerun: 32) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r3, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xd8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r6}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x884) (async, rerun: 32) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) (async, rerun: 64) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (rerun: 64) ioctl$vim2m_VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) 20:48:51 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) [ 1028.249788] Unknown ioctl -1067952625 [ 1028.269252] Unknown ioctl -1067952625 [ 1028.277152] Unknown ioctl -1067952625 [ 1028.286595] Unknown ioctl -1067952625 20:48:51 executing program 1: ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) 20:48:51 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bc0}, {{@in, 0x0, 0x33}, 0xa, @in6=@dev, 0x0, 0x1, 0x0, 0x0, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:51 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x4, "abf08097"}, 0x7ff, 0x1, {&(0x7f0000000000)=[{0x6, 0x0, {0x6}, 0x7ff}, {0x8, 0x7, {0x8}, 0x7}]}, 0x7}) [ 1028.307321] Unknown ioctl -1067952625 [ 1028.314520] Unknown ioctl -1067952625 [ 1028.322101] Unknown ioctl -1067952625 [ 1028.332068] Unknown ioctl -1067952625 [ 1028.340539] Unknown ioctl -1067952625 [ 1028.348894] Unknown ioctl -1067952625 [ 1028.359807] Unknown ioctl -1067952625 [ 1028.365613] Unknown ioctl -1067952625 [ 1028.372952] Unknown ioctl -1067952625 [ 1028.374138] Unknown ioctl -1067952625 [ 1028.384576] Unknown ioctl -1067952625 [ 1028.399539] Unknown ioctl -1067952625 [ 1028.403454] Unknown ioctl -1067952625 [ 1028.404337] Unknown ioctl -1067952625 [ 1028.409907] Unknown ioctl -1067952625 [ 1028.416975] Unknown ioctl -1067952625 [ 1028.419033] Unknown ioctl -1067952625 [ 1028.425196] Unknown ioctl -1067952625 [ 1028.427256] Unknown ioctl -1067952625 [ 1028.429250] Unknown ioctl -1067952625 [ 1028.433110] Unknown ioctl -1067952625 [ 1028.438967] Unknown ioctl -1067952625 [ 1028.445813] Unknown ioctl -1067952625 [ 1028.448914] Unknown ioctl -1067952625 [ 1028.453148] Unknown ioctl -1067952625 [ 1028.453440] Unknown ioctl -1067952625 [ 1028.461157] Unknown ioctl -1067952625 [ 1028.462577] Unknown ioctl -1067952625 [ 1028.465914] Unknown ioctl -1067952625 [ 1028.470237] Unknown ioctl -1067952625 [ 1028.472712] Unknown ioctl -1067952625 [ 1028.477130] Unknown ioctl -1067952625 [ 1028.482061] Unknown ioctl -1067952625 [ 1028.487993] Unknown ioctl -1067952625 [ 1028.488947] Unknown ioctl -1067952625 [ 1028.492008] Unknown ioctl -1067952625 [ 1028.496680] Unknown ioctl -1067952625 [ 1028.500016] Unknown ioctl -1067952625 [ 1028.503590] Unknown ioctl -1067952625 [ 1028.511029] Unknown ioctl -1067952625 [ 1028.512710] Unknown ioctl -1067952625 [ 1028.515706] Unknown ioctl -1067952625 [ 1028.519822] Unknown ioctl -1067952625 [ 1028.522837] Unknown ioctl -1067952625 [ 1028.527434] Unknown ioctl -1067952625 [ 1028.534126] Unknown ioctl -1067952625 [ 1028.535201] Unknown ioctl -1067952625 [ 1028.538317] Unknown ioctl -1067952625 [ 1028.541948] Unknown ioctl -1067952625 [ 1028.549323] Unknown ioctl -1067952625 [ 1028.551181] Unknown ioctl -1067952625 [ 1028.553613] Unknown ioctl -1067952625 [ 1028.558083] Unknown ioctl -1067952625 [ 1028.561404] Unknown ioctl -1067952625 [ 1028.565778] Unknown ioctl -1067952625 [ 1028.572370] Unknown ioctl -1067952625 [ 1028.572585] Unknown ioctl -1067952625 [ 1028.576427] Unknown ioctl -1067952625 [ 1028.581772] Unknown ioctl -1067952625 [ 1028.584155] Unknown ioctl -1067952625 [ 1028.589454] Unknown ioctl -1067952625 [ 1028.591801] Unknown ioctl -1067952625 [ 1028.596366] Unknown ioctl -1067952625 [ 1028.603198] Unknown ioctl -1067952625 [ 1028.603222] Unknown ioctl -1067952625 [ 1028.607271] Unknown ioctl -1067952625 [ 1028.612397] Unknown ioctl -1067952625 [ 1028.614988] Unknown ioctl -1067952625 [ 1028.619514] Unknown ioctl -1067952625 [ 1028.622501] Unknown ioctl -1067952625 [ 1028.630213] Unknown ioctl -1067952625 [ 1028.630609] Unknown ioctl -1067952625 [ 1028.634115] Unknown ioctl -1067952625 [ 1028.639091] Unknown ioctl -1067952625 [ 1028.650074] Unknown ioctl -1067952625 [ 1028.654490] Unknown ioctl -1067952625 [ 1028.658299] Unknown ioctl -1067952625 [ 1028.662085] Unknown ioctl -1067952625 [ 1028.667135] Unknown ioctl -1067952625 [ 1028.670931] Unknown ioctl -1067952625 [ 1028.675363] Unknown ioctl -1067952625 [ 1028.679155] Unknown ioctl -1067952625 [ 1028.682933] Unknown ioctl -1067952625 [ 1028.687572] Unknown ioctl -1067952625 [ 1028.691364] Unknown ioctl -1067952625 [ 1028.696068] Unknown ioctl -1067952625 [ 1028.699867] Unknown ioctl -1067952625 [ 1028.703643] Unknown ioctl -1067952625 20:48:52 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) write$P9_RLCREATE(r0, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x80, 0x0, 0x3}, 0x50000000}}, 0x18) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)={&(0x7f0000000240)='./file0\x00', 0x0, 0x18}, 0x10) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$link(0x8, 0x0, r5) keyctl$negate(0xd, r2, 0xda, r5) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$get_persistent(0x16, 0xee00, r3) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) (async) write$P9_RLCREATE(r0, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x80, 0x0, 0x3}, 0x50000000}}, 0x18) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)={&(0x7f0000000240)='./file0\x00', 0x0, 0x18}, 0x10) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r1) (async) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r2) (async) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r4) (async) keyctl$link(0x8, 0x0, r5) (async) keyctl$negate(0xd, r2, 0xda, r5) (async) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) (async) keyctl$get_persistent(0x16, 0xee00, r3) (async) 20:48:52 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x10d080) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 20:48:52 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bc0}, {{@in, 0x0, 0x33}, 0xa, @in6=@dev, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x5}}, 0xe8) 20:48:52 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) 20:48:52 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, "abf08097"}, 0x7ff, 0x1, {&(0x7f0000000000)=[{0x6, 0x0, {0x6}, 0x7ff}, {0x8, 0x7, {0x8}, 0x7}]}, 0x7}) 20:48:52 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000001480), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r3, 0x301}, 0x14}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r3, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xd8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r6}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x884) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14}, 0x14}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000001480), r2) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r3, 0x301}, 0x14}}, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r3, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xd8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r6}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x884) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (async) [ 1028.708356] Unknown ioctl -1067952625 [ 1028.712145] Unknown ioctl -1067952625 [ 1028.716695] Unknown ioctl -1067952625 [ 1028.720483] Unknown ioctl -1067952625 [ 1028.725066] Unknown ioctl -1067952625 [ 1028.728862] Unknown ioctl -1067952625 [ 1028.732643] Unknown ioctl -1067952625 20:48:52 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bc0}, {{@in, 0x0, 0x33}, 0xa, @in6=@dev, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0xe8) 20:48:52 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x10d080) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 20:48:52 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "abf08097"}, 0x7ff, 0x1, {&(0x7f0000000000)=[{0x6, 0x0, {0x6}, 0x7ff}, {0x8, 0x7, {0x8}, 0x7}]}, 0x7}) 20:48:52 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0x0, r1) request_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000200)='\x00', r1) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$get_persistent(0x16, 0xee00, r3) 20:48:52 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xfffffffa, 0x4, {0x1, @pix={0x7, 0xffffffff, 0x38414261, 0x5, 0x1, 0x101, 0x3, 0x5, 0x0, 0x0, 0x1}}}) [ 1028.782133] Unknown ioctl -1067952625 [ 1028.788784] Unknown ioctl -1067952625 20:48:52 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x10d080) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x10d080) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) (async) 20:48:52 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) (async) 20:48:52 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "abf08097"}, 0x0, 0x1, {&(0x7f0000000000)=[{0x6, 0x0, {0x6}, 0x7ff}, {0x8, 0x7, {0x8}, 0x7}]}, 0x7}) 20:48:52 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bc0}, {{@in, 0x0, 0x33}, 0xa, @in6=@dev, 0x0, 0x1}}, 0xe8) 20:48:52 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0x0, r1) request_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000200)='\x00', r1) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$get_persistent(0x16, 0xee00, r3) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r1) (async) keyctl$get_persistent(0x16, 0x0, r1) (async) request_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000200)='\x00', r1) (async) add_key$keyring(&(0x7f0000000240), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) (async) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r2) (async) keyctl$get_persistent(0x16, 0xee00, r3) (async) 20:48:52 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xfffffffa, 0x4, {0x1, @pix={0x7, 0xffffffff, 0x38414261, 0x5, 0x1, 0x101, 0x3, 0x5, 0x0, 0x0, 0x1}}}) 20:48:52 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "abf08097"}, 0x0, 0x1, {0x0}, 0x7}) 20:48:52 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) 20:48:52 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bc0}, {{@in, 0x0, 0x33}, 0xa, @in6=@dev, 0x0, 0x1, 0x0, 0x0, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:52 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r1) (async) keyctl$get_persistent(0x16, 0x0, r1) (async) request_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000200)='\x00', r1) (async) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$get_persistent(0x16, 0xee00, r3) 20:48:52 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xfffffffa, 0x4, {0x1, @pix={0x7, 0xffffffff, 0x38414261, 0x5, 0x1, 0x101, 0x3, 0x5, 0x0, 0x0, 0x1}}}) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xfffffffa, 0x4, {0x1, @pix={0x7, 0xffffffff, 0x38414261, 0x5, 0x1, 0x101, 0x3, 0x5, 0x0, 0x0, 0x1}}}) (async) 20:48:52 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x78da03) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x40080, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x1, 0xffff, 0x46df, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 20:48:52 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "abf08097"}, 0x0, 0x1, {0x0}}) 20:48:52 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000180)={0x0, 0x4, 0x2, 0x0, 0x0, [@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, 0x28) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) 20:48:52 executing program 4: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$link(0x8, 0x0, r1) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r2) request_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000200)='(/..]\x00', r3) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r2) r5 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, r4) keyctl$get_persistent(0x16, 0xee00, r5) 20:48:52 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000001480), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r3, 0x301}, 0x14}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r3, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xd8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r6}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x884) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) [ 1029.005225] Unknown ioctl -1072667469 20:48:52 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x78da03) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x40080, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) (async) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) (async) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x1, 0xffff, 0x46df, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)={r4}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 20:48:52 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000180)={0x0, 0x4, 0x2, 0x0, 0x0, [@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, 0x28) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) 20:48:52 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x78da03) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x40080, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x1, 0xffff, 0x46df, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 20:48:52 executing program 0: r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @rand_addr, @local}, &(0x7f00000000c0)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @loopback, @broadcast}, &(0x7f0000000140)=0xc) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000140)={@private1, 0x0, r4}) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000140)={@private1, 0x0, r6}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000280)={@initdev, 0x0}, &(0x7f0000000300)=0x14) r8 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000000140)={@private1, 0x0, r9}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={0x0, @empty, @dev}, &(0x7f0000000380)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000003c0)={@mcast2, 0x0}, &(0x7f0000000400)=0x14) r12 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r12, 0x8918, &(0x7f0000000140)={@private1, 0x0, r13}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000440)={0x63c, r0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8}, {0x260, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}]}}, {{0x8, 0x1, r4}, {0x174, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xd13}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r9}}}]}}, {{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}]}}, {{0x8}, {0x10c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1481}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x0, 0x0, 0x7, 0x7}, {0x8000, 0x1, 0x9, 0x7940}, {0x5, 0x9, 0x80, 0x247}, {0x1, 0x7d, 0xa4, 0x1ff}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r13}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x7, 0x5, 0x4, 0x4}, {0xffff, 0x1, 0x2, 0x6}]}}}]}}]}, 0x63c}, 0x1, 0x0, 0x0, 0x8081}, 0x40000) r14 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r14, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x2, 0x0}}}) 20:48:52 executing program 4: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$link(0x8, 0x0, r1) (async) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r2) request_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000200)='(/..]\x00', r3) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r2) r5 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, r4) keyctl$get_persistent(0x16, 0xee00, r5) 20:48:52 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bc0}, {{@in, 0x0, 0x33}, 0xa, @in6=@dev, 0x0, 0x0, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) [ 1029.101240] Unknown ioctl -1067952625 20:48:52 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000180)={0x0, 0x4, 0x2, 0x0, 0x0, [@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, 0x28) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000180)={0x0, 0x4, 0x2, 0x0, 0x0, [@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, 0x28) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) (async) 20:48:52 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x78da03) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x40080, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) (async, rerun: 64) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x1, 0xffff, 0x46df, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)={r4}) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (rerun: 64) [ 1029.136758] Unknown ioctl -1072667469 20:48:52 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bc0}, {{@in, 0x0, 0x33}, 0xa, @in6=@dev, 0x0, 0x0, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:52 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000000)={{0x2, 0x3, 0x8001, 0x0, 0xfff}, 0x1, 0x4b, 'id1\x00', 'timer0\x00', 0x0, 0x97, 0x1, 0xfffffffffffffffa, 0x8}) [ 1029.161236] Unknown ioctl -1072667469 20:48:52 executing program 0: r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @rand_addr, @local}, &(0x7f00000000c0)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @loopback, @broadcast}, &(0x7f0000000140)=0xc) (async) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000140)={@private1, 0x0, r4}) (async) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000140)={@private1, 0x0, r6}) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000280)={@initdev, 0x0}, &(0x7f0000000300)=0x14) (async) r8 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000000140)={@private1, 0x0, r9}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={0x0, @empty, @dev}, &(0x7f0000000380)=0xc) (async, rerun: 64) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000003c0)={@mcast2, 0x0}, &(0x7f0000000400)=0x14) (rerun: 64) r12 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r12, 0x8918, &(0x7f0000000140)={@private1, 0x0, r13}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000440)={0x63c, r0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8}, {0x260, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}]}}, {{0x8, 0x1, r4}, {0x174, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xd13}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r9}}}]}}, {{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}]}}, {{0x8}, {0x10c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1481}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x0, 0x0, 0x7, 0x7}, {0x8000, 0x1, 0x9, 0x7940}, {0x5, 0x9, 0x80, 0x247}, {0x1, 0x7d, 0xa4, 0x1ff}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r13}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x7, 0x5, 0x4, 0x4}, {0xffff, 0x1, 0x2, 0x6}]}}}]}}]}, 0x63c}, 0x1, 0x0, 0x0, 0x8081}, 0x40000) r14 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r14, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x2, 0x0}}}) 20:48:52 executing program 4: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$link(0x8, 0x0, r1) (async) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r2) request_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000200)='(/..]\x00', r3) (async) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r2) r5 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, r4) keyctl$get_persistent(0x16, 0xee00, r5) 20:48:52 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bc0}, {{@in, 0x0, 0x33}, 0xa, @in6=@dev, 0x0, 0x0, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:52 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bc0}, {{@in, 0x0, 0x33}, 0xa, @in6=@dev, 0x0, 0x0, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:52 executing program 5: r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @rand_addr, @local}, &(0x7f00000000c0)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @loopback, @broadcast}, &(0x7f0000000140)=0xc) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000140)={@private1, 0x0, r4}) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000140)={@private1, 0x0, r6}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000280)={@initdev, 0x0}, &(0x7f0000000300)=0x14) r8 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000000140)={@private1, 0x0, r9}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={0x0, @empty, @dev}, &(0x7f0000000380)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000003c0)={@mcast2, 0x0}, &(0x7f0000000400)=0x14) r12 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r12, 0x8918, &(0x7f0000000140)={@private1, 0x0, r13}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000440)={0x63c, r0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8}, {0x260, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}]}}, {{0x8, 0x1, r4}, {0x174, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xd13}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r9}}}]}}, {{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}]}}, {{0x8}, {0x10c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1481}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x0, 0x0, 0x7, 0x7}, {0x8000, 0x1, 0x9, 0x7940}, {0x5, 0x9, 0x80, 0x247}, {0x1, 0x7d, 0xa4, 0x1ff}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r13}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x7, 0x5, 0x4, 0x4}, {0xffff, 0x1, 0x2, 0x6}]}}}]}}]}, 0x63c}, 0x1, 0x0, 0x0, 0x8081}, 0x40000) r14 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r14, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x2, 0x0}}}) 20:48:52 executing program 0: r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @rand_addr, @local}, &(0x7f00000000c0)=0xc) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @loopback, @broadcast}, &(0x7f0000000140)=0xc) (async) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000140)={@private1, 0x0, r4}) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000140)={@private1, 0x0, r6}) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000280)={@initdev, 0x0}, &(0x7f0000000300)=0x14) (async) r8 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000000140)={@private1, 0x0, r9}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={0x0, @empty, @dev}, &(0x7f0000000380)=0xc) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000003c0)={@mcast2, 0x0}, &(0x7f0000000400)=0x14) (async) r12 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r12, 0x8918, &(0x7f0000000140)={@private1, 0x0, r13}) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000440)={0x63c, r0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8}, {0x260, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}]}}, {{0x8, 0x1, r4}, {0x174, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xd13}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r9}}}]}}, {{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}]}}, {{0x8}, {0x10c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1481}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x0, 0x0, 0x7, 0x7}, {0x8000, 0x1, 0x9, 0x7940}, {0x5, 0x9, 0x80, 0x247}, {0x1, 0x7d, 0xa4, 0x1ff}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r13}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x7, 0x5, 0x4, 0x4}, {0xffff, 0x1, 0x2, 0x6}]}}}]}}]}, 0x63c}, 0x1, 0x0, 0x0, 0x8081}, 0x40000) r14 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r14, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x2, 0x0}}}) 20:48:52 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$get_persistent(0x16, 0x0, r3) 20:48:52 executing program 5: r0 = request_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000300), 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$link(0x8, 0x0, r3) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$get_persistent(0x16, 0xee00, r4) [ 1029.247043] Unknown ioctl -1072667469 [ 1029.252559] Unknown ioctl -1072667469 [ 1029.285592] Unknown ioctl -1072667469 20:48:52 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bc0}, {{@in, 0x0, 0x33}, 0xa, @in6=@dev, 0x0, 0x0, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) [ 1029.307842] Unknown ioctl -1072667469 [ 1029.324712] Unknown ioctl -1072667469 [ 1029.338251] Unknown ioctl -1072667469 [ 1029.365877] Unknown ioctl -1072667469 [ 1029.383999] Unknown ioctl -1072667469 [ 1029.387833] Unknown ioctl -1072667469 [ 1029.391715] Unknown ioctl -1072667469 [ 1029.411823] Unknown ioctl -1072667469 [ 1029.417141] Unknown ioctl -1072667469 [ 1029.421041] Unknown ioctl -1072667469 [ 1029.425010] Unknown ioctl -1072667469 [ 1029.428883] Unknown ioctl -1072667469 [ 1029.432766] Unknown ioctl -1072667469 [ 1029.436823] Unknown ioctl -1072667469 [ 1029.440642] Unknown ioctl -1072667469 [ 1029.444501] Unknown ioctl -1072667469 [ 1029.448333] Unknown ioctl -1072667469 [ 1029.452150] Unknown ioctl -1072667469 [ 1029.456021] Unknown ioctl -1072667469 [ 1029.459810] Unknown ioctl -1072667469 [ 1029.463584] Unknown ioctl -1072667469 [ 1029.467421] Unknown ioctl -1072667469 [ 1029.471208] Unknown ioctl -1072667469 [ 1029.475064] Unknown ioctl -1072667469 [ 1029.478849] Unknown ioctl -1072667469 [ 1029.482628] Unknown ioctl -1072667469 [ 1029.486480] Unknown ioctl -1072667469 [ 1029.490289] Unknown ioctl -1072667469 [ 1029.494140] Unknown ioctl -1072667469 [ 1029.497925] Unknown ioctl -1072667469 [ 1029.501719] Unknown ioctl -1072667469 [ 1029.505561] Unknown ioctl -1072667469 [ 1029.509348] Unknown ioctl -1072667469 [ 1029.513125] Unknown ioctl -1072667469 [ 1029.516991] Unknown ioctl -1072667469 [ 1029.520774] Unknown ioctl -1072667469 [ 1029.524614] Unknown ioctl -1072667469 [ 1029.528407] Unknown ioctl -1072667469 [ 1029.532201] Unknown ioctl -1072667469 [ 1029.536055] Unknown ioctl -1072667469 [ 1029.539842] Unknown ioctl -1072667469 [ 1029.543620] Unknown ioctl -1072667469 [ 1029.547481] Unknown ioctl -1072667469 [ 1029.551270] Unknown ioctl -1072667469 [ 1029.555124] Unknown ioctl -1072667469 [ 1029.559022] Unknown ioctl -1072667469 [ 1029.562884] Unknown ioctl -1072667469 [ 1029.566728] Unknown ioctl -1072667469 [ 1029.570514] Unknown ioctl -1072667469 [ 1029.574372] Unknown ioctl -1072667469 [ 1029.578161] Unknown ioctl -1072667469 [ 1029.581937] Unknown ioctl -1072667469 [ 1029.585786] Unknown ioctl -1072667469 [ 1029.589569] Unknown ioctl -1072667469 [ 1029.593347] Unknown ioctl -1072667469 [ 1029.597195] Unknown ioctl -1072667469 [ 1029.600984] Unknown ioctl -1072667469 [ 1029.604847] Unknown ioctl -1072667469 [ 1029.608635] Unknown ioctl -1072667469 [ 1029.612427] Unknown ioctl -1072667469 20:48:53 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r3) (async) keyctl$get_persistent(0x16, 0x0, r3) 20:48:53 executing program 3: r0 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @dev, @private}, &(0x7f0000000100)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000140)={@private1, 0x0}, &(0x7f0000000180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @empty, @dev}, &(0x7f0000000240)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @private, @remote}, &(0x7f00000002c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000140)={@private1, 0x0, r7}) r8 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000000140)={@private1, 0x0, r9}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg2\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @multicast2, @remote}, &(0x7f00000003c0)=0xc) r12 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r12, 0x8918, &(0x7f0000000140)={@private1, 0x0, r13}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wg0\x00', 0x0}) r15 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r15, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r15, 0x8918, &(0x7f0000000140)={@private1, 0x0, r16}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000440)={@initdev, 0x0}, &(0x7f0000000480)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wg0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wg2\x00', 0x0}) r20 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r20, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r20, 0x8918, &(0x7f0000000140)={@private1, 0x0, r21}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000540)={0x954, r0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [{{0x8, 0x1, r1}, {0x1c8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r4}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x7f, 0x6, 0x5, 0x9}, {0xff, 0x4, 0x1, 0x6}, {0x7, 0x80, 0x7, 0xa995}, {0x2, 0x81, 0x6, 0x6}, {0x7ff, 0x1f, 0x8, 0x9}, {0x2, 0x6, 0x0, 0xff}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r5}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r7}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x230, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r14}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r16}}}]}}, {{0x8, 0x1, r17}, {0x264, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r18}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x1, 0x5, 0xa5, 0x4}, {0x1, 0x18, 0x0, 0x9}]}}}]}}, {{0x8, 0x1, r21}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}]}, 0x954}, 0x1, 0x0, 0x0, 0x4800}, 0x4804) r22 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r22, 0xc0145401, &(0x7f00000001c0)={0x1}) 20:48:53 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bc0}, {{@in, 0x0, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:53 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x2, 0x451c}) 20:48:53 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bc0}, {{@in, 0x0, 0x33}, 0xa, @in6=@dev, 0x0, 0x0, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) [ 1029.616309] Unknown ioctl -1072667469 [ 1029.620098] Unknown ioctl -1072667469 20:48:53 executing program 2: socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bc0}, {{@in, 0x0, 0x33}, 0xa, @in6=@dev, 0x0, 0x0, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:53 executing program 3: r0 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @dev, @private}, &(0x7f0000000100)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000140)={@private1, 0x0}, &(0x7f0000000180)=0x14) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @empty, @dev}, &(0x7f0000000240)=0xc) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @private, @remote}, &(0x7f00000002c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000140)={@private1, 0x0, r7}) (async) r8 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000000140)={@private1, 0x0, r9}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg2\x00', 0x0}) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @multicast2, @remote}, &(0x7f00000003c0)=0xc) (async) r12 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r12, 0x8918, &(0x7f0000000140)={@private1, 0x0, r13}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wg0\x00', 0x0}) r15 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r15, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r15, 0x8918, &(0x7f0000000140)={@private1, 0x0, r16}) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000440)={@initdev, 0x0}, &(0x7f0000000480)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wg0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wg2\x00', 0x0}) (async) r20 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r20, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r20, 0x8918, &(0x7f0000000140)={@private1, 0x0, r21}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000540)={0x954, r0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [{{0x8, 0x1, r1}, {0x1c8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r4}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x7f, 0x6, 0x5, 0x9}, {0xff, 0x4, 0x1, 0x6}, {0x7, 0x80, 0x7, 0xa995}, {0x2, 0x81, 0x6, 0x6}, {0x7ff, 0x1f, 0x8, 0x9}, {0x2, 0x6, 0x0, 0xff}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r5}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r7}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x230, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r14}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r16}}}]}}, {{0x8, 0x1, r17}, {0x264, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r18}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x1, 0x5, 0xa5, 0x4}, {0x1, 0x18, 0x0, 0x9}]}}}]}}, {{0x8, 0x1, r21}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}]}, 0x954}, 0x1, 0x0, 0x0, 0x4800}, 0x4804) (async) r22 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r22, 0xc0145401, &(0x7f00000001c0)={0x1}) 20:48:53 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bc0}, {{@in, 0x0, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:53 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x2, 0x451c}) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000040)) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x2, 0x451c}) (async) 20:48:53 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r3) (async) keyctl$get_persistent(0x16, 0x0, r3) 20:48:53 executing program 2: socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bc0}, {{@in, 0x0, 0x33}, 0xa, @in6=@dev, 0x0, 0x0, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:53 executing program 1: socket(0x29, 0x5, 0x50a503c1) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x80040, 0x0) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000640)) recvmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000240)=@xdp, 0xffffffffffffffa5, &(0x7f0000000500), 0x3, &(0x7f00000002c0)=""/69, 0x45}, 0x40000000) getresgid(&(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) getgroups(0x7, &(0x7f00000004c0)=[r3, r3, 0xee00, r3, r2, r1, r3]) getgroups(0x6, &(0x7f0000000500)=[r2, r4, r2, 0xee01, r3, r3]) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) getgroups(0x7, &(0x7f0000000340)=[r3, r2, r3, r2, r3, r3, r3]) getresgid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)=0x0) getgroups(0x5, &(0x7f0000000440)=[r1, r1, r1, r1, r1]) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f00000008c0)) getgroups(0x3, &(0x7f0000000480)=[r6, r7, r8]) socket(0xa, 0x2, 0x7) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r5, 0x80044dfb, &(0x7f0000000680)) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r9, 0x40505412, 0x0) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x636be969c8c71048}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xa8, r10, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r11 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r11, 0xc058560f, 0x0) r12 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r12, 0xc058560f, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000880)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x148, r10, 0x100, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r11}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r12}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000c045) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r9, 0xc0505405, &(0x7f00000005c0)={{0xba22de7acdca88c6, 0x1, 0x7ffffffe, 0x2, 0x6}, 0x2, 0x9, 0x748f9f1a}) setgid(r1) ioctl$SNDRV_TIMER_IOCTL_GINFO(r9, 0xc0f85403, &(0x7f0000000100)={{0xffffffffffffffff, 0x1, 0x80, 0x2, 0x5}, 0x0, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0xffffffffffffffc1, 0x5f, 0x0, 0x3}) 20:48:53 executing program 3: r0 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @dev, @private}, &(0x7f0000000100)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000140)={@private1, 0x0}, &(0x7f0000000180)=0x14) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @empty, @dev}, &(0x7f0000000240)=0xc) (async, rerun: 64) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @private, @remote}, &(0x7f00000002c0)=0xc) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) (async) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000140)={@private1, 0x0, r7}) (async, rerun: 32) r8 = socket$inet6_dccp(0xa, 0x6, 0x0) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000000140)={@private1, 0x0, r9}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg2\x00', 0x0}) (async, rerun: 32) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @multicast2, @remote}, &(0x7f00000003c0)=0xc) (async, rerun: 32) r12 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r12, 0x8918, &(0x7f0000000140)={@private1, 0x0, r13}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wg0\x00', 0x0}) r15 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r15, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r15, 0x8918, &(0x7f0000000140)={@private1, 0x0, r16}) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000440)={@initdev, 0x0}, &(0x7f0000000480)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wg0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wg2\x00', 0x0}) (async) r20 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r20, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r20, 0x8918, &(0x7f0000000140)={@private1, 0x0, r21}) (async) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000540)={0x954, r0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [{{0x8, 0x1, r1}, {0x1c8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r4}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x7f, 0x6, 0x5, 0x9}, {0xff, 0x4, 0x1, 0x6}, {0x7, 0x80, 0x7, 0xa995}, {0x2, 0x81, 0x6, 0x6}, {0x7ff, 0x1f, 0x8, 0x9}, {0x2, 0x6, 0x0, 0xff}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r5}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r7}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x230, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r14}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r16}}}]}}, {{0x8, 0x1, r17}, {0x264, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r18}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x1, 0x5, 0xa5, 0x4}, {0x1, 0x18, 0x0, 0x9}]}}}]}}, {{0x8, 0x1, r21}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}]}, 0x954}, 0x1, 0x0, 0x0, 0x4800}, 0x4804) r22 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r22, 0xc0145401, &(0x7f00000001c0)={0x1}) 20:48:53 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0x0, r1) keyctl$search(0xa, r1, &(0x7f0000000200)='big_key\x00', &(0x7f0000000240)={'syz', 0x1}, r0) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$get_persistent(0x16, 0xee00, r3) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) 20:48:53 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bc0}, {{@in, 0x0, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:53 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async, rerun: 64) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 64) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000040)) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x2, 0x451c}) 20:48:53 executing program 2: socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bc0}, {{@in, 0x0, 0x33}, 0xa, @in6=@dev, 0x0, 0x0, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) [ 1029.813347] Unknown ioctl -1072667469 20:48:53 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) (async, rerun: 64) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) (rerun: 64) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r1) (async) keyctl$get_persistent(0x16, 0x0, r1) (async) keyctl$search(0xa, r1, &(0x7f0000000200)='big_key\x00', &(0x7f0000000240)={'syz', 0x1}, r0) (async, rerun: 64) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) (rerun: 64) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$get_persistent(0x16, 0xee00, r3) (async) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) 20:48:53 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x800) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000080)) 20:48:53 executing program 5: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bc0}, {{@in, 0x0, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:53 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) [ 1029.855934] Unknown ioctl -1067952625 [ 1029.860141] Unknown ioctl -2147201541 [ 1029.882850] Unknown ioctl -1067952625 20:48:53 executing program 5: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bc0}, {{@in, 0x0, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:53 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) [ 1029.923283] Unknown ioctl -1067952625 20:48:53 executing program 1: socket(0x29, 0x5, 0x50a503c1) (async) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x80040, 0x0) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000640)) (async) recvmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000240)=@xdp, 0xffffffffffffffa5, &(0x7f0000000500), 0x3, &(0x7f00000002c0)=""/69, 0x45}, 0x40000000) (async) getresgid(&(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) getgroups(0x7, &(0x7f00000004c0)=[r3, r3, 0xee00, r3, r2, r1, r3]) getgroups(0x6, &(0x7f0000000500)=[r2, r4, r2, 0xee01, r3, r3]) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) getgroups(0x7, &(0x7f0000000340)=[r3, r2, r3, r2, r3, r3, r3]) (async) getresgid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)=0x0) (async) getgroups(0x5, &(0x7f0000000440)=[r1, r1, r1, r1, r1]) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f00000008c0)) (async) getgroups(0x3, &(0x7f0000000480)=[r6, r7, r8]) (async) socket(0xa, 0x2, 0x7) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, 0x0) (async) ioctl$SOUND_MIXER_READ_STEREODEVS(r5, 0x80044dfb, &(0x7f0000000680)) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r9, 0x40505412, 0x0) (async) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x636be969c8c71048}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xa8, r10, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r11 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r11, 0xc058560f, 0x0) (async) r12 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r12, 0xc058560f, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) (async) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000880)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x148, r10, 0x100, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r11}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r12}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000c045) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) (async) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r9, 0xc0505405, &(0x7f00000005c0)={{0xba22de7acdca88c6, 0x1, 0x7ffffffe, 0x2, 0x6}, 0x2, 0x9, 0x748f9f1a}) (async) setgid(r1) (async) ioctl$SNDRV_TIMER_IOCTL_GINFO(r9, 0xc0f85403, &(0x7f0000000100)={{0xffffffffffffffff, 0x1, 0x80, 0x2, 0x5}, 0x0, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0xffffffffffffffc1, 0x5f, 0x0, 0x3}) 20:48:53 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x800) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000080)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x800) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000080)) (async) 20:48:53 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0x0, r1) keyctl$search(0xa, r1, &(0x7f0000000200)='big_key\x00', &(0x7f0000000240)={'syz', 0x1}, r0) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$get_persistent(0x16, 0xee00, r3) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r1) (async) keyctl$get_persistent(0x16, 0x0, r1) (async) keyctl$search(0xa, r1, &(0x7f0000000200)='big_key\x00', &(0x7f0000000240)={'syz', 0x1}, r0) (async) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) (async) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r2) (async) keyctl$get_persistent(0x16, 0xee00, r3) (async) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) (async) 20:48:53 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x0, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0xa}}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000300)=@overlay={0x2, 0x5, 0x4, 0x1000, 0x1000, {0x0, 0x2710}, {0x3, 0xc, 0x1, 0x9, 0x5, 0xff, "014e1c49"}, 0xfffffff5, 0x3, {}, 0x1}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000100)={0x7fff, 0x32435750, 0x3, @discrete={0x800, 0x4}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x0, @sliced={0x9, [0x1000, 0x5, 0x3, 0x1, 0x9, 0x4eb, 0x0, 0x3, 0x9, 0x3, 0xe4d, 0x9, 0x7, 0x0, 0x5, 0x4, 0x20, 0xd9, 0x100, 0x6, 0x4, 0xfff, 0x9, 0x1188, 0x0, 0x0, 0xdc0, 0x9, 0x8001, 0xc55, 0x1, 0xf5, 0x5, 0x3, 0x1e, 0x7, 0x401, 0x209, 0x55, 0x100, 0x401, 0x2, 0x0, 0x6, 0xff, 0x81, 0x7ff, 0x1], 0x8}}) 20:48:53 executing program 5: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bc0}, {{@in, 0x0, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:53 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) 20:48:53 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x800) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000080)) 20:48:53 executing program 5: socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bc0}, {{@in, 0x0, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:53 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bc0}, {{@in, 0x0, 0x33}, 0xa, @in6=@dev, 0x0, 0x0, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:53 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000200)="3b7e9e4214e90493610d88e7abf5d5027cfaa96145ced6249a1596a800123fb73ef5f7564dcf7a5325517094aaa5d7cac3582d029a7486524d9f837a3ee0e489d11a325abe9e998beacd1c0f70ed69df6353aa3edbe2b29a2cfada0356d23f5b34657634a4c1", 0x66, r0) ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) keyctl$search(0xa, r0, &(0x7f0000000340)='syzkaller\x00', &(0x7f0000000380)={'syz', 0x1}, r1) r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r2, r1, r3, 0x0) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$get_persistent(0x16, 0x0, r4) keyctl$search(0xa, r4, &(0x7f0000000480)='cifs.spnego\x00', &(0x7f00000002c0)={'syz', 0x2}, 0xfffffffffffffffb) r5 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0x0, r5) [ 1030.037856] Unknown ioctl -1072667469 20:48:53 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x0, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0xa}}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000300)=@overlay={0x2, 0x5, 0x4, 0x1000, 0x1000, {0x0, 0x2710}, {0x3, 0xc, 0x1, 0x9, 0x5, 0xff, "014e1c49"}, 0xfffffff5, 0x3, {}, 0x1}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000100)={0x7fff, 0x32435750, 0x3, @discrete={0x800, 0x4}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x0, @sliced={0x9, [0x1000, 0x5, 0x3, 0x1, 0x9, 0x4eb, 0x0, 0x3, 0x9, 0x3, 0xe4d, 0x9, 0x7, 0x0, 0x5, 0x4, 0x20, 0xd9, 0x100, 0x6, 0x4, 0xfff, 0x9, 0x1188, 0x0, 0x0, 0xdc0, 0x9, 0x8001, 0xc55, 0x1, 0xf5, 0x5, 0x3, 0x1e, 0x7, 0x401, 0x209, 0x55, 0x100, 0x401, 0x2, 0x0, 0x6, 0xff, 0x81, 0x7ff, 0x1], 0x8}}) 20:48:53 executing program 1: socket(0x29, 0x5, 0x50a503c1) (async, rerun: 32) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x80040, 0x0) (rerun: 32) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000640)) (async, rerun: 32) recvmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000240)=@xdp, 0xffffffffffffffa5, &(0x7f0000000500), 0x3, &(0x7f00000002c0)=""/69, 0x45}, 0x40000000) (rerun: 32) getresgid(&(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) getgroups(0x7, &(0x7f00000004c0)=[r3, r3, 0xee00, r3, r2, r1, r3]) getgroups(0x6, &(0x7f0000000500)=[r2, r4, r2, 0xee01, r3, r3]) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) getgroups(0x7, &(0x7f0000000340)=[r3, r2, r3, r2, r3, r3, r3]) (async) getresgid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)=0x0) getgroups(0x5, &(0x7f0000000440)=[r1, r1, r1, r1, r1]) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f00000008c0)) (async, rerun: 32) getgroups(0x3, &(0x7f0000000480)=[r6, r7, r8]) (rerun: 32) socket(0xa, 0x2, 0x7) (async) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, 0x0) (async) ioctl$SOUND_MIXER_READ_STEREODEVS(r5, 0x80044dfb, &(0x7f0000000680)) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r9, 0x40505412, 0x0) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x636be969c8c71048}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xa8, r10, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r11 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r11, 0xc058560f, 0x0) r12 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r12, 0xc058560f, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000880)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x148, r10, 0x100, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r11}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r12}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000c045) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) (async) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r9, 0xc0505405, &(0x7f00000005c0)={{0xba22de7acdca88c6, 0x1, 0x7ffffffe, 0x2, 0x6}, 0x2, 0x9, 0x748f9f1a}) (async) setgid(r1) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_GINFO(r9, 0xc0f85403, &(0x7f0000000100)={{0xffffffffffffffff, 0x1, 0x80, 0x2, 0x5}, 0x0, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0xffffffffffffffc1, 0x5f, 0x0, 0x3}) (rerun: 32) 20:48:53 executing program 5: socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bc0}, {{@in, 0x0, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) [ 1030.073086] Unknown ioctl -2147201541 [ 1030.073407] Unknown ioctl -1067952625 [ 1030.086827] Unknown ioctl -1067952625 [ 1030.091173] Unknown ioctl -1067952625 20:48:53 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000040)) 20:48:53 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bc0}, {{@in, 0x0, 0x33}, 0xa, @in6=@dev, 0x0, 0x0, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:53 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000200)="3b7e9e4214e90493610d88e7abf5d5027cfaa96145ced6249a1596a800123fb73ef5f7564dcf7a5325517094aaa5d7cac3582d029a7486524d9f837a3ee0e489d11a325abe9e998beacd1c0f70ed69df6353aa3edbe2b29a2cfada0356d23f5b34657634a4c1", 0x66, r0) ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) keyctl$search(0xa, r0, &(0x7f0000000340)='syzkaller\x00', &(0x7f0000000380)={'syz', 0x1}, r1) r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r2, r1, r3, 0x0) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$get_persistent(0x16, 0x0, r4) keyctl$search(0xa, r4, &(0x7f0000000480)='cifs.spnego\x00', &(0x7f00000002c0)={'syz', 0x2}, 0xfffffffffffffffb) r5 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0x0, r5) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) (async) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000200)="3b7e9e4214e90493610d88e7abf5d5027cfaa96145ced6249a1596a800123fb73ef5f7564dcf7a5325517094aaa5d7cac3582d029a7486524d9f837a3ee0e489d11a325abe9e998beacd1c0f70ed69df6353aa3edbe2b29a2cfada0356d23f5b34657634a4c1", 0x66, r0) (async) ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) (async) keyctl$search(0xa, r0, &(0x7f0000000340)='syzkaller\x00', &(0x7f0000000380)={'syz', 0x1}, r1) (async) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1) (async) keyctl$KEYCTL_MOVE(0x1e, r2, r1, r3, 0x0) (async) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r4) (async) keyctl$get_persistent(0x16, 0x0, r4) (async) keyctl$search(0xa, r4, &(0x7f0000000480)='cifs.spnego\x00', &(0x7f00000002c0)={'syz', 0x2}, 0xfffffffffffffffb) (async) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) (async) keyctl$get_persistent(0x16, 0x0, r5) (async) 20:48:53 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x0, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0xa}}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000300)=@overlay={0x2, 0x5, 0x4, 0x1000, 0x1000, {0x0, 0x2710}, {0x3, 0xc, 0x1, 0x9, 0x5, 0xff, "014e1c49"}, 0xfffffff5, 0x3, {}, 0x1}) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000100)={0x7fff, 0x32435750, 0x3, @discrete={0x800, 0x4}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x0, @sliced={0x9, [0x1000, 0x5, 0x3, 0x1, 0x9, 0x4eb, 0x0, 0x3, 0x9, 0x3, 0xe4d, 0x9, 0x7, 0x0, 0x5, 0x4, 0x20, 0xd9, 0x100, 0x6, 0x4, 0xfff, 0x9, 0x1188, 0x0, 0x0, 0xdc0, 0x9, 0x8001, 0xc55, 0x1, 0xf5, 0x5, 0x3, 0x1e, 0x7, 0x401, 0x209, 0x55, 0x100, 0x401, 0x2, 0x0, 0x6, 0xff, 0x81, 0x7ff, 0x1], 0x8}}) 20:48:53 executing program 5: socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bc0}, {{@in, 0x0, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:53 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bc0}, {{@in, 0x0, 0x33}, 0xa, @in6=@dev, 0x0, 0x0, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) [ 1030.181018] Unknown ioctl -1072667469 [ 1030.186753] Unknown ioctl -1067952625 [ 1030.191585] Unknown ioctl -1067952625 [ 1030.196761] Unknown ioctl -2147201541 [ 1030.199998] Unknown ioctl -1072667469 [ 1030.209322] Unknown ioctl -1072667469 [ 1030.213323] Unknown ioctl -1067952625 [ 1030.220278] Unknown ioctl -1072667469 [ 1030.222805] Unknown ioctl -2141170668 20:48:53 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) (async) r2 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000200)="3b7e9e4214e90493610d88e7abf5d5027cfaa96145ced6249a1596a800123fb73ef5f7564dcf7a5325517094aaa5d7cac3582d029a7486524d9f837a3ee0e489d11a325abe9e998beacd1c0f70ed69df6353aa3edbe2b29a2cfada0356d23f5b34657634a4c1", 0x66, r0) (async) ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) keyctl$search(0xa, r0, &(0x7f0000000340)='syzkaller\x00', &(0x7f0000000380)={'syz', 0x1}, r1) (async) r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r2, r1, r3, 0x0) (async) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r4) (async) keyctl$get_persistent(0x16, 0x0, r4) (async) keyctl$search(0xa, r4, &(0x7f0000000480)='cifs.spnego\x00', &(0x7f00000002c0)={'syz', 0x2}, 0xfffffffffffffffb) r5 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0x0, r5) 20:48:53 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000040)) (rerun: 64) 20:48:53 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in, 0x0, 0x33}, 0xa, @in6=@dev, 0x0, 0x0, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) [ 1030.236725] Unknown ioctl -1072667469 [ 1030.249227] Unknown ioctl -1072667469 [ 1030.256190] Unknown ioctl -1067952625 [ 1030.259319] Unknown ioctl -1072667469 20:48:53 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) [ 1030.285640] Unknown ioctl -1072667469 [ 1030.298991] Unknown ioctl -1072667469 [ 1030.302896] Unknown ioctl -1072667469 [ 1030.308666] Unknown ioctl -1072667469 [ 1030.312553] Unknown ioctl -1072667469 [ 1030.322032] Unknown ioctl -1072667469 [ 1030.330356] Unknown ioctl -1072667469 [ 1030.336592] Unknown ioctl -1072667469 [ 1030.340661] Unknown ioctl -1072667469 [ 1030.346041] Unknown ioctl -1072667469 [ 1030.355070] Unknown ioctl -1067952625 [ 1030.356030] Unknown ioctl -1072667469 [ 1030.360179] Unknown ioctl -2141170668 [ 1030.369143] Unknown ioctl -1072667469 [ 1030.373056] Unknown ioctl -1072667469 [ 1030.374098] Unknown ioctl -1067952625 [ 1030.380028] Unknown ioctl -1072667469 [ 1030.385924] Unknown ioctl -1067952625 [ 1030.390622] Unknown ioctl -1072667469 [ 1030.393092] Unknown ioctl -2141170668 [ 1030.397558] Unknown ioctl -1072667469 [ 1030.400767] Unknown ioctl -1067952625 [ 1030.402354] Unknown ioctl -1072667469 [ 1030.409578] Unknown ioctl -2141170668 [ 1030.414207] Unknown ioctl -1072667469 [ 1030.416476] Unknown ioctl -1067952625 [ 1030.418059] Unknown ioctl -1072667469 [ 1030.422972] Unknown ioctl -1067952625 [ 1030.431214] Unknown ioctl -2141170668 [ 1030.431499] Unknown ioctl -1072667469 [ 1030.439217] Unknown ioctl -2141170668 [ 1030.440348] Unknown ioctl -1072667469 [ 1030.445289] Unknown ioctl -1067952625 [ 1030.451709] Unknown ioctl -1072667469 [ 1030.452852] Unknown ioctl -1067952625 [ 1030.456447] Unknown ioctl -1072667469 [ 1030.459567] Unknown ioctl -2141170668 [ 1030.463242] Unknown ioctl -1072667469 [ 1030.469269] Unknown ioctl -1067952625 [ 1030.476078] Unknown ioctl -1072667469 [ 1030.479961] Unknown ioctl -1072667469 [ 1030.480357] Unknown ioctl -2141170668 20:48:53 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 20:48:53 executing program 0: pselect6(0x40, &(0x7f0000000000)={0x8, 0x8, 0x9, 0x3f91, 0xfff, 0x7ebb, 0x7ff, 0x5}, &(0x7f0000000040)={0xfffffffffffff1af, 0x7ff, 0x2, 0xee26, 0x3, 0x9, 0x8000000000000001, 0x9}, &(0x7f0000000080)={0x0, 0xbe8, 0x8, 0x4, 0xff, 0xff, 0x9, 0x7}, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000140)={&(0x7f0000000100)={[0xfe]}, 0x8}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) 20:48:53 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) 20:48:53 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{}, 0xa, @in6=@dev, 0x0, 0x0, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:53 executing program 4: bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000b40), 0x10) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000001180)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001140)={&(0x7f0000000e00)={0x14, 0x0, 0x8, 0xfffffffe}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000140)={@private1, 0x0, r5}) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000200)={@remote, 0x0}, &(0x7f0000000240)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) r10 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r10, 0x8918, &(0x7f0000000140)={@private1, 0x0, r11}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000002c0)={@local, 0x0}, &(0x7f0000000300)=0x14) r13 = socket$inet6_dccp(0xa, 0x6, 0x0) r14 = openat$vsock(0xffffffffffffff9c, &(0x7f00000008c0), 0x400, 0x0) r15 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r15, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r15, 0x8918, &(0x7f0000000140)={@private1, 0x0, r16}) sendmsg$TEAM_CMD_NOOP(r14, &(0x7f0000000b00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000940)={0x144, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [{{0x8, 0x1, r16}, {0x128, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x92}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}]}, 0x144}, 0x1, 0x0, 0x0, 0x4004014}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r13, 0x8918, &(0x7f0000000140)={@private1, 0x0, r17}) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000000880)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000840)={&(0x7f00000011c0)=ANY=[@ANYBLOB="b0040000", @ANYRES16=0x0, @ANYBLOB="180425bd7000fddbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="2c01028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000200000008000600", @ANYRES32=r3, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000008000038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040000feffff08000100", @ANYRES32=r7, @ANYBLOB="980002805c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002c00040009003f0003000000ff018002ce0e0000060001070000010003008107faffffff070081067f0000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="e80002803800010024000100616374697665706f72740000000000000000000000000000000000000000000005000300030000000800040035a57a15493fbe807ff1cfd9d762d167f34adc2124e9f30bef904f02f5f1112cc128ad64cc0b1e451cdcc5c18c77cb0510f9ea6e20b50587f21291359bd1ae0ea3", @ANYRES32=r11, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004004000000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400610000003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000008000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400ff7f000008000100", @ANYRES32=r12, @ANYBLOB="b000028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400920f000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400050000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r17, @ANYBLOB="7c00028038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040002000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000800000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e6700000000"], 0x4b0}, 0x1, 0x0, 0x0, 0x30000004}, 0x1) r18 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r18) getsockopt$inet6_mreq(r6, 0x29, 0x0, &(0x7f0000000380)={@local}, &(0x7f00000003c0)=0x14) [ 1030.487804] Unknown ioctl -1067952625 [ 1030.494611] Unknown ioctl -2141170668 [ 1030.498050] Unknown ioctl -1067952625 [ 1030.505102] Unknown ioctl -2141170668 [ 1030.512324] Unknown ioctl -2141170668 [ 1030.513350] Unknown ioctl -1067952625 [ 1030.527776] Unknown ioctl -1067952625 [ 1030.533959] Unknown ioctl -2141170668 20:48:53 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 20:48:53 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{}, 0xa, @in6=@dev, 0x0, 0x0, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) [ 1030.538238] Unknown ioctl -1067952625 [ 1030.549748] Unknown ioctl -1067952625 [ 1030.551937] Unknown ioctl -2141170668 [ 1030.557375] Unknown ioctl -1067952625 [ 1030.557380] Unknown ioctl -1067952625 [ 1030.557386] Unknown ioctl -1067952625 [ 1030.557391] Unknown ioctl -1067952625 [ 1030.557395] Unknown ioctl -1067952625 [ 1030.557402] Unknown ioctl -1067952625 [ 1030.573970] Unknown ioctl -2141170668 [ 1030.584067] Unknown ioctl -1067952625 20:48:54 executing program 4: bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000b40), 0x10) (async, rerun: 32) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) (rerun: 32) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000001180)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001140)={&(0x7f0000000e00)={0x14, 0x0, 0x8, 0xfffffffe}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000140)={@private1, 0x0, r5}) (async) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000200)={@remote, 0x0}, &(0x7f0000000240)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) (async) r10 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r10, 0x8918, &(0x7f0000000140)={@private1, 0x0, r11}) (async, rerun: 32) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000002c0)={@local, 0x0}, &(0x7f0000000300)=0x14) (async, rerun: 32) r13 = socket$inet6_dccp(0xa, 0x6, 0x0) (async) r14 = openat$vsock(0xffffffffffffff9c, &(0x7f00000008c0), 0x400, 0x0) r15 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r15, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r15, 0x8918, &(0x7f0000000140)={@private1, 0x0, r16}) (async) sendmsg$TEAM_CMD_NOOP(r14, &(0x7f0000000b00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000940)={0x144, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [{{0x8, 0x1, r16}, {0x128, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x92}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}]}, 0x144}, 0x1, 0x0, 0x0, 0x4004014}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r13, 0x8918, &(0x7f0000000140)={@private1, 0x0, r17}) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000000880)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000840)={&(0x7f00000011c0)=ANY=[@ANYBLOB="b0040000", @ANYRES16=0x0, @ANYBLOB="180425bd7000fddbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="2c01028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000200000008000600", @ANYRES32=r3, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000008000038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040000feffff08000100", @ANYRES32=r7, @ANYBLOB="980002805c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002c00040009003f0003000000ff018002ce0e0000060001070000010003008107faffffff070081067f0000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="e80002803800010024000100616374697665706f72740000000000000000000000000000000000000000000005000300030000000800040035a57a15493fbe807ff1cfd9d762d167f34adc2124e9f30bef904f02f5f1112cc128ad64cc0b1e451cdcc5c18c77cb0510f9ea6e20b50587f21291359bd1ae0ea3", @ANYRES32=r11, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004004000000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400610000003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000008000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400ff7f000008000100", @ANYRES32=r12, @ANYBLOB="b000028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400920f000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400050000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r17, @ANYBLOB="7c00028038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040002000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000800000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e6700000000"], 0x4b0}, 0x1, 0x0, 0x0, 0x30000004}, 0x1) (async, rerun: 64) r18 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) (rerun: 64) keyctl$get_persistent(0x16, 0xee00, r18) (async) getsockopt$inet6_mreq(r6, 0x29, 0x0, &(0x7f0000000380)={@local}, &(0x7f00000003c0)=0x14) 20:48:54 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) [ 1030.606033] Unknown ioctl -2141170668 [ 1030.615332] Unknown ioctl -2141170668 [ 1030.622632] Unknown ioctl -1067952625 [ 1030.627918] Unknown ioctl -2141170668 [ 1030.641007] Unknown ioctl -1067952625 [ 1030.645661] Unknown ioctl -2141170668 [ 1030.649479] Unknown ioctl -2141170668 [ 1030.649616] Unknown ioctl -1067952625 [ 1030.653271] Unknown ioctl -2141170668 [ 1030.653276] Unknown ioctl -2141170668 [ 1030.653281] Unknown ioctl -2141170668 [ 1030.653285] Unknown ioctl -2141170668 [ 1030.653290] Unknown ioctl -2141170668 [ 1030.653296] Unknown ioctl -2141170668 [ 1030.653302] Unknown ioctl -2141170668 [ 1030.653306] Unknown ioctl -2141170668 [ 1030.653310] Unknown ioctl -2141170668 [ 1030.653316] Unknown ioctl -2141170668 [ 1030.666016] Unknown ioctl -1067952625 [ 1030.684589] Unknown ioctl -2141170668 [ 1030.699556] Unknown ioctl -1067952625 [ 1030.702364] Unknown ioctl -2141170668 [ 1030.704232] Unknown ioctl -1067952625 [ 1030.709654] Unknown ioctl -2141170668 [ 1030.712256] Unknown ioctl -1067952625 [ 1030.716362] Unknown ioctl -2141170668 [ 1030.726533] Unknown ioctl -2141170668 [ 1030.730487] Unknown ioctl -2141170668 [ 1030.730952] Unknown ioctl -1067952625 [ 1030.734448] Unknown ioctl -2141170668 [ 1030.734455] Unknown ioctl -2141170668 [ 1030.734460] Unknown ioctl -2141170668 [ 1030.734464] Unknown ioctl -2141170668 [ 1030.734469] Unknown ioctl -2141170668 [ 1030.734473] Unknown ioctl -2141170668 [ 1030.734478] Unknown ioctl -2141170668 [ 1030.734482] Unknown ioctl -2141170668 [ 1030.734486] Unknown ioctl -2141170668 [ 1030.734492] Unknown ioctl -2141170668 [ 1030.734497] Unknown ioctl -2141170668 [ 1030.734526] Unknown ioctl -2141170668 [ 1030.748020] Unknown ioctl -1067952625 [ 1030.749914] Unknown ioctl -2141170668 [ 1030.754559] Unknown ioctl -1067952625 [ 1030.757766] Unknown ioctl -2141170668 [ 1030.762050] Unknown ioctl -1067952625 [ 1030.765160] Unknown ioctl -2141170668 [ 1030.765165] Unknown ioctl -2141170668 [ 1030.765170] Unknown ioctl -2141170668 [ 1030.774931] Unknown ioctl -1067952625 [ 1030.776736] Unknown ioctl -2141170668 [ 1030.781215] Unknown ioctl -1067952625 [ 1030.784379] Unknown ioctl -2141170668 [ 1030.792627] Unknown ioctl -1067952625 [ 1030.795976] Unknown ioctl -2141170668 [ 1030.800470] Unknown ioctl -1067952625 [ 1030.803499] Unknown ioctl -2141170668 [ 1030.807344] Unknown ioctl -1067952625 [ 1030.815976] Unknown ioctl -2141170668 [ 1030.818683] Unknown ioctl -1067952625 [ 1030.822395] Unknown ioctl -2141170668 [ 1030.822400] Unknown ioctl -2141170668 [ 1030.822405] Unknown ioctl -2141170668 [ 1030.822409] Unknown ioctl -2141170668 [ 1030.822416] Unknown ioctl -2141170668 [ 1030.822422] Unknown ioctl -2141170668 [ 1030.826370] Unknown ioctl -1067952625 [ 1030.837567] Unknown ioctl -2141170668 [ 1030.837733] Unknown ioctl -1067952625 [ 1030.841461] Unknown ioctl -2141170668 [ 1030.841466] Unknown ioctl -2141170668 [ 1030.899028] Unknown ioctl -1067952625 [ 1030.902830] Unknown ioctl -1067952625 [ 1030.906671] Unknown ioctl -1067952625 [ 1030.910478] Unknown ioctl -1067952625 [ 1030.914322] Unknown ioctl -1067952625 [ 1030.918112] Unknown ioctl -1067952625 [ 1030.921893] Unknown ioctl -1067952625 [ 1030.925753] Unknown ioctl -1067952625 [ 1030.929541] Unknown ioctl -1067952625 [ 1030.933317] Unknown ioctl -1067952625 [ 1030.937201] Unknown ioctl -1067952625 [ 1030.940997] Unknown ioctl -1067952625 [ 1030.944946] Unknown ioctl -1067952625 [ 1030.948739] Unknown ioctl -1067952625 [ 1030.952521] Unknown ioctl -1067952625 20:48:54 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000040)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000040)) (async) 20:48:54 executing program 0: pselect6(0x40, &(0x7f0000000000)={0x8, 0x8, 0x9, 0x3f91, 0xfff, 0x7ebb, 0x7ff, 0x5}, &(0x7f0000000040)={0xfffffffffffff1af, 0x7ff, 0x2, 0xee26, 0x3, 0x9, 0x8000000000000001, 0x9}, &(0x7f0000000080)={0x0, 0xbe8, 0x8, 0x4, 0xff, 0xff, 0x9, 0x7}, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000140)={&(0x7f0000000100)={[0xfe]}, 0x8}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) pselect6(0x40, &(0x7f0000000000)={0x8, 0x8, 0x9, 0x3f91, 0xfff, 0x7ebb, 0x7ff, 0x5}, &(0x7f0000000040)={0xfffffffffffff1af, 0x7ff, 0x2, 0xee26, 0x3, 0x9, 0x8000000000000001, 0x9}, &(0x7f0000000080)={0x0, 0xbe8, 0x8, 0x4, 0xff, 0xff, 0x9, 0x7}, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000140)={&(0x7f0000000100)={[0xfe]}, 0x8}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) (async) 20:48:54 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 20:48:54 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{}, 0xa, @in6=@dev, 0x0, 0x0, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:54 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bc0}, {{@in, 0x0, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:54 executing program 4: bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000b40), 0x10) (async) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000001180)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001140)={&(0x7f0000000e00)={0x14, 0x0, 0x8, 0xfffffffe}, 0x14}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) (async) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000140)={@private1, 0x0, r5}) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000200)={@remote, 0x0}, &(0x7f0000000240)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) r10 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r10, 0x8918, &(0x7f0000000140)={@private1, 0x0, r11}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000002c0)={@local, 0x0}, &(0x7f0000000300)=0x14) (async) r13 = socket$inet6_dccp(0xa, 0x6, 0x0) (async) r14 = openat$vsock(0xffffffffffffff9c, &(0x7f00000008c0), 0x400, 0x0) r15 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r15, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r15, 0x8918, &(0x7f0000000140)={@private1, 0x0, r16}) (async) sendmsg$TEAM_CMD_NOOP(r14, &(0x7f0000000b00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000940)={0x144, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [{{0x8, 0x1, r16}, {0x128, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x92}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}]}, 0x144}, 0x1, 0x0, 0x0, 0x4004014}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r13, 0x8918, &(0x7f0000000140)={@private1, 0x0, r17}) (async) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000000880)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000840)={&(0x7f00000011c0)=ANY=[@ANYBLOB="b0040000", @ANYRES16=0x0, @ANYBLOB="180425bd7000fddbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="2c01028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000200000008000600", @ANYRES32=r3, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000008000038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040000feffff08000100", @ANYRES32=r7, @ANYBLOB="980002805c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002c00040009003f0003000000ff018002ce0e0000060001070000010003008107faffffff070081067f0000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="e80002803800010024000100616374697665706f72740000000000000000000000000000000000000000000005000300030000000800040035a57a15493fbe807ff1cfd9d762d167f34adc2124e9f30bef904f02f5f1112cc128ad64cc0b1e451cdcc5c18c77cb0510f9ea6e20b50587f21291359bd1ae0ea3", @ANYRES32=r11, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004004000000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400610000003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000008000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400ff7f000008000100", @ANYRES32=r12, @ANYBLOB="b000028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400920f000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400050000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r17, @ANYBLOB="7c00028038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040002000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000800000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e6700000000"], 0x4b0}, 0x1, 0x0, 0x0, 0x30000004}, 0x1) r18 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r18) getsockopt$inet6_mreq(r6, 0x29, 0x0, &(0x7f0000000380)={@local}, &(0x7f00000003c0)=0x14) [ 1030.956694] Unknown ioctl -1067952625 [ 1030.960496] Unknown ioctl -1067952625 [ 1030.964355] Unknown ioctl -1067952625 [ 1030.968148] Unknown ioctl -1067952625 [ 1030.971925] Unknown ioctl -1067952625 [ 1030.975833] Unknown ioctl -1067952625 [ 1030.979629] Unknown ioctl -1067952625 [ 1030.983411] Unknown ioctl -1067952625 [ 1030.987268] Unknown ioctl -1067952625 20:48:54 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x181a00) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000100)={0x4, 0x1, 0x3e9c, 0x0, 0x6}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000080)) 20:48:54 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in, 0x0, 0x33}, 0x0, @in6=@dev, 0x0, 0x0, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:54 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bc0}, {{@in, 0x0, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:54 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in, 0x0, 0x33}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) [ 1031.069124] Unknown ioctl -1067952625 20:48:54 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bc0}, {{@in, 0x0, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:54 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$get_persistent(0x16, 0xee00, r2) [ 1031.096137] Unknown ioctl -2141170668 20:48:54 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @remote}, &(0x7f0000000080)=0xc) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x470040) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000100)) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000200)) 20:48:54 executing program 0: pselect6(0x40, &(0x7f0000000000)={0x8, 0x8, 0x9, 0x3f91, 0xfff, 0x7ebb, 0x7ff, 0x5}, &(0x7f0000000040)={0xfffffffffffff1af, 0x7ff, 0x2, 0xee26, 0x3, 0x9, 0x8000000000000001, 0x9}, &(0x7f0000000080)={0x0, 0xbe8, 0x8, 0x4, 0xff, 0xff, 0x9, 0x7}, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000140)={&(0x7f0000000100)={[0xfe]}, 0x8}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) 20:48:54 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in, 0x0, 0x33}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:54 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x181a00) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000100)={0x4, 0x1, 0x3e9c, 0x0, 0x6}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000080)) 20:48:54 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) (async) keyctl$get_persistent(0x16, 0xee00, r2) 20:48:54 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in, 0x0, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) [ 1031.128778] Unknown ioctl -1067952625 [ 1031.134220] Unknown ioctl -2141170668 20:48:54 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x181a00) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000100)={0x4, 0x1, 0x3e9c, 0x0, 0x6}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000080)) 20:48:54 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @remote}, &(0x7f0000000080)=0xc) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x470040) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000100)) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000200)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @remote}, &(0x7f0000000080)=0xc) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x470040) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000100)) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000200)) (async) 20:48:54 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in, 0x0, 0x33}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x5}}, 0xe8) 20:48:54 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x1, {0x1, @win={{0x0, 0x0, 0x0, 0x1f}, 0x0, 0x6, 0x0, 0x0, 0x0}}, 0xfffffffd}) 20:48:54 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:54 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) (async) keyctl$get_persistent(0x16, 0xee00, r2) 20:48:54 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:54 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) (async, rerun: 32) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) (rerun: 32) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x1, {0x1, @win={{0x0, 0x0, 0x0, 0x1f}, 0x0, 0x6, 0x0, 0x0, 0x0}}, 0xfffffffd}) 20:48:54 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in, 0x0, 0x33}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0xe8) 20:48:54 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x10401) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 20:48:54 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @remote}, &(0x7f0000000080)=0xc) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x470040) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000100)) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000200)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @remote}, &(0x7f0000000080)=0xc) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x470040) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000100)) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000200)) (async) 20:48:54 executing program 4: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) 20:48:54 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x10401) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x10401) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async) 20:48:54 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in, 0x0, 0x33}, 0x0, @in6=@dev}}, 0xe8) 20:48:54 executing program 4: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) (async) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) (async) keyctl$get_persistent(0x16, 0xee00, r2) (async) 20:48:54 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:54 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x1, {0x1, @win={{0x0, 0x0, 0x0, 0x1f}, 0x0, 0x6, 0x0, 0x0, 0x0}}, 0xfffffffd}) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x1, {0x1, @win={{0x0, 0x0, 0x0, 0x1f}, 0x0, 0x6, 0x0, 0x0, 0x0}}, 0xfffffffd}) (async) 20:48:54 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x1018c0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) 20:48:54 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x10401) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 20:48:54 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x1018c0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) 20:48:54 executing program 4: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) 20:48:54 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in, 0x0, 0x33}, 0x0, @in6=@dev, 0x0, 0x1, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:54 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0) 20:48:54 executing program 2: bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000b40), 0x10) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000001180)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001140)={&(0x7f0000000e00)={0x14, 0x0, 0x8, 0xfffffffe}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000140)={@private1, 0x0, r5}) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000200)={@remote, 0x0}, &(0x7f0000000240)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) r10 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r10, 0x8918, &(0x7f0000000140)={@private1, 0x0, r11}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000002c0)={@local, 0x0}, &(0x7f0000000300)=0x14) r13 = socket$inet6_dccp(0xa, 0x6, 0x0) r14 = openat$vsock(0xffffffffffffff9c, &(0x7f00000008c0), 0x400, 0x0) r15 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r15, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r15, 0x8918, &(0x7f0000000140)={@private1, 0x0, r16}) sendmsg$TEAM_CMD_NOOP(r14, &(0x7f0000000b00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000940)={0x144, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [{{0x8, 0x1, r16}, {0x128, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x92}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}]}, 0x144}, 0x1, 0x0, 0x0, 0x4004014}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r13, 0x8918, &(0x7f0000000140)={@private1, 0x0, r17}) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000000880)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000840)={&(0x7f00000011c0)=ANY=[@ANYBLOB="b0040000", @ANYRES16=0x0, @ANYBLOB="180425bd7000fddbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="2c01028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000200000008000600", @ANYRES32=r3, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000008000038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040000feffff08000100", @ANYRES32=r7, @ANYBLOB="980002805c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002c00040009003f0003000000ff018002ce0e0000060001070000010003008107faffffff070081067f0000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="e80002803800010024000100616374697665706f72740000000000000000000000000000000000000000000005000300030000000800040035a57a15493fbe807ff1cfd9d762d167f34adc2124e9f30bef904f02f5f1112cc128ad64cc0b1e451cdcc5c18c77cb0510f9ea6e20b50587f21291359bd1ae0ea3", @ANYRES32=r11, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004004000000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400610000003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000008000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400ff7f000008000100", @ANYRES32=r12, @ANYBLOB="b000028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400920f000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400050000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r17, @ANYBLOB="7c00028038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040002000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000800000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e6700000000"], 0x4b0}, 0x1, 0x0, 0x0, 0x30000004}, 0x1) r18 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r18) getsockopt$inet6_mreq(r6, 0x29, 0x0, &(0x7f0000000380)={@local}, &(0x7f00000003c0)=0x14) 20:48:54 executing program 0: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x3) 20:48:54 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in, 0x0, 0x33}, 0x0, @in6=@dev, 0x0, 0x0, 0x3, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:54 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x1018c0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x1018c0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) (async) 20:48:54 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, 0x0) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000080)) keyctl$get_persistent(0x16, 0xee00, r2) 20:48:54 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 20:48:54 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0) (async) 20:48:54 executing program 0: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x3) [ 1031.506939] Unknown ioctl -1067952625 [ 1031.518255] Unknown ioctl -1067952625 [ 1031.541391] Unknown ioctl 1079006226 20:48:55 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in, 0x0, 0x33}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x4, 0x430c, 0x7fffffff, 0x5}}, 0xe8) 20:48:55 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x111041) set_thread_area(&(0x7f0000000080)={0x3, 0x100000, 0x1000, 0x1, 0x3, 0x1, 0x1}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) 20:48:55 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, 0x0) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000080)) keyctl$get_persistent(0x16, 0xee00, r2) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) (async) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, 0x0) (async) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000080)) (async) keyctl$get_persistent(0x16, 0xee00, r2) (async) 20:48:55 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 20:48:55 executing program 0: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) (async) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x3) [ 1031.582265] Unknown ioctl -1067952625 [ 1031.598232] Unknown ioctl 46852 [ 1031.609644] Unknown ioctl -1067952625 [ 1031.628622] Unknown ioctl -1067952625 20:48:55 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in, 0x0, 0x33}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x430c, 0x7fffffff, 0x5}}, 0xe8) [ 1031.643191] Unknown ioctl 1079006226 [ 1031.658601] Unknown ioctl -1067952625 [ 1031.660295] Unknown ioctl 1079006226 [ 1031.666089] Unknown ioctl -1067952625 [ 1031.674631] Unknown ioctl -1067952625 [ 1031.682292] Unknown ioctl 46852 [ 1031.689563] Unknown ioctl 46852 20:48:55 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x111041) set_thread_area(&(0x7f0000000080)={0x3, 0x100000, 0x1000, 0x1, 0x3, 0x1, 0x1}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x111041) (async) set_thread_area(&(0x7f0000000080)={0x3, 0x100000, 0x1000, 0x1, 0x3, 0x1, 0x1}) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) (async) 20:48:55 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0) 20:48:55 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 20:48:55 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, 0x0) (async) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000080)) (async) keyctl$get_persistent(0x16, 0xee00, r2) 20:48:55 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x2, @raw_data="471578297a59d03271d6cb4296d9792b00a35070aebd795f0a653915d9c9b044121224b2c7f3834d522a79af0c8c31e11cc141c37df35c51330cff022700b9f50610c270ba83fe07e501b4aa6b58e5f0f4fb609fe1ce486687bc2f15291fc1f1f9882ff9910f0de60be286909adda42ca1f6e18a2ac91676d3982f1f2ee40aa029811ee129157bd62a5648c17f6ef8563526e6280d490cf1479fe73d4d1007ee93d431f7855dbc3913e6da7d0c04076cbbda364db9a649b4aac56e5a2042675fd8f8e49b7aa3469d"}}) [ 1031.693001] Unknown ioctl -1067952625 20:48:55 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in, 0x0, 0x33}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x5}}, 0xe8) 20:48:55 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x111041) (async) set_thread_area(&(0x7f0000000080)={0x3, 0x100000, 0x1000, 0x1, 0x3, 0x1, 0x1}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) 20:48:55 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) 20:48:55 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in, 0x0, 0x33}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0xe8) 20:48:55 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000040)={{0xffffffffffffffff, 0x1, 0xae, 0x3, 0x20}, 0xd4, 0x4}) 20:48:55 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000380)={0x2, 0x9, 0x23a8, 0x0, 0x8}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000200)={'raw\x00', 0xcc, "da2bb57bb5b671d1791d3b62ad2ed92ee6f50af437d3eea3a15be6c277db02d80819414030bd3c4590ad7034cde894345c70f2456eefec36b8f3e18171e1f9e0a9b59f284020bbc278c8f6dea64765a2b3a89149de11d05b7fbad32b8640a53bb3f6677830ddf42a6f7c4e348219645d46124c832c7ff832a516ac9e735b637e0f21d3e14e42b1aad6244b73f55812e938613a363892d6238d80de8fe4d1d1df5b214ba89ba9468d207b9b459aed31d049ad690a2115f78fc93aaaa06c60ff03f39a3a16e7ff3f39f06a27b3"}, &(0x7f0000000080)=0xf0) 20:48:55 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x2, @raw_data="471578297a59d03271d6cb4296d9792b00a35070aebd795f0a653915d9c9b044121224b2c7f3834d522a79af0c8c31e11cc141c37df35c51330cff022700b9f50610c270ba83fe07e501b4aa6b58e5f0f4fb609fe1ce486687bc2f15291fc1f1f9882ff9910f0de60be286909adda42ca1f6e18a2ac91676d3982f1f2ee40aa029811ee129157bd62a5648c17f6ef8563526e6280d490cf1479fe73d4d1007ee93d431f7855dbc3913e6da7d0c04076cbbda364db9a649b4aac56e5a2042675fd8f8e49b7aa3469d"}}) 20:48:55 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x2, 0x2, 0x0, 0x0, 0x8}) [ 1031.775036] Unknown ioctl -1067952625 [ 1031.776413] Unknown ioctl -1067952625 [ 1031.783105] Unknown ioctl -1067952625 [ 1031.791698] Unknown ioctl 46852 [ 1031.792818] Unknown ioctl 1079006226 [ 1031.802877] Unknown ioctl -1056942500 20:48:55 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) 20:48:55 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in, 0x0, 0x33}, 0x0, @in6=@dev}}, 0xe8) 20:48:55 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x2, 0x2, 0x0, 0x0, 0x8}) 20:48:55 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in, 0x0, 0x33}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x5}}, 0xe8) [ 1031.889357] Unknown ioctl -1067952625 [ 1031.893288] Unknown ioctl -1067952625 [ 1031.898377] Unknown ioctl 21666 [ 1031.906437] Unknown ioctl 1078481924 20:48:55 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) 20:48:55 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000040)={{0xffffffffffffffff, 0x1, 0xae, 0x3, 0x20}, 0xd4, 0x4}) (rerun: 32) 20:48:55 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000380)={0x2, 0x9, 0x23a8, 0x0, 0x8}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000200)={'raw\x00', 0xcc, "da2bb57bb5b671d1791d3b62ad2ed92ee6f50af437d3eea3a15be6c277db02d80819414030bd3c4590ad7034cde894345c70f2456eefec36b8f3e18171e1f9e0a9b59f284020bbc278c8f6dea64765a2b3a89149de11d05b7fbad32b8640a53bb3f6677830ddf42a6f7c4e348219645d46124c832c7ff832a516ac9e735b637e0f21d3e14e42b1aad6244b73f55812e938613a363892d6238d80de8fe4d1d1df5b214ba89ba9468d207b9b459aed31d049ad690a2115f78fc93aaaa06c60ff03f39a3a16e7ff3f39f06a27b3"}, &(0x7f0000000080)=0xf0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) (async) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) (async) keyctl$get_persistent(0x16, 0xee00, r2) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x4, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000380)={0x2, 0x9, 0x23a8, 0x0, 0x8}) (async) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, 0x0) (async) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000200)={'raw\x00', 0xcc, "da2bb57bb5b671d1791d3b62ad2ed92ee6f50af437d3eea3a15be6c277db02d80819414030bd3c4590ad7034cde894345c70f2456eefec36b8f3e18171e1f9e0a9b59f284020bbc278c8f6dea64765a2b3a89149de11d05b7fbad32b8640a53bb3f6677830ddf42a6f7c4e348219645d46124c832c7ff832a516ac9e735b637e0f21d3e14e42b1aad6244b73f55812e938613a363892d6238d80de8fe4d1d1df5b214ba89ba9468d207b9b459aed31d049ad690a2115f78fc93aaaa06c60ff03f39a3a16e7ff3f39f06a27b3"}, &(0x7f0000000080)=0xf0) (async) 20:48:55 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x2, @raw_data="471578297a59d03271d6cb4296d9792b00a35070aebd795f0a653915d9c9b044121224b2c7f3834d522a79af0c8c31e11cc141c37df35c51330cff022700b9f50610c270ba83fe07e501b4aa6b58e5f0f4fb609fe1ce486687bc2f15291fc1f1f9882ff9910f0de60be286909adda42ca1f6e18a2ac91676d3982f1f2ee40aa029811ee129157bd62a5648c17f6ef8563526e6280d490cf1479fe73d4d1007ee93d431f7855dbc3913e6da7d0c04076cbbda364db9a649b4aac56e5a2042675fd8f8e49b7aa3469d"}}) [ 1031.933405] Unknown ioctl 1079006226 [ 1031.941284] Unknown ioctl -1067952625 [ 1031.947331] Unknown ioctl -1056942500 20:48:55 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) 20:48:55 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x2, 0x2, 0x0, 0x0, 0x8}) [ 1031.975311] Unknown ioctl -1067952625 [ 1031.979881] Unknown ioctl 21666 [ 1032.004145] Unknown ioctl -1067952625 [ 1032.008264] Unknown ioctl -1067952625 [ 1032.012206] Unknown ioctl -1067952625 [ 1032.017553] Unknown ioctl 1078481924 20:48:55 executing program 5: ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f00000001c0)) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0xfffffffe, 0x4, {0x1, @win={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x5, 0x5, 0x3, {0x4, @pix={0x8001, 0x6, 0x59565955, 0x1, 0xff, 0x5, 0x2, 0x5, 0x0, 0x2}}, 0x5}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0xd9a4, 0x5, 0x2, "96c8bd57d3a352a78f0579576afea44cb225902d55ce62cd6084d6767961e105", 0x30314142}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000000)=0xe, 0x4) 20:48:55 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x2, @sliced={0x7, [0x9, 0x77d5, 0xff, 0x1, 0x200, 0xa1, 0x8001, 0xff, 0x0, 0x2, 0x8, 0xc5d7, 0x5, 0x9, 0xfe01, 0x7fff, 0x5, 0xfc41, 0x8001, 0x3, 0xfa5d, 0x6d0e, 0x6, 0x1, 0x3, 0x7f, 0x5, 0x3b, 0x2, 0x101, 0x3f, 0x5, 0x0, 0x6, 0x81, 0x3f, 0x0, 0x2, 0xfff, 0x9, 0x1, 0x80, 0x7, 0x6, 0xc5, 0x3, 0x9, 0x6], 0x6}}) [ 1032.023037] Unknown ioctl -1067952625 [ 1032.028120] Unknown ioctl -1056942500 [ 1032.032464] Unknown ioctl 1078481924 [ 1032.037473] Unknown ioctl 1079006226 [ 1032.041240] Unknown ioctl -1067952625 [ 1032.054241] Unknown ioctl -1067952625 [ 1032.061521] Unknown ioctl 1078481924 [ 1032.066154] Unknown ioctl -1067952625 [ 1032.070662] Unknown ioctl 1078481924 20:48:55 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) (async) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000380)={0x2, 0x9, 0x23a8, 0x0, 0x8}) (async) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, 0x0) (async, rerun: 32) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000200)={'raw\x00', 0xcc, "da2bb57bb5b671d1791d3b62ad2ed92ee6f50af437d3eea3a15be6c277db02d80819414030bd3c4590ad7034cde894345c70f2456eefec36b8f3e18171e1f9e0a9b59f284020bbc278c8f6dea64765a2b3a89149de11d05b7fbad32b8640a53bb3f6677830ddf42a6f7c4e348219645d46124c832c7ff832a516ac9e735b637e0f21d3e14e42b1aad6244b73f55812e938613a363892d6238d80de8fe4d1d1df5b214ba89ba9468d207b9b459aed31d049ad690a2115f78fc93aaaa06c60ff03f39a3a16e7ff3f39f06a27b3"}, &(0x7f0000000080)=0xf0) (rerun: 32) 20:48:55 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) [ 1032.077791] Unknown ioctl -1067952625 [ 1032.078919] Unknown ioctl -1067952625 [ 1032.082944] Unknown ioctl 1078481924 [ 1032.093956] Unknown ioctl 21666 [ 1032.099467] Unknown ioctl 1078481924 [ 1032.106139] Unknown ioctl -1067952625 [ 1032.111202] Unknown ioctl -1067952625 [ 1032.114343] Unknown ioctl 1078481924 [ 1032.122194] Unknown ioctl -1067952625 20:48:55 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x105500) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000040)) 20:48:55 executing program 5: ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f00000001c0)) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0xfffffffe, 0x4, {0x1, @win={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x5, 0x5, 0x3, {0x4, @pix={0x8001, 0x6, 0x59565955, 0x1, 0xff, 0x5, 0x2, 0x5, 0x0, 0x2}}, 0x5}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0xd9a4, 0x5, 0x2, "96c8bd57d3a352a78f0579576afea44cb225902d55ce62cd6084d6767961e105", 0x30314142}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000000)=0xe, 0x4) 20:48:55 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x2, @sliced={0x7, [0x9, 0x77d5, 0xff, 0x1, 0x200, 0xa1, 0x8001, 0xff, 0x0, 0x2, 0x8, 0xc5d7, 0x5, 0x9, 0xfe01, 0x7fff, 0x5, 0xfc41, 0x8001, 0x3, 0xfa5d, 0x6d0e, 0x6, 0x1, 0x3, 0x7f, 0x5, 0x3b, 0x2, 0x101, 0x3f, 0x5, 0x0, 0x6, 0x81, 0x3f, 0x0, 0x2, 0xfff, 0x9, 0x1, 0x80, 0x7, 0x6, 0xc5, 0x3, 0x9, 0x6], 0x6}}) [ 1032.129735] Unknown ioctl 1078481924 [ 1032.134600] Unknown ioctl -1067952625 [ 1032.144339] Unknown ioctl 1078481924 [ 1032.149217] Unknown ioctl -1067952625 [ 1032.158164] Unknown ioctl 1078481924 [ 1032.161941] Unknown ioctl -1067952625 [ 1032.171506] Unknown ioctl 1078481924 [ 1032.175363] Unknown ioctl -1067952625 [ 1032.182458] Unknown ioctl 1078481924 [ 1032.188885] Unknown ioctl -1067952625 [ 1032.197564] Unknown ioctl 1078481924 [ 1032.202427] Unknown ioctl -1067952625 [ 1032.209595] Unknown ioctl 1079006226 [ 1032.213366] Unknown ioctl -1067952625 [ 1032.218817] Unknown ioctl 1078481924 [ 1032.222383] Unknown ioctl -1067952625 [ 1032.222857] Unknown ioctl -1067952625 [ 1032.232065] Unknown ioctl -1067952625 [ 1032.236275] Unknown ioctl 1078481924 [ 1032.240074] Unknown ioctl -1067952625 [ 1032.244377] Unknown ioctl -1067952625 [ 1032.248315] Unknown ioctl 1078481924 [ 1032.251266] Unknown ioctl -1067952625 [ 1032.252065] Unknown ioctl -1067952625 [ 1032.261425] Unknown ioctl 1078481924 [ 1032.265160] Unknown ioctl -1067952625 [ 1032.265166] Unknown ioctl -1067952625 [ 1032.265922] Unknown ioctl -1067952625 [ 1032.269587] Unknown ioctl -1067952625 [ 1032.272960] Unknown ioctl -1067952625 [ 1032.277184] Unknown ioctl 1078481924 [ 1032.286784] Unknown ioctl -1067952625 [ 1032.288415] Unknown ioctl -1067952625 [ 1032.292054] Unknown ioctl -1067952625 [ 1032.296079] Unknown ioctl 1078481924 [ 1032.301600] Unknown ioctl -1067952625 [ 1032.303740] Unknown ioctl -1067952625 [ 1032.311177] Unknown ioctl 1078481924 [ 1032.312081] Unknown ioctl -1067952625 [ 1032.315141] Unknown ioctl -1067952625 [ 1032.319742] Unknown ioctl -1067952625 [ 1032.322662] Unknown ioctl 1078481924 [ 1032.330661] Unknown ioctl -1067952625 [ 1032.332580] Unknown ioctl -1067952625 [ 1032.334790] Unknown ioctl 1078481924 [ 1032.339475] Unknown ioctl -1067952625 [ 1032.342068] Unknown ioctl -1067952625 [ 1032.349944] Unknown ioctl 1078481924 [ 1032.350924] Unknown ioctl -1067952625 [ 1032.353905] Unknown ioctl 1078481924 [ 1032.358351] Unknown ioctl -1067952625 [ 1032.361304] Unknown ioctl -1067952625 [ 1032.369376] Unknown ioctl 1078481924 [ 1032.369500] Unknown ioctl -1067952625 [ 1032.373131] Unknown ioctl -1067952625 [ 1032.378238] Unknown ioctl -1067952625 [ 1032.381258] Unknown ioctl 1078481924 [ 1032.388575] Unknown ioctl 1078481924 [ 1032.388965] Unknown ioctl -1067952625 [ 1032.392320] Unknown ioctl -1067952625 [ 1032.397462] Unknown ioctl -1067952625 [ 1032.402642] Unknown ioctl 1078481924 [ 1032.404665] Unknown ioctl -1067952625 [ 1032.411329] Unknown ioctl -1067952625 [ 1032.411335] Unknown ioctl -1067952625 [ 1032.417295] Unknown ioctl -1067952625 [ 1032.419362] Unknown ioctl 1078481924 [ 1032.422877] Unknown ioctl -1067952625 [ 1032.430410] Unknown ioctl -1067952625 [ 1032.431871] Unknown ioctl -1067952625 [ 1032.434501] Unknown ioctl -1067952625 [ 1032.439000] Unknown ioctl -1067952625 [ 1032.442014] Unknown ioctl 1078481924 [ 1032.446632] Unknown ioctl -1067952625 [ 1032.453350] Unknown ioctl -1067952625 [ 1032.454858] Unknown ioctl -1067952625 [ 1032.457456] Unknown ioctl 1078481924 [ 1032.461785] Unknown ioctl -1067952625 [ 1032.464973] Unknown ioctl -1067952625 [ 1032.469372] Unknown ioctl -1067952625 [ 1032.472406] Unknown ioctl 1078481924 [ 1032.476626] Unknown ioctl -1067952625 20:48:55 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000040)={{0xffffffffffffffff, 0x1, 0xae, 0x3, 0x20}, 0xd4, 0x4}) 20:48:55 executing program 2: r0 = socket$kcm(0x29, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) 20:48:55 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x105500) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000040)) 20:48:55 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x2, @sliced={0x7, [0x9, 0x77d5, 0xff, 0x1, 0x200, 0xa1, 0x8001, 0xff, 0x0, 0x2, 0x8, 0xc5d7, 0x5, 0x9, 0xfe01, 0x7fff, 0x5, 0xfc41, 0x8001, 0x3, 0xfa5d, 0x6d0e, 0x6, 0x1, 0x3, 0x7f, 0x5, 0x3b, 0x2, 0x101, 0x3f, 0x5, 0x0, 0x6, 0x81, 0x3f, 0x0, 0x2, 0xfff, 0x9, 0x1, 0x80, 0x7, 0x6, 0xc5, 0x3, 0x9, 0x6], 0x6}}) 20:48:55 executing program 5: ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f00000001c0)) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0xfffffffe, 0x4, {0x1, @win={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x5, 0x5, 0x3, {0x4, @pix={0x8001, 0x6, 0x59565955, 0x1, 0xff, 0x5, 0x2, 0x5, 0x0, 0x2}}, 0x5}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0xd9a4, 0x5, 0x2, "96c8bd57d3a352a78f0579576afea44cb225902d55ce62cd6084d6767961e105", 0x30314142}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000000)=0xe, 0x4) 20:48:55 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$link(0x8, 0x0, r2) keyctl$reject(0x13, r0, 0x2, 0x9, r2) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0xee00, r3) [ 1032.484117] Unknown ioctl -1067952625 [ 1032.486959] Unknown ioctl 1078481924 [ 1032.488006] Unknown ioctl -1067952625 20:48:55 executing program 2: r0 = socket$kcm(0x29, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) 20:48:55 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x105500) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000040)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x105500) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000040)) (async) 20:48:55 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20}}, 0xe82}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0xeb1, 0x3, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in=@multicast2, @in6=@remote}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000040)={r2}) 20:48:55 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r0) (async) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$link(0x8, 0x0, r2) (async) keyctl$reject(0x13, r0, 0x2, 0x9, r2) (async) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0xee00, r3) 20:48:55 executing program 5: ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f00000001c0)) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0xfffffffe, 0x4, {0x1, @win={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x5, 0x5, 0x3, {0x4, @pix={0x8001, 0x6, 0x59565955, 0x1, 0xff, 0x5, 0x2, 0x5, 0x0, 0x2}}, 0x5}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0xd9a4, 0x5, 0x2, "96c8bd57d3a352a78f0579576afea44cb225902d55ce62cd6084d6767961e105", 0x30314142}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) [ 1032.552401] Unknown ioctl -1067952625 [ 1032.560985] Unknown ioctl -1067952625 [ 1032.577903] Unknown ioctl 1078481924 [ 1032.603920] Unknown ioctl -1067952625 [ 1032.610522] Unknown ioctl -1072667469 20:48:56 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20}}, 0xe82}) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0xeb1, 0x3, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in=@multicast2, @in6=@remote}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000040)={r2}) (rerun: 64) 20:48:56 executing program 5: ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f00000001c0)) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0xfffffffe, 0x4, {0x1, @win={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x5, 0x5, 0x3, {0x4, @pix={0x8001, 0x6, 0x59565955, 0x1, 0xff, 0x5, 0x2, 0x5, 0x0, 0x2}}, 0x5}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0xd9a4, 0x5, 0x2, "96c8bd57d3a352a78f0579576afea44cb225902d55ce62cd6084d6767961e105", 0x30314142}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) 20:48:56 executing program 2: r0 = socket$kcm(0x29, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) [ 1032.645448] Unknown ioctl -1067952625 20:48:56 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000080)={{0x1, 0x0, 0x1, 0x3, 0x80000000}, 0x6, 0xffffffe0, 'id0\x00', 'timer0\x00', 0x0, 0x1, 0xffff, 0x0, 0x1e5f}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2, 0x5, 0x2, 0x3}}) 20:48:56 executing program 2: socket$kcm(0x29, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) 20:48:56 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$link(0x8, 0x0, r2) keyctl$reject(0x13, r0, 0x2, 0x9, r2) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0xee00, r3) [ 1032.718450] Unknown ioctl -1067952625 [ 1032.731433] Unknown ioctl -1072667469 [ 1032.735794] Unknown ioctl -1072667469 [ 1032.741297] Unknown ioctl -1072667469 [ 1032.742764] Unknown ioctl -1067952625 [ 1032.753841] Unknown ioctl -1067952625 [ 1032.762606] Unknown ioctl -1072667469 20:48:56 executing program 5: ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f00000001c0)) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0xfffffffe, 0x4, {0x1, @win={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x5, 0x5, 0x3, {0x4, @pix={0x8001, 0x6, 0x59565955, 0x1, 0xff, 0x5, 0x2, 0x5, 0x0, 0x2}}, 0x5}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0xd9a4, 0x5, 0x2, "96c8bd57d3a352a78f0579576afea44cb225902d55ce62cd6084d6767961e105", 0x30314142}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 20:48:56 executing program 2: socket$kcm(0x29, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) 20:48:56 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = socket(0x11, 0x6, 0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @dev, @remote}, &(0x7f00000000c0)=0xc) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2040}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x114, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [{{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xde8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x114}, 0x1, 0x0, 0x0, 0xc040}, 0x80) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 20:48:56 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000080)={{0x1, 0x0, 0x1, 0x3, 0x80000000}, 0x6, 0xffffffe0, 'id0\x00', 'timer0\x00', 0x0, 0x1, 0xffff, 0x0, 0x1e5f}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2, 0x5, 0x2, 0x3}}) 20:48:56 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) keyctl$negate(0xd, r0, 0x3, r0) r3 = request_key(&(0x7f0000000200)='.request_key_auth\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)='keyring\x00', r2) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$link(0x8, 0x0, r5) request_key(&(0x7f00000002c0)='cifs.idmap\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)='^\x00', r5) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r3) [ 1032.773798] Unknown ioctl -1057467389 [ 1032.779256] Unknown ioctl -1072667469 [ 1032.798821] Unknown ioctl -1072667469 20:48:56 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r1 = socket(0x11, 0x6, 0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @dev, @remote}, &(0x7f00000000c0)=0xc) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2040}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x114, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [{{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xde8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x114}, 0x1, 0x0, 0x0, 0xc040}, 0x80) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) [ 1032.822165] Unknown ioctl -1072667469 [ 1032.848887] Unknown ioctl -1072667469 [ 1032.858029] Unknown ioctl -1072667469 [ 1032.861916] Unknown ioctl -1072667469 [ 1032.866354] Unknown ioctl -1072667469 [ 1032.870592] Unknown ioctl -1072667469 [ 1032.877708] Unknown ioctl -1067952625 [ 1032.877904] Unknown ioctl -1072667469 [ 1032.881955] Unknown ioctl -1057467389 [ 1032.889094] Unknown ioctl -1072667469 [ 1032.892966] Unknown ioctl -1072667469 [ 1032.897127] Unknown ioctl -1072667469 [ 1032.900925] Unknown ioctl -1072667469 [ 1032.905168] Unknown ioctl -1072667469 [ 1032.908965] Unknown ioctl -1072667469 [ 1032.912741] Unknown ioctl -1072667469 [ 1032.916785] Unknown ioctl -1072667469 [ 1032.920594] Unknown ioctl -1072667469 [ 1032.924453] Unknown ioctl -1072667469 [ 1032.928237] Unknown ioctl -1072667469 [ 1032.932026] Unknown ioctl -1072667469 [ 1032.935932] Unknown ioctl -1072667469 [ 1032.939720] Unknown ioctl -1072667469 [ 1032.943564] Unknown ioctl -1072667469 [ 1032.947351] Unknown ioctl -1072667469 [ 1032.951134] Unknown ioctl -1072667469 [ 1032.954986] Unknown ioctl -1072667469 [ 1032.958787] Unknown ioctl -1072667469 [ 1032.962572] Unknown ioctl -1072667469 [ 1032.966439] Unknown ioctl -1072667469 [ 1032.970224] Unknown ioctl -1072667469 [ 1032.974081] Unknown ioctl -1072667469 [ 1032.977872] Unknown ioctl -1072667469 [ 1032.981670] Unknown ioctl -1072667469 [ 1032.985518] Unknown ioctl -1072667469 [ 1032.989309] Unknown ioctl -1072667469 [ 1032.993095] Unknown ioctl -1072667469 [ 1032.996929] Unknown ioctl -1072667469 [ 1033.000713] Unknown ioctl -1072667469 [ 1033.004551] Unknown ioctl -1072667469 [ 1033.008336] Unknown ioctl -1072667469 [ 1033.012108] Unknown ioctl -1072667469 [ 1033.015937] Unknown ioctl -1072667469 [ 1033.019723] Unknown ioctl -1072667469 [ 1033.023573] Unknown ioctl -1072667469 [ 1033.027361] Unknown ioctl -1072667469 [ 1033.031161] Unknown ioctl -1072667469 [ 1033.035096] Unknown ioctl -1072667469 [ 1033.038885] Unknown ioctl -1072667469 [ 1033.042680] Unknown ioctl -1072667469 20:48:56 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20}}, 0xe82}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0xeb1, 0x3, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in=@multicast2, @in6=@remote}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000040)={r2}) 20:48:56 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) (async) keyctl$negate(0xd, r0, 0x3, r0) (async) r3 = request_key(&(0x7f0000000200)='.request_key_auth\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)='keyring\x00', r2) (async) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$link(0x8, 0x0, r5) (async) request_key(&(0x7f00000002c0)='cifs.idmap\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)='^\x00', r5) (async) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r3) 20:48:56 executing program 5: ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f00000001c0)) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0xfffffffe, 0x4, {0x1, @win={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x5, 0x5, 0x3, {0x4, @pix={0x8001, 0x6, 0x59565955, 0x1, 0xff, 0x5, 0x2, 0x5, 0x0, 0x2}}, 0x5}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0xd9a4, 0x5, 0x2, "96c8bd57d3a352a78f0579576afea44cb225902d55ce62cd6084d6767961e105", 0x30314142}) 20:48:56 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r1 = socket(0x11, 0x6, 0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @dev, @remote}, &(0x7f00000000c0)=0xc) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2040}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x114, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [{{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xde8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x114}, 0x1, 0x0, 0x0, 0xc040}, 0x80) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 20:48:56 executing program 2: socket$kcm(0x29, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) 20:48:56 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000080)={{0x1, 0x0, 0x1, 0x3, 0x80000000}, 0x6, 0xffffffe0, 'id0\x00', 'timer0\x00', 0x0, 0x1, 0xffff, 0x0, 0x1e5f}) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2, 0x5, 0x2, 0x3}}) [ 1033.046540] Unknown ioctl -1072667469 [ 1033.050327] Unknown ioctl -1072667469 [ 1033.054169] Unknown ioctl -1072667469 [ 1033.057959] Unknown ioctl -1072667469 [ 1033.061743] Unknown ioctl -1072667469 [ 1033.065585] Unknown ioctl -1072667469 [ 1033.069369] Unknown ioctl -1072667469 [ 1033.073144] Unknown ioctl -1072667469 [ 1033.076979] Unknown ioctl -1072667469 [ 1033.080776] Unknown ioctl -1072667469 [ 1033.084642] Unknown ioctl -1072667469 20:48:56 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 20:48:56 executing program 1: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000140)={@private1, 0x0, r1}) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000040)={0x1, 0x4, 0x22, 0x50, @vifc_lcl_ifindex=r1, @multicast1}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0) 20:48:56 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) keyctl$negate(0xd, r0, 0x3, r0) r3 = request_key(&(0x7f0000000200)='.request_key_auth\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)='keyring\x00', r2) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$link(0x8, 0x0, r5) request_key(&(0x7f00000002c0)='cifs.idmap\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)='^\x00', r5) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r3) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0x0) (async) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) (async) keyctl$get_persistent(0x16, 0xee00, r2) (async) keyctl$negate(0xd, r0, 0x3, r0) (async) request_key(&(0x7f0000000200)='.request_key_auth\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)='keyring\x00', r2) (async) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r4) (async) keyctl$link(0x8, 0x0, r5) (async) request_key(&(0x7f00000002c0)='cifs.idmap\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)='^\x00', r5) (async) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r3) (async) 20:48:56 executing program 5: ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f00000001c0)) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0xfffffffe, 0x4, {0x1, @win={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0xd9a4, 0x5, 0x2, "96c8bd57d3a352a78f0579576afea44cb225902d55ce62cd6084d6767961e105", 0x30314142}) 20:48:56 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0xffffffffffffffff, 0x3, 0x80000001, 0x1, 0x6}, 0x400, 0x5fc1}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) 20:48:56 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 20:48:56 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x3, @win={{0x7fc}, 0x7, 0x20000000, 0x0, 0x0, 0x0}}, 0x1}) [ 1033.139982] Unknown ioctl -1067952625 [ 1033.142057] Unknown ioctl -1067952625 [ 1033.155995] Unknown ioctl -1057467389 [ 1033.169284] Unknown ioctl -1072667469 20:48:56 executing program 1: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000140)={@private1, 0x0, r1}) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000040)={0x1, 0x4, 0x22, 0x50, @vifc_lcl_ifindex=r1, @multicast1}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)) (async) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000140)={@private1, 0x0, r1}) (async) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000040)={0x1, 0x4, 0x22, 0x50, @vifc_lcl_ifindex=r1, @multicast1}, 0x10) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0) (async) 20:48:56 executing program 5: ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f00000001c0)) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0xd9a4, 0x5, 0x2, "96c8bd57d3a352a78f0579576afea44cb225902d55ce62cd6084d6767961e105", 0x30314142}) 20:48:56 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0xffffffffffffffff, 0x3, 0x80000001, 0x1, 0x6}, 0x400, 0x5fc1}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0xffffffffffffffff, 0x3, 0x80000001, 0x1, 0x6}, 0x400, 0x5fc1}) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) (async) 20:48:56 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 20:48:56 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x3, @win={{0x7fc}, 0x7, 0x20000000, 0x0, 0x0, 0x0}}, 0x1}) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x3, @win={{0x7fc}, 0x7, 0x20000000, 0x0, 0x0, 0x0}}, 0x1}) (async) 20:48:56 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000300), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$clear(0x7, r1) keyctl$get_persistent(0x16, 0xee00, r3) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$get_persistent(0x16, 0x0, r4) request_key(&(0x7f0000000200)='blacklist\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)=',,.]{,,}[\'\x00', r4) 20:48:56 executing program 5: ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f00000001c0)) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0xd9a4, 0x5, 0x2, "96c8bd57d3a352a78f0579576afea44cb225902d55ce62cd6084d6767961e105", 0x30314142}) 20:48:56 executing program 1: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000140)={@private1, 0x0, r1}) (async) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000040)={0x1, 0x4, 0x22, 0x50, @vifc_lcl_ifindex=r1, @multicast1}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0) 20:48:56 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000300), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$clear(0x7, r1) keyctl$get_persistent(0x16, 0xee00, r3) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$get_persistent(0x16, 0x0, r4) request_key(&(0x7f0000000200)='blacklist\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)=',,.]{,,}[\'\x00', r4) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) (async) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r1) (async) add_key$keyring(&(0x7f0000000300), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r2) (async) keyctl$clear(0x7, r1) (async) keyctl$get_persistent(0x16, 0xee00, r3) (async) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r4) (async) keyctl$get_persistent(0x16, 0x0, r4) (async) request_key(&(0x7f0000000200)='blacklist\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)=',,.]{,,}[\'\x00', r4) (async) 20:48:56 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0xffffffffffffffff, 0x3, 0x80000001, 0x1, 0x6}, 0x400, 0x5fc1}) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) 20:48:56 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20}}, 0xe82}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0xeb1, 0x3, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in=@multicast2, @in6=@remote}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000040)={r2}) 20:48:56 executing program 5: ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f00000001c0)) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0xd9a4, 0x5, 0x2, "96c8bd57d3a352a78f0579576afea44cb225902d55ce62cd6084d6767961e105", 0x30314142}) 20:48:56 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x3, @win={{0x7fc}, 0x7, 0x20000000, 0x0, 0x0, 0x0}}, 0x1}) 20:48:56 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000300), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$clear(0x7, r1) (async) keyctl$get_persistent(0x16, 0xee00, r3) (async) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r4) (async) keyctl$get_persistent(0x16, 0x0, r4) (async) request_key(&(0x7f0000000200)='blacklist\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)=',,.]{,,}[\'\x00', r4) 20:48:56 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) add_key$user(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x3}, &(0x7f00000005c0)='a', 0x1, 0xfffffffffffffffc) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 20:48:56 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r3, 0x89e1, &(0x7f0000000080)={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) select(0x40, &(0x7f0000000300)={0x3, 0xfffffffffffffff7, 0x287d130, 0x80, 0x5, 0x80000001, 0x7fffffffffffffff, 0x2}, &(0x7f0000000340)={0x2, 0x80000001, 0x5, 0x2, 0x7fffffff, 0x0, 0xffffffffffff6930, 0x6}, &(0x7f0000000380)={0x2, 0x1, 0x10001, 0x8, 0x80000000, 0x6, 0xe8b, 0x40}, &(0x7f0000000400)={r5, r6/1000+10000}) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000001180)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001140)={&(0x7f0000000e00)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_VERSION={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x80) r7 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$link(0x8, r7, r0) 20:48:56 executing program 5: ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f00000001c0)) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0xd9a4, 0x5, 0x2, "96c8bd57d3a352a78f0579576afea44cb225902d55ce62cd6084d6767961e105", 0x30314142}) 20:48:56 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, 0xfffffffffffffffe) [ 1033.418833] Unknown ioctl -1067952625 20:48:56 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x105500) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000040)) 20:48:56 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) add_key$user(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x3}, &(0x7f00000005c0)='a', 0x1, 0xfffffffffffffffc) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) add_key$user(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x3}, &(0x7f00000005c0)='a', 0x1, 0xfffffffffffffffc) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async) 20:48:56 executing program 3: write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x37f541) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x2, r0, 0xff}) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000000), &(0x7f0000000140)=0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @loopback, @private}, &(0x7f0000000280)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@remote, 0x4e20, 0x2, 0x4e23, 0x1, 0x2, 0x20, 0x20, 0x0, r1, 0xee01}, {0x13f, 0x3, 0xdf, 0x2, 0x0, 0x1000, 0x4, 0x9}, {0xff, 0xe1, 0x7ff, 0x8}, 0x3, 0x6e6bbc, 0x2}, {{@in6=@private0, 0x4d4, 0x6c}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x2, 0x1, 0x1, 0x2e732c7f, 0x9, 0xffffffff}}, 0xe8) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000440)={0xffffffffffffffff}) ioctl$SIOCGETMIFCNT_IN6(r2, 0x89e0, &(0x7f0000000480)={0x1}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f00000003c0)) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)=@overlay={0xfe, 0x3, 0x4, 0x400, 0x200, {}, {0x1, 0x2, 0x1, 0x80, 0x9, 0xa8, "561bbec7"}, 0x80000000, 0x3, {}, 0x7ff}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @empty, @private}, &(0x7f0000000200)=0xc) [ 1033.465542] Unknown ioctl -1072667469 20:48:56 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r3, 0x89e1, &(0x7f0000000080)={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) select(0x40, &(0x7f0000000300)={0x3, 0xfffffffffffffff7, 0x287d130, 0x80, 0x5, 0x80000001, 0x7fffffffffffffff, 0x2}, &(0x7f0000000340)={0x2, 0x80000001, 0x5, 0x2, 0x7fffffff, 0x0, 0xffffffffffff6930, 0x6}, &(0x7f0000000380)={0x2, 0x1, 0x10001, 0x8, 0x80000000, 0x6, 0xe8b, 0x40}, &(0x7f0000000400)={r5, r6/1000+10000}) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000001180)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001140)={&(0x7f0000000e00)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_VERSION={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x80) r7 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$link(0x8, r7, r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) (async) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) (async) keyctl$get_persistent(0x16, 0xee00, r2) (async) socket$igmp(0x2, 0x3, 0x2) (async) ioctl$SIOCGETSGCNT(r3, 0x89e1, &(0x7f0000000080)={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) clock_gettime(0x0, &(0x7f00000003c0)) (async) select(0x40, &(0x7f0000000300)={0x3, 0xfffffffffffffff7, 0x287d130, 0x80, 0x5, 0x80000001, 0x7fffffffffffffff, 0x2}, &(0x7f0000000340)={0x2, 0x80000001, 0x5, 0x2, 0x7fffffff, 0x0, 0xffffffffffff6930, 0x6}, &(0x7f0000000380)={0x2, 0x1, 0x10001, 0x8, 0x80000000, 0x6, 0xe8b, 0x40}, &(0x7f0000000400)={r5, r6/1000+10000}) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000001180)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001140)={&(0x7f0000000e00)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_VERSION={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) (async) keyctl$link(0x8, r7, r0) (async) 20:48:56 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, 0xfffffffffffffffe) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, 0xfffffffffffffffe) (async) 20:48:56 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0xd9a4, 0x5, 0x2, "96c8bd57d3a352a78f0579576afea44cb225902d55ce62cd6084d6767961e105", 0x30314142}) 20:48:56 executing program 3: write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x37f541) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x2, r0, 0xff}) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000000), &(0x7f0000000140)=0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @loopback, @private}, &(0x7f0000000280)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@remote, 0x4e20, 0x2, 0x4e23, 0x1, 0x2, 0x20, 0x20, 0x0, r1, 0xee01}, {0x13f, 0x3, 0xdf, 0x2, 0x0, 0x1000, 0x4, 0x9}, {0xff, 0xe1, 0x7ff, 0x8}, 0x3, 0x6e6bbc, 0x2}, {{@in6=@private0, 0x4d4, 0x6c}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x2, 0x1, 0x1, 0x2e732c7f, 0x9, 0xffffffff}}, 0xe8) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000440)={0xffffffffffffffff}) ioctl$SIOCGETMIFCNT_IN6(r2, 0x89e0, &(0x7f0000000480)={0x1}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f00000003c0)) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)=@overlay={0xfe, 0x3, 0x4, 0x400, 0x200, {}, {0x1, 0x2, 0x1, 0x80, 0x9, 0xa8, "561bbec7"}, 0x80000000, 0x3, {}, 0x7ff}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @empty, @private}, &(0x7f0000000200)=0xc) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x37f541) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x2, r0, 0xff}) (async) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000000), &(0x7f0000000140)=0x4) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @loopback, @private}, &(0x7f0000000280)=0xc) (async) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@remote, 0x4e20, 0x2, 0x4e23, 0x1, 0x2, 0x20, 0x20, 0x0, r1, 0xee01}, {0x13f, 0x3, 0xdf, 0x2, 0x0, 0x1000, 0x4, 0x9}, {0xff, 0xe1, 0x7ff, 0x8}, 0x3, 0x6e6bbc, 0x2}, {{@in6=@private0, 0x4d4, 0x6c}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x2, 0x1, 0x1, 0x2e732c7f, 0x9, 0xffffffff}}, 0xe8) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000440)) (async) ioctl$SIOCGETMIFCNT_IN6(r2, 0x89e0, &(0x7f0000000480)={0x1}) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f00000003c0)) (async) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)=@overlay={0xfe, 0x3, 0x4, 0x400, 0x200, {}, {0x1, 0x2, 0x1, 0x80, 0x9, 0xa8, "561bbec7"}, 0x80000000, 0x3, {}, 0x7ff}) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @empty, @private}, &(0x7f0000000200)=0xc) (async) 20:48:56 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, 0xfffffffffffffffe) 20:48:56 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, 0xfffffffffffffffe) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, 0xfffffffffffffffe) (async) 20:48:56 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) add_key$user(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x3}, &(0x7f00000005c0)='a', 0x1, 0xfffffffffffffffc) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 20:48:57 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0xd9a4, 0x5, 0x2, "96c8bd57d3a352a78f0579576afea44cb225902d55ce62cd6084d6767961e105", 0x30314142}) 20:48:57 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) (async) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r3, 0x89e1, &(0x7f0000000080)={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) select(0x40, &(0x7f0000000300)={0x3, 0xfffffffffffffff7, 0x287d130, 0x80, 0x5, 0x80000001, 0x7fffffffffffffff, 0x2}, &(0x7f0000000340)={0x2, 0x80000001, 0x5, 0x2, 0x7fffffff, 0x0, 0xffffffffffff6930, 0x6}, &(0x7f0000000380)={0x2, 0x1, 0x10001, 0x8, 0x80000000, 0x6, 0xe8b, 0x40}, &(0x7f0000000400)={r5, r6/1000+10000}) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000001180)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001140)={&(0x7f0000000e00)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async, rerun: 64) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_VERSION={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x80) (rerun: 64) r7 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$link(0x8, r7, r0) 20:48:57 executing program 3: write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) (async) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x37f541) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x2, r0, 0xff}) (async, rerun: 32) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000000), &(0x7f0000000140)=0x4) (rerun: 32) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @loopback, @private}, &(0x7f0000000280)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@remote, 0x4e20, 0x2, 0x4e23, 0x1, 0x2, 0x20, 0x20, 0x0, r1, 0xee01}, {0x13f, 0x3, 0xdf, 0x2, 0x0, 0x1000, 0x4, 0x9}, {0xff, 0xe1, 0x7ff, 0x8}, 0x3, 0x6e6bbc, 0x2}, {{@in6=@private0, 0x4d4, 0x6c}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x2, 0x1, 0x1, 0x2e732c7f, 0x9, 0xffffffff}}, 0xe8) (async, rerun: 64) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000440)={0xffffffffffffffff}) (rerun: 64) ioctl$SIOCGETMIFCNT_IN6(r2, 0x89e0, &(0x7f0000000480)={0x1}) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f00000003c0)) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)=@overlay={0xfe, 0x3, 0x4, 0x400, 0x200, {}, {0x1, 0x2, 0x1, 0x80, 0x9, 0xa8, "561bbec7"}, 0x80000000, 0x3, {}, 0x7ff}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @empty, @private}, &(0x7f0000000200)=0xc) 20:48:57 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f0000000040)) 20:48:57 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r3, 0x89e1, &(0x7f0000000080)={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) select(0x40, &(0x7f0000000300)={0x3, 0xfffffffffffffff7, 0x287d130, 0x80, 0x5, 0x80000001, 0x7fffffffffffffff, 0x2}, &(0x7f0000000340)={0x2, 0x80000001, 0x5, 0x2, 0x7fffffff, 0x0, 0xffffffffffff6930, 0x6}, &(0x7f0000000380)={0x2, 0x1, 0x10001, 0x8, 0x80000000, 0x6, 0xe8b, 0x40}, &(0x7f0000000400)={r5, r6/1000+10000}) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000001180)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001140)={&(0x7f0000000e00)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_VERSION={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x80) r7 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$link(0x8, r7, r0) 20:48:57 executing program 0: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d07, &(0x7f0000000080)=0x1b) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000000)={{0x2, 0x0, 0x20, 0x2, 0x1}, 0xb343, 0x4, 0x401}) 20:48:57 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0xd9a4, 0x5, 0x2, "96c8bd57d3a352a78f0579576afea44cb225902d55ce62cd6084d6767961e105", 0x30314142}) 20:48:57 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r3, 0x89e1, &(0x7f0000000080)={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) select(0x40, &(0x7f0000000300)={0x3, 0xfffffffffffffff7, 0x287d130, 0x80, 0x5, 0x80000001, 0x7fffffffffffffff, 0x2}, &(0x7f0000000340)={0x2, 0x80000001, 0x5, 0x2, 0x7fffffff, 0x0, 0xffffffffffff6930, 0x6}, &(0x7f0000000380)={0x2, 0x1, 0x10001, 0x8, 0x80000000, 0x6, 0xe8b, 0x40}, &(0x7f0000000400)={r5, r6/1000+10000}) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000001180)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001140)={&(0x7f0000000e00)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_VERSION={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x80) r7 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$link(0x8, r7, r0) 20:48:57 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x100) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) 20:48:57 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$search(0xa, r0, &(0x7f0000000100)='ceph\x00', &(0x7f0000000140)={'syz', 0x0}, r1) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$link(0x8, 0x0, r3) r4 = request_key(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)='[\x00', r1) keyctl$KEYCTL_MOVE(0x1e, r3, r0, r4, 0x1) r5 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r5) 20:48:57 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0xd9a4, 0x5, 0x2, "96c8bd57d3a352a78f0579576afea44cb225902d55ce62cd6084d6767961e105", 0x30314142}) 20:48:57 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f0000000040)) [ 1033.719214] Unknown ioctl -1067952625 [ 1033.729141] Unknown ioctl -1073459961 [ 1033.734383] Unknown ioctl -1067952625 [ 1033.741802] Unknown ioctl -2141694956 [ 1033.744359] Unknown ioctl -1068477435 20:48:57 executing program 0: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d07, &(0x7f0000000080)=0x1b) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000000)={{0x2, 0x0, 0x20, 0x2, 0x1}, 0xb343, 0x4, 0x401}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) (async) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d07, &(0x7f0000000080)=0x1b) (async) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000000)={{0x2, 0x0, 0x20, 0x2, 0x1}, 0xb343, 0x4, 0x401}) (async) 20:48:57 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r3, 0x89e1, &(0x7f0000000080)={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) select(0x40, &(0x7f0000000300)={0x3, 0xfffffffffffffff7, 0x287d130, 0x80, 0x5, 0x80000001, 0x7fffffffffffffff, 0x2}, &(0x7f0000000340)={0x2, 0x80000001, 0x5, 0x2, 0x7fffffff, 0x0, 0xffffffffffff6930, 0x6}, &(0x7f0000000380)={0x2, 0x1, 0x10001, 0x8, 0x80000000, 0x6, 0xe8b, 0x40}, &(0x7f0000000400)={r5, r6/1000+10000}) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000001180)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001140)={&(0x7f0000000e00)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_VERSION={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x80) r7 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$link(0x8, r7, r0) 20:48:57 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x100) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x100) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) (async) 20:48:57 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0xd9a4, 0x5, 0x2, "96c8bd57d3a352a78f0579576afea44cb225902d55ce62cd6084d6767961e105", 0x30314142}) [ 1033.768871] Unknown ioctl -1067952625 [ 1033.777919] Unknown ioctl 21667 20:48:57 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$search(0xa, r0, &(0x7f0000000100)='ceph\x00', &(0x7f0000000140)={'syz', 0x0}, r1) (async) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$link(0x8, 0x0, r3) (async) r4 = request_key(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)='[\x00', r1) keyctl$KEYCTL_MOVE(0x1e, r3, r0, r4, 0x1) r5 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r5) 20:48:57 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r3, 0x89e1, &(0x7f0000000080)={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) select(0x40, &(0x7f0000000300)={0x3, 0xfffffffffffffff7, 0x287d130, 0x80, 0x5, 0x80000001, 0x7fffffffffffffff, 0x2}, &(0x7f0000000340)={0x2, 0x80000001, 0x5, 0x2, 0x7fffffff, 0x0, 0xffffffffffff6930, 0x6}, &(0x7f0000000380)={0x2, 0x1, 0x10001, 0x8, 0x80000000, 0x6, 0xe8b, 0x40}, &(0x7f0000000400)={r5, r6/1000+10000}) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000001180)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001140)={&(0x7f0000000e00)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_VERSION={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x80) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) 20:48:57 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f0000000040)) [ 1033.824959] Unknown ioctl -1067952625 [ 1033.841373] Unknown ioctl -1067952625 [ 1033.842252] Unknown ioctl -2141694956 [ 1033.849483] Unknown ioctl -1073459961 [ 1033.866420] Unknown ioctl -1068477435 20:48:57 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x100) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x100) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) (async) 20:48:57 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0xd9a4, 0x5, 0x2, "96c8bd57d3a352a78f0579576afea44cb225902d55ce62cd6084d6767961e105", 0x30314142}) 20:48:57 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r3, 0x89e1, &(0x7f0000000080)={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) select(0x40, &(0x7f0000000300)={0x3, 0xfffffffffffffff7, 0x287d130, 0x80, 0x5, 0x80000001, 0x7fffffffffffffff, 0x2}, &(0x7f0000000340)={0x2, 0x80000001, 0x5, 0x2, 0x7fffffff, 0x0, 0xffffffffffff6930, 0x6}, &(0x7f0000000380)={0x2, 0x1, 0x10001, 0x8, 0x80000000, 0x6, 0xe8b, 0x40}, &(0x7f0000000400)={r5, r6/1000+10000}) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000001180)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001140)={&(0x7f0000000e00)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_VERSION={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x80) 20:48:57 executing program 0: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d07, &(0x7f0000000080)=0x1b) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000000)={{0x2, 0x0, 0x20, 0x2, 0x1}, 0xb343, 0x4, 0x401}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) (async) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d07, &(0x7f0000000080)=0x1b) (async) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000000)={{0x2, 0x0, 0x20, 0x2, 0x1}, 0xb343, 0x4, 0x401}) (async) [ 1033.872193] Unknown ioctl -1067952625 [ 1033.878176] Unknown ioctl -1068477435 [ 1033.882097] Unknown ioctl -1073459961 [ 1033.887474] Unknown ioctl 21667 [ 1033.888452] Unknown ioctl -1067952625 20:48:57 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$search(0xa, r0, &(0x7f0000000100)='ceph\x00', &(0x7f0000000140)={'syz', 0x0}, r1) (async, rerun: 32) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) (rerun: 32) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$link(0x8, 0x0, r3) r4 = request_key(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)='[\x00', r1) keyctl$KEYCTL_MOVE(0x1e, r3, r0, r4, 0x1) (async) r5 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r5) [ 1033.934502] Unknown ioctl -1067952625 [ 1033.948532] Unknown ioctl -2141694956 [ 1033.961873] Unknown ioctl -1067952625 [ 1033.966049] Unknown ioctl -1067952625 [ 1033.970697] Unknown ioctl 21667 [ 1033.975444] Unknown ioctl -1073459961 [ 1033.980929] Unknown ioctl -1068477435 20:48:57 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0xd9a4, 0x5, 0x2, "96c8bd57d3a352a78f0579576afea44cb225902d55ce62cd6084d6767961e105", 0x30314142}) 20:48:57 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r3, 0x89e1, &(0x7f0000000080)={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) select(0x40, &(0x7f0000000300)={0x3, 0xfffffffffffffff7, 0x287d130, 0x80, 0x5, 0x80000001, 0x7fffffffffffffff, 0x2}, &(0x7f0000000340)={0x2, 0x80000001, 0x5, 0x2, 0x7fffffff, 0x0, 0xffffffffffff6930, 0x6}, &(0x7f0000000380)={0x2, 0x1, 0x10001, 0x8, 0x80000000, 0x6, 0xe8b, 0x40}, &(0x7f0000000400)={r5, r6/1000+10000}) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000001180)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001140)={&(0x7f0000000e00)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 20:48:57 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000001180)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001140)={&(0x7f0000000e00)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x6f, r2, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048840}, 0x4048040) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 20:48:57 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x2, 0xfff}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) 20:48:57 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2d4ac0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80040) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) [ 1033.985864] Unknown ioctl 21667 [ 1033.991719] Unknown ioctl -1073459961 [ 1033.996639] Unknown ioctl -1067952625 [ 1034.009509] Unknown ioctl -1068477435 20:48:57 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) 20:48:57 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r3, 0x89e1, &(0x7f0000000080)={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}) socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) select(0x40, &(0x7f0000000300)={0x3, 0xfffffffffffffff7, 0x287d130, 0x80, 0x5, 0x80000001, 0x7fffffffffffffff, 0x2}, &(0x7f0000000340)={0x2, 0x80000001, 0x5, 0x2, 0x7fffffff, 0x0, 0xffffffffffff6930, 0x6}, &(0x7f0000000380)={0x2, 0x1, 0x10001, 0x8, 0x80000000, 0x6, 0xe8b, 0x40}, &(0x7f0000000400)={r4, r5/1000+10000}) 20:48:57 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x2, 0xfff}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) 20:48:57 executing program 4: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r1) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$link(0x8, 0x0, r3) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r3) keyctl$get_persistent(0x16, 0xee00, r4) 20:48:57 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000001180)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001140)={&(0x7f0000000e00)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x6f, r2, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048840}, 0x4048040) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000001180)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001140)={&(0x7f0000000e00)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x6f, r2, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048840}, 0x4048040) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async) 20:48:57 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2d4ac0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80040) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) 20:48:57 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) 20:48:57 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r3, 0x89e1, &(0x7f0000000080)={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}) socket$nl_generic(0x10, 0x3, 0x10) select(0x40, &(0x7f0000000300)={0x3, 0xfffffffffffffff7, 0x287d130, 0x80, 0x5, 0x80000001, 0x7fffffffffffffff, 0x2}, &(0x7f0000000340)={0x2, 0x80000001, 0x5, 0x2, 0x7fffffff, 0x0, 0xffffffffffff6930, 0x6}, &(0x7f0000000380)={0x2, 0x1, 0x10001, 0x8, 0x80000000, 0x6, 0xe8b, 0x40}, &(0x7f0000000400)) 20:48:57 executing program 4: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r1) (async) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$link(0x8, 0x0, r3) (async) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r3) keyctl$get_persistent(0x16, 0xee00, r4) 20:48:57 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x2, 0xfff}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) 20:48:57 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2d4ac0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80040) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, &(0x7f00000000c0)) (async) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) (rerun: 64) 20:48:57 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000001180)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001140)={&(0x7f0000000e00)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x6f, r2, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048840}, 0x4048040) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 20:48:57 executing program 4: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r1) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$link(0x8, 0x0, r3) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r3) keyctl$get_persistent(0x16, 0xee00, r4) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r0) (async) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r1) (async) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r2) (async) keyctl$link(0x8, 0x0, r3) (async) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r3) (async) keyctl$get_persistent(0x16, 0xee00, r4) (async) 20:48:57 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) 20:48:57 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r3, 0x89e1, &(0x7f0000000080)={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}) socket$nl_generic(0x10, 0x3, 0x10) select(0x40, &(0x7f0000000300)={0x3, 0xfffffffffffffff7, 0x287d130, 0x80, 0x5, 0x80000001, 0x7fffffffffffffff, 0x2}, &(0x7f0000000340)={0x2, 0x80000001, 0x5, 0x2, 0x7fffffff, 0x0, 0xffffffffffff6930, 0x6}, &(0x7f0000000380)={0x2, 0x1, 0x10001, 0x8, 0x80000000, 0x6, 0xe8b, 0x40}, &(0x7f0000000400)) 20:48:57 executing program 0: r0 = socket(0x1, 0x6, 0x800) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, &(0x7f0000000080)=0x1, 0x4) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x81100, 0x1, 0x2, "90f013c1b00ea1cea0f1a3e5e7ccb456e799c9c52ad3bc72dd32f07dbc3dd7d7", 0x32314d56}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @sliced={0x8ab7, [0xffc0, 0x83d, 0x7, 0x401, 0xfe00, 0x1, 0x7ff, 0x57, 0x9, 0x6, 0x6, 0x7, 0x42e8, 0xb6b, 0x7, 0x4, 0x40, 0xfff9, 0x0, 0x6, 0x20, 0x8, 0x7fff, 0xfff, 0x0, 0x8001, 0x6, 0x8, 0x8, 0x80, 0x200, 0x1, 0x1, 0x9, 0x8001, 0x7, 0x7, 0x3, 0x400, 0x3f, 0x3ff, 0xabbf, 0x7, 0x9, 0x0, 0x2, 0x0, 0x82], 0x8}}, 0x800}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x100) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) 20:48:57 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000000640)=[{&(0x7f00000000c0)=""/173, 0xad}, {&(0x7f0000000200)=""/179, 0xb3}, {&(0x7f0000000180)=""/54, 0x36}, {&(0x7f00000002c0)=""/97, 0x61}, {&(0x7f0000000340)}, {&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000000440)=""/24, 0x18}, {&(0x7f0000000480)=""/209, 0xd1}, {&(0x7f0000000580)=""/140, 0x8c}], 0x9, &(0x7f0000000700)=""/176, 0xb0}, 0x2000) 20:48:57 executing program 1: setns(0xffffffffffffffff, 0x10000000) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x27081) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 20:48:57 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r3, 0x89e1, &(0x7f0000000080)={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}) socket$nl_generic(0x10, 0x3, 0x10) select(0x40, &(0x7f0000000300)={0x3, 0xfffffffffffffff7, 0x287d130, 0x80, 0x5, 0x80000001, 0x7fffffffffffffff, 0x2}, &(0x7f0000000340)={0x2, 0x80000001, 0x5, 0x2, 0x7fffffff, 0x0, 0xffffffffffff6930, 0x6}, &(0x7f0000000380)={0x2, 0x1, 0x10001, 0x8, 0x80000000, 0x6, 0xe8b, 0x40}, &(0x7f0000000400)) 20:48:57 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x0, 0x5, 0x2, "96c8bd57d3a352a78f0579576afea44cb225902d55ce62cd6084d6767961e105", 0x30314142}) 20:48:57 executing program 0: r0 = socket(0x1, 0x6, 0x800) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, &(0x7f0000000080)=0x1, 0x4) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x81100, 0x1, 0x2, "90f013c1b00ea1cea0f1a3e5e7ccb456e799c9c52ad3bc72dd32f07dbc3dd7d7", 0x32314d56}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @sliced={0x8ab7, [0xffc0, 0x83d, 0x7, 0x401, 0xfe00, 0x1, 0x7ff, 0x57, 0x9, 0x6, 0x6, 0x7, 0x42e8, 0xb6b, 0x7, 0x4, 0x40, 0xfff9, 0x0, 0x6, 0x20, 0x8, 0x7fff, 0xfff, 0x0, 0x8001, 0x6, 0x8, 0x8, 0x80, 0x200, 0x1, 0x1, 0x9, 0x8001, 0x7, 0x7, 0x3, 0x400, 0x3f, 0x3ff, 0xabbf, 0x7, 0x9, 0x0, 0x2, 0x0, 0x82], 0x8}}, 0x800}) (async) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x100) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) 20:48:57 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000000640)=[{&(0x7f00000000c0)=""/173, 0xad}, {&(0x7f0000000200)=""/179, 0xb3}, {&(0x7f0000000180)=""/54, 0x36}, {&(0x7f00000002c0)=""/97, 0x61}, {&(0x7f0000000340)}, {&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000000440)=""/24, 0x18}, {&(0x7f0000000480)=""/209, 0xd1}, {&(0x7f0000000580)=""/140, 0x8c}], 0x9, &(0x7f0000000700)=""/176, 0xb0}, 0x2000) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) (async) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000000640)=[{&(0x7f00000000c0)=""/173, 0xad}, {&(0x7f0000000200)=""/179, 0xb3}, {&(0x7f0000000180)=""/54, 0x36}, {&(0x7f00000002c0)=""/97, 0x61}, {&(0x7f0000000340)}, {&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000000440)=""/24, 0x18}, {&(0x7f0000000480)=""/209, 0xd1}, {&(0x7f0000000580)=""/140, 0x8c}], 0x9, &(0x7f0000000700)=""/176, 0xb0}, 0x2000) (async) 20:48:57 executing program 4: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)="2ad0e8341b32e0bf9dc661bca6716eb0", 0x10, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$get_persistent(0x16, 0x0, r3) keyctl$search(0xa, r2, &(0x7f0000000380)='id_resolver\x00', &(0x7f00000003c0)={'syz', 0x2}, r3) select(0x40, &(0x7f0000000400)={0x1000, 0x8, 0x4, 0x3, 0x5, 0xc335, 0x80000001, 0x2}, &(0x7f0000000440)={0x9, 0xfffffffffffffffa, 0x1, 0x9, 0x3, 0x0, 0x6, 0x6f0}, &(0x7f0000000480)={0x100000000, 0x4, 0x100000000, 0x5, 0x8, 0x20, 0x2, 0x4}, &(0x7f00000004c0)={0x0, 0xea60}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000200)={{{@in=@dev, @in6=@private1}}, {{@in=@local}, 0x0, @in=@empty}}, &(0x7f0000000000)=0xe8) r5 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r5) 20:48:57 executing program 1: setns(0xffffffffffffffff, 0x10000000) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x27081) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 20:48:57 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) (async, rerun: 64) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000000640)=[{&(0x7f00000000c0)=""/173, 0xad}, {&(0x7f0000000200)=""/179, 0xb3}, {&(0x7f0000000180)=""/54, 0x36}, {&(0x7f00000002c0)=""/97, 0x61}, {&(0x7f0000000340)}, {&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000000440)=""/24, 0x18}, {&(0x7f0000000480)=""/209, 0xd1}, {&(0x7f0000000580)=""/140, 0x8c}], 0x9, &(0x7f0000000700)=""/176, 0xb0}, 0x2000) (rerun: 64) 20:48:57 executing program 1: setns(0xffffffffffffffff, 0x10000000) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x27081) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 20:48:57 executing program 0: r0 = socket(0x1, 0x6, 0x800) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, &(0x7f0000000080)=0x1, 0x4) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x81100, 0x1, 0x2, "90f013c1b00ea1cea0f1a3e5e7ccb456e799c9c52ad3bc72dd32f07dbc3dd7d7", 0x32314d56}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @sliced={0x8ab7, [0xffc0, 0x83d, 0x7, 0x401, 0xfe00, 0x1, 0x7ff, 0x57, 0x9, 0x6, 0x6, 0x7, 0x42e8, 0xb6b, 0x7, 0x4, 0x40, 0xfff9, 0x0, 0x6, 0x20, 0x8, 0x7fff, 0xfff, 0x0, 0x8001, 0x6, 0x8, 0x8, 0x80, 0x200, 0x1, 0x1, 0x9, 0x8001, 0x7, 0x7, 0x3, 0x400, 0x3f, 0x3ff, 0xabbf, 0x7, 0x9, 0x0, 0x2, 0x0, 0x82], 0x8}}, 0x800}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x100) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) socket(0x1, 0x6, 0x800) (async) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, &(0x7f0000000080)=0x1, 0x4) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x81100, 0x1, 0x2, "90f013c1b00ea1cea0f1a3e5e7ccb456e799c9c52ad3bc72dd32f07dbc3dd7d7", 0x32314d56}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @sliced={0x8ab7, [0xffc0, 0x83d, 0x7, 0x401, 0xfe00, 0x1, 0x7ff, 0x57, 0x9, 0x6, 0x6, 0x7, 0x42e8, 0xb6b, 0x7, 0x4, 0x40, 0xfff9, 0x0, 0x6, 0x20, 0x8, 0x7fff, 0xfff, 0x0, 0x8001, 0x6, 0x8, 0x8, 0x80, 0x200, 0x1, 0x1, 0x9, 0x8001, 0x7, 0x7, 0x3, 0x400, 0x3f, 0x3ff, 0xabbf, 0x7, 0x9, 0x0, 0x2, 0x0, 0x82], 0x8}}, 0x800}) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x100) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) (async) 20:48:57 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x0, 0x0, 0x2, "96c8bd57d3a352a78f0579576afea44cb225902d55ce62cd6084d6767961e105", 0x30314142}) 20:48:57 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r3, 0x89e1, &(0x7f0000000080)={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) select(0x40, &(0x7f0000000300)={0x3, 0xfffffffffffffff7, 0x287d130, 0x80, 0x5, 0x80000001, 0x7fffffffffffffff, 0x2}, &(0x7f0000000340)={0x2, 0x80000001, 0x5, 0x2, 0x7fffffff, 0x0, 0xffffffffffff6930, 0x6}, &(0x7f0000000380)={0x2, 0x1, 0x10001, 0x8, 0x80000000, 0x6, 0xe8b, 0x40}, &(0x7f0000000400)={r4, r5/1000+10000}) 20:48:57 executing program 4: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)="2ad0e8341b32e0bf9dc661bca6716eb0", 0x10, 0xfffffffffffffffd) (async) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r3) (async) keyctl$get_persistent(0x16, 0x0, r3) (async, rerun: 32) keyctl$search(0xa, r2, &(0x7f0000000380)='id_resolver\x00', &(0x7f00000003c0)={'syz', 0x2}, r3) (async, rerun: 32) select(0x40, &(0x7f0000000400)={0x1000, 0x8, 0x4, 0x3, 0x5, 0xc335, 0x80000001, 0x2}, &(0x7f0000000440)={0x9, 0xfffffffffffffffa, 0x1, 0x9, 0x3, 0x0, 0x6, 0x6f0}, &(0x7f0000000480)={0x100000000, 0x4, 0x100000000, 0x5, 0x8, 0x20, 0x2, 0x4}, &(0x7f00000004c0)={0x0, 0xea60}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000200)={{{@in=@dev, @in6=@private1}}, {{@in=@local}, 0x0, @in=@empty}}, &(0x7f0000000000)=0xe8) (async) r5 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r5) 20:48:57 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x14) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0) 20:48:57 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) socket$inet6(0xa, 0x80000, 0x8000) 20:48:57 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x0, 0x0, 0x2, "96c8bd57d3a352a78f0579576afea44cb225902d55ce62cd6084d6767961e105", 0x30314142}) 20:48:57 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, 0x0) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$link(0x8, 0x0, r4) keyctl$search(0xa, 0x0, &(0x7f0000000080)='big_key\x00', &(0x7f0000000140)={'syz', 0x2}, r4) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000480)=@multiplanar_fd={0x2, 0x3, 0x4, 0x2, 0x8001, {0x77359400}, {0x1, 0x1, 0x20, 0x3, 0x8, 0x2, "4f6afdd0"}, 0x8, 0x4, {&(0x7f0000000400)=[{0x4, 0x3f, {r2}, 0x8001}, {0x2, 0x2}]}, 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000300)={0x1, @pix={0x5, 0x10000, 0x35303553, 0x1, 0x1392, 0xffff8000, 0xa, 0x1, 0x0, 0x8, 0x0, 0x2}}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) 20:48:57 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) socket$igmp(0x2, 0x3, 0x2) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) select(0x40, &(0x7f0000000300)={0x3, 0xfffffffffffffff7, 0x287d130, 0x80, 0x5, 0x80000001, 0x7fffffffffffffff, 0x2}, &(0x7f0000000340)={0x2, 0x80000001, 0x5, 0x2, 0x7fffffff, 0x0, 0xffffffffffff6930, 0x6}, &(0x7f0000000380)={0x2, 0x1, 0x10001, 0x8, 0x80000000, 0x6, 0xe8b, 0x40}, &(0x7f0000000400)={r3, r4/1000+10000}) 20:48:57 executing program 4: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)="2ad0e8341b32e0bf9dc661bca6716eb0", 0x10, 0xfffffffffffffffd) (async) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$get_persistent(0x16, 0x0, r3) (async) keyctl$search(0xa, r2, &(0x7f0000000380)='id_resolver\x00', &(0x7f00000003c0)={'syz', 0x2}, r3) (async) select(0x40, &(0x7f0000000400)={0x1000, 0x8, 0x4, 0x3, 0x5, 0xc335, 0x80000001, 0x2}, &(0x7f0000000440)={0x9, 0xfffffffffffffffa, 0x1, 0x9, 0x3, 0x0, 0x6, 0x6f0}, &(0x7f0000000480)={0x100000000, 0x4, 0x100000000, 0x5, 0x8, 0x20, 0x2, 0x4}, &(0x7f00000004c0)={0x0, 0xea60}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000200)={{{@in=@dev, @in6=@private1}}, {{@in=@local}, 0x0, @in=@empty}}, &(0x7f0000000000)=0xe8) (async) r5 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r5) 20:48:57 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x0, 0x0, 0x2, "96c8bd57d3a352a78f0579576afea44cb225902d55ce62cd6084d6767961e105", 0x30314142}) 20:48:57 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (rerun: 64) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) (async, rerun: 64) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x14) (rerun: 64) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0) 20:48:57 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) socket$inet6(0xa, 0x80000, 0x8000) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) (async) socket$inet6(0xa, 0x80000, 0x8000) (async) 20:48:57 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, 0x0) (async) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$link(0x8, 0x0, r4) (async, rerun: 64) keyctl$search(0xa, 0x0, &(0x7f0000000080)='big_key\x00', &(0x7f0000000140)={'syz', 0x2}, r4) (async, rerun: 64) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000480)=@multiplanar_fd={0x2, 0x3, 0x4, 0x2, 0x8001, {0x77359400}, {0x1, 0x1, 0x20, 0x3, 0x8, 0x2, "4f6afdd0"}, 0x8, 0x4, {&(0x7f0000000400)=[{0x4, 0x3f, {r2}, 0x8001}, {0x2, 0x2}]}, 0x1}) (async, rerun: 32) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) (async, rerun: 32) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000300)={0x1, @pix={0x5, 0x10000, 0x35303553, 0x1, 0x1392, 0xffff8000, 0xa, 0x1, 0x0, 0x8, 0x0, 0x2}}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) [ 1034.497007] Unknown ioctl -1067952625 [ 1034.512566] Unknown ioctl -1067952625 20:48:57 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) select(0x40, &(0x7f0000000300)={0x3, 0xfffffffffffffff7, 0x287d130, 0x80, 0x5, 0x80000001, 0x7fffffffffffffff, 0x2}, &(0x7f0000000340)={0x2, 0x80000001, 0x5, 0x2, 0x7fffffff, 0x0, 0xffffffffffff6930, 0x6}, &(0x7f0000000380)={0x2, 0x1, 0x10001, 0x8, 0x80000000, 0x6, 0xe8b, 0x40}, &(0x7f0000000400)={r3, r4/1000+10000}) 20:48:57 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x0, 0x5, 0x0, "96c8bd57d3a352a78f0579576afea44cb225902d55ce62cd6084d6767961e105", 0x30314142}) 20:48:58 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) socket$inet6(0xa, 0x80000, 0x8000) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) (async) socket$inet6(0xa, 0x80000, 0x8000) (async) 20:48:58 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000200)="448025deaae326f5ff78fcd1d9bf1e843abdff255d2ca6e4bee6f82c24b6c3164dfc8ebc97d511c45127988501861678ad9977a0a339b858791e89f0813f04e859b9e4df12dee587c333254d0341f1f152ecd1c8a0c356b94f964b6d925b230127806d78edd67fe71ea8a0d274d2968c48f9651ba92df756f771875f9d44dcc30b587fa5f7d4b1e600ff48c78428c505c294010151244589002638da584e447b2361906ac3ff5b61aa8a3cd2fdef640f48c0bffa5c214fafb609238aec370e7928dd06d3c167b06a", 0xc8, r1) 20:48:58 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) (async) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) (async) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, 0x0) (async) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$link(0x8, 0x0, r4) (async) keyctl$search(0xa, 0x0, &(0x7f0000000080)='big_key\x00', &(0x7f0000000140)={'syz', 0x2}, r4) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000480)=@multiplanar_fd={0x2, 0x3, 0x4, 0x2, 0x8001, {0x77359400}, {0x1, 0x1, 0x20, 0x3, 0x8, 0x2, "4f6afdd0"}, 0x8, 0x4, {&(0x7f0000000400)=[{0x4, 0x3f, {r2}, 0x8001}, {0x2, 0x2}]}, 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) (async) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000300)={0x1, @pix={0x5, 0x10000, 0x35303553, 0x1, 0x1392, 0xffff8000, 0xa, 0x1, 0x0, 0x8, 0x0, 0x2}}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) [ 1034.588901] Unknown ioctl -1067952625 [ 1034.592802] Unknown ioctl -1067952625 [ 1034.595172] Unknown ioctl -1067952625 [ 1034.610884] Unknown ioctl -1067952625 [ 1034.626361] Unknown ioctl -1067952625 20:48:58 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) select(0x40, &(0x7f0000000300)={0x3, 0xfffffffffffffff7, 0x287d130, 0x80, 0x5, 0x80000001, 0x7fffffffffffffff, 0x2}, &(0x7f0000000340)={0x2, 0x80000001, 0x5, 0x2, 0x7fffffff, 0x0, 0xffffffffffff6930, 0x6}, &(0x7f0000000380)={0x2, 0x1, 0x10001, 0x8, 0x80000000, 0x6, 0xe8b, 0x40}, &(0x7f0000000400)={r2, r3/1000+10000}) 20:48:58 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x0, 0x5, 0x0, "96c8bd57d3a352a78f0579576afea44cb225902d55ce62cd6084d6767961e105"}) [ 1034.640702] Unknown ioctl -1067952625 [ 1034.655147] Unknown ioctl -1067952625 [ 1034.661783] Unknown ioctl -1067952625 [ 1034.675784] Unknown ioctl -1067952625 [ 1034.680800] Unknown ioctl -1067952625 20:48:58 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1, 0x0, 0x1}) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x42, "35350f9c84a9be7152165f710c37f285f22cab975387628baded19691c37120bb752a7f92996f858b2b091e5d00ef0580eb3fff7ca23dae7ce43ac51ca3f0eb2e8e8"}, &(0x7f00000000c0)=0x66) 20:48:58 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000200)="448025deaae326f5ff78fcd1d9bf1e843abdff255d2ca6e4bee6f82c24b6c3164dfc8ebc97d511c45127988501861678ad9977a0a339b858791e89f0813f04e859b9e4df12dee587c333254d0341f1f152ecd1c8a0c356b94f964b6d925b230127806d78edd67fe71ea8a0d274d2968c48f9651ba92df756f771875f9d44dcc30b587fa5f7d4b1e600ff48c78428c505c294010151244589002638da584e447b2361906ac3ff5b61aa8a3cd2fdef640f48c0bffa5c214fafb609238aec370e7928dd06d3c167b06a", 0xc8, r1) [ 1034.687561] Unknown ioctl -1067952625 [ 1034.705135] Unknown ioctl -1067952625 [ 1034.720101] Unknown ioctl -1067952625 [ 1034.736679] Unknown ioctl -1067952625 [ 1034.744284] Unknown ioctl -1067952625 [ 1034.748185] Unknown ioctl -1067952625 [ 1034.757540] Unknown ioctl -1067952625 [ 1034.761379] Unknown ioctl -1067952625 [ 1034.765441] Unknown ioctl -1067952625 [ 1034.769229] Unknown ioctl -1067952625 [ 1034.773025] Unknown ioctl -1067952625 [ 1034.776883] Unknown ioctl -1067952625 [ 1034.780668] Unknown ioctl -1067952625 [ 1034.784788] Unknown ioctl -1067952625 [ 1034.788606] Unknown ioctl -1067952625 [ 1034.792420] Unknown ioctl -1067952625 [ 1034.796751] Unknown ioctl -1067952625 [ 1034.800535] Unknown ioctl -1067952625 [ 1034.804562] Unknown ioctl -1067952625 [ 1034.808351] Unknown ioctl -1067952625 [ 1034.812124] Unknown ioctl -1067952625 [ 1034.815987] Unknown ioctl -1067952625 [ 1034.819783] Unknown ioctl -1067952625 [ 1034.823659] Unknown ioctl -1067952625 [ 1034.827480] Unknown ioctl -1067952625 [ 1034.831299] Unknown ioctl -1067952625 [ 1034.835183] Unknown ioctl -1067952625 [ 1034.838971] Unknown ioctl -1067952625 [ 1034.842750] Unknown ioctl -1067952625 [ 1034.846591] Unknown ioctl -1067952625 [ 1034.850380] Unknown ioctl -1067952625 [ 1034.854253] Unknown ioctl -1067952625 [ 1034.858038] Unknown ioctl -1067952625 [ 1034.861814] Unknown ioctl -1067952625 [ 1034.865668] Unknown ioctl -1067952625 [ 1034.869459] Unknown ioctl -1067952625 [ 1034.873307] Unknown ioctl -1067952625 [ 1034.877098] Unknown ioctl -1067952625 [ 1034.880885] Unknown ioctl -1067952625 [ 1034.884722] Unknown ioctl -1067952625 [ 1034.888511] Unknown ioctl -1067952625 [ 1034.892286] Unknown ioctl -1067952625 [ 1034.896144] Unknown ioctl -1067952625 [ 1034.899929] Unknown ioctl -1067952625 [ 1034.903780] Unknown ioctl -1067952625 [ 1034.907562] Unknown ioctl -1067952625 [ 1034.911338] Unknown ioctl -1067952625 [ 1034.915190] Unknown ioctl -1067952625 [ 1034.918974] Unknown ioctl -1067952625 [ 1034.922754] Unknown ioctl -1067952625 [ 1034.927080] Unknown ioctl -1067952625 [ 1034.930875] Unknown ioctl -1067952625 [ 1034.934749] Unknown ioctl -1067952625 [ 1034.938536] Unknown ioctl -1067952625 20:48:58 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) (async) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x14) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0) 20:48:58 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0x7, 0x8c84}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000100)={0x3ff, 0x2, 0x2, "56ca49d839807196f598ebf9e8486369b5a5ed3dbb13d6c1386d5260dfde78d3", 0x32314d4e}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x8, 0x3, 0x3, 0x0, 0xf9}) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000040)={0x1, 0x100, 0x1a, 0x4080}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x24, &(0x7f0000000180)=0x4, 0x4) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x100, 0x1, 0x3, {0x3, @pix={0x4, 0x9, 0x41414270, 0x4, 0x8000, 0x0, 0x8, 0xffbffff9, 0x0, 0x0, 0x2, 0x1}}, 0x401}) 20:48:58 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) select(0x40, &(0x7f0000000300)={0x3, 0xfffffffffffffff7, 0x287d130, 0x80, 0x5, 0x80000001, 0x7fffffffffffffff, 0x2}, &(0x7f0000000340)={0x2, 0x80000001, 0x5, 0x2, 0x7fffffff, 0x0, 0xffffffffffff6930, 0x6}, &(0x7f0000000380)={0x2, 0x1, 0x10001, 0x8, 0x80000000, 0x6, 0xe8b, 0x40}, &(0x7f0000000400)={r1, r2/1000+10000}) 20:48:58 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1, 0x0, 0x1}) (async) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x42, "35350f9c84a9be7152165f710c37f285f22cab975387628baded19691c37120bb752a7f92996f858b2b091e5d00ef0580eb3fff7ca23dae7ce43ac51ca3f0eb2e8e8"}, &(0x7f00000000c0)=0x66) 20:48:58 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x0, 0x5, 0x0, "96c8bd57d3a352a78f0579576afea44cb225902d55ce62cd6084d6767961e105", 0x30314142}) 20:48:58 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) (async) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000200)="448025deaae326f5ff78fcd1d9bf1e843abdff255d2ca6e4bee6f82c24b6c3164dfc8ebc97d511c45127988501861678ad9977a0a339b858791e89f0813f04e859b9e4df12dee587c333254d0341f1f152ecd1c8a0c356b94f964b6d925b230127806d78edd67fe71ea8a0d274d2968c48f9651ba92df756f771875f9d44dcc30b587fa5f7d4b1e600ff48c78428c505c294010151244589002638da584e447b2361906ac3ff5b61aa8a3cd2fdef640f48c0bffa5c214fafb609238aec370e7928dd06d3c167b06a", 0xc8, r1) [ 1034.942310] Unknown ioctl -1067952625 [ 1034.946139] Unknown ioctl -1067952625 [ 1034.949930] Unknown ioctl -1067952625 20:48:58 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async, rerun: 32) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async, rerun: 32) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0x7, 0x8c84}) (async, rerun: 32) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000100)={0x3ff, 0x2, 0x2, "56ca49d839807196f598ebf9e8486369b5a5ed3dbb13d6c1386d5260dfde78d3", 0x32314d4e}) (rerun: 32) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x8, 0x3, 0x3, 0x0, 0xf9}) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000040)={0x1, 0x100, 0x1a, 0x4080}) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x24, &(0x7f0000000180)=0x4, 0x4) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x100, 0x1, 0x3, {0x3, @pix={0x4, 0x9, 0x41414270, 0x4, 0x8000, 0x0, 0x8, 0xffbffff9, 0x0, 0x0, 0x2, 0x1}}, 0x401}) 20:48:58 executing program 2: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) select(0x40, &(0x7f0000000300)={0x3, 0xfffffffffffffff7, 0x287d130, 0x80, 0x5, 0x80000001, 0x7fffffffffffffff, 0x2}, &(0x7f0000000340)={0x2, 0x80000001, 0x5, 0x2, 0x7fffffff, 0x0, 0xffffffffffff6930, 0x6}, &(0x7f0000000380)={0x2, 0x1, 0x10001, 0x8, 0x80000000, 0x6, 0xe8b, 0x40}, &(0x7f0000000400)={r0, r1/1000+10000}) 20:48:58 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000200)='keyring\x00', r3) keyctl$get_persistent(0x16, 0xee00, r2) 20:48:58 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1, 0x0, 0x1}) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x42, "35350f9c84a9be7152165f710c37f285f22cab975387628baded19691c37120bb752a7f92996f858b2b091e5d00ef0580eb3fff7ca23dae7ce43ac51ca3f0eb2e8e8"}, &(0x7f00000000c0)=0x66) 20:48:58 executing program 1: ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001180)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001140)={&(0x7f0000000e00)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000080)) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast1, @loopback}, &(0x7f0000000100)=0xc) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r1, 0x8, 0x70bd27, 0x25dfdbff, {}, [@GTPA_FLOW={0x6}, @GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8810}, 0x8090) [ 1035.019162] Unknown ioctl -1067952625 20:48:58 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) select(0x40, &(0x7f0000000300)={0x3, 0xfffffffffffffff7, 0x287d130, 0x80, 0x5, 0x80000001, 0x7fffffffffffffff, 0x2}, &(0x7f0000000340)={0x2, 0x80000001, 0x5, 0x2, 0x7fffffff, 0x0, 0xffffffffffff6930, 0x6}, &(0x7f0000000380)={0x2, 0x1, 0x10001, 0x8, 0x80000000, 0x6, 0xe8b, 0x40}, &(0x7f0000000400)={r3, r4/1000+10000}) 20:48:58 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0x3, 0x1, 0x9, 0x1, 0x8}, 0xb24, 0x2, 0xf8}) 20:48:58 executing program 2: clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) select(0x40, &(0x7f0000000300)={0x3, 0xfffffffffffffff7, 0x287d130, 0x80, 0x5, 0x80000001, 0x7fffffffffffffff, 0x2}, &(0x7f0000000340)={0x2, 0x80000001, 0x5, 0x2, 0x7fffffff, 0x0, 0xffffffffffff6930, 0x6}, &(0x7f0000000380)={0x2, 0x1, 0x10001, 0x8, 0x80000000, 0x6, 0xe8b, 0x40}, &(0x7f0000000400)={r0, r1/1000+10000}) 20:48:58 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) (async) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000200)='keyring\x00', r3) keyctl$get_persistent(0x16, 0xee00, r2) 20:48:58 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0x7, 0x8c84}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000100)={0x3ff, 0x2, 0x2, "56ca49d839807196f598ebf9e8486369b5a5ed3dbb13d6c1386d5260dfde78d3", 0x32314d4e}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x8, 0x3, 0x3, 0x0, 0xf9}) (async) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000040)={0x1, 0x100, 0x1a, 0x4080}) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x24, &(0x7f0000000180)=0x4, 0x4) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x100, 0x1, 0x3, {0x3, @pix={0x4, 0x9, 0x41414270, 0x4, 0x8000, 0x0, 0x8, 0xffbffff9, 0x0, 0x0, 0x2, 0x1}}, 0x401}) 20:48:58 executing program 2: clock_gettime(0x0, 0x0) select(0x40, &(0x7f0000000300)={0x3, 0xfffffffffffffff7, 0x287d130, 0x80, 0x5, 0x80000001, 0x7fffffffffffffff, 0x2}, &(0x7f0000000340)={0x2, 0x80000001, 0x5, 0x2, 0x7fffffff, 0x0, 0xffffffffffff6930, 0x6}, &(0x7f0000000380)={0x2, 0x1, 0x10001, 0x8, 0x80000000, 0x6, 0xe8b, 0x40}, &(0x7f0000000400)) 20:48:58 executing program 1: ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001180)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001140)={&(0x7f0000000e00)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000080)) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast1, @loopback}, &(0x7f0000000100)=0xc) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r1, 0x8, 0x70bd27, 0x25dfdbff, {}, [@GTPA_FLOW={0x6}, @GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8810}, 0x8090) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001180)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001140)={&(0x7f0000000e00)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000080)) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast1, @loopback}, &(0x7f0000000100)=0xc) (async) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r1, 0x8, 0x70bd27, 0x25dfdbff, {}, [@GTPA_FLOW={0x6}, @GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8810}, 0x8090) (async) 20:48:58 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0x3, 0x1, 0x9, 0x1, 0x8}, 0xb24, 0x2, 0xf8}) 20:48:58 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000200)='keyring\x00', r3) (async) keyctl$get_persistent(0x16, 0xee00, r2) 20:48:58 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0x3, 0x1, 0x9, 0x1, 0x8}, 0xb24, 0x2, 0xf8}) 20:48:58 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000300)={0x0, @win={{0x1, 0x3f, 0x4, 0x80000001}, 0x1, 0x6, &(0x7f0000000080)={{0x80000001, 0x8, 0x4, 0x8}, &(0x7f0000000040)={{0x3, 0x2, 0x1}, &(0x7f0000000000)={{0x5, 0x7, 0x2, 0x2}}}}, 0x6, &(0x7f00000000c0)="05afa7f9cc3c73f2f36e8a2e4a57883f1c33f87e60bf605c8539d3c40f668fd06cae2d284d81e1f79b6bbbbfc267629735847f27bcf3d13f910e2a3226305cf2e4b69a9effedbb60203ffd3595fab9344dc9b3c0970af30848d238efdf504b69ccd8a38537709ebab1724b56bfc4dafada278285c714cb10fb24a1e22bde6733328a9dcd5fe548657c83979bfa9e1f857595b073162aab489b88abb4bd1d7c46ee", 0x40}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{0x528}, 0x7, 0x20000000, 0x0, 0x0, 0x0}}, 0x8000000}) 20:48:58 executing program 2: clock_gettime(0x0, 0x0) select(0x40, &(0x7f0000000300)={0x3, 0xfffffffffffffff7, 0x287d130, 0x80, 0x5, 0x80000001, 0x7fffffffffffffff, 0x2}, &(0x7f0000000340)={0x2, 0x80000001, 0x5, 0x2, 0x7fffffff, 0x0, 0xffffffffffff6930, 0x6}, &(0x7f0000000380)={0x2, 0x1, 0x10001, 0x8, 0x80000000, 0x6, 0xe8b, 0x40}, &(0x7f0000000400)) 20:48:58 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) (async) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0x3, 0x1, 0x9, 0x1, 0x8}, 0xb24, 0x2, 0xf8}) 20:48:58 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000300)={0x0, @win={{0x1, 0x3f, 0x4, 0x80000001}, 0x1, 0x6, &(0x7f0000000080)={{0x80000001, 0x8, 0x4, 0x8}, &(0x7f0000000040)={{0x3, 0x2, 0x1}, &(0x7f0000000000)={{0x5, 0x7, 0x2, 0x2}}}}, 0x6, &(0x7f00000000c0)="05afa7f9cc3c73f2f36e8a2e4a57883f1c33f87e60bf605c8539d3c40f668fd06cae2d284d81e1f79b6bbbbfc267629735847f27bcf3d13f910e2a3226305cf2e4b69a9effedbb60203ffd3595fab9344dc9b3c0970af30848d238efdf504b69ccd8a38537709ebab1724b56bfc4dafada278285c714cb10fb24a1e22bde6733328a9dcd5fe548657c83979bfa9e1f857595b073162aab489b88abb4bd1d7c46ee", 0x40}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{0x528}, 0x7, 0x20000000, 0x0, 0x0, 0x0}}, 0x8000000}) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000300)={0x0, @win={{0x1, 0x3f, 0x4, 0x80000001}, 0x1, 0x6, &(0x7f0000000080)={{0x80000001, 0x8, 0x4, 0x8}, &(0x7f0000000040)={{0x3, 0x2, 0x1}, &(0x7f0000000000)={{0x5, 0x7, 0x2, 0x2}}}}, 0x6, &(0x7f00000000c0)="05afa7f9cc3c73f2f36e8a2e4a57883f1c33f87e60bf605c8539d3c40f668fd06cae2d284d81e1f79b6bbbbfc267629735847f27bcf3d13f910e2a3226305cf2e4b69a9effedbb60203ffd3595fab9344dc9b3c0970af30848d238efdf504b69ccd8a38537709ebab1724b56bfc4dafada278285c714cb10fb24a1e22bde6733328a9dcd5fe548657c83979bfa9e1f857595b073162aab489b88abb4bd1d7c46ee", 0x40}}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{0x528}, 0x7, 0x20000000, 0x0, 0x0, 0x0}}, 0x8000000}) (async) 20:48:58 executing program 1: ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001180)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001140)={&(0x7f0000000e00)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000080)) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast1, @loopback}, &(0x7f0000000100)=0xc) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r1, 0x8, 0x70bd27, 0x25dfdbff, {}, [@GTPA_FLOW={0x6}, @GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8810}, 0x8090) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001180)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001140)={&(0x7f0000000e00)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000080)) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast1, @loopback}, &(0x7f0000000100)=0xc) (async) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r1, 0x8, 0x70bd27, 0x25dfdbff, {}, [@GTPA_FLOW={0x6}, @GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8810}, 0x8090) (async) 20:48:58 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0x3, 0x1, 0x9, 0x1, 0x8}, 0xb24, 0x2, 0xf8}) 20:48:58 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0x0, r1) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$link(0x8, 0x0, r4) keyctl$clear(0x7, r4) 20:48:58 executing program 2: clock_gettime(0x0, 0x0) select(0x40, &(0x7f0000000300)={0x3, 0xfffffffffffffff7, 0x287d130, 0x80, 0x5, 0x80000001, 0x7fffffffffffffff, 0x2}, &(0x7f0000000340)={0x2, 0x80000001, 0x5, 0x2, 0x7fffffff, 0x0, 0xffffffffffff6930, 0x6}, &(0x7f0000000380)={0x2, 0x1, 0x10001, 0x8, 0x80000000, 0x6, 0xe8b, 0x40}, &(0x7f0000000400)) 20:48:58 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0x0, r1) (async) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) (async) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$link(0x8, 0x0, r4) (async) keyctl$clear(0x7, r4) 20:48:58 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x0, 0xfffffffc}) 20:48:58 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0x3, 0x1, 0x9, 0x1, 0x8}, 0xb24, 0x2, 0xf8}) 20:48:58 executing program 2: clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) select(0x0, 0x0, &(0x7f0000000340)={0x2, 0x80000001, 0x5, 0x2, 0x7fffffff, 0x0, 0xffffffffffff6930, 0x6}, &(0x7f0000000380)={0x2, 0x1, 0x10001, 0x8, 0x80000000, 0x6, 0xe8b, 0x40}, &(0x7f0000000400)={r0, r1/1000+10000}) 20:48:58 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000300)={0x0, @win={{0x1, 0x3f, 0x4, 0x80000001}, 0x1, 0x6, &(0x7f0000000080)={{0x80000001, 0x8, 0x4, 0x8}, &(0x7f0000000040)={{0x3, 0x2, 0x1}, &(0x7f0000000000)={{0x5, 0x7, 0x2, 0x2}}}}, 0x6, &(0x7f00000000c0)="05afa7f9cc3c73f2f36e8a2e4a57883f1c33f87e60bf605c8539d3c40f668fd06cae2d284d81e1f79b6bbbbfc267629735847f27bcf3d13f910e2a3226305cf2e4b69a9effedbb60203ffd3595fab9344dc9b3c0970af30848d238efdf504b69ccd8a38537709ebab1724b56bfc4dafada278285c714cb10fb24a1e22bde6733328a9dcd5fe548657c83979bfa9e1f857595b073162aab489b88abb4bd1d7c46ee", 0x40}}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{0x528}, 0x7, 0x20000000, 0x0, 0x0, 0x0}}, 0x8000000}) 20:48:58 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000040)={@private0}, &(0x7f0000000080)=0x14) 20:48:58 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0x0, r1) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$link(0x8, 0x0, r4) keyctl$clear(0x7, r4) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) (async) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r1) (async) keyctl$get_persistent(0x16, 0x0, r1) (async) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) (async) keyctl$get_persistent(0x16, 0xee00, r2) (async) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r3) (async) keyctl$link(0x8, 0x0, r4) (async) keyctl$clear(0x7, r4) (async) 20:48:58 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x0, 0xfffffffc}) 20:48:58 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0x3, 0x1, 0x9, 0x1, 0x8}, 0xb24, 0x2, 0xf8}) 20:48:58 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) 20:48:58 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) (async) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000040)={@private0}, &(0x7f0000000080)=0x14) 20:48:58 executing program 4: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$get_persistent(0x16, 0xee00, r1) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$get_persistent(0x16, 0x0, r4) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$link(0x8, 0x0, r3) keyctl$reject(0x13, 0x0, 0x53a9, 0x0, r3) r5 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$keyring(&(0x7f0000000140), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r5) keyctl$link(0x8, 0x0, r6) request_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000000c0)='keyring\x00', r6) [ 1035.496819] Unknown ioctl -1067952625 20:48:58 executing program 5: ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000040)={{0x3, 0x1, 0x9, 0x1, 0x8}, 0xb24, 0x2, 0xf8}) 20:48:58 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x0, 0xfffffffc}) 20:48:58 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000040)={@private0}, &(0x7f0000000080)=0x14) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) (async) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000040)={@private0}, &(0x7f0000000080)=0x14) (async) [ 1035.564428] Unknown ioctl -1067952625 [ 1035.602826] Unknown ioctl -1067952625 [ 1035.610345] Unknown ioctl -1067952625 20:48:59 executing program 2: clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) select(0x0, 0x0, &(0x7f0000000340)={0x2, 0x80000001, 0x5, 0x2, 0x7fffffff, 0x0, 0xffffffffffff6930, 0x6}, &(0x7f0000000380)={0x2, 0x1, 0x10001, 0x8, 0x80000000, 0x6, 0xe8b, 0x40}, &(0x7f0000000400)={r0, r1/1000+10000}) 20:48:59 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) 20:48:59 executing program 4: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$get_persistent(0x16, 0xee00, r1) (async) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r4) (async) keyctl$get_persistent(0x16, 0x0, r4) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$link(0x8, 0x0, r3) keyctl$reject(0x13, 0x0, 0x53a9, 0x0, r3) (async) r5 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$keyring(&(0x7f0000000140), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r5) keyctl$link(0x8, 0x0, r6) request_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000000c0)='keyring\x00', r6) 20:48:59 executing program 3: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 20:48:59 executing program 5: ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000040)={{0x3, 0x1, 0x9, 0x1, 0x8}, 0xb24, 0x2, 0xf8}) 20:48:59 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) setns(0xffffffffffffffff, 0x2000000) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000001180)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001140)={&(0x7f0000000e00)={0x14, 0x0, 0x4}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000001c0)) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={0x0, @dev, @remote}, &(0x7f0000000680)=0xc) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000140)={@private1, 0x0, r7}) r8 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) bind$inet6(r6, &(0x7f00000008c0)={0xa, 0x4e23, 0x3, @local, 0x9}, 0x1c) ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000000140)={@private1, 0x0, r9}) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@private1, 0x0}, &(0x7f00000002c0)=0x14) r11 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r11, 0x8918, &(0x7f0000000140)={@private1, 0x0, r12}) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000880)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f0000000300)={0x378, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0x188, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x11c9}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}]}}, {{0x8, 0x1, r10}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x378}, 0x1, 0x0, 0x0, 0x8004}, 0x20000001) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r3) 20:48:59 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) 20:48:59 executing program 5: ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000040)={{0x3, 0x1, 0x9, 0x1, 0x8}, 0xb24, 0x2, 0xf8}) 20:48:59 executing program 3: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 20:48:59 executing program 4: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$get_persistent(0x16, 0xee00, r1) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$get_persistent(0x16, 0x0, r4) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$link(0x8, 0x0, r3) keyctl$reject(0x13, 0x0, 0x53a9, 0x0, r3) r5 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$keyring(&(0x7f0000000140), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r5) keyctl$link(0x8, 0x0, r6) request_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000000c0)='keyring\x00', r6) add_key$keyring(&(0x7f0000000100), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0x0) (async) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r0) (async) keyctl$get_persistent(0x16, 0xee00, r1) (async) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r2) (async) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r4) (async) keyctl$get_persistent(0x16, 0x0, r4) (async) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r4) (async) keyctl$link(0x8, 0x0, r3) (async) keyctl$reject(0x13, 0x0, 0x53a9, 0x0, r3) (async) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000140), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r5) (async) keyctl$link(0x8, 0x0, r6) (async) request_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000000c0)='keyring\x00', r6) (async) [ 1036.333294] Unknown ioctl -1067952625 [ 1036.346784] Unknown ioctl 46851 [ 1036.352925] Unknown ioctl -2141694956 20:48:59 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) setns(0xffffffffffffffff, 0x2000000) (async) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async, rerun: 32) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async, rerun: 32) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000001180)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001140)={&(0x7f0000000e00)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000001c0)) (async) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={0x0, @dev, @remote}, &(0x7f0000000680)=0xc) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000140)={@private1, 0x0, r7}) (async) r8 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) bind$inet6(r6, &(0x7f00000008c0)={0xa, 0x4e23, 0x3, @local, 0x9}, 0x1c) (async, rerun: 64) ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000000140)={@private1, 0x0, r9}) (async, rerun: 64) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@private1, 0x0}, &(0x7f00000002c0)=0x14) r11 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r11, 0x8918, &(0x7f0000000140)={@private1, 0x0, r12}) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000880)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f0000000300)={0x378, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0x188, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x11c9}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}]}}, {{0x8, 0x1, r10}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x378}, 0x1, 0x0, 0x0, 0x8004}, 0x20000001) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r3) 20:48:59 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0x3, 0x1, 0x9, 0x1, 0x8}, 0xb24, 0x2, 0xf8}) [ 1036.431937] Unknown ioctl -1067952625 [ 1036.438428] Unknown ioctl 46851 20:49:00 executing program 2: clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) select(0x0, 0x0, &(0x7f0000000340)={0x2, 0x80000001, 0x5, 0x2, 0x7fffffff, 0x0, 0xffffffffffff6930, 0x6}, &(0x7f0000000380)={0x2, 0x1, 0x10001, 0x8, 0x80000000, 0x6, 0xe8b, 0x40}, &(0x7f0000000400)={r0, r1/1000+10000}) 20:49:00 executing program 3: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 20:49:00 executing program 0: syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) 20:49:00 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) 20:49:00 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0x3, 0x1, 0x9, 0x1, 0x8}, 0xb24, 0x2, 0xf8}) 20:49:00 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) setns(0xffffffffffffffff, 0x2000000) (async) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000001180)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001140)={&(0x7f0000000e00)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000001c0)) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={0x0, @dev, @remote}, &(0x7f0000000680)=0xc) (async) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000140)={@private1, 0x0, r7}) (async) r8 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) bind$inet6(r6, &(0x7f00000008c0)={0xa, 0x4e23, 0x3, @local, 0x9}, 0x1c) (async) ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000000140)={@private1, 0x0, r9}) (async) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@private1, 0x0}, &(0x7f00000002c0)=0x14) (async) r11 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r11, 0x8918, &(0x7f0000000140)={@private1, 0x0, r12}) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000880)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f0000000300)={0x378, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0x188, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x11c9}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}]}}, {{0x8, 0x1, r10}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x378}, 0x1, 0x0, 0x0, 0x8004}, 0x20000001) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r3) 20:49:00 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) 20:49:00 executing program 0: syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) (async) 20:49:00 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0x3, 0x1, 0x9, 0x1, 0x8}, 0xb24, 0x2, 0xf8}) 20:49:00 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x6980) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000040)=""/210) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 20:49:00 executing program 0: syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) [ 1037.262908] Unknown ioctl -1067952625 [ 1037.279111] Unknown ioctl 46851 [ 1037.282610] Unknown ioctl -2141694956 20:49:00 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x402c0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) 20:49:01 executing program 2: clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) select(0x40, &(0x7f0000000300)={0x0, 0xfffffffffffffff7, 0x287d130, 0x80, 0x5, 0x80000001, 0x7fffffffffffffff, 0x2}, &(0x7f0000000340)={0x2, 0x80000001, 0x5, 0x2, 0x7fffffff, 0x0, 0xffffffffffff6930, 0x6}, &(0x7f0000000380)={0x2, 0x1, 0x10001, 0x8, 0x80000000, 0x6, 0xe8b, 0x40}, &(0x7f0000000400)={r0, r1/1000+10000}) 20:49:01 executing program 5: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000040)={{0x3, 0x1, 0x9, 0x1, 0x8}, 0xb24, 0x2, 0xf8}) 20:49:01 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) 20:49:01 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0xcc6, 0xfffffffa, 0x4, {0x1, @win={{0x0, 0x4}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000140)={0x3, 0x80, 0x800, 0x80800}) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000100)={0x1, 0x2, 0x3, 0x0, 0x9}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000000)={0x7, 0x6, 0x3, {0x3, @sliced={0x6, [0xfffc, 0x0, 0x5aa8, 0x3, 0xed8, 0x27, 0x8, 0xce2, 0x4, 0x0, 0x1, 0x0, 0x1, 0x8, 0x7f, 0x3f, 0x0, 0xc1, 0x9, 0x2, 0x101, 0x2, 0x101, 0x1, 0x9, 0x73, 0x4, 0x1, 0x3, 0x0, 0x8, 0x101, 0x8, 0x5, 0xd45b, 0x9d, 0x3, 0x7f, 0x8, 0x400, 0x2, 0x5, 0x100, 0x7, 0x8, 0xffc1, 0x81], 0x140000}}, 0x7}) 20:49:01 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x6980) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000040)=""/210) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x6980) (async) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000040)=""/210) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) 20:49:01 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x402c0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) 20:49:01 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) r3 = request_key(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000200)='keyring\x00', r2) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r4, 0xffffffffffffffff, 0x9}, 0x10) keyctl$clear(0x7, r3) keyctl$get_persistent(0x16, 0xee00, r2) 20:49:01 executing program 2: clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) select(0x40, &(0x7f0000000300)={0x0, 0x0, 0x287d130, 0x80, 0x5, 0x80000001, 0x7fffffffffffffff, 0x2}, &(0x7f0000000340)={0x2, 0x80000001, 0x5, 0x2, 0x7fffffff, 0x0, 0xffffffffffff6930, 0x6}, &(0x7f0000000380)={0x2, 0x1, 0x10001, 0x8, 0x80000000, 0x6, 0xe8b, 0x40}, &(0x7f0000000400)={r0, r1/1000+10000}) 20:49:01 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x402c0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) 20:49:01 executing program 5: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000040)={{0x3, 0x1, 0x9, 0x1, 0x8}, 0xb24, 0x2, 0xf8}) 20:49:01 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0xcc6, 0xfffffffa, 0x4, {0x1, @win={{0x0, 0x4}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000140)={0x3, 0x80, 0x800, 0x80800}) (async) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000100)={0x1, 0x2, 0x3, 0x0, 0x9}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000000)={0x7, 0x6, 0x3, {0x3, @sliced={0x6, [0xfffc, 0x0, 0x5aa8, 0x3, 0xed8, 0x27, 0x8, 0xce2, 0x4, 0x0, 0x1, 0x0, 0x1, 0x8, 0x7f, 0x3f, 0x0, 0xc1, 0x9, 0x2, 0x101, 0x2, 0x101, 0x1, 0x9, 0x73, 0x4, 0x1, 0x3, 0x0, 0x8, 0x101, 0x8, 0x5, 0xd45b, 0x9d, 0x3, 0x7f, 0x8, 0x400, 0x2, 0x5, 0x100, 0x7, 0x8, 0xffc1, 0x81], 0x140000}}, 0x7}) 20:49:01 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x6980) (async) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000040)=""/210) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 20:49:01 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) r3 = request_key(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000200)='keyring\x00', r2) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r4, 0xffffffffffffffff, 0x9}, 0x10) keyctl$clear(0x7, r3) keyctl$get_persistent(0x16, 0xee00, r2) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) (async) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) (async) request_key(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000200)='keyring\x00', r2) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r4, 0xffffffffffffffff, 0x9}, 0x10) (async) keyctl$clear(0x7, r3) (async) keyctl$get_persistent(0x16, 0xee00, r2) (async) 20:49:01 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0xcc6, 0xfffffffa, 0x4, {0x1, @win={{0x0, 0x4}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000140)={0x3, 0x80, 0x800, 0x80800}) (async) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000100)={0x1, 0x2, 0x3, 0x0, 0x9}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000000)={0x7, 0x6, 0x3, {0x3, @sliced={0x6, [0xfffc, 0x0, 0x5aa8, 0x3, 0xed8, 0x27, 0x8, 0xce2, 0x4, 0x0, 0x1, 0x0, 0x1, 0x8, 0x7f, 0x3f, 0x0, 0xc1, 0x9, 0x2, 0x101, 0x2, 0x101, 0x1, 0x9, 0x73, 0x4, 0x1, 0x3, 0x0, 0x8, 0x101, 0x8, 0x5, 0xd45b, 0x9d, 0x3, 0x7f, 0x8, 0x400, 0x2, 0x5, 0x100, 0x7, 0x8, 0xffc1, 0x81], 0x140000}}, 0x7}) [ 1038.168587] Unknown ioctl -1067952625 20:49:01 executing program 2: clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) select(0x40, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x80, 0x5, 0x80000001, 0x7fffffffffffffff, 0x2}, &(0x7f0000000340)={0x2, 0x80000001, 0x5, 0x2, 0x7fffffff, 0x0, 0xffffffffffff6930, 0x6}, &(0x7f0000000380)={0x2, 0x1, 0x10001, 0x8, 0x80000000, 0x6, 0xe8b, 0x40}, &(0x7f0000000400)={r0, r1/1000+10000}) 20:49:01 executing program 5: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000040)={{0x3, 0x1, 0x9, 0x1, 0x8}, 0xb24, 0x2, 0xf8}) [ 1038.265359] Unknown ioctl -1067952625 20:49:01 executing program 2: clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) select(0x40, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x5, 0x80000001, 0x7fffffffffffffff, 0x2}, &(0x7f0000000340)={0x2, 0x80000001, 0x5, 0x2, 0x7fffffff, 0x0, 0xffffffffffff6930, 0x6}, &(0x7f0000000380)={0x2, 0x1, 0x10001, 0x8, 0x80000000, 0x6, 0xe8b, 0x40}, &(0x7f0000000400)={r0, r1/1000+10000}) 20:49:01 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) 20:49:01 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, 0x0) 20:49:01 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) r3 = request_key(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000200)='keyring\x00', r2) (async) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r4, 0xffffffffffffffff, 0x9}, 0x10) (async) keyctl$clear(0x7, r3) keyctl$get_persistent(0x16, 0xee00, r2) [ 1038.287295] Unknown ioctl -1067952625 20:49:01 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) 20:49:01 executing program 2: clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) select(0x40, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x7fffffffffffffff, 0x2}, &(0x7f0000000340)={0x2, 0x80000001, 0x5, 0x2, 0x7fffffff, 0x0, 0xffffffffffff6930, 0x6}, &(0x7f0000000380)={0x2, 0x1, 0x10001, 0x8, 0x80000000, 0x6, 0xe8b, 0x40}, &(0x7f0000000400)={r0, r1/1000+10000}) 20:49:01 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, 0x0) 20:49:01 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000200)="dc8d24e7b5a83f787d731d212107b388b2a232db449df1c0fcd26194284f4866dcfe70f91dde0bb36935f40fa306c223274c439646f9b5f8c616c370", 0x3c, r1) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$get_persistent(0x16, 0xee00, r3) 20:49:01 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f00000000c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000080)}}, 0x18) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x4}, 0x10) r1 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000200)="4ff902bb3c75333cc4d6098ae9", 0xd, 0xfffffffffffffffb) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$get_persistent(0x16, 0x0, r2) keyctl$negate(0xd, r1, 0x6, r2) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f00000001c0)={0x1}) [ 1038.391288] Unknown ioctl -1067952625 20:49:01 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, 0x0) 20:49:01 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) 20:49:01 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)=@userptr={0xb1f, 0x2, 0x4, 0x10000, 0x800, {0x0, 0xea60}, {0x5, 0x8, 0x1, 0x6, 0x2, 0x81, "7aca23eb"}, 0x2, 0x2, {&(0x7f0000000080)}, 0x8000}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x40000) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f00000002c0)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000380)={0x0, @empty}, &(0x7f00000003c0)=0xc) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000400)={@local, 0x0}, &(0x7f0000000440)=0x14) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000140)={@private1, 0x0, r7}) r8 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000000140)={@private1, 0x0, r9}) r10 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r10, 0x8918, &(0x7f0000000140)={@private1, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) r13 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r13, 0x8918, &(0x7f0000000140)={@private1, 0x0, r14}) getsockopt$inet6_mreq(r10, 0x29, 0x15, &(0x7f00000004c0)={@rand_addr, 0x0}, &(0x7f0000000500)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000001180)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001140)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="e40d0000", @ANYRES16=0x0, @ANYBLOB="040000000000000000000300000008000100", @ANYRES32=r4, @ANYBLOB="9c0002804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000600000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000200000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r7, @ANYBLOB="080007000000000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000008000100", @ANYRES32=r9, @ANYBLOB="7001028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004009e62691a08000600", @ANYRES32=r5, @ANYBLOB="400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400e24e000008000600", @ANYRES32=r11, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r4, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100000008000600", @ANYRES32=r7, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000000008008000100", @ANYRES32=r12, @ANYBLOB="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", @ANYRES32=r14, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="6801028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000400000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004007f0000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000005000300030000000800040000000080400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400ffffff7f08000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000500000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="7001028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000000010040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100000008000600", @ANYRES32=r12, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400030e00003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040008000000080007000000000044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000140004004b7b0801ff030000400e03840100008008000100", @ANYRES32=r4, @ANYBLOB="f800028038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040004000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000300000008000600", @ANYRES32=r14, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000300000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="9c0102803c00012c24000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400a700000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004007f00000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000900000038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040004000000"], 0xde4}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) r16 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r16, 0xc058560f, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r16, 0x40505412, 0x0) 20:49:01 executing program 2: clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) select(0x40, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x2}, &(0x7f0000000340)={0x2, 0x80000001, 0x5, 0x2, 0x7fffffff, 0x0, 0xffffffffffff6930, 0x6}, &(0x7f0000000380)={0x2, 0x1, 0x10001, 0x8, 0x80000000, 0x6, 0xe8b, 0x40}, &(0x7f0000000400)={r0, r1/1000+10000}) 20:49:01 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000200)="dc8d24e7b5a83f787d731d212107b388b2a232db449df1c0fcd26194284f4866dcfe70f91dde0bb36935f40fa306c223274c439646f9b5f8c616c370", 0x3c, r1) (async, rerun: 64) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) (rerun: 64) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$get_persistent(0x16, 0xee00, r3) 20:49:01 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0x0, 0x1, 0x9, 0x1, 0x8}, 0xb24, 0x2, 0xf8}) 20:49:01 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x3, @win={{}, 0x4, 0x20000000, 0x0, 0x0, 0x0}}}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) 20:49:01 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f00000000c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000080)}}, 0x18) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x4}, 0x10) r1 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000200)="4ff902bb3c75333cc4d6098ae9", 0xd, 0xfffffffffffffffb) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$get_persistent(0x16, 0x0, r2) keyctl$negate(0xd, r1, 0x6, r2) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f00000001c0)={0x1}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) (async) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f00000000c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000080)}}, 0x18) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x4}, 0x10) (async) add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000200)="4ff902bb3c75333cc4d6098ae9", 0xd, 0xfffffffffffffffb) (async) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r2) (async) keyctl$get_persistent(0x16, 0x0, r2) (async) keyctl$negate(0xd, r1, 0x6, r2) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f00000001c0)={0x1}) (async) [ 1038.496354] Unknown ioctl -1067952625 20:49:01 executing program 2: clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) select(0x40, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000340)={0x2, 0x80000001, 0x5, 0x2, 0x7fffffff, 0x0, 0xffffffffffff6930, 0x6}, &(0x7f0000000380)={0x2, 0x1, 0x10001, 0x8, 0x80000000, 0x6, 0xe8b, 0x40}, &(0x7f0000000400)={r0, r1/1000+10000}) 20:49:01 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) (async) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000200)="dc8d24e7b5a83f787d731d212107b388b2a232db449df1c0fcd26194284f4866dcfe70f91dde0bb36935f40fa306c223274c439646f9b5f8c616c370", 0x3c, r1) (async) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$get_persistent(0x16, 0xee00, r3) 20:49:01 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0x0, 0x1, 0x9, 0x1, 0x8}, 0xb24, 0x2, 0xf8}) [ 1038.530954] Unknown ioctl -1067952625 [ 1038.540741] Unknown ioctl -2141170668 [ 1038.554969] Unknown ioctl -1067952625 [ 1038.573681] Unknown ioctl 1079006226 20:49:01 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x3, @win={{}, 0x4, 0x20000000, 0x0, 0x0, 0x0}}}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x3, @win={{}, 0x4, 0x20000000, 0x0, 0x0, 0x0}}}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) (async) 20:49:02 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)=@userptr={0xb1f, 0x2, 0x4, 0x10000, 0x800, {0x0, 0xea60}, {0x5, 0x8, 0x1, 0x6, 0x2, 0x81, "7aca23eb"}, 0x2, 0x2, {&(0x7f0000000080)}, 0x8000}) (async) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x40000) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f00000002c0)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000380)={0x0, @empty}, &(0x7f00000003c0)=0xc) (async) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000400)={@local, 0x0}, &(0x7f0000000440)=0x14) (async) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000140)={@private1, 0x0, r7}) (async) r8 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000000140)={@private1, 0x0, r9}) r10 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r10, 0x8918, &(0x7f0000000140)={@private1, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) (async) r13 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r13, 0x8918, &(0x7f0000000140)={@private1, 0x0, r14}) (async) getsockopt$inet6_mreq(r10, 0x29, 0x15, &(0x7f00000004c0)={@rand_addr, 0x0}, &(0x7f0000000500)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000001180)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001140)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="e40d0000", @ANYRES16=0x0, @ANYBLOB="040000000000000000000300000008000100", @ANYRES32=r4, @ANYBLOB="9c0002804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000600000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000200000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r7, @ANYBLOB="080007000000000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000008000100", @ANYRES32=r9, @ANYBLOB="7001028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004009e62691a08000600", @ANYRES32=r5, @ANYBLOB="400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400e24e000008000600", @ANYRES32=r11, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r4, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100000008000600", @ANYRES32=r7, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000000008008000100", @ANYRES32=r12, @ANYBLOB="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", @ANYRES32=r14, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="6801028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000400000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004007f0000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000005000300030000000800040000000080400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400ffffff7f08000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000500000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="7001028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000000010040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100000008000600", @ANYRES32=r12, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400030e00003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040008000000080007000000000044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000140004004b7b0801ff030000400e03840100008008000100", @ANYRES32=r4, @ANYBLOB="f800028038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040004000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000300000008000600", @ANYRES32=r14, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000300000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="9c0102803c00012c24000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400a700000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004007f00000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000900000038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040004000000"], 0xde4}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) r16 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r16, 0xc058560f, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r16, 0x40505412, 0x0) 20:49:02 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) (async) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f00000000c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000080)}}, 0x18) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x4}, 0x10) (async) r1 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000200)="4ff902bb3c75333cc4d6098ae9", 0xd, 0xfffffffffffffffb) (async) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$get_persistent(0x16, 0x0, r2) keyctl$negate(0xd, r1, 0x6, r2) (async) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f00000001c0)={0x1}) [ 1038.579080] Unknown ioctl -1067952625 20:49:02 executing program 2: clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) select(0x40, &(0x7f0000000300), &(0x7f0000000340)={0x2, 0x80000001, 0x5, 0x2, 0x7fffffff, 0x0, 0xffffffffffff6930, 0x6}, &(0x7f0000000380)={0x2, 0x1, 0x10001, 0x8, 0x80000000, 0x6, 0xe8b, 0x40}, &(0x7f0000000400)={r0, r1/1000+10000}) 20:49:02 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0x0, 0x1, 0x9, 0x1, 0x8}, 0xb24, 0x2, 0xf8}) 20:49:02 executing program 4: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$link(0x8, 0x0, r1) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$get_persistent(0x16, 0xee00, r3) 20:49:02 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x3, @win={{}, 0x4, 0x20000000, 0x0, 0x0, 0x0}}}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) 20:49:02 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0x3, 0x0, 0x9, 0x1, 0x8}, 0xb24, 0x2, 0xf8}) 20:49:02 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) socketpair(0x28, 0x801, 0x1000, &(0x7f0000000040)) r1 = socket$inet(0x2, 0x80000, 0x7) ioctl$SIOCGETSGCNT_IN6(r1, 0x89e1, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0xf}, @mcast1}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r2, 0xc0044dff, &(0x7f0000000100)=0x3) [ 1038.671254] Unknown ioctl -1067952625 [ 1038.682103] Unknown ioctl -1067952625 [ 1038.689168] Unknown ioctl -2141170668 20:49:02 executing program 4: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) (async) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$link(0x8, 0x0, r1) (async) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$get_persistent(0x16, 0xee00, r3) 20:49:02 executing program 2: clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) select(0x40, &(0x7f0000000300), 0x0, &(0x7f0000000380)={0x2, 0x1, 0x10001, 0x8, 0x80000000, 0x6, 0xe8b, 0x40}, &(0x7f0000000400)={r0, r1/1000+10000}) 20:49:02 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)=@userptr={0xb1f, 0x2, 0x4, 0x10000, 0x800, {0x0, 0xea60}, {0x5, 0x8, 0x1, 0x6, 0x2, 0x81, "7aca23eb"}, 0x2, 0x2, {&(0x7f0000000080)}, 0x8000}) (async) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x40000) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f00000002c0)) (async) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000380)={0x0, @empty}, &(0x7f00000003c0)=0xc) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000400)={@local, 0x0}, &(0x7f0000000440)=0x14) (async) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000140)={@private1, 0x0, r7}) (async) r8 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000000140)={@private1, 0x0, r9}) (async) r10 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r10, 0x8918, &(0x7f0000000140)={@private1, 0x0, r11}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) r13 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r13, 0x8918, &(0x7f0000000140)={@private1, 0x0, r14}) (async) getsockopt$inet6_mreq(r10, 0x29, 0x15, &(0x7f00000004c0)={@rand_addr, 0x0}, &(0x7f0000000500)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000001180)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001140)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="e40d0000", @ANYRES16=0x0, @ANYBLOB="040000000000000000000300000008000100", @ANYRES32=r4, @ANYBLOB="9c0002804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000600000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000200000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r7, @ANYBLOB="080007000000000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000008000100", @ANYRES32=r9, @ANYBLOB="7001028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004009e62691a08000600", @ANYRES32=r5, @ANYBLOB="400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400e24e000008000600", @ANYRES32=r11, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r4, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100000008000600", @ANYRES32=r7, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000000008008000100", @ANYRES32=r12, @ANYBLOB="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", @ANYRES32=r14, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e00004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400b400000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000010000008000100", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="6801028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000400000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004007f0000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000005000300030000000800040000000080400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400ffffff7f08000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000500000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="7001028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000000010040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100000008000600", @ANYRES32=r12, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400030e00003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040008000000080007000000000044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000140004004b7b0801ff030000400e03840100008008000100", @ANYRES32=r4, @ANYBLOB="f800028038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040004000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000300000008000600", @ANYRES32=r14, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000300000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="9c0102803c00012c24000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400a700000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004007f00000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000900000038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040004000000"], 0xde4}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) (async) r16 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r16, 0xc058560f, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r16, 0x40505412, 0x0) 20:49:02 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000000)={0x1, @sdr={0x56555959, 0xfffffffa}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) 20:49:02 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x1, 0x8}, 0xb24, 0x2, 0xf8}) [ 1038.717379] Unknown ioctl 1079006226 [ 1038.721180] Unknown ioctl -1067952625 20:49:02 executing program 4: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) (async) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$link(0x8, 0x0, r1) (async) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$get_persistent(0x16, 0xee00, r3) 20:49:02 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0x8}, 0xb24, 0x2, 0xf8}) 20:49:02 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000000)={0x1, @sdr={0x56555959, 0xfffffffa}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) 20:49:02 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) socketpair(0x28, 0x801, 0x1000, &(0x7f0000000040)) r1 = socket$inet(0x2, 0x80000, 0x7) ioctl$SIOCGETSGCNT_IN6(r1, 0x89e1, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0xf}, @mcast1}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r2, 0xc0044dff, &(0x7f0000000100)=0x3) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) (async) socketpair(0x28, 0x801, 0x1000, &(0x7f0000000040)) (async) socket$inet(0x2, 0x80000, 0x7) (async) ioctl$SIOCGETSGCNT_IN6(r1, 0x89e1, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0xf}, @mcast1}) (async) openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) (async) ioctl$SOUND_MIXER_WRITE_RECSRC(r2, 0xc0044dff, &(0x7f0000000100)=0x3) (async) 20:49:02 executing program 1: ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f00000000c0)) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000002c0)=@multiplanar_userptr={0x80000000, 0x1, 0x4, 0x100000, 0xcd, {r1, r2/1000+60000}, {0x4, 0xc, 0x2, 0x81, 0x8, 0x0, "7636f22d"}, 0x2, 0x2, {&(0x7f0000000240)=[{0x7, 0x7, {&(0x7f00000001c0)}, 0x100}, {0x7fff, 0x1, {&(0x7f0000000200)}}]}, 0x7}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x20203) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000080)={0x2, 0x0, 0x4, 0x1, 0x5}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, 0x0) [ 1038.799433] Unknown ioctl -1067952625 [ 1038.809084] Unknown ioctl -2141170668 [ 1038.828690] Unknown ioctl -1067952625 [ 1038.832602] Unknown ioctl 1079006226 20:49:02 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0x8}, 0xb24, 0x2, 0xf8}) 20:49:02 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000000)={0x1, @sdr={0x56555959, 0xfffffffa}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) 20:49:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001180)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001140)={&(0x7f0000000e00)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @remote, @initdev}, &(0x7f0000000240)=0xc) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000280)={0x1, 0x4, 0x80, 0xfffffffe, @vifc_lcl_ifindex=r2, @rand_addr=0x64010100}, 0x10) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000d40)={'TPROXY\x00'}, &(0x7f0000000d80)=0x1e) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000d00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f00000011c0)=ANY=[@ANYBLOB="e40a0000", @ANYRES16=0x0, @ANYBLOB="000008000100000000003e9f5d2e7acc422cf475746210c20000000000000000d55327ebcc03b21004fc785075f08417a8ca082a3cd360d1a19512a03d540d7e788a07228000000000000000eb4d52eadbbaab2cad", @ANYRES32=0x0, @ANYBLOB="9c0a08801c0100807400098070000080060001000a00000014000200fc0100000000000000000000000000010500030002000000060001000a0000001400020000000000000000000000ffffe00000010500030000000000060001000a00000014000200ff020000000000000000000000000001050003000200000008000a00010000001400040002004e20e000000100000000000000005c00098058000080060001000a00000014000200200100000000000000000000000000020500030000000000060001000200000008000200ac14141d05000300000000000600010002000000080002000000000005000300010000002400010000000000000000000000000000000000000000000000000000000000000000000600050000000000bc010080b00109807c000080060001000200000008000200ac1414390500030003000000060001000a0000001400020000000000000000000000ffffac1414bb0500030001000000060001000200000008000200e00000010500030003000000060001000a00000014000200fe800000000000000000000000000042050003000200000070000080060001000a00000014000200000000000000000000000000000000000500030001000000060001000a00000014000200fe8800000000000000000000000000010500030002000000060001000a00000014000200ff010000000000000000000000000001050003000100000058000080060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200ac1e01010500030002000000060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac1414bb05000300020000004c0000800600010002000000080002007f0000010500030000000000060001000200000008000200e00000010500030003000000060001000200000008000200e0000001050003000000000008000a00010000005800008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39220800030006000000200004000a004e2100000007fe8000000000000000000000000000290600000008000a0001000000300000800600050005000000240002002271f005fab0f1a83df55a4605930cbc4781a3473d7e3e679be90371f9a1b036180000801400040002004e2000000000000000000000000004010080a800098028000080060001000a00000014000200fc00000000000000000000000000000005000300010000007c000080060001000a00000014000200fc0200000000000000000000000000000500030002000000060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000200000008000200ac1414410500030002000000060001000200000008000200ac1414bb050003000300000006000500fbff000006000500000800002400020090d4c5cac6493343943a06f5e878bfc948a1733b16d3f1159b93edcc2cb9cbfb24000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c1c060080200004000a004e2200000000fc0200000000000000000000000000010700000008000a00010000001402098058000080060001000200000008000200ac1414aa0500030001000000060001000a000000140002002001000000000000000000000000000205000300020000000600010002000000080002007f00000105000300000000003c010080060001000a00000014000200fe8000000000000000000000000000aa0500030003000000060001000a00000014000200200100000000000000000000000000000500030001000000060001000200000008000200000000000500030001000000060001000200000008000200ac14141a0500030002000000060001000200000008000200000000000500030001000000060001000a00000014000200200100000000000000000000000000020500030000000000060001000a00000014000200ff0200000000000000000000000000010500030003000000060001000a0000001400020000000000000000000000ffffe00000010500030001000000060001000200000008000200ac1414bb0500030000000000060001000a00000014000200fe88000000000000000000000000010105000300020000007c000080060001000200000008000200000000000500030000000000060001000a00000014000200fc0100000000000000000000000000000500030001000000060001000200000008000200ac14143b0500030000000000060001000a00000014000200fe80000000000000000000000000000f05000300020000002c01098070000080060001000200000008000200ac1414120500030001000000060001000200000008000200ac1414aa0500030002000000060001000200000008000200000000000500030001000000060001000a00000014000200fc0100000000000000000000000000010500030003000000b8000080060001000200000008000200ac1414220500030000000000060001000a00000014000200fc0200000000000000000000000000000500030002000000060001000a000000140002000000000000000000000000000000000005000300030000000600010002000000080002006401010005000300020000000600010002000000080002000a0101020500030003000000060001000a00000014000200fe8000000000000000000000000000bb050003000300000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a004e2300000005fc000000000000000000000000000000bc77000006000500050000005c02098028000080060001000a00000014000200ff01000000000000000000000000000105000300030000004c000080060001000a00000014000200fe8800000000000000000000000000010500030003000000060001000a0000001400020000000000000000000000000000000001050003000000000064000080060001000200000008000200ffffffff0500030002000000060001000a00000014000200200100000000000000000000000000020500030002000000060001000a00000014000200fe80000000000000000000000000001e0500030003000000ac000080060001000a00000014000200200100000000000000000000000000020500030001000000060001000a00000014000200fe80000000000000000000000000001a0500030002000000060001000a00000014000200fe8000000000000000000000000000300500030000000000060001000a00000014000200fe8000000000000000000000000000aa05000300020000000600010002000000080002007f00000105000300000000007c000080060001000a00000014000200ff0100000000000000000000000000010500030003000000060001000a0000001400020000000000000000000000ffffac1414aa05000300010000000600010002000000080002007f0000010500030002000000060001000200000008000200ffffffff050003000100000058000080060001000a00000014000200fe8000000000000000000000000000aa05000300020000000600010002000000080002000a01010005000300020000000600010002000000080002000a0101020500030000000000080003000400000008000100", @ANYRES32=r2, @ANYBLOB="080005000100000008000500000000001400020077673100"/36], 0xae4}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000440)) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), r0) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r4, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x200}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x40044) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r5) r7 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r6) keyctl$get_persistent(0x16, 0xee00, r7) [ 1038.951995] Unknown ioctl -1067952625 [ 1038.960613] Unknown ioctl -1067952625 [ 1038.967375] Unknown ioctl 35297 20:49:03 executing program 2: clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) select(0x40, &(0x7f0000000300), 0x0, &(0x7f0000000380)={0x2, 0x1, 0x10001, 0x8, 0x80000000, 0x6, 0xe8b, 0x40}, &(0x7f0000000400)={r0, r1/1000+10000}) 20:49:03 executing program 1: ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f00000000c0)) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000002c0)=@multiplanar_userptr={0x80000000, 0x1, 0x4, 0x100000, 0xcd, {r1, r2/1000+60000}, {0x4, 0xc, 0x2, 0x81, 0x8, 0x0, "7636f22d"}, 0x2, 0x2, {&(0x7f0000000240)=[{0x7, 0x7, {&(0x7f00000001c0)}, 0x100}, {0x7fff, 0x1, {&(0x7f0000000200)}}]}, 0x7}) (async, rerun: 64) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async, rerun: 64) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x20203) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000080)={0x2, 0x0, 0x4, 0x1, 0x5}) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, 0x0) (rerun: 64) 20:49:03 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0x8}, 0xb24, 0x2, 0xf8}) 20:49:03 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) (async) socketpair(0x28, 0x801, 0x1000, &(0x7f0000000040)) (async) r1 = socket$inet(0x2, 0x80000, 0x7) ioctl$SIOCGETSGCNT_IN6(r1, 0x89e1, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0xf}, @mcast1}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r2, 0xc0044dff, &(0x7f0000000100)=0x3) 20:49:03 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x1000, 0xfffffffa, 0x4, {0x1, @pix_mp={0x3, 0x9, 0x32314752, 0x2, 0xa, [{0x10001, 0x1ff}, {0x1, 0xfff}, {0x6, 0x81}, {0x4, 0x6}, {0x800}, {0x9, 0x5}, {0x1, 0x40}, {0x7, 0x2}], 0x80, 0x80, 0x8, 0x2, 0x4}}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000080)=@fd={0x8f39, 0x3, 0x4, 0x1, 0x7, {}, {0x4, 0x8, 0x80, 0x0, 0x2, 0x5, "1b131031"}, 0x401, 0x4, {}, 0x1}) r2 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x0, r2, 0x1, &(0x7f0000000000)) 20:49:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001180)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001140)={&(0x7f0000000e00)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @remote, @initdev}, &(0x7f0000000240)=0xc) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000280)={0x1, 0x4, 0x80, 0xfffffffe, @vifc_lcl_ifindex=r2, @rand_addr=0x64010100}, 0x10) (async) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000d40)={'TPROXY\x00'}, &(0x7f0000000d80)=0x1e) (async) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000d00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f00000011c0)=ANY=[@ANYBLOB="e40a0000", @ANYRES16=0x0, @ANYBLOB="000008000100000000003e9f5d2e7acc422cf475746210c20000000000000000d55327ebcc03b21004fc785075f08417a8ca082a3cd360d1a19512a03d540d7e788a07228000000000000000eb4d52eadbbaab2cad", @ANYRES32=0x0, @ANYBLOB="9c0a08801c0100807400098070000080060001000a00000014000200fc0100000000000000000000000000010500030002000000060001000a0000001400020000000000000000000000ffffe00000010500030000000000060001000a00000014000200ff020000000000000000000000000001050003000200000008000a00010000001400040002004e20e000000100000000000000005c00098058000080060001000a00000014000200200100000000000000000000000000020500030000000000060001000200000008000200ac14141d05000300000000000600010002000000080002000000000005000300010000002400010000000000000000000000000000000000000000000000000000000000000000000600050000000000bc010080b00109807c000080060001000200000008000200ac1414390500030003000000060001000a0000001400020000000000000000000000ffffac1414bb0500030001000000060001000200000008000200e00000010500030003000000060001000a00000014000200fe800000000000000000000000000042050003000200000070000080060001000a00000014000200000000000000000000000000000000000500030001000000060001000a00000014000200fe8800000000000000000000000000010500030002000000060001000a00000014000200ff010000000000000000000000000001050003000100000058000080060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200ac1e01010500030002000000060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac1414bb05000300020000004c0000800600010002000000080002007f0000010500030000000000060001000200000008000200e00000010500030003000000060001000200000008000200e0000001050003000000000008000a00010000005800008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39220800030006000000200004000a004e2100000007fe8000000000000000000000000000290600000008000a0001000000300000800600050005000000240002002271f005fab0f1a83df55a4605930cbc4781a3473d7e3e679be90371f9a1b036180000801400040002004e2000000000000000000000000004010080a800098028000080060001000a00000014000200fc00000000000000000000000000000005000300010000007c000080060001000a00000014000200fc0200000000000000000000000000000500030002000000060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000200000008000200ac1414410500030002000000060001000200000008000200ac1414bb050003000300000006000500fbff000006000500000800002400020090d4c5cac6493343943a06f5e878bfc948a1733b16d3f1159b93edcc2cb9cbfb24000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c1c060080200004000a004e2200000000fc0200000000000000000000000000010700000008000a00010000001402098058000080060001000200000008000200ac1414aa0500030001000000060001000a000000140002002001000000000000000000000000000205000300020000000600010002000000080002007f00000105000300000000003c010080060001000a00000014000200fe8000000000000000000000000000aa0500030003000000060001000a00000014000200200100000000000000000000000000000500030001000000060001000200000008000200000000000500030001000000060001000200000008000200ac14141a0500030002000000060001000200000008000200000000000500030001000000060001000a00000014000200200100000000000000000000000000020500030000000000060001000a00000014000200ff0200000000000000000000000000010500030003000000060001000a0000001400020000000000000000000000ffffe00000010500030001000000060001000200000008000200ac1414bb0500030000000000060001000a00000014000200fe88000000000000000000000000010105000300020000007c000080060001000200000008000200000000000500030000000000060001000a00000014000200fc0100000000000000000000000000000500030001000000060001000200000008000200ac14143b0500030000000000060001000a00000014000200fe80000000000000000000000000000f05000300020000002c01098070000080060001000200000008000200ac1414120500030001000000060001000200000008000200ac1414aa0500030002000000060001000200000008000200000000000500030001000000060001000a00000014000200fc0100000000000000000000000000010500030003000000b8000080060001000200000008000200ac1414220500030000000000060001000a00000014000200fc0200000000000000000000000000000500030002000000060001000a000000140002000000000000000000000000000000000005000300030000000600010002000000080002006401010005000300020000000600010002000000080002000a0101020500030003000000060001000a00000014000200fe8000000000000000000000000000bb050003000300000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a004e2300000005fc000000000000000000000000000000bc77000006000500050000005c02098028000080060001000a00000014000200ff01000000000000000000000000000105000300030000004c000080060001000a00000014000200fe8800000000000000000000000000010500030003000000060001000a0000001400020000000000000000000000000000000001050003000000000064000080060001000200000008000200ffffffff0500030002000000060001000a00000014000200200100000000000000000000000000020500030002000000060001000a00000014000200fe80000000000000000000000000001e0500030003000000ac000080060001000a00000014000200200100000000000000000000000000020500030001000000060001000a00000014000200fe80000000000000000000000000001a0500030002000000060001000a00000014000200fe8000000000000000000000000000300500030000000000060001000a00000014000200fe8000000000000000000000000000aa05000300020000000600010002000000080002007f00000105000300000000007c000080060001000a00000014000200ff0100000000000000000000000000010500030003000000060001000a0000001400020000000000000000000000ffffac1414aa05000300010000000600010002000000080002007f0000010500030002000000060001000200000008000200ffffffff050003000100000058000080060001000a00000014000200fe8000000000000000000000000000aa05000300020000000600010002000000080002000a01010005000300020000000600010002000000080002000a0101020500030000000000080003000400000008000100", @ANYRES32=r2, @ANYBLOB="080005000100000008000500000000001400020077673100"/36], 0xae4}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) (async) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000440)) (async) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), r0) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r4, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x200}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x40044) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r5) r7 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r6) keyctl$get_persistent(0x16, 0xee00, r7) 20:49:03 executing program 1: ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f00000000c0)) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000002c0)=@multiplanar_userptr={0x80000000, 0x1, 0x4, 0x100000, 0xcd, {r1, r2/1000+60000}, {0x4, 0xc, 0x2, 0x81, 0x8, 0x0, "7636f22d"}, 0x2, 0x2, {&(0x7f0000000240)=[{0x7, 0x7, {&(0x7f00000001c0)}, 0x100}, {0x7fff, 0x1, {&(0x7f0000000200)}}]}, 0x7}) (async) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x20203) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000080)={0x2, 0x0, 0x4, 0x1, 0x5}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, 0x0) 20:49:03 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x1000, 0xfffffffa, 0x4, {0x1, @pix_mp={0x3, 0x9, 0x32314752, 0x2, 0xa, [{0x10001, 0x1ff}, {0x1, 0xfff}, {0x6, 0x81}, {0x4, 0x6}, {0x800}, {0x9, 0x5}, {0x1, 0x40}, {0x7, 0x2}], 0x80, 0x80, 0x8, 0x2, 0x4}}}) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000080)=@fd={0x8f39, 0x3, 0x4, 0x1, 0x7, {}, {0x4, 0x8, 0x80, 0x0, 0x2, 0x5, "1b131031"}, 0x401, 0x4, {}, 0x1}) r2 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x0, r2, 0x1, &(0x7f0000000000)) 20:49:03 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x1}, 0xb24, 0x2, 0xf8}) [ 1039.670900] Unknown ioctl -1067952625 20:49:03 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x20e142) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) 20:49:03 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x1}, 0x0, 0x2, 0xf8}) 20:49:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001180)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001140)={&(0x7f0000000e00)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @remote, @initdev}, &(0x7f0000000240)=0xc) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000280)={0x1, 0x4, 0x80, 0xfffffffe, @vifc_lcl_ifindex=r2, @rand_addr=0x64010100}, 0x10) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000d40)={'TPROXY\x00'}, &(0x7f0000000d80)=0x1e) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000d00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f00000011c0)=ANY=[@ANYBLOB="e40a0000", @ANYRES16=0x0, @ANYBLOB="000008000100000000003e9f5d2e7acc422cf475746210c20000000000000000d55327ebcc03b21004fc785075f08417a8ca082a3cd360d1a19512a03d540d7e788a07228000000000000000eb4d52eadbbaab2cad", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="080005000100000008000500000000001400020077673100"/36], 0xae4}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) (async, rerun: 32) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (rerun: 32) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, 0x0) (async, rerun: 32) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000440)) (async, rerun: 32) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), r0) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r4, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x200}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x40044) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r5) r7 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r6) keyctl$get_persistent(0x16, 0xee00, r7) [ 1039.693815] Unknown ioctl -1067952625 [ 1039.698085] Unknown ioctl 35297 [ 1039.768117] Unknown ioctl -1067952625 [ 1039.776179] Unknown ioctl 35297 [ 1039.777332] Unknown ioctl -1067952625 [ 1039.783896] Unknown ioctl 35297 [ 1039.787263] Unknown ioctl -1067952625 [ 1039.787406] Unknown ioctl 35297 [ 1039.791055] Unknown ioctl -1067952625 [ 1039.791060] Unknown ioctl -1067952625 [ 1039.791065] Unknown ioctl -1067952625 [ 1039.791069] Unknown ioctl -1067952625 [ 1039.791076] Unknown ioctl -1067952625 [ 1039.791081] Unknown ioctl -1067952625 [ 1039.791086] Unknown ioctl -1067952625 [ 1039.798612] Unknown ioctl 35297 [ 1039.811044] Unknown ioctl -1067952625 [ 1039.813831] Unknown ioctl 35297 [ 1039.819237] Unknown ioctl -1067952625 [ 1039.821291] Unknown ioctl 35297 [ 1039.828165] Unknown ioctl -1067952625 [ 1039.830158] Unknown ioctl 35297 [ 1039.832047] Unknown ioctl -1067952625 [ 1039.836693] Unknown ioctl 35297 [ 1039.841746] Unknown ioctl -1067952625 [ 1039.843886] Unknown ioctl 35297 [ 1039.850330] Unknown ioctl -1067952625 [ 1039.854608] Unknown ioctl 35297 [ 1039.857567] Unknown ioctl -1067952625 [ 1039.860751] Unknown ioctl 35297 [ 1039.868177] Unknown ioctl -1067952625 [ 1039.873300] Unknown ioctl 35297 [ 1039.875168] Unknown ioctl -1067952625 [ 1039.879635] Unknown ioctl 35297 [ 1039.882159] Unknown ioctl -1067952625 [ 1039.886123] Unknown ioctl 35297 [ 1039.894052] Unknown ioctl -1067952625 [ 1039.897026] Unknown ioctl 35297 [ 1039.900279] Unknown ioctl -1067952625 [ 1039.904049] Unknown ioctl 35297 [ 1039.911060] Unknown ioctl 35297 [ 1039.912261] Unknown ioctl -1067952625 [ 1039.914576] Unknown ioctl 35297 [ 1039.920514] Unknown ioctl -1067952625 [ 1039.921559] Unknown ioctl 35297 [ 1039.928837] Unknown ioctl 35297 [ 1039.929196] Unknown ioctl -1067952625 [ 1039.932186] Unknown ioctl 35297 [ 1039.937813] Unknown ioctl -1067952625 [ 1039.939435] Unknown ioctl 35297 [ 1039.946518] Unknown ioctl 35297 [ 1039.947376] Unknown ioctl -1067952625 [ 1039.949900] Unknown ioctl 35297 [ 1039.955695] Unknown ioctl -1067952625 [ 1039.956984] Unknown ioctl 35297 [ 1039.960746] Unknown ioctl -1067952625 [ 1039.960752] Unknown ioctl -1067952625 [ 1039.964126] Unknown ioctl 35297 [ 1039.974394] Unknown ioctl -1067952625 [ 1039.975090] Unknown ioctl 35297 [ 1039.979768] Unknown ioctl -1067952625 [ 1039.982084] Unknown ioctl 35297 [ 1039.988822] Unknown ioctl -1067952625 [ 1039.989361] Unknown ioctl 35297 [ 1039.996231] Unknown ioctl -1067952625 [ 1039.996506] Unknown ioctl 35297 [ 1040.004013] Unknown ioctl 35297 [ 1040.007419] Unknown ioctl 35297 [ 1040.010685] Unknown ioctl 35297 20:49:03 executing program 2: clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) select(0x40, &(0x7f0000000300), 0x0, &(0x7f0000000380)={0x2, 0x1, 0x10001, 0x8, 0x80000000, 0x6, 0xe8b, 0x40}, &(0x7f0000000400)={r0, r1/1000+10000}) 20:49:03 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x220000, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg2\x00'}) 20:49:03 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x1000, 0xfffffffa, 0x4, {0x1, @pix_mp={0x3, 0x9, 0x32314752, 0x2, 0xa, [{0x10001, 0x1ff}, {0x1, 0xfff}, {0x6, 0x81}, {0x4, 0x6}, {0x800}, {0x9, 0x5}, {0x1, 0x40}, {0x7, 0x2}], 0x80, 0x80, 0x8, 0x2, 0x4}}}) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000080)=@fd={0x8f39, 0x3, 0x4, 0x1, 0x7, {}, {0x4, 0x8, 0x80, 0x0, 0x2, 0x5, "1b131031"}, 0x401, 0x4, {}, 0x1}) r2 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x0, r2, 0x1, &(0x7f0000000000)) 20:49:03 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xf8}) 20:49:03 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x20e142) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) 20:49:03 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$get_persistent(0x16, 0xee00, r3) 20:49:03 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x20e142) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x20e142) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) (async) 20:49:03 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x220000, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg2\x00'}) 20:49:03 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x1}}) 20:49:03 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$get_persistent(0x16, 0xee00, r3) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) (async) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r1) (async) add_key$keyring(&(0x7f0000000080), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r2) (async) keyctl$get_persistent(0x16, 0xee00, r3) (async) 20:49:04 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0x8000, 0x9, 0x200, 0x1, 0xfffffffb, '\x00', 0x0, r0, 0x3, 0x1, 0x5, 0xe}, 0x48) prctl$PR_GET_SECUREBITS(0x1b) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x9, 0x5}) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x3) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{0x4, 0x4000}, 0x0, 0x81, 0x0, 0x0, 0x0}}, 0x4}) 20:49:04 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x220000, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg2\x00'}) 20:49:04 executing program 2: clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) select(0x40, &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x80000001, 0x5, 0x2, 0x7fffffff, 0x0, 0xffffffffffff6930, 0x6}, &(0x7f0000000380)={0x2, 0x1, 0x10001, 0x8, 0x80000000, 0x6, 0xe8b, 0x40}, &(0x7f0000000400)={r0, r1/1000+10000}) 20:49:04 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) setsockopt$MRT_ASSERT(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000240), 0x4) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f0000000380)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000100)=@multiplanar_overlay={0x8, 0x0, 0x4, 0x10, 0x8, {r2, r3/1000+10000}, {0x3, 0x0, 0x6, 0x8, 0x0, 0x0, "8575a147"}, 0x100, 0x3, {&(0x7f0000000080)=[{0x0, 0x2, {0x80000000}, 0x8}, {0x8, 0xffffffff, {0x9}, 0x7cb}]}, 0x1, 0x0, r1}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000200)) sched_rr_get_interval(0x0, &(0x7f0000000340)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x80400) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, &(0x7f00000002c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) 20:49:04 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x1}}) 20:49:04 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0x8000, 0x9, 0x200, 0x1, 0xfffffffb, '\x00', 0x0, r0, 0x3, 0x1, 0x5, 0xe}, 0x48) (async) prctl$PR_GET_SECUREBITS(0x1b) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x9, 0x5}) (async) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x3) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{0x4, 0x4000}, 0x0, 0x81, 0x0, 0x0, 0x0}}, 0x4}) 20:49:04 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$get_persistent(0x16, 0xee00, r3) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) (async) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r1) (async) add_key$keyring(&(0x7f0000000080), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r2) (async) keyctl$get_persistent(0x16, 0xee00, r3) (async) 20:49:04 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x101900) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 20:49:04 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x1}}) 20:49:04 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x101900) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 20:49:04 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0x8000, 0x9, 0x200, 0x1, 0xfffffffb, '\x00', 0x0, r0, 0x3, 0x1, 0x5, 0xe}, 0x48) (async) prctl$PR_GET_SECUREBITS(0x1b) (async, rerun: 32) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (rerun: 32) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x9, 0x5}) (async, rerun: 32) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x3) (async, rerun: 32) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4, {0x1, @win={{0x4, 0x4000}, 0x0, 0x81, 0x0, 0x0, 0x0}}, 0x4}) 20:49:04 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) r3 = getuid() r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@mcast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e23, 0x41, 0x4e21, 0x2a, 0x2, 0x190, 0x80, 0x89, 0x0, r3}, {0x1, 0x8000, 0x0, 0x7fffffffffffffff, 0x3, 0x9, 0x6, 0x19ca52df}, {0x8000000000000000, 0x43, 0x8000000000000001, 0x7ff}, 0x8001, 0x6e6bb2, 0x2, 0x0, 0x2, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d6, 0x3c}, 0xa, @in6=@mcast1, 0x34ff, 0x2, 0x3, 0x0, 0x4431da64, 0x10000, 0x81}}, 0xe8) keyctl$get_persistent(0x16, r3, r1) 20:49:04 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x1}}) 20:49:04 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x101900) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x101900) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async) [ 1041.459153] Unknown ioctl -2141694956 [ 1041.473713] Unknown ioctl -1067952625 [ 1041.492542] Unknown ioctl -1073453900 [ 1041.497565] Unknown ioctl 21667 20:49:05 executing program 2: clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) select(0x40, &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x80000001, 0x5, 0x2, 0x7fffffff, 0x0, 0xffffffffffff6930, 0x6}, &(0x7f0000000380)={0x2, 0x1, 0x10001, 0x8, 0x80000000, 0x6, 0xe8b, 0x40}, &(0x7f0000000400)={r0, r1/1000+10000}) 20:49:05 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) setsockopt$MRT_ASSERT(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000240), 0x4) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f0000000380)) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000100)=@multiplanar_overlay={0x8, 0x0, 0x4, 0x10, 0x8, {r2, r3/1000+10000}, {0x3, 0x0, 0x6, 0x8, 0x0, 0x0, "8575a147"}, 0x100, 0x3, {&(0x7f0000000080)=[{0x0, 0x2, {0x80000000}, 0x8}, {0x8, 0xffffffff, {0x9}, 0x7cb}]}, 0x1, 0x0, r1}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000200)) (async) sched_rr_get_interval(0x0, &(0x7f0000000340)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) (async) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x80400) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, &(0x7f00000002c0)) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) 20:49:05 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) (async) r3 = getuid() (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@mcast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e23, 0x41, 0x4e21, 0x2a, 0x2, 0x190, 0x80, 0x89, 0x0, r3}, {0x1, 0x8000, 0x0, 0x7fffffffffffffff, 0x3, 0x9, 0x6, 0x19ca52df}, {0x8000000000000000, 0x43, 0x8000000000000001, 0x7ff}, 0x8001, 0x6e6bb2, 0x2, 0x0, 0x2, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d6, 0x3c}, 0xa, @in6=@mcast1, 0x34ff, 0x2, 0x3, 0x0, 0x4431da64, 0x10000, 0x81}}, 0xe8) (async) keyctl$get_persistent(0x16, r3, r1) 20:49:05 executing program 5: ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x1}}) 20:49:05 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x1, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)) 20:49:05 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x20e00) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0) 20:49:05 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) (async) r3 = getuid() (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@mcast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e23, 0x41, 0x4e21, 0x2a, 0x2, 0x190, 0x80, 0x89, 0x0, r3}, {0x1, 0x8000, 0x0, 0x7fffffffffffffff, 0x3, 0x9, 0x6, 0x19ca52df}, {0x8000000000000000, 0x43, 0x8000000000000001, 0x7ff}, 0x8001, 0x6e6bb2, 0x2, 0x0, 0x2, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d6, 0x3c}, 0xa, @in6=@mcast1, 0x34ff, 0x2, 0x3, 0x0, 0x4431da64, 0x10000, 0x81}}, 0xe8) keyctl$get_persistent(0x16, r3, r1) 20:49:05 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async, rerun: 32) setsockopt$MRT_ASSERT(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000240), 0x4) (rerun: 32) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f0000000380)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000100)=@multiplanar_overlay={0x8, 0x0, 0x4, 0x10, 0x8, {r2, r3/1000+10000}, {0x3, 0x0, 0x6, 0x8, 0x0, 0x0, "8575a147"}, 0x100, 0x3, {&(0x7f0000000080)=[{0x0, 0x2, {0x80000000}, 0x8}, {0x8, 0xffffffff, {0x9}, 0x7cb}]}, 0x1, 0x0, r1}) (async, rerun: 64) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000200)) (async) sched_rr_get_interval(0x0, &(0x7f0000000340)) (async) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x80400) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, &(0x7f00000002c0)) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) 20:49:05 executing program 5: ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x1}}) [ 1042.337459] Unknown ioctl -2141694956 [ 1042.345064] Unknown ioctl -1073453900 [ 1042.345257] Unknown ioctl -1067952625 [ 1042.356046] Unknown ioctl 21667 [ 1042.373397] Unknown ioctl -1067952625 20:49:05 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x20e00) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x20e00) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0) (async) [ 1042.390285] Unknown ioctl -1067952625 20:49:05 executing program 5: ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x1}}) 20:49:05 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) socketpair(0x1, 0x80000, 0x5, &(0x7f0000000200)={0xffffffffffffffff}) getpeername$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000280)=0x1c) getpgid(r3) [ 1042.457170] Unknown ioctl -1067952625 [ 1042.465744] Unknown ioctl -1067952625 [ 1042.475390] Unknown ioctl -1067952625 20:49:06 executing program 2: clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) select(0x40, &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x80000001, 0x5, 0x2, 0x7fffffff, 0x0, 0xffffffffffff6930, 0x6}, &(0x7f0000000380)={0x2, 0x1, 0x10001, 0x8, 0x80000000, 0x6, 0xe8b, 0x40}, &(0x7f0000000400)={r0, r1/1000+10000}) 20:49:06 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x1}}) 20:49:06 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x20e00) (async, rerun: 32) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) (rerun: 32) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0) 20:49:06 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) (async) socketpair(0x1, 0x80000, 0x5, &(0x7f0000000200)={0xffffffffffffffff}) getpeername$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000280)=0x1c) getpgid(r3) [ 1043.222816] Unknown ioctl -1067952625 [ 1043.222892] Unknown ioctl -1067952625 [ 1048.366106] oom_reaper: reaped process 23270 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:8kB [ 1048.390751] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1048.406317] systemd-journal cpuset=/ mems_allowed=0-1 [ 1048.412114] CPU: 0 PID: 4617 Comm: systemd-journal Not tainted 4.14.304-syzkaller #0 [ 1048.419996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1048.429349] Call Trace: [ 1048.431944] dump_stack+0x1b2/0x281 [ 1048.435573] dump_header+0x178/0x82f [ 1048.439284] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1048.444390] ? ___ratelimit+0x2b5/0x510 [ 1048.448379] oom_kill_process.cold+0x10/0xa40 [ 1048.452882] out_of_memory+0xe3e/0x1190 [ 1048.456852] ? oom_killer_disable+0x1c0/0x1c0 [ 1048.461345] ? mutex_trylock+0x152/0x1a0 [ 1048.465391] __alloc_pages_nodemask+0x25a9/0x2900 [ 1048.470218] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1048.475060] alloc_pages_current+0x155/0x260 [ 1048.475765] syz-executor.0: vmalloc: allocation failure, allocated 195760128 of 536875008 bytes [ 1048.479469] filemap_fault+0x11a1/0x1ad0 [ 1048.488373] , mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask= [ 1048.492353] ext4_filemap_fault+0x84/0xb0 [ 1048.492361] __do_fault+0xfa/0x380 [ 1048.492369] __handle_mm_fault+0x2497/0x4620 [ 1048.492379] ? vm_insert_page+0x7c0/0x7c0 [ 1048.492395] ? mark_held_locks+0xa6/0xf0 [ 1048.492406] handle_mm_fault+0x455/0x9c0 [ 1048.492418] __do_page_fault+0x549/0xad0 [ 1048.492429] ? spurious_fault+0x640/0x640 [ 1048.492437] ? do_page_fault+0x60/0x500 [ 1048.492447] ? page_fault+0x2f/0x50 [ 1048.501880] (null) [ 1048.502521] page_fault+0x45/0x50 [ 1048.502529] RIP: 0001:0xffffffffffffffff [ 1048.502534] RSP: 6613f1e0:00007ffd301bbb20 EFLAGS: 7ffd301bb930 [ 1048.504613] Mem-Info: [ 1048.506086] syz-executor.0 cpuset= [ 1048.510476] active_anon:26990 inactive_anon:6747 isolated_anon:0 [ 1048.510476] active_file:21 inactive_file:20 isolated_file:0 [ 1048.510476] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1048.510476] slab_reclaimable:24672 slab_unreclaimable:100944 [ 1048.510476] mapped:24643 shmem:7162 pagetables:590 bounce:0 [ 1048.510476] free:13736 free_pcp:420 free_cma:0 [ 1048.510493] Node 0 active_anon:107956kB inactive_anon:26988kB active_file:76kB inactive_file:80kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:98572kB dirty:0kB writeback:0kB shmem:28648kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 55296kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1048.518264] / [ 1048.518801] Node 1 active_anon:4kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1048.522939] mems_allowed=0-1 [ 1048.528982] Node 0 [ 1048.531100] CPU: 1 PID: 23270 Comm: syz-executor.0 Not tainted 4.14.304-syzkaller #0 [ 1048.535081] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1048.538647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1048.540769] lowmem_reserve[]: [ 1048.544197] Call Trace: [ 1048.544216] dump_stack+0x1b2/0x281 [ 1048.544230] warn_alloc.cold+0x96/0x1cc [ 1048.548259] 0 [ 1048.554300] ? zone_watermark_ok_safe+0x220/0x220 [ 1048.554324] __vmalloc_area_node+0x48a/0x680 [ 1048.556699] 2717 [ 1048.560230] ? __vmalloc_node_range+0x150/0x150 [ 1048.593363] 2718 [ 1048.620996] ? __get_vm_area_node+0x27d/0x340 [ 1048.621010] __vmalloc_node_range+0xbe/0x150 [ 1048.621025] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1048.622733] 2718 [ 1048.648462] vmalloc_user+0x47/0xa0 [ 1048.648474] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 1048.648482] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1048.648491] vb2_vmalloc_alloc+0xa6/0x2d0 [ 1048.651569] 2718 [ 1048.653793] __vb2_queue_alloc+0x47a/0xd90 [ 1048.653815] vb2_core_create_bufs+0x279/0x5a0 [ 1048.687158] ? __vb2_queue_free+0x7a0/0x7a0 [ 1048.687173] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1048.687185] ? trace_hardirqs_on+0x10/0x10 [ 1048.696616] Node 0 [ 1048.699688] vb2_create_bufs+0x2e1/0x5b0 [ 1048.702283] DMA32 free:17668kB min:36196kB low:45244kB high:54292kB active_anon:107956kB inactive_anon:26988kB active_file:76kB inactive_file:80kB unevictable:0kB writepending:0kB present:3129332kB managed:2787984kB mlocked:0kB kernel_stack:7488kB pagetables:2360kB bounce:0kB free_pcp:1436kB local_pcp:644kB free_cma:0kB [ 1048.705866] ? vb2_thread_start+0x310/0x310 [ 1048.709810] lowmem_reserve[]: [ 1048.711602] v4l_create_bufs+0xa4/0x150 [ 1048.716427] 0 [ 1048.720800] __video_do_ioctl+0x65b/0x6a0 [ 1048.722848] 0 [ 1048.727486] ? video_ioctl2+0x30/0x30 [ 1048.729519] 0 [ 1048.733997] ? __might_fault+0x177/0x1b0 [ 1048.734007] ? video_ioctl2+0x30/0x30 [ 1048.734016] video_usercopy+0xfd/0xe70 [ 1048.738397] 0 [ 1048.743745] ? v4l_g_ctrl+0x390/0x390 [ 1048.743754] ? lock_acquire+0x170/0x3f0 [ 1048.743763] ? lock_downgrade+0x740/0x740 [ 1048.745797] 0 [ 1048.749403] ? trace_hardirqs_on+0x10/0x10 [ 1048.759041] ? futex_exit_release+0x220/0x220 [ 1048.763181] Node 0 [ 1048.765213] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1048.769424] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:468kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1048.773890] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1048.773902] v4l2_ioctl+0x1bb/0x2f0 [ 1048.773910] ? v4l2_open+0x2f0/0x2f0 [ 1048.778202] lowmem_reserve[]: [ 1048.783548] do_vfs_ioctl+0x75a/0xff0 [ 1048.783559] ? lock_acquire+0x170/0x3f0 [ 1048.783568] ? ioctl_preallocate+0x1a0/0x1a0 [ 1048.787780] 0 [ 1048.790010] ? __fget+0x265/0x3e0 [ 1048.794056] 0 [ 1048.822479] ? do_vfs_ioctl+0xff0/0xff0 [ 1048.822491] ? security_file_ioctl+0x83/0xb0 [ 1048.822501] SyS_ioctl+0x7f/0xb0 [ 1048.826793] 0 [ 1048.829881] ? do_vfs_ioctl+0xff0/0xff0 [ 1048.833842] 0 [ 1048.835610] do_syscall_64+0x1d5/0x640 [ 1048.839725] 0 [ 1048.841516] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1048.847151] RIP: 0033:0x7fa7d3c480c9 [ 1048.851181] Node 1 [ 1048.854958] RSP: 002b:00007fa7d21ba168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1048.854968] RAX: ffffffffffffffda RBX: 00007fa7d3d67f80 RCX: 00007fa7d3c480c9 [ 1048.854973] RDX: 0000000020000180 RSI: 00000000c100565c RDI: 0000000000000003 [ 1048.854980] RBP: 00007fa7d3ca3ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1048.858878] Normal free:26308kB min:53696kB low:67120kB high:80544kB active_anon:4kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:244kB local_pcp:124kB free_cma:0kB [ 1048.860649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1048.864440] lowmem_reserve[]: [ 1048.868371] R13: 00007ffdc7685b4f R14: 00007fa7d21ba300 R15: 0000000000022000 [ 1048.879850] Mem-Info: [ 1048.888609] 0 [ 1048.890547] active_anon:26990 inactive_anon:6747 isolated_anon:0 [ 1048.890547] active_file:21 inactive_file:20 isolated_file:0 [ 1048.890547] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1048.890547] slab_reclaimable:24672 slab_unreclaimable:100944 [ 1048.890547] mapped:24643 shmem:7162 pagetables:590 bounce:0 [ 1048.890547] free:13736 free_pcp:420 free_cma:0 [ 1048.921090] 0 [ 1048.924316] Node 0 active_anon:107956kB inactive_anon:26988kB active_file:76kB inactive_file:80kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:98572kB dirty:0kB writeback:0kB shmem:28648kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 55296kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1048.927991] 0 [ 1048.931047] Node 1 active_anon:4kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1048.936754] 0 [ 1048.941955] Node 0 [ 1048.943235] 0 [ 1048.945012] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1048.950202] lowmem_reserve[]: [ 1048.956118] Node 0 [ 1048.964087] 0 [ 1048.967839] DMA: [ 1048.969598] 2717 [ 1048.975540] 0*4kB [ 1048.981679] 2718 [ 1048.984315] 1*8kB [ 1048.986521] 2718 [ 1048.996180] (U) [ 1049.006032] 2718 [ 1049.008952] 1*16kB [ 1049.045189] (U) [ 1049.053971] Node 0 [ 1049.060830] 0*32kB [ 1049.064445] DMA32 free:17868kB min:36196kB low:45244kB high:54292kB active_anon:107864kB inactive_anon:26988kB active_file:64kB inactive_file:68kB unevictable:0kB writepending:0kB present:3129332kB managed:2787984kB mlocked:0kB kernel_stack:7488kB pagetables:2356kB bounce:0kB free_pcp:1384kB local_pcp:740kB free_cma:0kB [ 1049.067030] 1*64kB [ 1049.109301] lowmem_reserve[]: [ 1049.129785] (U) [ 1049.158009] 0 [ 1049.166891] 1*128kB [ 1049.188847] 0 [ 1049.199653] (U) [ 1049.200402] 0 [ 1049.202597] 0*256kB [ 1049.206564] 0 [ 1049.206713] 1*512kB [ 1049.208667] 0 [ 1049.210708] (U) [ 1049.212959] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:468kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1049.212978] lowmem_reserve[]: 0 0 0 0 0 [ 1049.212997] Node 1 Normal free:26308kB min:53696kB low:67120kB high:80544kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:244kB local_pcp:120kB free_cma:0kB [ 1049.213017] lowmem_reserve[]: 0 0 0 0 0 [ 1049.213035] Node 0 DMA: [ 1049.222240] 0*1024kB [ 1049.249767] 0*4kB [ 1049.250113] 1*2048kB [ 1049.253229] 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10968kB [ 1049.253289] Node 0 DMA32: 2411*4kB (ME) 596*8kB [ 1049.262492] (M) [ 1049.265020] (UME) [ 1049.267175] 2*4096kB [ 1049.268954] 90*16kB [ 1049.271250] (M) [ 1049.273060] (UME) 19*32kB (MH) 6*64kB (UM) 0*128kB 0*256kB 0*512kB 1*1024kB (H) 0*2048kB 0*4096kB = 17868kB [ 1049.273099] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1049.273146] Node 1 Normal: 3*4kB [ 1049.282780] = 10968kB [ 1049.303076] (UME) [ 1049.311768] Node 0 [ 1049.334237] 3*8kB [ 1049.336263] DMA32: [ 1049.338918] (UME) [ 1049.341330] 2411*4kB [ 1049.343511] 2*16kB (UM) 2*32kB (UM) 1*64kB (M) 2*128kB (ME) 3*256kB (UME) 1*512kB (E) 2*1024kB (ME) 3*2048kB (M) 4*4096kB (M) = 26308kB [ 1049.343573] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1049.343579] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1049.343586] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1049.343591] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1049.343596] 7196 total pagecache pages [ 1049.353422] (ME) [ 1049.359480] 0 pages in swap cache [ 1049.369489] 596*8kB [ 1049.371124] Swap cache stats: add 0, delete 0, find 0/0 [ 1049.373120] (UME) 90*16kB (UME) 19*32kB (MH) 6*64kB (UM) 0*128kB 0*256kB 0*512kB [ 1049.385072] Free swap = 0kB [ 1049.401292] 1*1024kB [ 1049.403752] Total swap = 0kB [ 1049.404121] (H) [ 1049.406495] 2097051 pages RAM [ 1049.408465] 0*2048kB [ 1049.410590] 0 pages HighMem/MovableOnly [ 1049.420295] 0*4096kB [ 1049.427268] 363897 pages reserved [ 1049.441643] = 17868kB [ 1049.445394] 0 pages cma reserved [ 1049.451814] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1049.529501] Node 1 Normal: 3*4kB (UME) 3*8kB (UME) 2*16kB (UM) 2*32kB (UM) 1*64kB (M) 2*128kB (ME) 3*256kB (UME) 1*512kB (E) 2*1024kB (ME) 3*2048kB (M) 4*4096kB (M) = 26308kB [ 1049.547272] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1049.556151] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1049.566666] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1049.575552] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1049.586293] 7196 total pagecache pages [ 1049.590187] 0 pages in swap cache [ 1049.593720] Swap cache stats: add 0, delete 0, find 0/0 [ 1049.599074] Free swap = 0kB [ 1049.604215] Total swap = 0kB [ 1049.607305] 2097051 pages RAM [ 1049.610397] 0 pages HighMem/MovableOnly [ 1049.614446] 363897 pages reserved [ 1049.617888] 0 pages cma reserved [ 1049.621245] Out of memory (oom_kill_allocating_task): Kill process 4617 (systemd-journal) score 0 or sacrifice child [ 1049.638036] Killed process 4617 (systemd-journal) total-vm:54288kB, anon-rss:508kB, file-rss:4kB, shmem-rss:14612kB [ 1049.650005] oom_reaper: reaped process 4617 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:14624kB [ 1049.977398] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1049.991746] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1050.014901] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 1050.021747] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 1050.035438] systemd[1]: Stopped Journal Service. [ 1050.055364] systemd[1]: Starting Journal Service... [ 1050.289632] systemd-journald[23312]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1050.778583] systemd[1]: Started Journal Service. 20:49:16 executing program 2: clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) select(0x40, &(0x7f0000000300), &(0x7f0000000340)={0x2, 0x0, 0x5, 0x2, 0x7fffffff, 0x0, 0xffffffffffff6930, 0x6}, &(0x7f0000000380)={0x2, 0x1, 0x10001, 0x8, 0x80000000, 0x6, 0xe8b, 0x40}, &(0x7f0000000400)={r0, r1/1000+10000}) 20:49:16 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x1}}) 20:49:16 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff, 0x1, 0x8}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000080)={@ipv4={""/10, ""/2, @multicast1}}, &(0x7f00000000c0)=0x14) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e24, 0x20, @mcast1, 0x6}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000100)) 20:49:16 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x1, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)) 20:49:16 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) (async) socketpair(0x1, 0x80000, 0x5, &(0x7f0000000200)={0xffffffffffffffff}) getpeername$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000280)=0x1c) (async) getpgid(r3) 20:49:16 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)={0x1, 0xfffffffd, 0xfffffd82, 0x0, 0x1}) 20:49:16 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff, 0x1, 0x8}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000080)={@ipv4={""/10, ""/2, @multicast1}}, &(0x7f00000000c0)=0x14) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e24, 0x20, @mcast1, 0x6}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000100)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff, 0x1, 0x8}}) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000080)={@ipv4={""/10, ""/2, @multicast1}}, &(0x7f00000000c0)=0x14) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e24, 0x20, @mcast1, 0x6}, 0x1c) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000100)) (async) 20:49:16 executing program 2: clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) select(0x40, &(0x7f0000000300), &(0x7f0000000340)={0x2, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0xffffffffffff6930, 0x6}, &(0x7f0000000380)={0x2, 0x1, 0x10001, 0x8, 0x80000000, 0x6, 0xe8b, 0x40}, &(0x7f0000000400)={r0, r1/1000+10000}) 20:49:16 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x1}}) 20:49:16 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)={0x1, 0xfffffffd, 0xfffffd82, 0x0, 0x1}) 20:49:16 executing program 2: clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) select(0x40, &(0x7f0000000300), &(0x7f0000000340)={0x2, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xffffffffffff6930, 0x6}, &(0x7f0000000380)={0x2, 0x1, 0x10001, 0x8, 0x80000000, 0x6, 0xe8b, 0x40}, &(0x7f0000000400)={r0, r1/1000+10000}) 20:49:16 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) keyctl$clear(0x7, 0xfffffffffffffff8) 20:49:16 executing program 2: clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) select(0x40, &(0x7f0000000300), &(0x7f0000000340)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff6930, 0x6}, &(0x7f0000000380)={0x2, 0x1, 0x10001, 0x8, 0x80000000, 0x6, 0xe8b, 0x40}, &(0x7f0000000400)={r0, r1/1000+10000}) [ 1057.118174] oom_reaper: reaped process 23330 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:4kB [ 1057.135751] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1057.156063] in:imklog cpuset=/ mems_allowed=0-1 [ 1057.160774] CPU: 0 PID: 7728 Comm: in:imklog Not tainted 4.14.304-syzkaller #0 [ 1057.168127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1057.177476] Call Trace: [ 1057.180048] dump_stack+0x1b2/0x281 [ 1057.181270] syz-executor.0: vmalloc: allocation failure, allocated 188289024 of 536875008 bytes [ 1057.183665] dump_header+0x178/0x82f [ 1057.183675] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1057.193157] , mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask= [ 1057.196187] ? ___ratelimit+0x2b5/0x510 [ 1057.201315] (null) [ 1057.207216] oom_kill_process.cold+0x10/0xa40 [ 1057.211200] syz-executor.0 cpuset= [ 1057.213299] out_of_memory+0xe3e/0x1190 [ 1057.217754] / [ 1057.221276] ? oom_killer_disable+0x1c0/0x1c0 [ 1057.225295] mems_allowed=0-1 [ 1057.226920] ? mutex_trylock+0x152/0x1a0 [ 1057.238507] __alloc_pages_nodemask+0x25a9/0x2900 [ 1057.243339] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1057.248172] alloc_pages_current+0x155/0x260 [ 1057.252570] filemap_fault+0x11a1/0x1ad0 [ 1057.256623] ext4_filemap_fault+0x84/0xb0 [ 1057.260750] __do_fault+0xfa/0x380 [ 1057.264270] __handle_mm_fault+0x2497/0x4620 [ 1057.268679] ? vm_insert_page+0x7c0/0x7c0 [ 1057.272819] ? lock_downgrade+0x740/0x740 [ 1057.276969] ? mark_held_locks+0xa6/0xf0 [ 1057.281040] handle_mm_fault+0x455/0x9c0 [ 1057.285088] __do_page_fault+0x549/0xad0 [ 1057.289154] ? spurious_fault+0x640/0x640 [ 1057.293284] ? do_page_fault+0x60/0x500 [ 1057.297242] ? page_fault+0x2f/0x50 [ 1057.300849] page_fault+0x45/0x50 [ 1057.304284] RIP: 1fa0:0x1f9f [ 1057.307280] RSP: 0000:0000564ffb61b9d0 EFLAGS: 7f494a588da0 [ 1057.307299] CPU: 1 PID: 23330 Comm: syz-executor.0 Not tainted 4.14.304-syzkaller #0 [ 1057.320277] Mem-Info: [ 1057.320871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1057.323312] active_anon:27745 inactive_anon:8025 isolated_anon:0 [ 1057.323312] active_file:26 inactive_file:0 isolated_file:0 [ 1057.323312] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1057.323312] slab_reclaimable:24388 slab_unreclaimable:101104 [ 1057.323312] mapped:22094 shmem:9210 pagetables:583 bounce:0 [ 1057.323312] free:13914 free_pcp:76 free_cma:0 [ 1057.332596] Call Trace: [ 1057.332612] dump_stack+0x1b2/0x281 [ 1057.332625] warn_alloc.cold+0x96/0x1cc [ 1057.332643] ? zone_watermark_ok_safe+0x220/0x220 [ 1057.365527] Node 0 active_anon:110972kB inactive_anon:32100kB active_file:100kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88376kB dirty:0kB writeback:0kB shmem:36840kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 55296kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1057.368075] __vmalloc_area_node+0x48a/0x680 [ 1057.371687] Node 1 active_anon:8kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1057.375616] ? __vmalloc_node_range+0x150/0x150 [ 1057.380540] Node 0 [ 1057.408214] ? __get_vm_area_node+0x27d/0x340 [ 1057.408227] __vmalloc_node_range+0xbe/0x150 [ 1057.408240] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1057.408251] vmalloc_user+0x47/0xa0 [ 1057.408263] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 1057.412689] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1057.438308] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1057.438316] vb2_vmalloc_alloc+0xa6/0x2d0 [ 1057.438325] __vb2_queue_alloc+0x47a/0xd90 [ 1057.438342] vb2_core_create_bufs+0x279/0x5a0 [ 1057.442992] lowmem_reserve[]: [ 1057.445220] ? __vb2_queue_free+0x7a0/0x7a0 [ 1057.449684] 0 [ 1057.454073] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1057.454083] ? trace_hardirqs_on+0x10/0x10 [ 1057.454093] vb2_create_bufs+0x2e1/0x5b0 [ 1057.459443] 2717 [ 1057.463053] ? vb2_thread_start+0x310/0x310 [ 1057.463070] v4l_create_bufs+0xa4/0x150 [ 1057.467365] 2718 [ 1057.492849] __video_do_ioctl+0x65b/0x6a0 [ 1057.492861] ? video_ioctl2+0x30/0x30 [ 1057.492870] ? __might_fault+0x177/0x1b0 [ 1057.498203] 2718 [ 1057.502327] ? video_ioctl2+0x30/0x30 [ 1057.502335] video_usercopy+0xfd/0xe70 [ 1057.502347] ? v4l_g_ctrl+0x390/0x390 [ 1057.506550] 2718 [ 1057.511021] ? lock_acquire+0x170/0x3f0 [ 1057.518393] ? lock_downgrade+0x740/0x740 [ 1057.520166] Node 0 [ 1057.525529] ? trace_hardirqs_on+0x10/0x10 [ 1057.525542] ? futex_exit_release+0x220/0x220 [ 1057.525550] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1057.529772] DMA32 free:17892kB min:36196kB low:45244kB high:54292kB active_anon:110972kB inactive_anon:32100kB active_file:228kB inactive_file:328kB unevictable:0kB writepending:0kB present:3129332kB managed:2787984kB mlocked:0kB kernel_stack:7488kB pagetables:2332kB bounce:0kB free_pcp:180kB local_pcp:60kB free_cma:0kB [ 1057.533801] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1057.533812] v4l2_ioctl+0x1bb/0x2f0 [ 1057.533818] ? v4l2_open+0x2f0/0x2f0 [ 1057.535852] lowmem_reserve[]: [ 1057.540167] do_vfs_ioctl+0x75a/0xff0 [ 1057.544126] 0 [ 1057.546157] ? lock_acquire+0x170/0x3f0 [ 1057.550273] 0 [ 1057.554052] ? ioctl_preallocate+0x1a0/0x1a0 [ 1057.554062] ? __fget+0x265/0x3e0 [ 1057.554071] ? do_vfs_ioctl+0xff0/0xff0 [ 1057.558102] 0 [ 1057.560144] ? security_file_ioctl+0x83/0xb0 [ 1057.563931] 0 [ 1057.567796] SyS_ioctl+0x7f/0xb0 [ 1057.571583] 0 [ 1057.573616] ? do_vfs_ioctl+0xff0/0xff0 [ 1057.581684] do_syscall_64+0x1d5/0x640 [ 1057.581696] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1057.581704] RIP: 0033:0x7fa7d3c480c9 [ 1057.583935] Node 0 [ 1057.588146] RSP: 002b:00007fa7d21ba168 EFLAGS: 00000246 [ 1057.592647] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:468kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1057.597714] ORIG_RAX: 0000000000000010 [ 1057.626159] lowmem_reserve[]: [ 1057.631141] RAX: ffffffffffffffda RBX: 00007fa7d3d67f80 RCX: 00007fa7d3c480c9 [ 1057.631145] RDX: 0000000020000180 RSI: 00000000c100565c RDI: 0000000000000003 [ 1057.631150] RBP: 00007fa7d3ca3ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1057.631154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1057.631160] R13: 00007ffdc7685b4f R14: 00007fa7d21ba300 R15: 0000000000022000 [ 1057.634757] 0 [ 1057.639585] Mem-Info: [ 1057.653479] 0 [ 1057.657356] active_anon:27745 inactive_anon:8025 isolated_anon:0 [ 1057.657356] active_file:26 inactive_file:0 isolated_file:0 [ 1057.657356] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1057.657356] slab_reclaimable:24388 slab_unreclaimable:101104 [ 1057.657356] mapped:22094 shmem:9210 pagetables:583 bounce:0 [ 1057.657356] free:13914 free_pcp:76 free_cma:0 [ 1057.660757] 0 0 [ 1057.664755] Node 0 active_anon:110972kB inactive_anon:32100kB active_file:100kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88376kB dirty:0kB writeback:0kB shmem:36840kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 55296kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1057.664766] Node 1 active_anon:8kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1057.664769] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1057.664786] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1057.670064] 0 [ 1057.676182] Node 0 [ 1057.677959] Node 1 [ 1057.681946] DMA32 free:17892kB min:36196kB low:45244kB high:54292kB active_anon:110972kB inactive_anon:32100kB active_file:60kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2787984kB mlocked:0kB kernel_stack:7488kB pagetables:2332kB bounce:0kB free_pcp:180kB local_pcp:120kB free_cma:0kB [ 1057.681949] lowmem_reserve[]: 0 0 0 0 0 [ 1057.681967] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:468kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1057.681983] lowmem_reserve[]: [ 1057.689285] Normal free:26808kB min:53696kB low:67120kB high:80544kB active_anon:8kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:124kB local_pcp:4kB free_cma:0kB [ 1057.691013] 0 0 [ 1057.696738] lowmem_reserve[]: [ 1057.697030] 0 [ 1057.705919] 0 [ 1057.727341] 0 0 [ 1057.727352] Node 1 Normal free:26808kB min:53696kB low:67120kB high:80544kB active_anon:8kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:124kB local_pcp:120kB free_cma:0kB [ 1057.727371] lowmem_reserve[]: [ 1057.736664] 0 [ 1057.741726] 0 [ 1057.748978] 0 [ 1057.756334] 0 0 0 0 [ 1057.756347] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10956kB [ 1057.756405] Node 0 DMA32: 2575*4kB (UMEH) 569*8kB (UMEH) [ 1057.767132] 0 [ 1057.773025] 68*16kB [ 1057.775232] 0 [ 1057.777021] (UMEH) [ 1057.842090] 1*32kB [ 1057.869226] Node 0 [ 1057.893534] (U) [ 1057.900117] DMA: [ 1057.900657] 2*64kB [ 1057.902908] 1*4kB [ 1057.933388] (H) [ 1057.938784] (U) [ 1057.962789] 0*128kB [ 1057.967451] 1*8kB [ 1057.993236] 1*256kB [ 1057.999927] (U) [ 1058.001589] (H) [ 1058.032680] 0*16kB [ 1058.036057] 1*512kB [ 1058.037649] 0*32kB [ 1058.039951] (H) [ 1058.056635] 1*64kB [ 1058.060688] 1*1024kB [ 1058.062915] (U) [ 1058.064690] (H) [ 1058.070505] 1*128kB [ 1058.076811] 0*2048kB [ 1058.081122] (U) [ 1058.081795] 0*4096kB [ 1058.083721] 0*256kB [ 1058.086021] = 17892kB [ 1058.088147] 1*512kB [ 1058.090450] Node 0 [ 1058.095665] (U) [ 1058.102237] Normal: [ 1058.103183] 0*1024kB [ 1058.105397] 0*4kB [ 1058.107781] 1*2048kB [ 1058.109732] 0*8kB [ 1058.111795] (M) [ 1058.119469] 0*16kB [ 1058.120805] 2*4096kB [ 1058.125457] 0*32kB [ 1058.127423] (M) [ 1058.127862] 0*64kB [ 1058.130075] = 10956kB [ 1058.137344] 0*128kB [ 1058.138888] Node 0 [ 1058.143156] 0*256kB [ 1058.145316] DMA32: [ 1058.145414] 0*512kB [ 1058.147627] 2575*4kB [ 1058.150007] 0*1024kB 0*2048kB [ 1058.152274] (UMEH) 570*8kB (UMEH) 68*16kB (UMEH) 1*32kB (U) 2*64kB (H) 0*128kB 1*256kB (H) 1*512kB (H) 1*1024kB (H) 0*2048kB 0*4096kB = 17900kB [ 1058.152329] Node 0 Normal: 0*4kB [ 1058.159552] 0*4096kB [ 1058.163076] 0*8kB [ 1058.165579] = 0kB [ 1058.165770] 0*16kB [ 1058.167983] Node 1 [ 1058.170282] 0*32kB [ 1058.177986] Normal: [ 1058.190802] 0*64kB [ 1058.199465] 2*4kB [ 1058.203059] 0*128kB [ 1058.203455] (UE) [ 1058.205668] 0*256kB [ 1058.207963] 2*8kB (ME) [ 1058.210181] 0*512kB [ 1058.219907] 2*16kB [ 1058.223553] 0*1024kB [ 1058.224010] (UM) [ 1058.226228] 0*2048kB [ 1058.228612] 2*32kB [ 1058.230649] 0*4096kB = 0kB [ 1058.238130] Node 1 Normal: 2*4kB (UE) 2*8kB (ME) 2*16kB (UM) 2*32kB (UM) 1*64kB (M) 2*128kB (ME) 3*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 3*2048kB (M) 4*4096kB (M) = 26808kB [ 1058.240194] (UM) [ 1058.256058] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1058.261770] 1*64kB (M) 2*128kB (ME) 3*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 3*2048kB (M) 4*4096kB (M) = 26808kB [ 1058.266982] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1058.284499] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1058.287917] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1058.298670] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1058.305679] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1058.323176] 9239 total pagecache pages [ 1058.326006] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1058.327066] 0 pages in swap cache [ 1058.339388] Swap cache stats: add 0, delete 0, find 0/0 [ 1058.343174] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1058.346589] Free swap = 0kB [ 1058.356312] Total swap = 0kB [ 1058.358021] 9239 total pagecache pages [ 1058.359315] 2097051 pages RAM [ 1058.365669] 0 pages in swap cache [ 1058.368198] 0 pages HighMem/MovableOnly [ 1058.369771] Swap cache stats: add 0, delete 0, find 0/0 [ 1058.373751] 363897 pages reserved [ 1058.373754] 0 pages cma reserved [ 1058.373762] Out of memory (oom_kill_allocating_task): Kill process 7728 (in:imklog) score 0 or sacrifice child [ 1058.374092] Killed process 7719 (rsyslogd) total-vm:254332kB, anon-rss:1000kB, file-rss:0kB, shmem-rss:0kB [ 1058.384783] Free swap = 0kB [ 1058.389892] oom_reaper: reaped process 7719 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1058.396724] Total swap = 0kB [ 1058.420163] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1058.444222] 2097051 pages RAM [ 1058.453454] 0 pages HighMem/MovableOnly [ 1058.454953] systemd-journal cpuset= [ 1058.457417] 363897 pages reserved [ 1058.457423] / [ 1058.461027] 0 pages cma reserved [ 1058.474881] mems_allowed=0-1 [ 1058.478419] CPU: 0 PID: 23312 Comm: systemd-journal Not tainted 4.14.304-syzkaller #0 [ 1058.486389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1058.495737] Call Trace: [ 1058.498328] dump_stack+0x1b2/0x281 [ 1058.501958] dump_header+0x178/0x82f [ 1058.505673] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1058.510778] ? ___ratelimit+0x2b5/0x510 [ 1058.514762] oom_kill_process.cold+0x10/0xa40 [ 1058.519265] out_of_memory+0xe3e/0x1190 [ 1058.523241] ? oom_killer_disable+0x1c0/0x1c0 [ 1058.527732] ? mutex_trylock+0x152/0x1a0 [ 1058.531791] __alloc_pages_nodemask+0x25a9/0x2900 [ 1058.536645] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1058.541494] alloc_pages_current+0x155/0x260 [ 1058.545900] filemap_fault+0x11a1/0x1ad0 [ 1058.549964] ext4_filemap_fault+0x84/0xb0 [ 1058.554140] __do_fault+0xfa/0x380 [ 1058.557666] __handle_mm_fault+0x2497/0x4620 [ 1058.562057] ? vm_insert_page+0x7c0/0x7c0 [ 1058.566192] ? mark_held_locks+0xa6/0xf0 [ 1058.570235] handle_mm_fault+0x455/0x9c0 [ 1058.574278] __do_page_fault+0x549/0xad0 [ 1058.578322] ? spurious_fault+0x640/0x640 [ 1058.582448] ? do_page_fault+0x60/0x500 [ 1058.586403] ? page_fault+0x2f/0x50 [ 1058.590006] page_fault+0x45/0x50 [ 1058.593438] RIP: 0001:0xffffffffffffffff [ 1058.597474] RSP: 4c9a91e0:00007ffd6b6ad4f0 EFLAGS: 7ffd6b6ad300 [ 1058.601652] Mem-Info: [ 1058.610123] active_anon:27455 inactive_anon:8025 isolated_anon:0 [ 1058.610123] active_file:14 inactive_file:15 isolated_file:0 [ 1058.610123] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1058.610123] slab_reclaimable:24388 slab_unreclaimable:101105 [ 1058.610123] mapped:22071 shmem:9210 pagetables:545 bounce:0 [ 1058.610123] free:16239 free_pcp:237 free_cma:0 [ 1058.643857] Node 0 active_anon:109816kB inactive_anon:32100kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88284kB dirty:0kB writeback:0kB shmem:36840kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 53248kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1058.671713] Node 1 active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:1204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:600kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1058.697889] Node 0 DMA free:10996kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1058.724547] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1058.729599] Node 0 DMA32 free:66780kB min:36196kB low:45244kB high:54292kB active_anon:109816kB inactive_anon:32100kB active_file:156kB inactive_file:1056kB unevictable:0kB writepending:0kB present:3129332kB managed:2787984kB mlocked:0kB kernel_stack:7392kB pagetables:2180kB bounce:0kB free_pcp:820kB local_pcp:376kB free_cma:0kB [ 1058.759714] lowmem_reserve[]: 0 0 0 0 0 [ 1058.763772] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:468kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1058.792282] lowmem_reserve[]: 0 0 0 0 0 [ 1058.796488] Node 1 Normal free:160096kB min:53696kB low:67120kB high:80544kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:1204kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:696kB local_pcp:52kB free_cma:0kB [ 1058.825681] lowmem_reserve[]: 0 0 0 0 0 [ 1058.830286] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 11108kB [ 1058.844180] Node 0 DMA32: 2145*4kB (UMEH) 1013*8kB (UMEH) 226*16kB (UMEH) 75*32kB (UM) 16*64kB (UMH) 9*128kB (UM) 7*256kB (UH) 7*512kB (UH) 2*1024kB (UH) 3*2048kB (U) 6*4096kB (UM) = 63020kB [ 1058.861458] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1058.872257] Node 1 Normal: 2*4kB (UE) 5*8kB (UME) 5*16kB (UM) 2*32kB (U) 2*64kB (U) 3*128kB (UME) 3*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 4*2048kB (UM) 36*4096kB (UM) = 160192kB [ 1058.888988] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1058.900292] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1058.909260] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1058.918170] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1058.926805] 10756 total pagecache pages [ 1058.931565] 0 pages in swap cache [ 1058.935027] Swap cache stats: add 0, delete 0, find 0/0 [ 1058.940382] Free swap = 0kB [ 1058.943443] Total swap = 0kB [ 1058.946457] 2097051 pages RAM [ 1058.949582] 0 pages HighMem/MovableOnly [ 1058.954641] 363897 pages reserved [ 1058.958624] 0 pages cma reserved [ 1058.962610] Out of memory (oom_kill_allocating_task): Kill process 23312 (systemd-journal) score 0 or sacrifice child [ 1058.974015] Killed process 23312 (systemd-journal) total-vm:46096kB, anon-rss:460kB, file-rss:0kB, shmem-rss:1296kB [ 1058.985755] oom_reaper: reaped process 23312 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1296kB [ 1059.005938] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1059.013794] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 1059.023984] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1059.036412] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 1059.045321] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 1059.054028] systemd[1]: Stopped Journal Service. [ 1059.069640] systemd[1]: Starting Journal Service... [ 1059.079974] systemd[1]: Stopped System Logging Service. [ 1059.100343] systemd[1]: Starting System Logging Service... [ 1059.300137] systemd-journald[23352]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1059.525253] systemd[1]: Started System Logging Service. 20:49:25 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) (async, rerun: 64) keyctl$clear(0x7, 0xfffffffffffffff8) (rerun: 64) 20:49:25 executing program 5: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x1}}) 20:49:25 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x1, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x1, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x0, 0x0}}}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)) (async) 20:49:25 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)={0x1, 0xfffffffd, 0xfffffd82, 0x0, 0x1}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)={0x1, 0xfffffffd, 0xfffffd82, 0x0, 0x1}) (async) 20:49:25 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff, 0x1, 0x8}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000080)={@ipv4={""/10, ""/2, @multicast1}}, &(0x7f00000000c0)=0x14) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e24, 0x20, @mcast1, 0x6}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000100)) 20:49:25 executing program 2: clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) select(0x40, &(0x7f0000000300), &(0x7f0000000340)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, &(0x7f0000000380)={0x2, 0x1, 0x10001, 0x8, 0x80000000, 0x6, 0xe8b, 0x40}, &(0x7f0000000400)={r0, r1/1000+10000}) 20:49:25 executing program 5: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x1}}) 20:49:25 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, r2) keyctl$clear(0x7, 0xfffffffffffffff8) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) (async) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) (async) keyctl$get_persistent(0x16, 0xee00, r2) (async) keyctl$clear(0x7, 0xfffffffffffffff8) (async) 20:49:25 executing program 2: clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) select(0x40, &(0x7f0000000300), &(0x7f0000000340)={0x2}, &(0x7f0000000380)={0x2, 0x1, 0x10001, 0x8, 0x80000000, 0x6, 0xe8b, 0x40}, &(0x7f0000000400)={r0, r1/1000+10000}) 20:49:25 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x181580) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000000c0)={{0x1, 0x1, 0x5eee, 0x0, 0x8}}) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)=0x118) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000300)=@fd={0x5, 0x2, 0x4, 0x2000, 0x6, {r5, r6/1000+60000}, {0x5, 0xc, 0x52, 0x81, 0x81, 0x1c, "153e75d7"}, 0x0, 0x4, {}, 0x8, 0x0, r3}) 20:49:25 executing program 3: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000040)={0x1}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000000c0)={0x1, 0x8, 0x1ff, 0x84800}) 20:49:25 executing program 5: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x1}}) 20:49:25 executing program 4: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0xee00, r0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0x0, r1) keyctl$search(0xa, r1, &(0x7f0000000240)='encrypted\x00', &(0x7f0000000280)={'syz', 0x1}, r0) request_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000200)='-\x00', 0xfffffffffffffffb) [ 1062.296903] Unknown ioctl -1067952625 [ 1062.303925] Unknown ioctl -1067952625 [ 1062.309258] Unknown ioctl 35296 [ 1062.360463] Unknown ioctl -1067952625 [ 1062.369125] Unknown ioctl 1079006226 [ 1066.234491] oom_reaper: reaped process 23375 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:4kB [ 1066.286481] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1066.305124] in:imklog cpuset=/ mems_allowed=0-1 [ 1066.309822] CPU: 1 PID: 23355 Comm: in:imklog Not tainted 4.14.304-syzkaller #0 [ 1066.317248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1066.326593] Call Trace: [ 1066.329168] dump_stack+0x1b2/0x281 [ 1066.330434] syz-executor.0: vmalloc: allocation failure, allocated 175857664 of 536875008 bytes [ 1066.332782] dump_header+0x178/0x82f [ 1066.332792] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1066.341643] , mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask= [ 1066.345304] ? ___ratelimit+0x2b5/0x510 [ 1066.350407] (null) [ 1066.356325] oom_kill_process.cold+0x10/0xa40 [ 1066.360266] syz-executor.0 cpuset= [ 1066.362404] out_of_memory+0xe3e/0x1190 [ 1066.362415] ? oom_killer_disable+0x1c0/0x1c0 [ 1066.362424] ? mutex_trylock+0x152/0x1a0 [ 1066.362435] __alloc_pages_nodemask+0x25a9/0x2900 [ 1066.362454] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1066.366912] / [ 1066.370445] alloc_pages_current+0x155/0x260 [ 1066.374426] mems_allowed=0-1 [ 1066.378877] filemap_fault+0x11a1/0x1ad0 [ 1066.405751] ext4_filemap_fault+0x84/0xb0 [ 1066.409884] __do_fault+0xfa/0x380 [ 1066.413408] __handle_mm_fault+0x2497/0x4620 [ 1066.417804] ? vm_insert_page+0x7c0/0x7c0 [ 1066.421938] ? lock_downgrade+0x740/0x740 [ 1066.426071] ? mark_held_locks+0xa6/0xf0 [ 1066.430113] handle_mm_fault+0x455/0x9c0 [ 1066.434157] __do_page_fault+0x549/0xad0 [ 1066.438199] ? spurious_fault+0x640/0x640 [ 1066.442349] ? do_page_fault+0x60/0x500 [ 1066.446304] ? page_fault+0x2f/0x50 [ 1066.449911] page_fault+0x45/0x50 [ 1066.453344] RIP: 1fa0:0x1f9f [ 1066.456339] RSP: 0000:00005644cef9f9d0 EFLAGS: 7fda39e6eda0 [ 1066.456358] CPU: 0 PID: 23375 Comm: syz-executor.0 Not tainted 4.14.304-syzkaller #0 [ 1066.462686] Mem-Info: [ 1066.469940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1066.472390] active_anon:27690 inactive_anon:10056 isolated_anon:0 [ 1066.472390] active_file:43 inactive_file:30 isolated_file:0 [ 1066.472390] unevictable:0 dirty:16 writeback:3 unstable:0 [ 1066.472390] slab_reclaimable:24229 slab_unreclaimable:102302 [ 1066.472390] mapped:22120 shmem:11258 pagetables:583 bounce:0 [ 1066.472390] free:13821 free_pcp:83 free_cma:0 [ 1066.481689] Call Trace: [ 1066.481708] dump_stack+0x1b2/0x281 [ 1066.481720] warn_alloc.cold+0x96/0x1cc [ 1066.481740] ? zone_watermark_ok_safe+0x220/0x220 [ 1066.514969] Node 0 active_anon:110756kB inactive_anon:40224kB active_file:96kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88396kB dirty:64kB writeback:12kB shmem:45032kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 55296kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1066.517514] __vmalloc_area_node+0x48a/0x680 [ 1066.521128] Node 1 active_anon:4kB inactive_anon:0kB active_file:76kB inactive_file:80kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:84kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1066.525059] ? __vmalloc_node_range+0x150/0x150 [ 1066.529870] Node 0 [ 1066.557692] ? __get_vm_area_node+0x27d/0x340 [ 1066.557704] __vmalloc_node_range+0xbe/0x150 [ 1066.557717] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1066.557724] vmalloc_user+0x47/0xa0 [ 1066.562133] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1066.588023] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 1066.588030] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1066.588037] vb2_vmalloc_alloc+0xa6/0x2d0 [ 1066.588046] __vb2_queue_alloc+0x47a/0xd90 [ 1066.592707] lowmem_reserve[]: [ 1066.594925] vb2_core_create_bufs+0x279/0x5a0 [ 1066.599383] 0 [ 1066.603941] ? __vb2_queue_free+0x7a0/0x7a0 [ 1066.603954] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1066.603962] ? trace_hardirqs_on+0x10/0x10 [ 1066.603972] vb2_create_bufs+0x2e1/0x5b0 [ 1066.609304] 2717 [ 1066.612911] ? vb2_thread_start+0x310/0x310 [ 1066.612928] v4l_create_bufs+0xa4/0x150 [ 1066.638548] 2718 [ 1066.642706] __video_do_ioctl+0x65b/0x6a0 [ 1066.642718] ? video_ioctl2+0x30/0x30 [ 1066.642727] ? __might_fault+0x177/0x1b0 [ 1066.648065] 2718 [ 1066.652191] ? video_ioctl2+0x30/0x30 [ 1066.652199] video_usercopy+0xfd/0xe70 [ 1066.652210] ? v4l_g_ctrl+0x390/0x390 [ 1066.656417] 2718 [ 1066.659505] ? lock_acquire+0x170/0x3f0 [ 1066.665752] ? lock_downgrade+0x740/0x740 [ 1066.670041] Node 0 [ 1066.675383] ? trace_hardirqs_on+0x10/0x10 [ 1066.675394] ? futex_exit_release+0x220/0x220 [ 1066.675403] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1066.679621] DMA32 free:17808kB min:36196kB low:45244kB high:54292kB active_anon:110756kB inactive_anon:40224kB active_file:352kB inactive_file:364kB unevictable:0kB writepending:276kB present:3129332kB managed:2787984kB mlocked:0kB kernel_stack:7488kB pagetables:2332kB bounce:0kB free_pcp:208kB local_pcp:88kB free_cma:0kB [ 1066.683647] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1066.683658] v4l2_ioctl+0x1bb/0x2f0 [ 1066.683665] ? v4l2_open+0x2f0/0x2f0 [ 1066.685703] lowmem_reserve[]: [ 1066.690002] do_vfs_ioctl+0x75a/0xff0 [ 1066.693962] 0 [ 1066.695989] ? lock_acquire+0x170/0x3f0 [ 1066.700106] 0 [ 1066.703885] ? ioctl_preallocate+0x1a0/0x1a0 [ 1066.703896] ? __fget+0x265/0x3e0 [ 1066.703904] ? do_vfs_ioctl+0xff0/0xff0 [ 1066.707936] 0 [ 1066.709983] ? security_file_ioctl+0x83/0xb0 [ 1066.713772] 0 [ 1066.717640] SyS_ioctl+0x7f/0xb0 [ 1066.721435] 0 [ 1066.723463] ? do_vfs_ioctl+0xff0/0xff0 [ 1066.731532] do_syscall_64+0x1d5/0x640 [ 1066.731549] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1066.731557] RIP: 0033:0x7fa7d3c480c9 [ 1066.733764] Node 0 [ 1066.737993] RSP: 002b:00007fa7d21ba168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1066.742508] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:468kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1066.747554] RAX: ffffffffffffffda RBX: 00007fa7d3d67f80 RCX: 00007fa7d3c480c9 [ 1066.776174] lowmem_reserve[]: [ 1066.781146] RDX: 0000000020000180 RSI: 00000000c100565c RDI: 0000000000000003 [ 1066.781150] RBP: 00007fa7d3ca3ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1066.781155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1066.781159] R13: 00007ffdc7685b4f R14: 00007fa7d21ba300 R15: 0000000000022000 [ 1066.781304] Mem-Info: [ 1066.784765] 0 [ 1066.788464] active_anon:27690 inactive_anon:10056 isolated_anon:0 [ 1066.788464] active_file:43 inactive_file:30 isolated_file:0 [ 1066.788464] unevictable:0 dirty:16 writeback:3 unstable:0 [ 1066.788464] slab_reclaimable:24229 slab_unreclaimable:102302 [ 1066.788464] mapped:22120 shmem:11258 pagetables:583 bounce:0 [ 1066.788464] free:13821 free_pcp:83 free_cma:0 [ 1066.802239] 0 [ 1066.802899] Node 0 active_anon:110756kB inactive_anon:40224kB active_file:96kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88396kB dirty:64kB writeback:12kB shmem:45032kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 55296kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1066.807301] 0 [ 1066.810775] Node 1 active_anon:4kB inactive_anon:0kB active_file:76kB inactive_file:80kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:84kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1066.810796] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1066.810822] lowmem_reserve[]: 0 2717 [ 1066.823644] 0 [ 1066.826101] 2718 [ 1066.827882] 0 [ 1066.831850] 2718 2718 [ 1066.831858] Node 0 DMA32 free:17808kB min:36196kB low:45244kB high:54292kB active_anon:110756kB inactive_anon:40224kB active_file:56kB inactive_file:52kB unevictable:0kB writepending:276kB present:3129332kB managed:2787984kB mlocked:0kB kernel_stack:7488kB pagetables:2332kB bounce:0kB free_pcp:208kB local_pcp:120kB free_cma:0kB [ 1066.831875] lowmem_reserve[]: 0 0 0 0 0 [ 1066.831891] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:468kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1066.840956] lowmem_reserve[]: 0 0 0 0 0 [ 1066.840975] Node 1 Normal free:26520kB min:53696kB low:67120kB high:80544kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:124kB local_pcp:120kB free_cma:0kB [ 1066.847524] Node 1 [ 1066.854604] lowmem_reserve[]: 0 0 0 0 0 [ 1066.854621] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB [ 1066.884925] Normal free:26520kB min:53696kB low:67120kB high:80544kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:124kB local_pcp:4kB free_cma:0kB [ 1066.886847] 0*32kB [ 1066.889922] lowmem_reserve[]: [ 1066.897198] 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10956kB [ 1066.897235] Node 0 DMA32: 2828*4kB (UME) 680*8kB (ME) 50*16kB (ME) [ 1066.909834] 0 [ 1066.911820] 8*32kB (UM) [ 1066.919096] 0 [ 1066.921521] 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17808kB [ 1066.921550] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB [ 1066.929079] 0 [ 1066.956690] 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1066.956707] Node 1 Normal: 3*4kB (ME) 3*8kB (ME) 2*16kB (M) 3*32kB (UM) 2*64kB (M) 4*128kB (UME) 2*256kB (UE) 2*512kB (UE) 2*1024kB (ME) 3*2048kB (M) 4*4096kB (M) = 26916kB [ 1066.965443] 0 [ 1066.986441] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1066.986447] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1066.986453] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1066.986458] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1066.986462] 11324 total pagecache pages [ 1066.986470] 0 pages in swap cache [ 1066.986475] Swap cache stats: add 0, delete 0, find 0/0 [ 1066.986478] Free swap = 0kB [ 1066.986481] Total swap = 0kB [ 1066.986487] 2097051 pages RAM [ 1066.986489] 0 pages HighMem/MovableOnly [ 1066.986492] 363897 pages reserved [ 1066.986495] 0 pages cma reserved [ 1067.317681] 0 [ 1067.319477] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 11108kB [ 1067.332791] Node 0 DMA32: 3866*4kB (UME) 4784*8kB (UME) 2290*16kB (UME) 44*32kB (UM) 13*64kB (UM) 6*128kB (U) 9*256kB (UM) 10*512kB (U) 4*1024kB (U) 7*2048kB (U) 4*4096kB (UM) = 135624kB [ 1067.349670] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1067.360422] Node 1 Normal: 5*4kB (UME) 5*8kB (UME) 4*16kB (U) 5*32kB (UM) 6*64kB (U) 6*128kB (UME) 4*256kB (UME) 4*512kB (UME) 2*1024kB (UE) 4*2048kB (UM) 33*4096kB (UM) = 149916kB [ 1067.376791] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1067.385693] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1067.394306] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1067.403182] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1067.411787] 12100 total pagecache pages [ 1067.415754] 0 pages in swap cache [ 1067.419195] Swap cache stats: add 0, delete 0, find 0/0 [ 1067.424626] Free swap = 0kB [ 1067.427629] Total swap = 0kB [ 1067.430683] 2097051 pages RAM [ 1067.433773] 0 pages HighMem/MovableOnly [ 1067.437737] 363897 pages reserved [ 1067.441822] 0 pages cma reserved [ 1067.445183] Out of memory (oom_kill_allocating_task): Kill process 23355 (in:imklog) score 0 or sacrifice child [ 1067.455488] Killed process 23353 (rsyslogd) total-vm:254332kB, anon-rss:508kB, file-rss:0kB, shmem-rss:0kB [ 1067.466875] oom_reaper: reaped process 23353 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 20:49:33 executing program 2: clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) select(0x40, &(0x7f0000000300), &(0x7f0000000340)={0x2}, 0x0, &(0x7f0000000400)={r0, r1/1000+10000}) 20:49:33 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, 0x0) 20:49:33 executing program 3: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000040)={0x1}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000000c0)={0x1, 0x8, 0x1ff, 0x84800}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) (async) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000040)={0x1}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000000c0)={0x1, 0x8, 0x1ff, 0x84800}) (async) 20:49:33 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x181580) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) (async) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000000c0)={{0x1, 0x1, 0x5eee, 0x0, 0x8}}) (async) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)=0x118) (async) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000300)=@fd={0x5, 0x2, 0x4, 0x2000, 0x6, {r5, r6/1000+60000}, {0x5, 0xc, 0x52, 0x81, 0x81, 0x1c, "153e75d7"}, 0x0, 0x4, {}, 0x8, 0x0, r3}) 20:49:33 executing program 4: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0xee00, r0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0x0, r1) (async) keyctl$search(0xa, r1, &(0x7f0000000240)='encrypted\x00', &(0x7f0000000280)={'syz', 0x1}, r0) request_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000200)='-\x00', 0xfffffffffffffffb) 20:49:33 executing program 2: clock_gettime(0x0, &(0x7f00000003c0)) select(0x40, &(0x7f0000000300), &(0x7f0000000340)={0x2}, 0x0, 0x0) 20:49:33 executing program 0: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000000)={0x2, @raw_data="dafc16148e21987a170bc713fa846cfaeabe5b807be0e5728ffbfa14b2aa316787572260340fdefe06d90a20fcd83aeac827cc5374630df572918bfc1629a9d51df82fc31aed5c4238f3e94d013aaa7ab971275e92974902bacd349914e563612f7129b0c725acdf7430b6e29c2938f697aa45bea9e402742069635dbb9bb804b3af8761f859cab01dc9428966bad2c628dfdd423fb9c7a220fa315a73633b1dfc051e85ccd7427f3d5553e8b423558120b9f4240a6904fce9f9525f45a22bace704621400bfbe9c"}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x100, 0x2, 0x0, 0x1}, {0x735, 0xff, 0x4, 0x5}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)={0x0}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000300)={r1, 0x3, r2, 0x7, 0x80000}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x800, 0x4, {0x1, @pix={0x7e00, 0x1ff, 0x3631564e, 0x0, 0x10000, 0x8000, 0x0, 0x1000000, 0x0, 0x4, 0x2, 0x2}}}) 20:49:33 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, 0x0) 20:49:33 executing program 2: clock_gettime(0x0, &(0x7f00000003c0)) select(0x40, &(0x7f0000000300), &(0x7f0000000340)={0x2}, 0x0, 0x0) [ 1070.186280] Unknown ioctl -1067952625 [ 1070.192956] Unknown ioctl 35296 [ 1070.204610] Unknown ioctl -1067952625 [ 1070.206059] Unknown ioctl 35296 [ 1070.208506] Unknown ioctl -1067952625 20:49:33 executing program 3: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000040)={0x1}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000000c0)={0x1, 0x8, 0x1ff, 0x84800}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) (async) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000040)={0x1}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000000c0)={0x1, 0x8, 0x1ff, 0x84800}) (async) 20:49:33 executing program 4: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0xee00, r0) (async) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0x0, r1) (async) keyctl$search(0xa, r1, &(0x7f0000000240)='encrypted\x00', &(0x7f0000000280)={'syz', 0x1}, r0) (async) request_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000200)='-\x00', 0xfffffffffffffffb) 20:49:33 executing program 0: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000000)={0x2, @raw_data="dafc16148e21987a170bc713fa846cfaeabe5b807be0e5728ffbfa14b2aa316787572260340fdefe06d90a20fcd83aeac827cc5374630df572918bfc1629a9d51df82fc31aed5c4238f3e94d013aaa7ab971275e92974902bacd349914e563612f7129b0c725acdf7430b6e29c2938f697aa45bea9e402742069635dbb9bb804b3af8761f859cab01dc9428966bad2c628dfdd423fb9c7a220fa315a73633b1dfc051e85ccd7427f3d5553e8b423558120b9f4240a6904fce9f9525f45a22bace704621400bfbe9c"}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x100, 0x2, 0x0, 0x1}, {0x735, 0xff, 0x4, 0x5}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)={0x0}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000300)={r1, 0x3, r2, 0x7, 0x80000}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x800, 0x4, {0x1, @pix={0x7e00, 0x1ff, 0x3631564e, 0x0, 0x10000, 0x8000, 0x0, 0x1000000, 0x0, 0x4, 0x2, 0x2}}}) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000000)={0x2, @raw_data="dafc16148e21987a170bc713fa846cfaeabe5b807be0e5728ffbfa14b2aa316787572260340fdefe06d90a20fcd83aeac827cc5374630df572918bfc1629a9d51df82fc31aed5c4238f3e94d013aaa7ab971275e92974902bacd349914e563612f7129b0c725acdf7430b6e29c2938f697aa45bea9e402742069635dbb9bb804b3af8761f859cab01dc9428966bad2c628dfdd423fb9c7a220fa315a73633b1dfc051e85ccd7427f3d5553e8b423558120b9f4240a6904fce9f9525f45a22bace704621400bfbe9c"}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x100, 0x2, 0x0, 0x1}, {0x735, 0xff, 0x4, 0x5}]}) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000300)={r1, 0x3, r2, 0x7, 0x80000}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x800, 0x4, {0x1, @pix={0x7e00, 0x1ff, 0x3631564e, 0x0, 0x10000, 0x8000, 0x0, 0x1000000, 0x0, 0x4, 0x2, 0x2}}}) (async) 20:49:33 executing program 2: clock_gettime(0x0, &(0x7f00000003c0)) select(0x40, &(0x7f0000000300), &(0x7f0000000340)={0x2}, 0x0, 0x0) [ 1070.238583] Unknown ioctl 1079006226 [ 1070.244824] Unknown ioctl -1067952625 20:49:33 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x181580) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000000c0)={{0x1, 0x1, 0x5eee, 0x0, 0x8}}) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)=0x118) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000300)=@fd={0x5, 0x2, 0x4, 0x2000, 0x6, {r5, r6/1000+60000}, {0x5, 0xc, 0x52, 0x81, 0x81, 0x1c, "153e75d7"}, 0x0, 0x4, {}, 0x8, 0x0, r3}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x181580) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000000c0)={{0x1, 0x1, 0x5eee, 0x0, 0x8}}) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)=0x118) (async) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) (async) clock_gettime(0x0, &(0x7f0000000140)) (async) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000300)=@fd={0x5, 0x2, 0x4, 0x2000, 0x6, {r5, r6/1000+60000}, {0x5, 0xc, 0x52, 0x81, 0x81, 0x1c, "153e75d7"}, 0x0, 0x4, {}, 0x8, 0x0, r3}) (async) 20:49:33 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, 0x0) 20:49:33 executing program 2: clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) select(0x40, &(0x7f0000000300), &(0x7f0000000340)={0x2}, 0x0, &(0x7f0000000400)={0x0, r0/1000+10000}) 20:49:33 executing program 0: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000000)={0x2, @raw_data="dafc16148e21987a170bc713fa846cfaeabe5b807be0e5728ffbfa14b2aa316787572260340fdefe06d90a20fcd83aeac827cc5374630df572918bfc1629a9d51df82fc31aed5c4238f3e94d013aaa7ab971275e92974902bacd349914e563612f7129b0c725acdf7430b6e29c2938f697aa45bea9e402742069635dbb9bb804b3af8761f859cab01dc9428966bad2c628dfdd423fb9c7a220fa315a73633b1dfc051e85ccd7427f3d5553e8b423558120b9f4240a6904fce9f9525f45a22bace704621400bfbe9c"}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x100, 0x2, 0x0, 0x1}, {0x735, 0xff, 0x4, 0x5}]}) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)={0x0}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000300)={r1, 0x3, r2, 0x7, 0x80000}) (async, rerun: 64) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x800, 0x4, {0x1, @pix={0x7e00, 0x1ff, 0x3631564e, 0x0, 0x10000, 0x8000, 0x0, 0x1000000, 0x0, 0x4, 0x2, 0x2}}}) (rerun: 64) 20:49:33 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) r3 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000200)="a25b9e062291e8c11ce722909db1db97017ec062aba3a22afe5a633696b2a562cadf35e2f1c71ad715f357fec558da2a4d898dc5e345ccb7599e9e831cf811125aa118162ea74d8d6a66accd836d0cbede43c9923468d175dc948eed809de28bf21b1862147c98e3bd835de08492ad8d4207d728baebb2215d28c8ad0e454615718deebd7b511d637aa8d3b09494460f4a409d3c099cc6a6225a04c6eaa3a7b96d66c01ff1416f6bfeb597b30b3f4587a5b4355e7ae574bbcc058e3601a9da1bb2c5dd60ecb80021e71d553648ff5d9a6976fdf5c6801fe042003e703d08b1aedf57ca68dca4c61405200e70da66d4c2c23f9bd9318cba", 0xf7, 0xfffffffffffffff9) keyctl$search(0xa, r3, &(0x7f0000000300)='.request_key_auth\x00', &(0x7f0000000340)={'syz', 0x0}, r1) keyctl$get_persistent(0x16, 0xee00, r2) r4 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, r2) keyctl$reject(0x13, r4, 0x9, 0x8000000000000000, r2) r5 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, r0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000004c0)={0x7ff, 0x6, 0x70000000}) request_key(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='-.\x00', r5) [ 1070.284992] Unknown ioctl -1067952625 [ 1070.301062] Unknown ioctl 35296 [ 1070.305778] Unknown ioctl 35296 [ 1070.305854] Unknown ioctl -1067952625 20:49:33 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) (async) r3 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000200)="a25b9e062291e8c11ce722909db1db97017ec062aba3a22afe5a633696b2a562cadf35e2f1c71ad715f357fec558da2a4d898dc5e345ccb7599e9e831cf811125aa118162ea74d8d6a66accd836d0cbede43c9923468d175dc948eed809de28bf21b1862147c98e3bd835de08492ad8d4207d728baebb2215d28c8ad0e454615718deebd7b511d637aa8d3b09494460f4a409d3c099cc6a6225a04c6eaa3a7b96d66c01ff1416f6bfeb597b30b3f4587a5b4355e7ae574bbcc058e3601a9da1bb2c5dd60ecb80021e71d553648ff5d9a6976fdf5c6801fe042003e703d08b1aedf57ca68dca4c61405200e70da66d4c2c23f9bd9318cba", 0xf7, 0xfffffffffffffff9) keyctl$search(0xa, r3, &(0x7f0000000300)='.request_key_auth\x00', &(0x7f0000000340)={'syz', 0x0}, r1) keyctl$get_persistent(0x16, 0xee00, r2) (async) r4 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, r2) keyctl$reject(0x13, r4, 0x9, 0x8000000000000000, r2) (async, rerun: 32) r5 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, r0) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000004c0)={0x7ff, 0x6, 0x70000000}) request_key(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='-.\x00', r5) 20:49:33 executing program 2: clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) select(0x40, &(0x7f0000000300), &(0x7f0000000340)={0x2}, 0x0, &(0x7f0000000400)={0x0, r0/1000+10000}) 20:49:33 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x1, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x40, 0x0, 0x4}}}) 20:49:33 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x1}}) [ 1070.342766] Unknown ioctl -1067952625 20:49:33 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) (async, rerun: 32) r3 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000200)="a25b9e062291e8c11ce722909db1db97017ec062aba3a22afe5a633696b2a562cadf35e2f1c71ad715f357fec558da2a4d898dc5e345ccb7599e9e831cf811125aa118162ea74d8d6a66accd836d0cbede43c9923468d175dc948eed809de28bf21b1862147c98e3bd835de08492ad8d4207d728baebb2215d28c8ad0e454615718deebd7b511d637aa8d3b09494460f4a409d3c099cc6a6225a04c6eaa3a7b96d66c01ff1416f6bfeb597b30b3f4587a5b4355e7ae574bbcc058e3601a9da1bb2c5dd60ecb80021e71d553648ff5d9a6976fdf5c6801fe042003e703d08b1aedf57ca68dca4c61405200e70da66d4c2c23f9bd9318cba", 0xf7, 0xfffffffffffffff9) (rerun: 32) keyctl$search(0xa, r3, &(0x7f0000000300)='.request_key_auth\x00', &(0x7f0000000340)={'syz', 0x0}, r1) keyctl$get_persistent(0x16, 0xee00, r2) (async) r4 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, r2) keyctl$reject(0x13, r4, 0x9, 0x8000000000000000, r2) r5 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, r0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000004c0)={0x7ff, 0x6, 0x70000000}) (async) request_key(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='-.\x00', r5) 20:49:33 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x341002) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000380)={{0x1, 0x3, 0x1, 0x1}, 0x81, 0x300, 'id0\x00', 'timer1\x00', 0x0, 0x100000000, 0x10000, 0x3, 0x3f}) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000480)={0x7, 0x4b, 0x2}, 0x7) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x11001) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, &(0x7f0000000240)={{0xffffffffffffffff, 0x2, 0x2, 0x2, 0x1}, 0x0, 0xff, 'id0\x00', 'timer0\x00', 0x0, 0xfffffffffffff68e, 0x918f}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000100)=@multiplanar_userptr={0x80000000, 0x2, 0x4, 0x2, 0x63cc525b, {0x77359400}, {0x3, 0x8, 0xb8, 0x26, 0x1, 0x8, "1a5cdd55"}, 0x0, 0x2, {&(0x7f0000000540)=[{0x2, 0x8, {&(0x7f00000004c0)}, 0x7}, {0x1, 0x1, {&(0x7f0000000500)}, 0x1ff}]}, 0x44, 0x0, r2}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0xfff, 0x3}}) 20:49:33 executing program 2: clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) select(0x40, &(0x7f0000000300), &(0x7f0000000340)={0x2}, 0x0, &(0x7f0000000400)={0x0, r0/1000+10000}) [ 1070.377196] Unknown ioctl -1067952625 [ 1070.381232] Unknown ioctl 1079006226 [ 1070.409320] Unknown ioctl -1067952625 [ 1070.418292] Unknown ioctl -1067952625 [ 1070.423091] Unknown ioctl -1067952625 20:49:33 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 20:49:33 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x1}}) 20:49:33 executing program 2: clock_gettime(0x0, &(0x7f00000003c0)={0x0}) select(0x40, &(0x7f0000000300), &(0x7f0000000340)={0x2}, 0x0, &(0x7f0000000400)={r0, 0x0}) 20:49:33 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x341002) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000380)={{0x1, 0x3, 0x1, 0x1}, 0x81, 0x300, 'id0\x00', 'timer1\x00', 0x0, 0x100000000, 0x10000, 0x3, 0x3f}) (async) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000480)={0x7, 0x4b, 0x2}, 0x7) (async) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, 0x0) (async) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x11001) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, &(0x7f0000000240)={{0xffffffffffffffff, 0x2, 0x2, 0x2, 0x1}, 0x0, 0xff, 'id0\x00', 'timer0\x00', 0x0, 0xfffffffffffff68e, 0x918f}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000100)=@multiplanar_userptr={0x80000000, 0x2, 0x4, 0x2, 0x63cc525b, {0x77359400}, {0x3, 0x8, 0xb8, 0x26, 0x1, 0x8, "1a5cdd55"}, 0x0, 0x2, {&(0x7f0000000540)=[{0x2, 0x8, {&(0x7f00000004c0)}, 0x7}, {0x1, 0x1, {&(0x7f0000000500)}, 0x1ff}]}, 0x44, 0x0, r2}) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0xfff, 0x3}}) 20:49:33 executing program 4: add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, r1, r1) add_key$user(&(0x7f00000003c0), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000300)="907058fa2c3e230c692c45ef46a025846b93d89d885f5d793d651b338eca6ead21147e08957821c81e54d43a342ed1e78367a61ea93be5a477b52068f871db5c67525f2b149c519086c079dbb1a7e48eadeecd3a0a8bdf208d4f5264313ce5b9f166d2699852660ac69d231c70c53b4981960561f08e5516414a20252fe4a642bd8464bfc8e458512df6b22e059479725976e942a91577a591de9bdd92453135dee7a6a3c5549b361287315bf46bd56439", 0xb1, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, 0x0) [ 1070.435241] Unknown ioctl 1077171216 20:49:33 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) (async) 20:49:33 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x1}}) [ 1070.484708] Unknown ioctl -1067952625 [ 1070.489016] Unknown ioctl -1067952625 [ 1070.496178] Unknown ioctl -1067952625 [ 1070.506125] Unknown ioctl 1077171216 [ 1074.390033] oom_reaper: reaped process 23473 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:8kB [ 1074.427270] syz-executor.0 invoked oom-killer: gfp_mask=0x14082c2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1074.442070] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1074.447252] CPU: 0 PID: 23473 Comm: syz-executor.0 Not tainted 4.14.304-syzkaller #0 [ 1074.455113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1074.464454] Call Trace: [ 1074.467049] dump_stack+0x1b2/0x281 [ 1074.470679] dump_header+0x178/0x82f [ 1074.474383] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1074.479473] ? ___ratelimit+0x2b5/0x510 [ 1074.483431] oom_kill_process.cold+0x10/0xa40 [ 1074.487916] out_of_memory+0xe3e/0x1190 [ 1074.491870] ? oom_killer_disable+0x1c0/0x1c0 [ 1074.496344] ? mutex_trylock+0x152/0x1a0 [ 1074.500384] __alloc_pages_nodemask+0x25a9/0x2900 [ 1074.505215] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1074.510039] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1074.514773] ? retint_kernel+0x2d/0x2d [ 1074.518643] alloc_pages_current+0x155/0x260 [ 1074.523035] __vmalloc_area_node+0x40a/0x680 [ 1074.527422] ? __vmalloc_node_range+0x150/0x150 [ 1074.532066] ? __get_vm_area_node+0x27d/0x340 [ 1074.536540] __vmalloc_node_range+0xbe/0x150 [ 1074.540931] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1074.546270] vmalloc_user+0x47/0xa0 [ 1074.549874] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 1074.554168] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1074.559505] vb2_vmalloc_alloc+0xa6/0x2d0 [ 1074.563629] __vb2_queue_alloc+0x47a/0xd90 [ 1074.567845] vb2_core_create_bufs+0x279/0x5a0 [ 1074.572330] ? __vb2_queue_free+0x7a0/0x7a0 [ 1074.576633] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1074.581975] ? trace_hardirqs_on+0x10/0x10 [ 1074.586187] vb2_create_bufs+0x2e1/0x5b0 [ 1074.590228] ? vb2_thread_start+0x310/0x310 [ 1074.594530] v4l_create_bufs+0xa4/0x150 [ 1074.598500] __video_do_ioctl+0x65b/0x6a0 [ 1074.602627] ? video_ioctl2+0x30/0x30 [ 1074.606403] ? __might_fault+0x177/0x1b0 [ 1074.610438] ? video_ioctl2+0x30/0x30 [ 1074.614241] video_usercopy+0xfd/0xe70 [ 1074.618113] ? v4l_g_ctrl+0x390/0x390 [ 1074.621890] ? lock_acquire+0x170/0x3f0 [ 1074.625861] ? lock_downgrade+0x740/0x740 [ 1074.629989] ? trace_hardirqs_on+0x10/0x10 [ 1074.634203] ? futex_exit_release+0x220/0x220 [ 1074.638676] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1074.643757] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1074.648749] v4l2_ioctl+0x1bb/0x2f0 [ 1074.652350] ? v4l2_open+0x2f0/0x2f0 [ 1074.656042] do_vfs_ioctl+0x75a/0xff0 [ 1074.659818] ? lock_acquire+0x170/0x3f0 [ 1074.663766] ? ioctl_preallocate+0x1a0/0x1a0 [ 1074.668155] ? __fget+0x265/0x3e0 [ 1074.671586] ? do_vfs_ioctl+0xff0/0xff0 [ 1074.675535] ? security_file_ioctl+0x83/0xb0 [ 1074.679921] SyS_ioctl+0x7f/0xb0 [ 1074.683277] ? do_vfs_ioctl+0xff0/0xff0 [ 1074.687233] do_syscall_64+0x1d5/0x640 [ 1074.691118] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1074.696282] RIP: 0033:0x7fa7d3c480c9 [ 1074.699976] RSP: 002b:00007fa7d21ba168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1074.707659] RAX: ffffffffffffffda RBX: 00007fa7d3d67f80 RCX: 00007fa7d3c480c9 [ 1074.714904] RDX: 0000000020000180 RSI: 00000000c100565c RDI: 0000000000000003 [ 1074.722149] RBP: 00007fa7d3ca3ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1074.729394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1074.736656] R13: 00007ffdc7685b4f R14: 00007fa7d21ba300 R15: 0000000000022000 [ 1074.744007] Mem-Info: [ 1074.746402] active_anon:27655 inactive_anon:10056 isolated_anon:0 [ 1074.746402] active_file:13 inactive_file:12 isolated_file:0 [ 1074.746402] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1074.746402] slab_reclaimable:24128 slab_unreclaimable:102767 [ 1074.746402] mapped:22112 shmem:11258 pagetables:582 bounce:0 [ 1074.746402] free:13722 free_pcp:30 free_cma:0 [ 1074.779613] Node 0 active_anon:110616kB inactive_anon:40224kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88448kB dirty:0kB writeback:0kB shmem:45032kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 53248kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1074.807386] Node 1 active_anon:4kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1074.833185] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1074.859323] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1074.864364] Node 0 DMA32 free:17548kB min:36196kB low:45244kB high:54292kB active_anon:110616kB inactive_anon:40224kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2787984kB mlocked:0kB kernel_stack:7488kB pagetables:2328kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1074.893381] lowmem_reserve[]: 0 0 0 0 0 [ 1074.897343] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:468kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1074.922868] lowmem_reserve[]: 0 0 0 0 0 [ 1074.926831] Node 1 Normal free:26384kB min:53696kB low:67120kB high:80544kB active_anon:4kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1074.954118] lowmem_reserve[]: 0 0 0 0 0 [ 1074.958102] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10956kB [ 1074.971350] Node 0 DMA32: 2789*4kB (UME) 668*8kB (UME) 56*16kB (UME) 5*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17556kB [ 1074.984851] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1074.995583] Node 1 Normal: 2*4kB (ME) 3*8kB (UME) 1*16kB (M) 1*32kB (M) 1*64kB (M) 3*128kB (UME) 3*256kB (UME) 1*512kB (E) 2*1024kB (ME) 3*2048kB (M) 4*4096kB (M) = 26384kB [ 1075.011197] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1075.020054] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1075.028614] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1075.037651] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1075.046238] 11283 total pagecache pages [ 1075.050229] 0 pages in swap cache [ 1075.053670] Swap cache stats: add 0, delete 0, find 0/0 [ 1075.059014] Free swap = 0kB [ 1075.062042] Total swap = 0kB [ 1075.065039] 2097051 pages RAM [ 1075.068117] 0 pages HighMem/MovableOnly [ 1075.072127] 363897 pages reserved [ 1075.075564] 0 pages cma reserved [ 1075.078918] Out of memory (oom_kill_allocating_task): Kill process 23473 (syz-executor.0) score 0 or sacrifice child [ 1075.089775] Killed process 23473 (syz-executor.0) total-vm:60680kB, anon-rss:0kB, file-rss:0kB, shmem-rss:8kB [ 1075.100117] syz-executor.0: vmalloc: allocation failure, allocated 174645248 of 536875008 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1075.113845] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1075.118936] CPU: 0 PID: 23473 Comm: syz-executor.0 Not tainted 4.14.304-syzkaller #0 [ 1075.121594] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1075.126790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1075.126795] (null) [ 1075.136902] Call Trace: [ 1075.136920] dump_stack+0x1b2/0x281 [ 1075.136934] warn_alloc.cold+0x96/0x1cc [ 1075.158536] ? zone_watermark_ok_safe+0x220/0x220 [ 1075.160814] , order=0, oom_score_adj=0 [ 1075.163371] ? retint_kernel+0x2d/0x2d [ 1075.167333] systemd-journal cpuset= [ 1075.171213] __vmalloc_area_node+0x48a/0x680 [ 1075.171228] ? __vmalloc_node_range+0x150/0x150 [ 1075.174819] / [ 1075.179207] ? __get_vm_area_node+0x27d/0x340 [ 1075.183950] mems_allowed=0-1 [ 1075.185632] __vmalloc_node_range+0xbe/0x150 [ 1075.197556] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1075.202898] vmalloc_user+0x47/0xa0 [ 1075.206508] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 1075.210815] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1075.216160] vb2_vmalloc_alloc+0xa6/0x2d0 [ 1075.220290] __vb2_queue_alloc+0x47a/0xd90 [ 1075.224521] vb2_core_create_bufs+0x279/0x5a0 [ 1075.229001] ? __vb2_queue_free+0x7a0/0x7a0 [ 1075.233308] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1075.238667] ? trace_hardirqs_on+0x10/0x10 [ 1075.242894] vb2_create_bufs+0x2e1/0x5b0 [ 1075.246942] ? vb2_thread_start+0x310/0x310 [ 1075.251251] v4l_create_bufs+0xa4/0x150 [ 1075.255211] __video_do_ioctl+0x65b/0x6a0 [ 1075.259350] ? video_ioctl2+0x30/0x30 [ 1075.263141] ? __might_fault+0x177/0x1b0 [ 1075.267188] ? video_ioctl2+0x30/0x30 [ 1075.270971] video_usercopy+0xfd/0xe70 [ 1075.274843] ? v4l_g_ctrl+0x390/0x390 [ 1075.278626] ? lock_acquire+0x170/0x3f0 [ 1075.282581] ? lock_downgrade+0x740/0x740 [ 1075.286712] ? trace_hardirqs_on+0x10/0x10 [ 1075.290933] ? futex_exit_release+0x220/0x220 [ 1075.295431] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1075.300519] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1075.305518] v4l2_ioctl+0x1bb/0x2f0 [ 1075.309124] ? v4l2_open+0x2f0/0x2f0 [ 1075.312818] do_vfs_ioctl+0x75a/0xff0 [ 1075.316599] ? lock_acquire+0x170/0x3f0 [ 1075.320556] ? ioctl_preallocate+0x1a0/0x1a0 [ 1075.324947] ? __fget+0x265/0x3e0 [ 1075.328383] ? do_vfs_ioctl+0xff0/0xff0 [ 1075.332340] ? security_file_ioctl+0x83/0xb0 [ 1075.336727] SyS_ioctl+0x7f/0xb0 [ 1075.340073] ? do_vfs_ioctl+0xff0/0xff0 [ 1075.344029] do_syscall_64+0x1d5/0x640 [ 1075.347905] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1075.353076] RIP: 0033:0x7fa7d3c480c9 [ 1075.356767] RSP: 002b:00007fa7d21ba168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1075.364457] RAX: ffffffffffffffda RBX: 00007fa7d3d67f80 RCX: 00007fa7d3c480c9 [ 1075.371708] RDX: 0000000020000180 RSI: 00000000c100565c RDI: 0000000000000003 [ 1075.378961] RBP: 00007fa7d3ca3ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1075.386210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1075.393458] R13: 00007ffdc7685b4f R14: 00007fa7d21ba300 R15: 0000000000022000 [ 1075.400737] CPU: 1 PID: 23352 Comm: systemd-journal Not tainted 4.14.304-syzkaller #0 [ 1075.400986] Mem-Info: [ 1075.408699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1075.411126] active_anon:27655 inactive_anon:10056 isolated_anon:0 [ 1075.411126] active_file:12 inactive_file:13 isolated_file:0 [ 1075.411126] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1075.411126] slab_reclaimable:24128 slab_unreclaimable:102764 [ 1075.411126] mapped:22112 shmem:11258 pagetables:582 bounce:0 [ 1075.411126] free:13724 free_pcp:31 free_cma:0 [ 1075.420415] Call Trace: [ 1075.420430] dump_stack+0x1b2/0x281 [ 1075.420442] dump_header+0x178/0x82f [ 1075.420462] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1075.453667] Node 0 active_anon:110616kB inactive_anon:40224kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88448kB dirty:0kB writeback:0kB shmem:45032kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 53248kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1075.456165] ? ___ratelimit+0x2b5/0x510 [ 1075.459795] Node 1 active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1075.463454] oom_kill_process.cold+0x10/0xa40 [ 1075.468527] Node 0 [ 1075.496192] out_of_memory+0xe3e/0x1190 [ 1075.496203] ? oom_killer_disable+0x1c0/0x1c0 [ 1075.496211] ? mutex_trylock+0x152/0x1a0 [ 1075.496221] __alloc_pages_nodemask+0x25a9/0x2900 [ 1075.496240] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1075.500216] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1075.525865] alloc_pages_current+0x155/0x260 [ 1075.525880] filemap_fault+0x11a1/0x1ad0 [ 1075.530373] lowmem_reserve[]: [ 1075.532571] ext4_filemap_fault+0x84/0xb0 [ 1075.536507] 0 [ 1075.540979] __do_fault+0xfa/0x380 [ 1075.540989] __handle_mm_fault+0x2497/0x4620 [ 1075.540999] ? vm_insert_page+0x7c0/0x7c0 [ 1075.541016] ? mark_held_locks+0xa6/0xf0 [ 1075.541026] handle_mm_fault+0x455/0x9c0 [ 1075.545058] 2717 [ 1075.549881] __do_page_fault+0x549/0xad0 [ 1075.549893] ? spurious_fault+0x640/0x640 [ 1075.549907] ? do_page_fault+0x60/0x500 [ 1075.554716] 2718 [ 1075.580210] ? page_fault+0x2f/0x50 [ 1075.580217] page_fault+0x45/0x50 [ 1075.580225] RIP: 0001:0xffffffffffffffff [ 1075.580229] RSP: ba6261e0:00007ffd9f86ff20 EFLAGS: 7ffd9f86fd30 [ 1075.592635] Mem-Info: [ 1075.595933] 2718 [ 1075.597730] active_anon:27655 inactive_anon:10056 isolated_anon:0 [ 1075.597730] active_file:12 inactive_file:13 isolated_file:0 [ 1075.597730] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1075.597730] slab_reclaimable:24128 slab_unreclaimable:102531 [ 1075.597730] mapped:22112 shmem:11258 pagetables:582 bounce:0 [ 1075.597730] free:13958 free_pcp:32 free_cma:0 [ 1075.601261] 2718 [ 1075.601268] Node 0 DMA32 free:18492kB min:36196kB low:45244kB high:54292kB active_anon:110616kB inactive_anon:40224kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2787984kB mlocked:0kB kernel_stack:7488kB pagetables:2328kB bounce:0kB free_pcp:128kB local_pcp:120kB free_cma:0kB [ 1075.601290] lowmem_reserve[]: 0 0 0 0 0 [ 1075.601308] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:468kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1075.601328] lowmem_reserve[]: 0 0 0 0 0 [ 1075.601346] Node 1 Normal free:26384kB min:53696kB low:67120kB high:80544kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1075.601364] lowmem_reserve[]: 0 0 [ 1075.614726] Node 0 active_anon:110616kB inactive_anon:40224kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88448kB dirty:0kB writeback:0kB shmem:45032kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 53248kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1075.618023] 0 0 [ 1075.623699] Node 1 active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1075.624138] 0 [ 1075.628273] Node 0 [ 1075.632266] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 1*64kB (U) 1*128kB [ 1075.639823] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1075.641436] (U) [ 1075.645483] lowmem_reserve[]: [ 1075.651495] 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10956kB [ 1075.651525] Node 0 DMA32: 2789*4kB (UME) 777*8kB (UME) 63*16kB (UME) 5*32kB (UM) [ 1075.662807] 0 [ 1075.689185] 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18540kB [ 1075.689214] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB [ 1075.700039] 2717 [ 1075.720326] 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1075.720345] Node 1 Normal: 2*4kB (ME) 3*8kB (UME) 1*16kB (M) 1*32kB (M) 1*64kB (M) 3*128kB (UME) 3*256kB (UME) [ 1075.733543] 2718 [ 1075.754416] 1*512kB [ 1075.789981] 2718 [ 1075.816077] (E) [ 1075.840319] 2718 [ 1075.852421] 2*1024kB [ 1075.887909] (ME) [ 1075.889332] Node 0 [ 1075.896960] 3*2048kB (M) 4*4096kB [ 1075.898763] DMA32 free:18492kB min:36196kB low:45244kB high:54292kB active_anon:110616kB inactive_anon:40224kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2787984kB mlocked:0kB kernel_stack:7488kB pagetables:2328kB bounce:0kB free_pcp:132kB local_pcp:12kB free_cma:0kB [ 1075.914982] (M) [ 1075.915431] lowmem_reserve[]: [ 1075.922344] = 26384kB [ 1075.930773] 0 0 0 0 0 [ 1075.930791] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:468kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1075.930809] lowmem_reserve[]: 0 0 0 0 [ 1075.941614] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1075.943619] 0 [ 1075.945663] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1075.956652] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1075.979726] Node 1 Normal free:26384kB min:53696kB low:67120kB high:80544kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1075.979744] lowmem_reserve[]: 0 0 0 0 0 [ 1075.979764] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 1*64kB (U) 1*128kB (U) [ 1075.991054] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1076.015808] 0*256kB [ 1076.028186] 11283 total pagecache pages [ 1076.029837] 1*512kB [ 1076.038382] 0 pages in swap cache [ 1076.047208] (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10956kB [ 1076.047230] Node 0 DMA32: 2789*4kB (UME) 780*8kB (UME) 63*16kB (UME) 5*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18564kB [ 1076.047285] Node 0 Normal: 0*4kB [ 1076.077996] Swap cache stats: add 0, delete 0, find 0/0 [ 1076.083966] 0*8kB [ 1076.086154] Free swap = 0kB [ 1076.100063] 0*16kB [ 1076.104686] Total swap = 0kB [ 1076.106705] 0*32kB [ 1076.112519] 2097051 pages RAM [ 1076.112523] 0 pages HighMem/MovableOnly [ 1076.112526] 363897 pages reserved [ 1076.112529] 0 pages cma reserved [ 1076.167955] 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1076.175131] Node 1 Normal: 2*4kB (ME) 3*8kB (UME) 1*16kB (M) 1*32kB (M) 1*64kB (M) 3*128kB (UME) 3*256kB (UME) 1*512kB (E) 2*1024kB (ME) 3*2048kB (M) 4*4096kB (M) = 26384kB [ 1076.196832] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1076.205698] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1076.220148] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1076.228981] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1076.238090] 11283 total pagecache pages [ 1076.242735] 0 pages in swap cache [ 1076.247047] Swap cache stats: add 0, delete 0, find 0/0 [ 1076.252832] Free swap = 0kB [ 1076.256419] Total swap = 0kB [ 1076.259687] 2097051 pages RAM [ 1076.262780] 0 pages HighMem/MovableOnly [ 1076.267049] 363897 pages reserved [ 1076.271467] 0 pages cma reserved [ 1076.275291] Out of memory (oom_kill_allocating_task): Kill process 23352 (systemd-journal) score 0 or sacrifice child [ 1076.286230] Killed process 23352 (systemd-journal) total-vm:46096kB, anon-rss:476kB, file-rss:0kB, shmem-rss:1396kB [ 1076.298594] oom_reaper: reaped process 23352 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1396kB [ 1076.456970] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1076.471148] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1076.492825] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 1076.503637] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 1076.515197] systemd[1]: Stopped Journal Service. [ 1076.533704] systemd[1]: Starting Journal Service... [ 1076.739274] systemd-journald[23520]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1077.256258] systemd[1]: Started Journal Service. 20:49:42 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) (async) 20:49:42 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0x3}}) 20:49:42 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x341002) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000380)={{0x1, 0x3, 0x1, 0x1}, 0x81, 0x300, 'id0\x00', 'timer1\x00', 0x0, 0x100000000, 0x10000, 0x3, 0x3f}) (async) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000480)={0x7, 0x4b, 0x2}, 0x7) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, 0x0) (async) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, 0x0) (async) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x11001) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, &(0x7f0000000240)={{0xffffffffffffffff, 0x2, 0x2, 0x2, 0x1}, 0x0, 0xff, 'id0\x00', 'timer0\x00', 0x0, 0xfffffffffffff68e, 0x918f}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000100)=@multiplanar_userptr={0x80000000, 0x2, 0x4, 0x2, 0x63cc525b, {0x77359400}, {0x3, 0x8, 0xb8, 0x26, 0x1, 0x8, "1a5cdd55"}, 0x0, 0x2, {&(0x7f0000000540)=[{0x2, 0x8, {&(0x7f00000004c0)}, 0x7}, {0x1, 0x1, {&(0x7f0000000500)}, 0x1ff}]}, 0x44, 0x0, r2}) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0xfff, 0x3}}) (rerun: 32) 20:49:42 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x1, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x40, 0x0, 0x4}}}) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x1, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x40, 0x0, 0x4}}}) (async) 20:49:42 executing program 2: add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, r1, r1) add_key$user(&(0x7f00000003c0), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000300)="907058fa2c3e230c692c45ef46a025846b93d89d885f5d793d651b338eca6ead21147e08957821c81e54d43a342ed1e78367a61ea93be5a477b52068f871db5c67525f2b149c519086c079dbb1a7e48eadeecd3a0a8bdf208d4f5264313ce5b9f166d2699852660ac69d231c70c53b4981960561f08e5516414a20252fe4a642bd8464bfc8e458512df6b22e059479725976e942a91577a591de9bdd92453135dee7a6a3c5549b361287315bf46bd56439", 0xb1, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xee00, 0x0) 20:49:42 executing program 4: add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) (async) r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, r1, r1) (async) add_key$user(&(0x7f00000003c0), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000300)="907058fa2c3e230c692c45ef46a025846b93d89d885f5d793d651b338eca6ead21147e08957821c81e54d43a342ed1e78367a61ea93be5a477b52068f871db5c67525f2b149c519086c079dbb1a7e48eadeecd3a0a8bdf208d4f5264313ce5b9f166d2699852660ac69d231c70c53b4981960561f08e5516414a20252fe4a642bd8464bfc8e458512df6b22e059479725976e942a91577a591de9bdd92453135dee7a6a3c5549b361287315bf46bd56439", 0xb1, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r1) (async) keyctl$get_persistent(0x16, 0xee00, 0x0) 20:49:42 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0x3}}) 20:49:42 executing program 1: ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) 20:49:42 executing program 2: clock_gettime(0x0, &(0x7f00000003c0)) select(0x40, &(0x7f0000000300), &(0x7f0000000340)={0x2}, 0x0, 0x0) 20:49:42 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0x3}}) [ 1079.372998] Unknown ioctl -1067952625 [ 1079.377269] Unknown ioctl -1067952625 [ 1079.388428] Unknown ioctl -1067952625 [ 1079.395493] Unknown ioctl 1077171216 [ 1079.403348] Unknown ioctl -1067952625 [ 1079.407155] Unknown ioctl -1067952625 [ 1079.415565] Unknown ioctl 1077171216 20:49:42 executing program 4: add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) (async, rerun: 32) r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) (rerun: 32) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r0) (async) r1 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, r1, r1) add_key$user(&(0x7f00000003c0), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000300)="907058fa2c3e230c692c45ef46a025846b93d89d885f5d793d651b338eca6ead21147e08957821c81e54d43a342ed1e78367a61ea93be5a477b52068f871db5c67525f2b149c519086c079dbb1a7e48eadeecd3a0a8bdf208d4f5264313ce5b9f166d2699852660ac69d231c70c53b4981960561f08e5516414a20252fe4a642bd8464bfc8e458512df6b22e059479725976e942a91577a591de9bdd92453135dee7a6a3c5549b361287315bf46bd56439", 0xb1, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r1) (async, rerun: 32) keyctl$get_persistent(0x16, 0xee00, 0x0) (rerun: 32) 20:49:42 executing program 1: ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) [ 1079.427366] Unknown ioctl 1077171216 [ 1079.431676] Unknown ioctl -1067952625 [ 1079.435996] Unknown ioctl 1077171216 [ 1079.445876] Unknown ioctl -1067952625 [ 1079.453998] Unknown ioctl 1077171216 [ 1079.458111] Unknown ioctl -1067952625 [ 1079.467498] Unknown ioctl 1077171216 [ 1079.472854] Unknown ioctl -1067952625 [ 1079.486164] Unknown ioctl 1077171216 [ 1079.490158] Unknown ioctl -1067952625 [ 1079.496867] Unknown ioctl 1077171216 [ 1079.506908] Unknown ioctl -1067952625 [ 1079.512131] Unknown ioctl 1077171216 [ 1079.516298] Unknown ioctl -1067952625 [ 1079.525890] Unknown ioctl 1077171216 [ 1079.530515] Unknown ioctl -1067952625 [ 1079.534432] Unknown ioctl 1077171216 [ 1079.538595] Unknown ioctl -1067952625 [ 1079.548113] Unknown ioctl 1077171216 [ 1079.550542] Unknown ioctl -1067952625 [ 1079.552994] Unknown ioctl 1077171216 [ 1079.559786] Unknown ioctl -1067952625 [ 1079.563584] Unknown ioctl -1067952625 [ 1079.564090] Unknown ioctl 1077171216 [ 1079.567404] Unknown ioctl -1067952625 [ 1079.567411] Unknown ioctl -1067952625 [ 1079.572888] Unknown ioctl 1077171216 [ 1079.586803] Unknown ioctl 1077171216 [ 1079.589238] Unknown ioctl -1067952625 [ 1079.591670] Unknown ioctl 1077171216 [ 1079.594289] Unknown ioctl -1067952625 [ 1079.594296] Unknown ioctl -1067952625 [ 1079.594301] Unknown ioctl -1067952625 [ 1079.594306] Unknown ioctl -1067952625 [ 1079.594311] Unknown ioctl -1067952625 [ 1079.594316] Unknown ioctl -1067952625 [ 1079.594321] Unknown ioctl -1067952625 [ 1079.594327] Unknown ioctl -1067952625 [ 1079.598085] Unknown ioctl 1077171216 [ 1079.627366] Unknown ioctl -1067952625 [ 1079.628675] Unknown ioctl 1077171216 [ 1079.633082] Unknown ioctl -1067952625 [ 1079.636204] Unknown ioctl 1077171216 [ 1079.646385] Unknown ioctl -1067952625 [ 1079.647466] Unknown ioctl 1077171216 [ 1079.654997] Unknown ioctl 1077171216 [ 1079.658783] Unknown ioctl 1077171216 [ 1079.661204] Unknown ioctl -1067952625 [ 1079.662704] Unknown ioctl 1077171216 [ 1079.669326] Unknown ioctl -1067952625 [ 1079.670213] Unknown ioctl 1077171216 [ 1079.674575] Unknown ioctl -1067952625 [ 1079.677653] Unknown ioctl 1077171216 20:49:43 executing program 1: ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) (async) 20:49:43 executing program 2: clock_gettime(0x0, &(0x7f00000003c0)) select(0x40, &(0x7f0000000300), &(0x7f0000000340)={0x2}, 0x0, 0x0) 20:49:43 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$get_persistent(0x16, 0xee00, r1) 20:49:43 executing program 5: clock_gettime(0x0, &(0x7f00000003c0)) select(0x40, &(0x7f0000000300), &(0x7f0000000340)={0x2}, 0x0, 0x0) 20:49:43 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000040)) socket$nl_rdma(0x10, 0x3, 0x14) [ 1079.685140] Unknown ioctl 1077171216 [ 1079.689010] Unknown ioctl 1077171216 [ 1079.692939] Unknown ioctl 1077171216 [ 1079.695220] Unknown ioctl -1067952625 [ 1079.696721] Unknown ioctl 1077171216 [ 1079.704353] Unknown ioctl 1077171216 [ 1079.708141] Unknown ioctl 1077171216 [ 1079.712137] Unknown ioctl 1077171216 [ 1083.414184] oom_reaper: reaped process 23534 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:4kB [ 1083.435119] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1083.460980] systemd-journal cpuset=/ mems_allowed=0-1 [ 1083.466198] CPU: 0 PID: 23520 Comm: systemd-journal Not tainted 4.14.304-syzkaller #0 [ 1083.474152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1083.483492] Call Trace: [ 1083.486071] dump_stack+0x1b2/0x281 [ 1083.489692] dump_header+0x178/0x82f [ 1083.493395] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1083.498480] ? ___ratelimit+0x2b5/0x510 [ 1083.502436] oom_kill_process.cold+0x10/0xa40 [ 1083.506911] out_of_memory+0xe3e/0x1190 [ 1083.509429] syz-executor.0: vmalloc: allocation failure, allocated 164048896 of 536875008 bytes [ 1083.510882] ? oom_killer_disable+0x1c0/0x1c0 [ 1083.510891] ? mutex_trylock+0x152/0x1a0 [ 1083.519732] , mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask= [ 1083.524184] __alloc_pages_nodemask+0x25a9/0x2900 [ 1083.528212] (null) [ 1083.534169] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1083.534193] alloc_pages_current+0x155/0x260 [ 1083.534205] filemap_fault+0x11a1/0x1ad0 [ 1083.539035] syz-executor.0 cpuset= [ 1083.541154] ext4_filemap_fault+0x84/0xb0 [ 1083.545957] / [ 1083.550344] __do_fault+0xfa/0x380 [ 1083.554414] mems_allowed=0-1 [ 1083.557896] __handle_mm_fault+0x2497/0x4620 [ 1083.574671] ? vm_insert_page+0x7c0/0x7c0 [ 1083.578805] ? mark_held_locks+0xa6/0xf0 [ 1083.582847] handle_mm_fault+0x455/0x9c0 [ 1083.586889] __do_page_fault+0x549/0xad0 [ 1083.590932] ? spurious_fault+0x640/0x640 [ 1083.595058] ? do_page_fault+0x60/0x500 [ 1083.599010] ? page_fault+0x2f/0x50 [ 1083.602617] page_fault+0x45/0x50 [ 1083.606051] RIP: 0001:0xffffffffffffffff [ 1083.610089] RSP: 704f71e0:00007ffefda255c0 EFLAGS: 7ffefda253d0 [ 1083.610106] CPU: 1 PID: 23534 Comm: syz-executor.0 Not tainted 4.14.304-syzkaller #0 [ 1083.615628] Mem-Info: [ 1083.616150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1083.624049] active_anon:27724 inactive_anon:12088 isolated_anon:0 [ 1083.624049] active_file:17 inactive_file:5 isolated_file:0 [ 1083.624049] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1083.624049] slab_reclaimable:23976 slab_unreclaimable:103196 [ 1083.624049] mapped:22104 shmem:13306 pagetables:584 bounce:0 [ 1083.624049] free:13827 free_pcp:77 free_cma:0 [ 1083.626399] Call Trace: [ 1083.635759] Node 0 active_anon:110892kB inactive_anon:48352kB active_file:68kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88416kB dirty:0kB writeback:0kB shmem:53224kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 55296kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1083.668776] dump_stack+0x1b2/0x281 [ 1083.668790] warn_alloc.cold+0x96/0x1cc [ 1083.671372] Node 1 active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1083.699000] ? zone_watermark_ok_safe+0x220/0x220 [ 1083.699021] __vmalloc_area_node+0x48a/0x680 [ 1083.702615] Node 0 [ 1083.706569] ? __vmalloc_node_range+0x150/0x150 [ 1083.732257] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1083.737065] ? __get_vm_area_node+0x27d/0x340 [ 1083.741460] lowmem_reserve[]: [ 1083.743681] __vmalloc_node_range+0xbe/0x150 [ 1083.748323] 0 [ 1083.773892] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1083.773899] vmalloc_user+0x47/0xa0 [ 1083.773907] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 1083.773915] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1083.778382] 2717 [ 1083.781469] vb2_vmalloc_alloc+0xa6/0x2d0 [ 1083.781479] __vb2_queue_alloc+0x47a/0xd90 [ 1083.781497] vb2_core_create_bufs+0x279/0x5a0 [ 1083.785866] 2718 [ 1083.787650] ? __vb2_queue_free+0x7a0/0x7a0 [ 1083.792996] 2718 [ 1083.796590] ? futex_wait+0x42f/0x5a0 [ 1083.800893] 2718 [ 1083.806219] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1083.812372] ? trace_hardirqs_on+0x10/0x10 [ 1083.812382] vb2_create_bufs+0x2e1/0x5b0 [ 1083.812393] ? vb2_thread_start+0x310/0x310 [ 1083.816595] Node 0 [ 1083.821069] ? futex_wait+0x42f/0x5a0 [ 1083.821082] v4l_create_bufs+0xa4/0x150 [ 1083.821091] __video_do_ioctl+0x65b/0x6a0 [ 1083.823137] DMA32 free:17928kB min:36196kB low:45244kB high:54292kB active_anon:110892kB inactive_anon:48352kB active_file:240kB inactive_file:460kB unevictable:0kB writepending:0kB present:3129332kB managed:2787984kB mlocked:0kB kernel_stack:7488kB pagetables:2336kB bounce:0kB free_pcp:184kB local_pcp:64kB free_cma:0kB [ 1083.827427] ? video_ioctl2+0x30/0x30 [ 1083.829476] lowmem_reserve[]: [ 1083.833239] ? __might_fault+0x177/0x1b0 [ 1083.835274] 0 [ 1083.840612] ? video_ioctl2+0x30/0x30 [ 1083.840620] video_usercopy+0xfd/0xe70 [ 1083.840632] ? v4l_g_ctrl+0x390/0x390 [ 1083.844851] 0 [ 1083.848888] ? lock_acquire+0x170/0x3f0 [ 1083.848896] ? lock_downgrade+0x740/0x740 [ 1083.848903] ? trace_hardirqs_on+0x10/0x10 [ 1083.848913] ? futex_exit_release+0x220/0x220 [ 1083.853299] 0 [ 1083.855512] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1083.859299] 0 [ 1083.863234] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1083.867353] 0 [ 1083.895781] v4l2_ioctl+0x1bb/0x2f0 [ 1083.895789] ? v4l2_open+0x2f0/0x2f0 [ 1083.902656] do_vfs_ioctl+0x75a/0xff0 [ 1083.906684] Node 0 [ 1083.908466] ? lock_acquire+0x170/0x3f0 [ 1083.912260] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:468kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1083.916099] ? ioctl_preallocate+0x1a0/0x1a0 [ 1083.919884] lowmem_reserve[]: [ 1083.921657] ? __fget+0x265/0x3e0 [ 1083.925598] 0 [ 1083.929723] ? do_vfs_ioctl+0xff0/0xff0 [ 1083.929734] ? security_file_ioctl+0x83/0xb0 [ 1083.929742] SyS_ioctl+0x7f/0xb0 [ 1083.933952] 0 [ 1083.938425] ? do_vfs_ioctl+0xff0/0xff0 [ 1083.940213] 0 [ 1083.945282] do_syscall_64+0x1d5/0x640 [ 1083.947056] 0 [ 1083.952069] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1083.952077] RIP: 0033:0x7fa7d3c480c9 [ 1083.952082] RSP: 002b:00007fa7d21ba168 EFLAGS: 00000246 [ 1083.953859] 0 [ 1083.957458] ORIG_RAX: 0000000000000010 [ 1083.964922] RAX: ffffffffffffffda RBX: 00007fa7d3d67f80 RCX: 00007fa7d3c480c9 [ 1083.967132] Node 1 [ 1083.971082] RDX: 0000000020000180 RSI: 00000000c100565c RDI: 0000000000000003 [ 1083.971086] RBP: 00007fa7d3ca3ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1083.971090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1083.971095] R13: 00007ffdc7685b4f R14: 00007fa7d21ba300 R15: 0000000000022000 [ 1083.975681] Mem-Info: [ 1084.004427] Normal free:26516kB min:53696kB low:67120kB high:80544kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:124kB local_pcp:4kB free_cma:0kB [ 1084.007052] active_anon:27709 inactive_anon:12088 isolated_anon:0 [ 1084.007052] active_file:12 inactive_file:14 isolated_file:0 [ 1084.007052] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1084.007052] slab_reclaimable:23969 slab_unreclaimable:103162 [ 1084.007052] mapped:22091 shmem:13306 pagetables:583 bounce:0 [ 1084.007052] free:13946 free_pcp:84 free_cma:0 [ 1084.008796] lowmem_reserve[]: [ 1084.012808] Node 0 active_anon:110832kB inactive_anon:48352kB active_file:48kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88364kB dirty:0kB writeback:0kB shmem:53224kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 53248kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1084.017267] 0 [ 1084.020642] Node 1 active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1084.020646] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1084.020664] lowmem_reserve[]: [ 1084.024910] 0 [ 1084.026390] 0 2717 [ 1084.028173] 0 [ 1084.032885] 2718 [ 1084.036714] 0 [ 1084.039056] 2718 2718 [ 1084.039065] Node 0 DMA32 free:18312kB min:36196kB low:45244kB high:54292kB active_anon:110832kB inactive_anon:48352kB active_file:48kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2787984kB mlocked:0kB kernel_stack:7488kB pagetables:2332kB bounce:0kB free_pcp:212kB local_pcp:120kB free_cma:0kB [ 1084.039084] lowmem_reserve[]: [ 1084.045213] 0 [ 1084.048111] 0 0 [ 1084.053888] 0 [ 1084.063574] Node 0 [ 1084.070712] 0 [ 1084.085838] DMA: [ 1084.092520] 0 [ 1084.092526] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:468kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1084.092560] lowmem_reserve[]: [ 1084.102389] 1*4kB [ 1084.124097] 0 [ 1084.164916] (U) [ 1084.187796] 0 [ 1084.194858] 1*8kB [ 1084.220907] 0 [ 1084.241611] (U) [ 1084.250384] 0 [ 1084.250784] 0*16kB [ 1084.252531] 0 [ 1084.255006] 0*32kB [ 1084.294488] 1*64kB [ 1084.294855] Node 1 [ 1084.296631] (U) [ 1084.298679] Normal free:26516kB min:53696kB low:67120kB high:80544kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:124kB local_pcp:120kB free_cma:0kB [ 1084.300476] 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10956kB [ 1084.300510] Node 0 DMA32: 2864*4kB (ME) 753*8kB [ 1084.333075] lowmem_reserve[]: [ 1084.334926] (UME) [ 1084.335045] 0 [ 1084.336823] 45*16kB [ 1084.341287] 0 [ 1084.342708] (UME) [ 1084.344488] 0 [ 1084.346699] 3*32kB [ 1084.348474] 0 [ 1084.352509] (UM) [ 1084.357700] 0 [ 1084.386017] 0*64kB [ 1084.402149] 0*128kB [ 1084.402456] Node 0 [ 1084.404237] 0*256kB [ 1084.406533] DMA: [ 1084.408311] 0*512kB [ 1084.415726] 1*4kB [ 1084.416273] 0*1024kB [ 1084.418312] (U) [ 1084.421905] 0*2048kB [ 1084.424179] 1*8kB [ 1084.424651] 0*4096kB [ 1084.426861] (U) [ 1084.429182] = 18296kB [ 1084.429186] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB [ 1084.436726] 0*16kB [ 1084.438078] 0*4096kB [ 1084.441836] 0*32kB [ 1084.444297] = 0kB [ 1084.444581] 1*64kB [ 1084.446965] Node 1 [ 1084.454258] (U) [ 1084.462700] Normal: [ 1084.464931] 1*128kB [ 1084.465486] 3*4kB [ 1084.467692] (U) 0*256kB [ 1084.469852] (ME) [ 1084.482423] 1*512kB [ 1084.484848] 3*8kB [ 1084.485685] (U) [ 1084.487720] (ME) 3*16kB (UM) 2*32kB (M) 2*64kB (M) 3*128kB (ME) 3*256kB (ME) 3*512kB (UME) 1*1024kB (E) 3*2048kB (M) 4*4096kB (M) = 26516kB [ 1084.496012] 0*1024kB [ 1084.509020] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1084.514401] 1*2048kB (M) [ 1084.520279] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1084.520285] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1084.523022] 2*4096kB [ 1084.533439] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1084.547939] (M) = 10956kB [ 1084.553421] 13332 total pagecache pages [ 1084.555638] Node 0 [ 1084.559632] 0 pages in swap cache [ 1084.559637] Swap cache stats: add 0, delete 0, find 0/0 [ 1084.559640] Free swap = 0kB [ 1084.559643] Total swap = 0kB [ 1084.559649] 2097051 pages RAM [ 1084.559653] 0 pages HighMem/MovableOnly [ 1084.559656] 363897 pages reserved [ 1084.559659] 0 pages cma reserved [ 1084.559667] Out of memory (oom_kill_allocating_task): Kill process 23520 (systemd-journal) score 0 or sacrifice child [ 1084.559692] Killed process 23520 (systemd-journal) total-vm:46096kB, anon-rss:460kB, file-rss:0kB, shmem-rss:1296kB [ 1084.568966] DMA32: [ 1084.573176] oom_reaper: reaped process 23520 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1296kB [ 1084.573666] 2864*4kB [ 1084.582495] kworker/u4:8 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask= [ 1084.590861] (ME) [ 1084.607092] (null) [ 1084.619318] 751*8kB [ 1084.639663] , order=3, oom_score_adj=0 [ 1084.647703] kworker/u4:8 cpuset=/ mems_allowed=0-1 [ 1084.648916] (UME) 45*16kB (UME) 3*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18280kB [ 1084.656457] CPU: 0 PID: 14252 Comm: kworker/u4:8 Not tainted 4.14.304-syzkaller #0 [ 1084.668352] Node 0 [ 1084.670753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1084.670768] Workqueue: events_unbound call_usermodehelper_exec_work [ 1084.670773] Call Trace: [ 1084.670785] dump_stack+0x1b2/0x281 [ 1084.670800] dump_header+0x178/0x82f [ 1084.675244] Normal: [ 1084.682346] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1084.682354] ? ___ratelimit+0x2b5/0x510 [ 1084.682365] oom_kill_process.cold+0x10/0xa40 [ 1084.682376] ? lock_downgrade+0x740/0x740 [ 1084.682389] out_of_memory+0x2dc/0x1190 [ 1084.682401] ? oom_killer_disable+0x1c0/0x1c0 [ 1084.682409] ? mutex_trylock+0x152/0x1a0 [ 1084.682421] __alloc_pages_nodemask+0x25a9/0x2900 [ 1084.695742] 0*4kB [ 1084.698655] ? batadv_bla_send_claim+0x287/0xba0 [ 1084.700977] 0*8kB [ 1084.706026] ? batadv_bla_periodic_work+0x56d/0xa80 [ 1084.716963] 0*16kB [ 1084.718574] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1084.722550] 0*32kB [ 1084.726989] ? fs_reclaim_release+0xd0/0x110 [ 1084.738030] 0*64kB [ 1084.742712] ? kmem_cache_alloc_node+0x38b/0x410 [ 1084.742725] copy_process.part.0+0x265/0x71c0 [ 1084.742736] ? __lock_acquire+0x5fc/0x3f20 [ 1084.742743] ? register_lock_class+0x1d0/0x1180 [ 1084.742754] ? debug_object_activate+0x292/0x490 [ 1084.744875] 0*128kB [ 1084.749868] ? static_obj+0x50/0x50 [ 1084.749881] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1084.749889] ? __cleanup_sighand+0x40/0x40 [ 1084.749901] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1084.749910] _do_fork+0x184/0xc80 [ 1084.749921] ? fork_idle+0x270/0x270 [ 1084.749935] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1084.749943] ? process_one_work+0x6c4/0x14a0 [ 1084.759205] 0*256kB [ 1084.763569] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1084.765773] 0*512kB [ 1084.770504] kernel_thread+0x2f/0x40 [ 1084.770513] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 1084.770521] ? call_usermodehelper+0x80/0x80 [ 1084.770530] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1084.770541] process_one_work+0x793/0x14a0 [ 1084.770556] ? work_busy+0x320/0x320 [ 1084.770562] ? worker_thread+0x158/0xff0 [ 1084.770572] ? _raw_spin_unlock_irq+0x24/0x80 [ 1084.781910] 0*1024kB [ 1084.783901] worker_thread+0x5cc/0xff0 [ 1084.788623] 0*2048kB [ 1084.790932] ? rescuer_thread+0xc80/0xc80 [ 1084.790942] kthread+0x30d/0x420 [ 1084.790949] ? kthread_create_on_node+0xd0/0xd0 [ 1084.790959] ret_from_fork+0x24/0x30 [ 1084.794678] Mem-Info: [ 1084.806005] 0*4096kB [ 1084.809746] active_anon:27609 inactive_anon:12088 isolated_anon:0 [ 1084.809746] active_file:37 inactive_file:0 isolated_file:0 [ 1084.809746] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1084.809746] slab_reclaimable:23969 slab_unreclaimable:103162 [ 1084.809746] mapped:21741 shmem:13306 pagetables:546 bounce:0 [ 1084.809746] free:14121 free_pcp:31 free_cma:0 [ 1084.809760] Node 0 active_anon:110432kB inactive_anon:48352kB active_file:148kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:86964kB dirty:0kB writeback:0kB shmem:53224kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 53248kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1084.809772] Node 1 active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1084.813221] = 0kB [ 1084.816899] Node 0 [ 1084.829002] Node 1 [ 1084.837703] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1084.845368] Normal: [ 1084.845410] lowmem_reserve[]: [ 1084.851588] 2*4kB [ 1084.858164] 0 [ 1084.864987] (ME) [ 1084.867243] 2717 [ 1084.875506] 3*8kB [ 1084.877998] 2718 [ 1084.886161] (UME) [ 1084.887880] 2718 [ 1084.896076] 1*16kB [ 1084.896249] 2718 [ 1084.898635] (M) [ 1084.901049] Node 0 DMA32 free:18912kB min:36196kB low:45244kB high:54292kB active_anon:110432kB inactive_anon:48352kB active_file:148kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2787984kB mlocked:0kB kernel_stack:7456kB pagetables:2184kB bounce:0kB free_pcp:124kB local_pcp:124kB free_cma:0kB [ 1084.901067] lowmem_reserve[]: 0 0 0 0 0 [ 1084.901087] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:468kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1084.901112] lowmem_reserve[]: [ 1084.936493] 1*32kB [ 1084.963712] 0 [ 1084.997065] (M) [ 1085.021509] 0 [ 1085.032217] 1*64kB [ 1085.033504] 0 [ 1085.035565] (M) [ 1085.037603] 0 [ 1085.046182] 3*128kB [ 1085.049854] 0 [ 1085.086623] (UME) [ 1085.119942] 2*256kB [ 1085.123404] Node 1 [ 1085.123510] (ME) [ 1085.125314] Normal free:26640kB min:53696kB low:67120kB high:80544kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1085.127605] 4*512kB [ 1085.129400] lowmem_reserve[]: 0 0 0 0 0 [ 1085.129420] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 1*64kB (U) 1*128kB (U) [ 1085.138628] (UME) [ 1085.166602] 0*256kB [ 1085.175950] 1*1024kB [ 1085.180562] 1*512kB [ 1085.180912] (E) [ 1085.183213] (U) [ 1085.185597] 3*2048kB [ 1085.187895] 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10956kB [ 1085.200455] (M) 4*4096kB (M) = 26640kB [ 1085.201647] Node 0 [ 1085.204347] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1085.204348] DMA32: 2920*4kB [ 1085.206564] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1085.215410] (UME) 818*8kB (UME) 47*16kB (UME) 4*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19104kB [ 1085.215458] Node 0 Normal: 0*4kB 0*8kB [ 1085.227740] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1085.240351] 0*16kB [ 1085.251272] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1085.253105] 0*32kB [ 1085.253518] 13332 total pagecache pages [ 1085.262092] 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1085.262119] Node 1 Normal: 2*4kB (ME) 3*8kB (UME) 1*16kB (M) 1*32kB (M) [ 1085.273173] 0 pages in swap cache [ 1085.277219] 1*64kB [ 1085.285252] Swap cache stats: add 0, delete 0, find 0/0 [ 1085.285699] (M) [ 1085.287908] Free swap = 0kB [ 1085.287912] Total swap = 0kB [ 1085.295090] 3*128kB (UME) 2*256kB (ME) 4*512kB (UME) 1*1024kB (E) 3*2048kB (M) 4*4096kB (M) = 26640kB [ 1085.304328] 2097051 pages RAM [ 1085.312537] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1085.314422] 0 pages HighMem/MovableOnly [ 1085.322684] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1085.322689] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1085.322695] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1085.322699] 13332 total pagecache pages [ 1085.322708] 0 pages in swap cache [ 1085.322713] Swap cache stats: add 0, delete 0, find 0/0 [ 1085.322716] Free swap = 0kB [ 1085.322720] Total swap = 0kB [ 1085.322775] 2097051 pages RAM [ 1085.335571] 363897 pages reserved [ 1085.345941] 0 pages HighMem/MovableOnly [ 1085.362039] 0 pages cma reserved [ 1085.366699] 363897 pages reserved [ 1085.389672] 0 pages cma reserved [ 1085.393032] Out of memory: Kill process 8007 (syz-fuzzer) score 12 or sacrifice child [ 1085.401463] Killed process 8036 (syz-executor.4) total-vm:48512kB, anon-rss:440kB, file-rss:14340kB, shmem-rss:0kB [ 1085.437995] oom_reaper: reaped process 8036 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1085.490932] kworker/u4:8 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 1085.532057] kworker/u4:8 cpuset=/ mems_allowed=0-1 [ 1085.546976] CPU: 0 PID: 14252 Comm: kworker/u4:8 Not tainted 4.14.304-syzkaller #0 [ 1085.554690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1085.564046] Workqueue: events_unbound call_usermodehelper_exec_work [ 1085.565739] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1085.570436] Call Trace: [ 1085.570449] dump_stack+0x1b2/0x281 [ 1085.570462] dump_header+0x178/0x82f [ 1085.570473] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1085.592784] ? ___ratelimit+0x2b5/0x510 [ 1085.596754] oom_kill_process.cold+0x10/0xa40 [ 1085.600825] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1085.601250] ? lock_downgrade+0x740/0x740 [ 1085.614546] out_of_memory+0x2dc/0x1190 [ 1085.618519] ? oom_killer_disable+0x1c0/0x1c0 [ 1085.623010] ? mutex_trylock+0x152/0x1a0 [ 1085.624438] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 1085.627079] __alloc_pages_nodemask+0x25a9/0x2900 [ 1085.638375] ? batadv_bla_send_claim+0x287/0xba0 [ 1085.643121] ? batadv_bla_periodic_work+0x56d/0xa80 [ 1085.648136] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1085.648978] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 1085.652967] ? fs_reclaim_release+0xd0/0x110 [ 1085.652985] ? kmem_cache_alloc_node+0x38b/0x410 [ 1085.652996] copy_process.part.0+0x265/0x71c0 [ 1085.653007] ? __lock_acquire+0x5fc/0x3f20 [ 1085.653014] ? register_lock_class+0x1d0/0x1180 [ 1085.653025] ? debug_object_activate+0x292/0x490 [ 1085.678837] systemd[1]: Stopped Journal Service. [ 1085.682208] ? static_obj+0x50/0x50 [ 1085.695295] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1085.700736] ? __cleanup_sighand+0x40/0x40 [ 1085.704967] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1085.710410] _do_fork+0x184/0xc80 [ 1085.713859] ? fork_idle+0x270/0x270 [ 1085.716481] systemd[1]: Starting Journal Service... [ 1085.717564] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1085.727638] ? process_one_work+0x6c4/0x14a0 [ 1085.732043] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1085.737487] kernel_thread+0x2f/0x40 [ 1085.741196] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 1085.746478] ? call_usermodehelper+0x80/0x80 [ 1085.750882] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1085.756326] process_one_work+0x793/0x14a0 [ 1085.758066] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 1085.760554] ? work_busy+0x320/0x320 [ 1085.760562] ? worker_thread+0x158/0xff0 [ 1085.760571] ? _raw_spin_unlock_irq+0x24/0x80 [ 1085.760582] worker_thread+0x5cc/0xff0 [ 1085.760597] ? rescuer_thread+0xc80/0xc80 [ 1085.760606] kthread+0x30d/0x420 [ 1085.760613] ? kthread_create_on_node+0xd0/0xd0 [ 1085.760622] ret_from_fork+0x24/0x30 [ 1085.770555] Mem-Info: [ 1085.803749] active_anon:27618 inactive_anon:12087 isolated_anon:0 [ 1085.803749] active_file:490 inactive_file:2107 isolated_file:0 [ 1085.803749] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1085.803749] slab_reclaimable:23935 slab_unreclaimable:103234 [ 1085.803749] mapped:20034 shmem:13306 pagetables:595 bounce:0 [ 1085.803749] free:54770 free_pcp:449 free_cma:0 [ 1085.871862] Node 0 active_anon:110468kB inactive_anon:48348kB active_file:256kB inactive_file:4628kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:75536kB dirty:100kB writeback:0kB shmem:53224kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 53248kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1085.904218] Node 1 active_anon:4kB inactive_anon:0kB active_file:1704kB inactive_file:5000kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:5500kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1085.945340] Node 0 DMA free:11096kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1085.974801] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1085.981048] Node 0 DMA32 free:118492kB min:36196kB low:45244kB high:54292kB active_anon:109868kB inactive_anon:48348kB active_file:456kB inactive_file:5128kB unevictable:0kB writepending:148kB present:3129332kB managed:2787984kB mlocked:0kB kernel_stack:7456kB pagetables:2232kB bounce:0kB free_pcp:1152kB local_pcp:532kB free_cma:0kB [ 1086.012371] lowmem_reserve[]: 0 0 0 0 0 [ 1086.018364] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:468kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1086.045706] lowmem_reserve[]: 0 0 0 0 0 [ 1086.051302] Node 1 Normal free:131512kB min:53696kB low:67120kB high:80544kB active_anon:4kB inactive_anon:0kB active_file:3068kB inactive_file:3704kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:804kB local_pcp:144kB free_cma:0kB [ 1086.084303] lowmem_reserve[]: 0 0 0 0 0 [ 1086.088308] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 11108kB [ 1086.101869] Node 0 DMA32: 3182*4kB (UME) 4855*8kB (UME) 4696*16kB (UME) 2344*32kB (UM) 71*64kB (UM) 19*128kB (U) 17*256kB (UM) 16*512kB (U) 8*1024kB (U) 7*2048kB (U) 3*4096kB (UM) = 256048kB [ 1086.119087] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1086.130082] Node 1 Normal: 10*4kB (UM) 6*8kB (UM) 10*16kB (UME) 12*32kB (UME) 17*64kB (UE) 16*128kB (U) 15*256kB (UE) 8*512kB (UE) 13*1024kB (UME) 4*2048kB (U) 24*4096kB (UM) = 131512kB [ 1086.146809] systemd[1]: Started Load/Save RF Kill Switch Status. [ 1086.146877] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1086.162123] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1086.162987] systemd-journald[23574]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1086.172041] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1086.198625] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1086.207385] 16902 total pagecache pages [ 1086.215489] 0 pages in swap cache [ 1086.219149] Swap cache stats: add 0, delete 0, find 0/0 [ 1086.224505] Free swap = 0kB [ 1086.227508] Total swap = 0kB [ 1086.236380] 2097051 pages RAM [ 1086.239710] 0 pages HighMem/MovableOnly [ 1086.243673] 363897 pages reserved [ 1086.247112] 0 pages cma reserved [ 1086.268656] Out of memory: Kill process 8007 (syz-fuzzer) score 12 or sacrifice child [ 1086.276720] Killed process 8032 (syz-executor.3) total-vm:48512kB, anon-rss:440kB, file-rss:12292kB, shmem-rss:0kB [ 1086.323562] oom_reaper: reaped process 8032 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1086.812124] systemd[1]: Started Journal Service. 20:49:52 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) (async) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$get_persistent(0x16, 0xee00, r1) 20:49:52 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x1}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000040)) socket$nl_rdma(0x10, 0x3, 0x14) 20:49:52 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x1, {0x1, @win={{}, 0x0, 0x20000000, 0x0, 0x40, 0x0, 0x4}}}) 20:49:52 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x214862) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 20:49:52 executing program 2: clock_gettime(0x0, &(0x7f00000003c0)) select(0x40, &(0x7f0000000300), &(0x7f0000000340)={0x2}, 0x0, 0x0) 20:49:52 executing program 5: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x181580) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000000c0)={{0x1, 0x1, 0x5eee, 0x0, 0x8}}) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e61740000000000000000000000000000000000000000000000000000000000f40000001462fed4fb719fc9133c82042ab08975f8b875e4de1c6507b7ac669cd17d67248b27d9237a2195d5d7e6963e8998d9efd40a3d96b266834239de8a85c5f2c13e553e206c2904af06e48a8c214621f48e3aac90480a2445bf3cfb09c919dcd62640fce48fa38950757fa192784978a76d44078002977da2a70593366ce6769e30873e737e16624260e1b2d54a17345d7a8cead1725d9b20f330581ca461002ef07a83cbf9bb5b588fb6e98233ebe3493602f8a135e22fa9007bcd2399d3686d241b8885634679a6064d1063979a599c82e0ce1bbf711249600a3807086cba993f9efa447928e47a3c4fe36b98b4689a7f36c1e2f3"], &(0x7f0000000100)=0x118) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f00000009c0)={0x2, @raw_data="026f8b39fd20a0bc86edd1e64dbd8c300f5584e0fbc220a6ac9f1efa022f25913dbfc424b13db7c653cac4e2df66bc5e7e56073fed41d1f1dae2e603ddead7dffb8fdd4dbce3bf960b5c17884da5202945cb0725a4d5dea5d5417545bcb9ed5f7b7f6b88ae4d2c69f579c50991cf968ea64f860d80b4e9ca1f6ecb07c5ba64a57fc763b4019a85e988fcec72b8fea1a3d1cf3ec7d259286be98953a49ccbcdc5969bd17e2247862dd5aa47979dc1365b05e4308b8569ec4fdac0bf178e2b2a2a1ec8b10d01ed2906"}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000300)=@fd={0x5, 0x2, 0x4, 0x2000, 0x6, {r5, r6/1000+60000}, {0x5, 0xc, 0x52, 0x81, 0x81, 0x1c, "153e75d7"}, 0x0, 0x4, {}, 0x8, 0x0, r3}) 20:49:52 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x214862) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 20:49:52 executing program 2: select(0x40, &(0x7f0000000300), &(0x7f0000000340)={0x2}, 0x0, 0x0) 20:49:52 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x214862) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x214862) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async) [ 1089.055666] Unknown ioctl -1067952625 20:49:52 executing program 2: select(0x0, 0x0, &(0x7f0000000340)={0x2}, 0x0, 0x0) 20:49:52 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0xa02) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 20:49:52 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0xa02) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) [ 1089.146130] Unknown ioctl -1067952625 [ 1089.173027] Unknown ioctl 1079006226 [ 1092.548168] Bluetooth: hci5 command 0x0409 tx timeout [ 1092.553487] Bluetooth: hci3 command 0x0409 tx timeout [ 1093.227839] oom_reaper: reaped process 23598 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:4kB [ 1093.242324] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1093.262624] in:imklog cpuset=/ mems_allowed=0-1 [ 1093.267320] CPU: 0 PID: 23405 Comm: in:imklog Not tainted 4.14.304-syzkaller #0 [ 1093.274756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1093.278341] syz-executor.0: [ 1093.284099] Call Trace: [ 1093.284103] vmalloc: allocation failure, allocated 163352576 of 536875008 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask= [ 1093.287112] dump_stack+0x1b2/0x281 [ 1093.289687] (null) [ 1093.301437] dump_header+0x178/0x82f [ 1093.301446] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1093.301453] ? ___ratelimit+0x2b5/0x510 [ 1093.301463] oom_kill_process.cold+0x10/0xa40 [ 1093.305060] syz-executor.0 cpuset= [ 1093.307211] out_of_memory+0xe3e/0x1190 [ 1093.310917] / [ 1093.315976] ? oom_killer_disable+0x1c0/0x1c0 [ 1093.319936] mems_allowed=0-1 [ 1093.324396] ? mutex_trylock+0x152/0x1a0 [ 1093.345110] __alloc_pages_nodemask+0x25a9/0x2900 [ 1093.349957] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1093.354802] alloc_pages_current+0x155/0x260 [ 1093.359193] filemap_fault+0x11a1/0x1ad0 [ 1093.363243] ext4_filemap_fault+0x84/0xb0 [ 1093.367371] __do_fault+0xfa/0x380 [ 1093.370909] __handle_mm_fault+0x2497/0x4620 [ 1093.375304] ? vm_insert_page+0x7c0/0x7c0 [ 1093.379434] ? lock_downgrade+0x740/0x740 [ 1093.383567] ? mark_held_locks+0xa6/0xf0 [ 1093.387613] handle_mm_fault+0x455/0x9c0 [ 1093.391668] __do_page_fault+0x549/0xad0 [ 1093.395718] ? spurious_fault+0x640/0x640 [ 1093.399855] ? do_page_fault+0x60/0x500 [ 1093.403812] ? page_fault+0x2f/0x50 [ 1093.407418] page_fault+0x45/0x50 [ 1093.410954] RIP: 1fa0:0x1f9f [ 1093.413952] RSP: 0000:0000558f2e0d09d0 EFLAGS: 7fc70764fda0 [ 1093.413973] CPU: 1 PID: 23598 Comm: syz-executor.0 Not tainted 4.14.304-syzkaller #0 [ 1093.421247] Mem-Info: [ 1093.427550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1093.434236] active_anon:25282 inactive_anon:14122 isolated_anon:0 [ 1093.434236] active_file:14 inactive_file:14 isolated_file:0 [ 1093.434236] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1093.434236] slab_reclaimable:23587 slab_unreclaimable:104038 [ 1093.434236] mapped:22104 shmem:15355 pagetables:603 bounce:0 [ 1093.434236] free:13803 free_pcp:226 free_cma:0 [ 1093.439274] Call Trace: [ 1093.439289] dump_stack+0x1b2/0x281 [ 1093.439301] warn_alloc.cold+0x96/0x1cc [ 1093.439312] ? zone_watermark_ok_safe+0x220/0x220 [ 1093.439319] ? retint_kernel+0x2d/0x2d [ 1093.439352] __vmalloc_area_node+0x48a/0x680 [ 1093.478178] Node 0 active_anon:99728kB inactive_anon:56468kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:59744kB dirty:0kB writeback:0kB shmem:61388kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1093.478749] ? __vmalloc_node_range+0x150/0x150 [ 1093.482696] Node 1 active_anon:1400kB inactive_anon:20kB active_file:20kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28672kB dirty:0kB writeback:0kB shmem:32kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1093.487505] ? __get_vm_area_node+0x27d/0x340 [ 1093.487517] __vmalloc_node_range+0xbe/0x150 [ 1093.494914] Node 0 [ 1093.495770] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1093.531201] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1093.554580] vmalloc_user+0x47/0xa0 [ 1093.554591] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 1093.554599] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1093.554606] vb2_vmalloc_alloc+0xa6/0x2d0 [ 1093.554614] __vb2_queue_alloc+0x47a/0xd90 [ 1093.554633] vb2_core_create_bufs+0x279/0x5a0 [ 1093.554647] ? __vb2_queue_free+0x7a0/0x7a0 [ 1093.554659] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1093.554669] ? trace_hardirqs_on+0x10/0x10 [ 1093.564560] lowmem_reserve[]: [ 1093.565744] vb2_create_bufs+0x2e1/0x5b0 [ 1093.571105] 0 [ 1093.596585] ? vb2_thread_start+0x310/0x310 [ 1093.596600] v4l_create_bufs+0xa4/0x150 [ 1093.596609] __video_do_ioctl+0x65b/0x6a0 [ 1093.596621] ? video_ioctl2+0x30/0x30 [ 1093.596630] ? __might_fault+0x177/0x1b0 [ 1093.596639] ? video_ioctl2+0x30/0x30 [ 1093.596651] video_usercopy+0xfd/0xe70 [ 1093.596662] ? v4l_g_ctrl+0x390/0x390 [ 1093.596669] ? lock_acquire+0x170/0x3f0 [ 1093.596677] ? lock_downgrade+0x740/0x740 [ 1093.605668] 2717 [ 1093.609944] ? trace_hardirqs_on+0x10/0x10 [ 1093.609957] ? futex_exit_release+0x220/0x220 [ 1093.609966] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1093.609974] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1093.609984] v4l2_ioctl+0x1bb/0x2f0 [ 1093.614101] 2718 [ 1093.618313] ? v4l2_open+0x2f0/0x2f0 [ 1093.618322] do_vfs_ioctl+0x75a/0xff0 [ 1093.618330] ? lock_acquire+0x170/0x3f0 [ 1093.618338] ? ioctl_preallocate+0x1a0/0x1a0 [ 1093.618348] ? __fget+0x265/0x3e0 [ 1093.618357] ? do_vfs_ioctl+0xff0/0xff0 [ 1093.618367] ? security_file_ioctl+0x83/0xb0 [ 1093.618376] SyS_ioctl+0x7f/0xb0 [ 1093.618382] ? do_vfs_ioctl+0xff0/0xff0 [ 1093.618391] do_syscall_64+0x1d5/0x640 [ 1093.618403] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1093.628231] 2718 [ 1093.632504] RIP: 0033:0x7fa7d3c480c9 [ 1093.636709] 2718 [ 1093.639802] RSP: 002b:00007fa7d21ba168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1093.639810] RAX: ffffffffffffffda RBX: 00007fa7d3d67f80 RCX: 00007fa7d3c480c9 [ 1093.639814] RDX: 0000000020000180 RSI: 00000000c100565c RDI: 0000000000000003 [ 1093.639818] RBP: 00007fa7d3ca3ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1093.639823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1093.639827] R13: 00007ffdc7685b4f R14: 00007fa7d21ba300 R15: 0000000000022000 [ 1093.644602] Mem-Info: [ 1093.650028] active_anon:25282 inactive_anon:14122 isolated_anon:0 [ 1093.650028] active_file:14 inactive_file:14 isolated_file:0 [ 1093.650028] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1093.650028] slab_reclaimable:23587 slab_unreclaimable:104038 [ 1093.650028] mapped:22104 shmem:15355 pagetables:603 bounce:0 [ 1093.650028] free:13803 free_pcp:226 free_cma:0 [ 1093.650042] Node 0 active_anon:99728kB inactive_anon:56468kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:59744kB dirty:0kB writeback:0kB shmem:61388kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1093.653980] Node 0 [ 1093.663490] Node 1 active_anon:1400kB inactive_anon:20kB active_file:20kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28672kB dirty:0kB writeback:0kB shmem:32kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1093.666001] DMA32 free:17756kB min:36196kB low:45244kB high:54292kB active_anon:99728kB inactive_anon:56468kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2787984kB mlocked:0kB kernel_stack:7392kB pagetables:2212kB bounce:0kB free_pcp:176kB local_pcp:56kB free_cma:0kB [ 1093.669804] Node 0 [ 1093.673662] lowmem_reserve[]: [ 1093.677445] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1093.681422] 0 0 0 0 0 [ 1093.681439] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:468kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1093.681455] lowmem_reserve[]: 0 0 [ 1093.689929] lowmem_reserve[]: [ 1093.691898] 0 [ 1093.696309] 0 [ 1093.701422] 0 0 [ 1093.701431] Node 1 Normal free:26500kB min:53696kB low:67120kB high:80544kB active_anon:1400kB inactive_anon:20kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:200kB bounce:0kB free_pcp:728kB local_pcp:24kB free_cma:0kB [ 1093.701468] lowmem_reserve[]: [ 1093.711761] 2717 [ 1093.712163] 0 [ 1093.715850] 2718 [ 1093.719671] 0 0 0 0 [ 1093.719686] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB [ 1093.726216] 2718 [ 1093.728102] (M) = 10956kB [ 1093.728109] Node 0 DMA32: 2465*4kB (UME) 823*8kB (UME) [ 1093.734669] 2718 [ 1093.735504] 82*16kB [ 1093.743270] (UME) [ 1093.747225] Node 0 [ 1093.752287] 0*32kB [ 1093.757540] DMA32 free:17756kB min:36196kB low:45244kB high:54292kB active_anon:99728kB inactive_anon:56468kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2787984kB mlocked:0kB kernel_stack:7392kB pagetables:2212kB bounce:0kB free_pcp:176kB local_pcp:120kB free_cma:0kB [ 1093.760659] 0*64kB [ 1093.762116] lowmem_reserve[]: [ 1093.764159] 0*128kB [ 1093.773142] 0 [ 1093.782602] 0*256kB [ 1093.786433] 0 [ 1093.793723] 0*512kB [ 1093.802908] 0 [ 1093.811729] 0*1024kB [ 1093.845892] 0 [ 1093.880385] 0*2048kB [ 1093.902986] 0 [ 1093.933094] 0*4096kB [ 1093.963141] = 17756kB [ 1093.988510] Node 0 [ 1093.995288] Node 0 [ 1093.996096] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:468kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1093.997865] Normal: [ 1094.001807] lowmem_reserve[]: [ 1094.031749] 0*4kB [ 1094.035780] 0 [ 1094.037217] 0*8kB [ 1094.039544] 0 0 0 0 [ 1094.055091] 0*16kB [ 1094.057828] Node 1 [ 1094.061818] 0*32kB [ 1094.063865] Normal free:26500kB min:53696kB low:67120kB high:80544kB active_anon:1400kB inactive_anon:20kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:200kB bounce:0kB free_pcp:728kB local_pcp:704kB free_cma:0kB [ 1094.066151] 0*64kB [ 1094.068927] lowmem_reserve[]: [ 1094.074009] 0*128kB [ 1094.106764] 0 [ 1094.116203] 0*256kB [ 1094.116938] 0 [ 1094.118754] 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1094.118771] Node 1 Normal: 43*4kB [ 1094.124979] 0 [ 1094.125330] (UM) [ 1094.127110] 0 [ 1094.134857] 63*8kB [ 1094.136330] 0 [ 1094.167443] (UM) [ 1094.175147] 62*16kB [ 1094.177357] Node 0 [ 1094.184927] (UME) [ 1094.213435] DMA: [ 1094.219879] 48*32kB [ 1094.221461] 1*4kB [ 1094.223238] (ME) [ 1094.232512] (U) [ 1094.239922] 28*64kB [ 1094.241540] 1*8kB [ 1094.243584] (ME) [ 1094.245882] (U) [ 1094.251604] 14*128kB [ 1094.252291] 0*16kB [ 1094.254579] (M) [ 1094.256707] 0*32kB [ 1094.260664] 5*256kB [ 1094.264536] 1*64kB [ 1094.265191] (ME) [ 1094.267227] (U) [ 1094.269251] 2*512kB [ 1094.275017] 1*128kB [ 1094.275783] (UE) [ 1094.281763] (U) [ 1094.284265] 1*1024kB [ 1094.284587] 0*256kB [ 1094.286537] (E) [ 1094.292307] 1*512kB [ 1094.293205] 2*2048kB [ 1094.295156] (U) [ 1094.297538] (UM) [ 1094.304088] 0*1024kB [ 1094.304348] 3*4096kB [ 1094.306512] 1*2048kB [ 1094.308505] (M) = 26500kB [ 1094.308516] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1094.308521] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1094.308527] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1094.308533] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1094.308536] 15383 total pagecache pages [ 1094.308546] 0 pages in swap cache [ 1094.308549] Swap cache stats: add 0, delete 0, find 0/0 [ 1094.308552] Free swap = 0kB [ 1094.308556] Total swap = 0kB [ 1094.308562] 2097051 pages RAM [ 1094.308566] 0 pages HighMem/MovableOnly [ 1094.308568] 363897 pages reserved [ 1094.308571] 0 pages cma reserved [ 1094.308576] Out of memory (oom_kill_allocating_task): Kill process 23405 (in:imklog) score 0 or sacrifice child [ 1094.308625] Killed process 23403 (rsyslogd) total-vm:254332kB, anon-rss:740kB, file-rss:0kB, shmem-rss:0kB [ 1094.309797] oom_reaper: reaped process 23403 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1094.314720] (M) [ 1094.324121] kworker/0:3 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask= [ 1094.337283] 2*4096kB [ 1094.351337] (null) [ 1094.366692] (M) [ 1094.370843] , order=1, oom_score_adj=0 [ 1094.373551] = 10956kB [ 1094.374729] kworker/0:3 cpuset= [ 1094.377773] Node 0 DMA32: 2563*4kB (UME) 891*8kB (UME) 110*16kB (UME) 4*32kB [ 1094.381937] / [ 1094.392509] (U) [ 1094.400964] mems_allowed=0-1 [ 1094.417828] 0*64kB [ 1094.420574] CPU: 0 PID: 11477 Comm: kworker/0:3 Not tainted 4.14.304-syzkaller #0 [ 1094.429205] 0*128kB [ 1094.431598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1094.433732] 0*256kB [ 1094.435698] Workqueue: events cgroup1_release_agent [ 1094.439670] 0*512kB [ 1094.445278] 0*1024kB [ 1094.452524] Call Trace: [ 1094.452539] dump_stack+0x1b2/0x281 [ 1094.452553] dump_header+0x178/0x82f [ 1094.454242] 0*2048kB [ 1094.456218] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1094.459312] 0*4096kB [ 1094.461509] ? ___ratelimit+0x2b5/0x510 [ 1094.469121] = 19268kB [ 1094.471412] oom_kill_process.cold+0x10/0xa40 [ 1094.480763] Node 0 [ 1094.483040] ? lock_downgrade+0x740/0x740 [ 1094.488039] Normal: [ 1094.490329] out_of_memory+0x2dc/0x1190 [ 1094.492707] 0*4kB [ 1094.495273] ? oom_killer_disable+0x1c0/0x1c0 [ 1094.498885] 0*8kB [ 1094.502562] ? mutex_trylock+0x152/0x1a0 [ 1094.504943] 0*16kB [ 1094.510043] __alloc_pages_nodemask+0x25a9/0x2900 [ 1094.510069] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1094.512441] 0*32kB [ 1094.516400] ? mark_held_locks+0xa6/0xf0 [ 1094.518788] 0*64kB [ 1094.523247] ? cache_grow_begin+0x3f/0x700 [ 1094.525452] 0*128kB [ 1094.529579] cache_grow_begin+0x91/0x700 [ 1094.529593] fallback_alloc+0x207/0x2c0 [ 1094.531885] 0*256kB [ 1094.535840] kmem_cache_alloc_trace+0x1f1/0x3d0 [ 1094.537976] 0*512kB [ 1094.542434] cgroup1_release_agent+0xa1/0x250 [ 1094.544553] 0*1024kB [ 1094.548592] ? cgroup1_check_for_release+0x1b0/0x1b0 [ 1094.548602] ? lock_acquire+0x170/0x3f0 [ 1094.548613] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1094.550816] 0*2048kB [ 1094.555636] process_one_work+0x793/0x14a0 [ 1094.560460] 0*4096kB [ 1094.562667] ? work_busy+0x320/0x320 [ 1094.566693] = 0kB [ 1094.568909] ? worker_thread+0x158/0xff0 [ 1094.568919] ? _raw_spin_unlock_irq+0x24/0x80 [ 1094.568929] worker_thread+0x5cc/0xff0 [ 1094.573132] Node 1 [ 1094.575442] ? rescuer_thread+0xc80/0xc80 [ 1094.579479] Normal: [ 1094.583416] kthread+0x30d/0x420 [ 1094.585716] 31*4kB [ 1094.590361] ? kthread_create_on_node+0xd0/0xd0 [ 1094.590370] ret_from_fork+0x24/0x30 [ 1094.592651] Mem-Info: [ 1094.594865] (UM) [ 1094.597159] active_anon:25057 inactive_anon:14122 isolated_anon:0 [ 1094.597159] active_file:14 inactive_file:14 isolated_file:0 [ 1094.597159] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1094.597159] slab_reclaimable:23562 slab_unreclaimable:104012 [ 1094.597159] mapped:22104 shmem:15355 pagetables:566 bounce:0 [ 1094.597159] free:14323 free_pcp:38 free_cma:0 [ 1094.609837] 26*8kB [ 1094.615954] Node 0 active_anon:98828kB inactive_anon:56468kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:59744kB dirty:0kB writeback:0kB shmem:61388kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1094.616474] (M) 23*16kB [ 1094.620735] Node 1 active_anon:1400kB inactive_anon:20kB active_file:20kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28672kB dirty:0kB writeback:0kB shmem:32kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1094.620740] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1094.620756] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1094.620776] Node 0 DMA32 free:19136kB min:36196kB low:45244kB high:54292kB active_anon:98828kB inactive_anon:56468kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2787984kB mlocked:0kB kernel_stack:7296kB pagetables:2064kB bounce:0kB free_pcp:152kB local_pcp:152kB free_cma:0kB [ 1094.620794] lowmem_reserve[]: [ 1094.630347] (UME) [ 1094.634844] 0 [ 1094.637566] 13*32kB [ 1094.641360] 0 0 0 0 [ 1094.641374] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:468kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1094.641392] lowmem_reserve[]: 0 0 0 0 0 [ 1094.641412] Node 1 Normal free:27200kB min:53696kB low:67120kB high:80544kB active_anon:1400kB inactive_anon:20kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:200kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1094.641429] lowmem_reserve[]: 0 0 0 0 0 [ 1094.641448] Node 0 [ 1094.643669] Bluetooth: hci3 command 0x041b tx timeout [ 1094.647781] DMA: 1*4kB [ 1094.659142] (ME) [ 1094.662198] (U) [ 1094.664018] 8*64kB [ 1094.666403] 1*8kB [ 1094.677552] Bluetooth: hci5 command 0x041b tx timeout [ 1094.703539] (U) [ 1094.712877] (ME) [ 1094.738985] 0*16kB [ 1094.765217] 4*128kB [ 1094.798929] 0*32kB [ 1094.824873] (UM) [ 1094.833897] 1*64kB [ 1094.862129] 4*256kB [ 1094.869507] (U) [ 1094.894702] (ME) [ 1094.903212] 1*128kB [ 1094.904459] 5*512kB [ 1094.906498] (U) [ 1094.912183] (UME) [ 1094.912824] 0*256kB [ 1094.918012] 3*1024kB (ME) 3*2048kB (UM) 3*4096kB (M) = 27228kB [ 1094.918036] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1094.918041] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1094.918047] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1094.918052] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1094.918055] 15383 total pagecache pages [ 1094.918064] 0 pages in swap cache [ 1094.918069] Swap cache stats: add 0, delete 0, find 0/0 [ 1094.918072] Free swap = 0kB [ 1094.918075] Total swap = 0kB [ 1094.918080] 2097051 pages RAM [ 1094.918085] 0 pages HighMem/MovableOnly [ 1094.925989] 1*512kB [ 1094.926603] 363897 pages reserved [ 1094.930707] (U) [ 1094.932757] 0 pages cma reserved [ 1094.933130] 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10956kB [ 1095.042774] Node 0 DMA32: 2548*4kB (UME) 913*8kB (UME) 112*16kB (UME) 7*32kB (U) 0*64kB 1*128kB (U) 2*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 20664kB [ 1095.061817] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1095.073158] Node 1 Normal: 8*4kB (UM) 7*8kB (U) 6*16kB (UE) 15*32kB (UME) 9*64kB (UME) 5*128kB (UM) 7*256kB (UME) 9*512kB (UME) 6*1024kB (UME) 5*2048kB (UM) 19*4096kB (UM) = 102488kB [ 1095.094304] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1095.103999] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1095.117347] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1095.126961] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1095.140237] 16345 total pagecache pages [ 1095.144216] 0 pages in swap cache [ 1095.147705] Swap cache stats: add 0, delete 0, find 0/0 [ 1095.154440] Free swap = 0kB [ 1095.161406] Total swap = 0kB [ 1095.164869] 2097051 pages RAM [ 1095.170086] 0 pages HighMem/MovableOnly [ 1095.174407] 363897 pages reserved [ 1095.180736] 0 pages cma reserved [ 1095.187021] Out of memory: Kill process 8007 (syz-fuzzer) score 11 or sacrifice child [ 1095.197068] Killed process 23614 (syz-executor.4) total-vm:48512kB, anon-rss:440kB, file-rss:14340kB, shmem-rss:0kB [ 1096.547908] unregister_netdevice: waiting for ip6gre0 to become free. Usage count = -1 [ 1096.714813] Bluetooth: hci3 command 0x040f tx timeout [ 1098.787661] Bluetooth: hci5 command 0x0409 tx timeout [ 1098.792898] Bluetooth: hci3 command 0x0419 tx timeout [ 1100.867498] Bluetooth: hci5 command 0x041b tx timeout [ 1102.947301] Bluetooth: hci5 command 0x040f tx timeout [ 1105.027201] Bluetooth: hci5 command 0x0419 tx timeout